last executing test programs:
40m28.234929022s ago: executing program 0 (id=1919):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r5, 0x5501) (fail_nth: 1)
preadv(0xffffffffffffffff, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
40m26.767800706s ago: executing program 0 (id=1921):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x800)
40m26.531103548s ago: executing program 0 (id=1925):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40)
close_range(r1, r2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
dup(r6)
sendfile(r6, r6, 0x0, 0x2000000000080006)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(r3, &(0x7f0000001440)={0x2020}, 0x2020)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBLED(r7, 0x4b64, &(0x7f0000000100))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
40m25.607481844s ago: executing program 0 (id=1928):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r4, &(0x7f0000000080)='./file0/file0\x00', r4, &(0x7f0000000040)='./file0/../file0\x00', 0x220)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)
pread64(r4, &(0x7f0000000680)=""/4096, 0x1000, 0x1)
40m25.375142071s ago: executing program 0 (id=1930):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x30}}, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
40m25.026515629s ago: executing program 0 (id=1931):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a2})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r2 = syz_io_uring_complete(r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = dup3(r6, r5, 0x0)
setsockopt$XDP_RX_RING(r7, 0x10f, 0x2, 0x0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7)
socket(0x15, 0x800, 0x3)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x40014)
40m24.480777362s ago: executing program 32 (id=1931):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a2})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r2 = syz_io_uring_complete(r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = dup3(r6, r5, 0x0)
setsockopt$XDP_RX_RING(r7, 0x10f, 0x2, 0x0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7)
socket(0x15, 0x800, 0x3)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x40014)
30m6.967916305s ago: executing program 1 (id=4214):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000804)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="010000000000000000007b00000008000300", @ANYRES32=r3], 0xa4}}, 0x20040000)
30m6.506328156s ago: executing program 1 (id=4216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x14)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x49, 0x0}, 0x4c800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0xf5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/265], 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
30m4.460043123s ago: executing program 1 (id=4219):
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf8)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x10010, r0, 0x0)
30m4.313648976s ago: executing program 1 (id=4221):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000051f3f233c09ba689892f9500000000000000ac7a5a4043ca0446d4f030075507696d756125b8d7eda423598b6f3ac1748c7e66dde4d49a55a8bca4953f6a6ddc356ff14f589442db7d68ee9134a3903fa31c7b9d690e4bca9a3cddaf35041d63dc557c6282ab488147a37ef5a2964831"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x8f, 0x2, 0x0, 0x0, 0x2, 0x4, 0x0, 0xf7, 0x8, 0x30, 0x7f, 0x5, 0x0, 0xfffffffc, 0x8, 0xa, 0x8, 0x0, 0x2, '\x00', 0xb, 0x1})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x7ff}, 0x8)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x4}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0x12, 0x0, 0x0, @void, @value=r2}, 0x20)
ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000000)={0x8, 0x4, 0x5, 0x1, 0x18, 0x3})
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r9, &(0x7f000000ac40)={0x2020}, 0x2020)
30m2.966488168s ago: executing program 1 (id=4226):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x90)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={<r4=>r1, 0x84dc, 0x1, 0x1bfb000000000})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x14, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000a80200000000000070230000852000000300000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000181200003e6215ed5342b9a56c3e4ef2f683e3", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="00000000e000000085000000300000f69fd1660000000000182b0000", @ANYRES32=r3, @ANYBLOB="000000002cfbffff"], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70537f851e0}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e)
r7 = msgget$private(0x0, 0x1)
msgrcv(r7, 0x0, 0x0, 0x3, 0x0)
msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x8, 0x800)
recvfrom(r1, &(0x7f00000003c0)=""/1, 0x1, 0x2, 0x0, 0x0)
listen(r6, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000380)={&(0x7f0000000540)=[0x7ff, 0x5, 0x7, 0xfffffffe, 0xff, 0xfffffffe, 0xffffffff, 0xe, 0x3, 0x9, 0x4, 0x9, 0x0, 0x0, 0x6, 0x4, 0xadb00000, 0x3, 0x7, 0x4, 0x4, 0x1da, 0x822c, 0x6, 0x0, 0x0, 0xa, 0x400, 0x0, 0x101, 0x8001, 0x1000, 0xe2, 0x8, 0xba4, 0x9b, 0x1000, 0xc, 0x57fa2f90, 0x40, 0x101, 0xb, 0x1, 0x5, 0x6, 0xfffffff8, 0x88f, 0x5f3, 0x3, 0x6, 0x4, 0x6, 0x3ff, 0x8, 0x80000001, 0x5, 0x3, 0x0, 0x400, 0xf6d, 0x1, 0x2, 0xfdc, 0x80, 0x100, 0x2, 0x7, 0x0, 0x3, 0x10, 0x8, 0xaa, 0x80000000, 0x100, 0x6, 0x6, 0x81, 0x5, 0x7, 0x6, 0xad9, 0x29, 0x6, 0xfff, 0xffff, 0x200, 0x2, 0x9, 0x0, 0xf, 0x3, 0x10, 0x8ba, 0xfffffffe, 0xffff70fe, 0x5, 0x0, 0x80, 0x4, 0x10001, 0x2, 0x222, 0xfd8, 0xb2, 0x7fff800, 0x6, 0x6, 0x5, 0x7, 0x7, 0x12000, 0x7, 0xaa2, 0x9, 0xf3e4, 0x7, 0x4, 0x5, 0x8, 0xfff, 0xfffffff8, 0x2, 0x5, 0x8, 0x5, 0x4, 0x7f, 0x3, 0x8, 0xa, 0x3, 0xe6, 0x7, 0x6, 0x9, 0x2, 0x5c52, 0x5, 0x2, 0x9, 0x0, 0x100, 0x356, 0x4, 0x8, 0x4, 0x8, 0x7ff, 0x9e4, 0xaab, 0x7, 0xc, 0xffffffff, 0x2, 0x6, 0xfffffff8, 0x1, 0x1, 0x38, 0x4, 0x7, 0x1000, 0x1, 0x5, 0x5, 0x1, 0xa, 0x2, 0x2c16, 0xb8, 0x8000, 0x2, 0x3ff, 0xfffffffc, 0x96, 0x6, 0x1, 0xcb0, 0x0, 0x8, 0x7, 0x4, 0x7, 0xfffffff7, 0x1, 0x1, 0x4, 0x4, 0x0, 0x800000, 0x5, 0x9, 0xffff, 0x45c9, 0x7, 0x0, 0x800, 0x1, 0x32493288, 0x0, 0xffff, 0xbe, 0x3ff, 0xfffffffe, 0x3, 0xfffffffa, 0xb84e, 0x6, 0x2, 0x1, 0x7f, 0x5, 0x6, 0x9, 0x7, 0x6, 0x0, 0x400, 0xcd7, 0x401, 0xfffffffa, 0x9, 0x0, 0x9, 0xc, 0x6, 0x8327352, 0xf2e, 0x6, 0xc35b, 0x2, 0x5, 0x0, 0x3ff, 0xfe, 0x3ff, 0x4, 0x800, 0x0, 0x8, 0x7, 0x56e481a1, 0xb7c5, 0x1, 0x8, 0x814, 0x8, 0xbe12, 0x8, 0x1, 0xbd1, 0x4, 0x8, 0xf, 0x9, 0x1, 0x2, 0x31b, 0xbc63, 0x80, 0xd18, 0x0, 0x0, 0x10001, 0xa6b2, 0x9, 0xe, 0x9, 0x2, 0xfff, 0x10001, 0x80000001, 0x7, 0x5, 0x10001, 0x2, 0xffff, 0x3, 0x40, 0x4b7, 0x1, 0xfffffff8, 0x3, 0x4cd1, 0x20, 0x91e, 0x925, 0x8be, 0x5b9, 0x0, 0x7, 0x3, 0xc61, 0x8, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ff, 0xffffffff, 0x8, 0x6, 0xde6, 0x4bc, 0x2, 0x8000, 0x0, 0x2, 0x5, 0x0, 0x8, 0x8, 0xef, 0x9, 0x5, 0xe33, 0x7fff, 0x2, 0x300000, 0x3, 0x5, 0x200, 0x80000001, 0x8, 0x9, 0x12, 0xffffffff, 0x80000001, 0x6, 0x10, 0xf069, 0x1, 0xfffffffc, 0x9, 0x3, 0x80000001, 0x4, 0x1, 0x61ab, 0x9, 0x1, 0x10000, 0x4, 0xfffffffb, 0x8000, 0x6, 0x3, 0x0, 0xe, 0x7f, 0xab46, 0x7dc, 0x8, 0x1, 0x3, 0x5, 0x9, 0x4, 0x5, 0x8, 0x1, 0x9, 0xb6ac, 0xfff, 0x18000, 0x9, 0xfffffffb, 0x59000000, 0x6, 0xdd42, 0x1, 0xfffffffd, 0x8, 0xfffffeff, 0x9, 0x8, 0x8, 0xa813, 0x1ff, 0x4, 0x200, 0x0, 0x76f, 0x0, 0x2, 0x3ff, 0x9, 0x4, 0x200, 0x5, 0xc695, 0x1, 0x9, 0x7, 0x1ff, 0x0, 0xffffffff, 0x7f, 0x3ff, 0x100, 0x4, 0x3ff, 0x1, 0xa00, 0x4, 0x1, 0x60, 0x2, 0xfa4, 0x5, 0x9, 0x1, 0x9, 0x7, 0xffffff47, 0x3, 0x8, 0x6, 0xffffffff, 0x5, 0x1, 0x40, 0x8, 0x1ff, 0x2, 0x9, 0x3, 0x8001, 0x9, 0x3, 0x4, 0xa1f7, 0x770, 0x7, 0x7ff, 0x4, 0x27, 0x0, 0x4, 0x8, 0xff, 0x1, 0x6, 0x3, 0x4, 0x4, 0x8, 0x40, 0x3, 0x5, 0xfffffffa, 0x1, 0xbb4, 0xd, 0x4, 0x3, 0x0, 0x646, 0x9, 0xffffff5c, 0x6, 0x8, 0xec9, 0x1, 0x3ff, 0x6, 0x2, 0x3, 0xd, 0x8, 0x43f, 0x4, 0x6, 0x54, 0x4, 0x7, 0x6, 0x2, 0x2, 0x9, 0x8, 0x8, 0xb6, 0x1, 0x9, 0x1000, 0x8001, 0x8001, 0x8, 0xe, 0x7ff, 0x354, 0x9, 0x101, 0x1, 0x7fffffff, 0x200, 0x6, 0x1c, 0x1, 0x8, 0x7, 0x0, 0x7, 0x9, 0xfffffffe, 0x200, 0x2, 0x0, 0xfffffff8, 0x81, 0x2, 0x5, 0x4, 0x8, 0x6, 0x4, 0x508b, 0xfff, 0x8, 0x4, 0x2, 0xfffffff8, 0x85d0, 0x2, 0x1, 0x2, 0x139, 0x7fffffff, 0xbc, 0xbc73, 0x56f, 0x3, 0x2, 0x7, 0x6, 0x6, 0x4, 0x40000000, 0x1, 0x5, 0xb, 0x1, 0x1d, 0x101, 0xb, 0xffff, 0x2, 0x4, 0xe000000, 0x2, 0x9, 0x1, 0x8, 0x8000, 0x400, 0x10001, 0x9, 0x0, 0xf, 0x4, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x8, 0x0, 0x10000, 0x9e, 0x3, 0x5, 0x0, 0x8, 0xf2, 0x401, 0xff, 0x8, 0x0, 0x5, 0x0, 0xffffffe7, 0xffffffff, 0x5, 0xff1, 0x6, 0xfffffffa, 0xe47, 0x101, 0xffff8000, 0x10000, 0xe, 0x40, 0x10, 0x0, 0x1, 0xfffffffa, 0x8, 0xf, 0x1ff, 0x81, 0x5, 0x0, 0x7c, 0x7f, 0x80, 0x10000, 0x6, 0x2, 0x9, 0x7, 0x8e7e, 0xb01, 0x51, 0x6, 0x8, 0x9, 0xcfde, 0x30000000, 0x3, 0x81f, 0xd977, 0xffffef2a, 0x9, 0xf28, 0x5, 0x1, 0x3, 0x0, 0x7, 0x3, 0x100, 0x8, 0x1, 0x6, 0x5, 0x8, 0x4, 0xffffff69, 0x1ff, 0x5, 0x8, 0x3, 0x1c988394, 0x40, 0x8, 0x1, 0xd, 0x8, 0x2, 0x80, 0x0, 0xb, 0x6, 0xfff, 0xfb, 0x7f, 0xb, 0x66, 0x7, 0xdd, 0x9, 0x12, 0x15, 0x3, 0x7ff, 0x7, 0x0, 0x5, 0x5, 0x8, 0xf, 0x7, 0xffffdef2, 0x3, 0x4, 0x2, 0x10, 0x1, 0xa, 0x8001, 0xf, 0x1427, 0xfffff816, 0xf, 0x3, 0x10001, 0x4, 0x0, 0x1, 0x101, 0x5, 0x10000, 0x3ff, 0x0, 0x4, 0xffffffed, 0x1, 0x8001, 0x4, 0x0, 0x1, 0x225a0305, 0x1, 0x7, 0x9, 0xfffffffe, 0x3, 0xd, 0x10001, 0x53, 0x8, 0x0, 0x800, 0x40, 0x8, 0x1000, 0x9, 0x1, 0xe358, 0x4, 0x1ff, 0x4, 0x3, 0x7, 0x6, 0xc08, 0x8001, 0x8a86, 0xe, 0xbf, 0xb99c, 0x401, 0x4, 0x0, 0x7ff, 0x80000001, 0x4, 0x7fff, 0x5, 0x100, 0xffff, 0x5, 0xf5, 0x7, 0x3, 0x3, 0xfffffffa, 0x3, 0x8, 0x0, 0x5, 0xa, 0x4, 0x24, 0x8, 0x2, 0x5, 0x101, 0x7fffffff, 0x5, 0x0, 0xfffffffd, 0x100, 0xfff, 0x3653cb8c, 0x10001, 0x22c8ad5e, 0x7451, 0x593, 0x7, 0xfffffffd, 0x0, 0xfffffffc, 0x101, 0x9209, 0x1, 0x3, 0x7, 0xb, 0x9, 0x267, 0x0, 0x9b, 0x78, 0x2, 0x9, 0x8, 0x5, 0x9, 0xf9c0, 0x7f, 0x1, 0x80, 0x7fff, 0x516a, 0xffffffff, 0x4, 0x71, 0x7f, 0xd61, 0x1, 0x400, 0x0, 0x6, 0x93, 0x7, 0xe6d, 0x3, 0x3, 0x9, 0xc, 0x3, 0x8, 0x1, 0x5, 0x2, 0x8, 0x660e, 0xf6c, 0x520b, 0x8001, 0xef8, 0x1, 0x1, 0x0, 0x40, 0x45f2, 0x4, 0x32, 0xd, 0x1, 0x5, 0x9, 0x52b, 0xfffffff9, 0x10001, 0x5, 0x7, 0x520, 0x7, 0x2000000, 0xec, 0x5, 0x100, 0x0, 0x2, 0xffffff00, 0x5, 0x4, 0x8, 0x4, 0x7, 0x87, 0x6, 0x200, 0x2, 0x1, 0xf, 0x4, 0x1, 0x6, 0x2, 0x3, 0x336, 0x5, 0x4, 0x3, 0x8, 0x0, 0x1, 0x800, 0xcb2, 0x1, 0x6, 0x5, 0x6, 0x400, 0x1, 0x57e8, 0x10001, 0x10, 0x5, 0x0, 0x10001, 0x7, 0x3, 0x1, 0x7, 0x6, 0x5, 0x54, 0x7, 0x1, 0x0, 0xfffffff7, 0xb, 0x4, 0x78000000, 0x6b, 0x4, 0x4, 0x62, 0x80, 0x8000000, 0x101, 0xff, 0x63, 0x9, 0x5, 0x8, 0x6, 0x0, 0x101, 0x7fffffff, 0x9, 0x7, 0x0, 0xc834, 0x8, 0x0, 0x2, 0x2, 0xf, 0xf3, 0x0, 0x2, 0x9, 0x7, 0x7, 0x8, 0x3, 0xcaea, 0x7, 0x101, 0x1ff, 0x5, 0x40, 0x2, 0x100, 0x4, 0x3204, 0x1, 0x40, 0x7f, 0x1, 0x7, 0x7, 0x0, 0x7, 0xb, 0x9, 0x80000001, 0xa, 0x80, 0x7, 0x1, 0x9, 0x6, 0x80000000, 0x0, 0x572, 0x9, 0x10001, 0xc00000, 0xad54, 0x1, 0x0, 0x1, 0x7, 0x3ff, 0x1, 0xfffffff7, 0x2, 0xb356, 0x8, 0x7, 0x61, 0x6, 0x9, 0x4, 0x4, 0x8, 0x6, 0x4, 0x1, 0xfffffffe, 0xb3e, 0x4, 0xc9e3, 0xffff8000, 0x9, 0x2d, 0x7f, 0x7fffffff, 0x5, 0x5, 0x1, 0x7, 0x9, 0x1ff, 0xb9f4, 0x0, 0x9, 0x401, 0x14, 0x2, 0x7, 0x4, 0x291e, 0x4, 0xff, 0x80000000, 0x6, 0x9, 0x10, 0x1, 0x200, 0x2, 0x4, 0x5], 0x5, 0x400, 0x4})
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r8, &(0x7f0000000080)=@file={0x1}, 0x6e)
r9 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
close(r6)
recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x40, 0xbd762d3f6151be00)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x6})
30m1.409640992s ago: executing program 1 (id=4232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) (fail_nth: 1)
30m0.600896218s ago: executing program 33 (id=4232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) (fail_nth: 1)
14m30.083543574s ago: executing program 2 (id=7859):
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6(0xa, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x88041, 0x0)
ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0xfdf8)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000400)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$packet(0x11, 0x3, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0xfb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, &(0x7f0000000100))
14m28.933026251s ago: executing program 2 (id=7860):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}})
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x800, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x4, 0x2, {}, 0x5})
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r4, 0x1276, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/128, 0x80}], 0x1, 0xc102a0, 0x101)
socket$inet(0x2, 0x3, 0x2)
r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r5, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x5}, 0x0)
14m27.299236696s ago: executing program 2 (id=7865):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'macsec0\x00'})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff3900000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000710002000000000001000000f90000000a00000067d49b5ba39d5bbad91b07637747c325240a97f1cffa85dc9db680da0c5ca71c2813fb8495aefb8a77f7c4ca4a8663ace1c1176c099b47e60a143a77de3495bf6d3e3c0d40e17a8957c7e17ded43e3e5af719324f6d7b5e57e1b5c6e7eb0af78eb7900"/393], 0x189)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0xc0, 0x30, 0x800, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x1fa1, 0x4, 0x10, 0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x6}, 0x0, 0x0, 0xfffffffffffffff7, 0x8, 0x800, 0x1, 0x7, 0x5, 0x3, 0x5, r1})
socket$tipc(0x1e, 0x5, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x7c, 0x5}, 'port0\x00', 0x39f494df748967f7, 0x0, 0xea8e063, 0x0, 0xffffffff, 0x9})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0xbf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
14m24.751315237s ago: executing program 3 (id=7875):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='E', 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000)
r5 = io_uring_setup(0xe79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x44})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2040094)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r6 = dup(r0)
write$6lowpan_enable(r6, 0x0, 0x0)
14m23.698912592s ago: executing program 3 (id=7879):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x4, 0x7ff)
14m23.535356392s ago: executing program 3 (id=7880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe17, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x55}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x400, 0xe2, &(0x7f0000000440)=""/226, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x1, 0x6, 0x7}, {0x4, 0x1, 0x1, 0xb}, {0x3, 0x3, 0x9, 0x8}, {0x100, 0x1, 0xd, 0xa}, {0x1, 0x5, 0x8, 0x4}, {0x3, 0x2, 0x7, 0xe}], 0x10, 0x1, @void, @value}, 0x94)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000f409010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r2 = fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
r5 = dup(r3)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
r8 = dup3(r4, r7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000001c0))
fanotify_mark(r2, 0x1, 0x8000010, r5, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
14m22.897629074s ago: executing program 2 (id=7881):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='E', 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = io_uring_setup(0xe79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x44})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r8 = dup(r0)
write$6lowpan_enable(r8, 0x0, 0x0)
14m21.956497261s ago: executing program 2 (id=7883):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180100b77238ec46ad4eb785157a0700100808f4ffef090000000000850000addcb789009526891058c52b46324566"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)='syzkaller1\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, 0x8)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)='reiserfs\x00', 0x31c43, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0)
unshare(0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56f6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r6 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/82, 0x52}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)=""/241, 0xf1}], 0x1}, 0x9}], 0x2, 0x60002000, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000)
socket$inet6_tcp(0xa, 0x1, 0x0)
14m21.272317679s ago: executing program 3 (id=7886):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, 0x0)
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020)
14m19.409825579s ago: executing program 3 (id=7895):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe0"], 0x6b}, 0x0)
close(r1)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802})
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x12, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000480)={0x0, 0x1000000, {0x0, 0x7, 0x2012, 0x2, 0x3, 0x0, 0x2, 0x5}})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0)
r5 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x51)
r6 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
r7 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff)
keyctl$revoke(0x3, r7)
keyctl$read(0xb, r7, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x7}})
14m18.835506479s ago: executing program 2 (id=7896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe17, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x55}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x400, 0xe2, &(0x7f0000000440)=""/226, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x1, 0x6, 0x7}, {0x4, 0x1, 0x1, 0xb}, {0x3, 0x3, 0x9, 0x8}, {0x100, 0x1, 0xd, 0xa}, {0x1, 0x5, 0x8, 0x4}, {0x3, 0x2, 0x7, 0xe}], 0x10, 0x1, @void, @value}, 0x94)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000f409010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r2 = fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
r5 = dup(r3)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
r8 = dup3(r4, r7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000001c0))
fanotify_mark(r2, 0x1, 0x8000010, r5, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
14m18.28266748s ago: executing program 3 (id=7898):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, 0x0, 0x0)
close(r1)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802})
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x12, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000480)={0x0, 0x1000000, {0x0, 0x7, 0x2012, 0x2, 0x3, 0x0, 0x2, 0x5}})
r5 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x51)
r6 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
r7 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff)
keyctl$revoke(0x3, r7)
keyctl$read(0xb, r7, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x7}})
14m3.505398216s ago: executing program 34 (id=7896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe17, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x55}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x400, 0xe2, &(0x7f0000000440)=""/226, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x1, 0x6, 0x7}, {0x4, 0x1, 0x1, 0xb}, {0x3, 0x3, 0x9, 0x8}, {0x100, 0x1, 0xd, 0xa}, {0x1, 0x5, 0x8, 0x4}, {0x3, 0x2, 0x7, 0xe}], 0x10, 0x1, @void, @value}, 0x94)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000f409010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r2 = fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
r5 = dup(r3)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
r8 = dup3(r4, r7, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000001c0))
fanotify_mark(r2, 0x1, 0x8000010, r5, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
14m3.174407222s ago: executing program 35 (id=7898):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, 0x0, 0x0)
close(r1)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802})
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x12, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000480)={0x0, 0x1000000, {0x0, 0x7, 0x2012, 0x2, 0x3, 0x0, 0x2, 0x5}})
r5 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x51)
r6 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
r7 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff)
keyctl$revoke(0x3, r7)
keyctl$read(0xb, r7, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x7}})
7.393291215s ago: executing program 8 (id=10270):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002)
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={0x0})
7.287981309s ago: executing program 6 (id=10272):
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r1 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0x336f}, &(0x7f0000000240)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
read(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r5)
write$cgroup_int(r0, &(0x7f00000000c0)=0x1c3, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
7.287394372s ago: executing program 8 (id=10273):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
6.119781144s ago: executing program 6 (id=10275):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r1, &(0x7f0000000100)=""/85, 0x55)
5.984719757s ago: executing program 8 (id=10278):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex, 0xffffffffffffffff, 0xe, 0x30, 0x0, @void, @void, @void, @value}, 0x20)
5.534021475s ago: executing program 8 (id=10281):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x2c020400)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
5.531953137s ago: executing program 7 (id=10282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, 0x0, 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
read(0xffffffffffffffff, 0x0, 0x2)
ioprio_set$uid(0x3, 0x0, 0x0)
5.135272346s ago: executing program 6 (id=10284):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x1, 0x80002, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00')
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
5.134936361s ago: executing program 7 (id=10285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/pid_for_children\x00')
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x5, &(0x7f00000002c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
3.698614441s ago: executing program 5 (id=10287):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r4, r5, 0x0)
readv(r5, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2)
3.431936953s ago: executing program 8 (id=10288):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0)
3.356381617s ago: executing program 7 (id=10289):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2f83651f5b17d05b, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0)
3.344103386s ago: executing program 4 (id=10290):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x40000, 0x0, 0xfffffffc})
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
3.248040591s ago: executing program 6 (id=10291):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
3.247814517s ago: executing program 4 (id=10292):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
2.541880176s ago: executing program 7 (id=10293):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = dup3(r1, r0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000670000000800010002"], 0x30}}, 0x0)
2.421533383s ago: executing program 7 (id=10294):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
2.34746739s ago: executing program 5 (id=10295):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504"], 0x0)
1.568012528s ago: executing program 4 (id=10296):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
timer_create(0x4, &(0x7f0000000200)={0x0, 0x1e, 0x4, @thr={0x0, 0x0}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}})
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14)
1.112891634s ago: executing program 6 (id=10297):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x800000000000004)
r1 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00')
preadv(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)=""/177, 0xb1}], 0x2, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2902, 0x0, 0x0, 0xffffffff})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x7db2, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89d0080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x3]}})
ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000005c0))
close_range(r2, 0xffffffffffffffff, 0x0)
830.122407ms ago: executing program 5 (id=10298):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f00000001c0)={0x0, 0x0, @pic={0x85, 0x96, 0xfd, 0x7, 0x9, 0xdf, 0x40, 0x63, 0x3, 0x0, 0x80, 0x72, 0x5a, 0x1, 0x6, 0x7f}})
569.888808ms ago: executing program 4 (id=10299):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
546.635842ms ago: executing program 6 (id=10300):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = dup3(r1, r0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006700000008000100020000000800ab36", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x30}}, 0x0)
450.15713ms ago: executing program 5 (id=10301):
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00')
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
425.870149ms ago: executing program 8 (id=10302):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x7, 0x2, {0x2, 0x22}}, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, '>8'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3d5}}}}, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340), &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)
367.003688ms ago: executing program 4 (id=10303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x5c, 0x64, 0xf31, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x6, 0x22, [0xff, 0xffffffff, 0xffffff00, 0xff000000]}]}}]}, 0x5c}}, 0x1000000)
267.897348ms ago: executing program 5 (id=10305):
iopl(0x3)
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x2, 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
147.842563ms ago: executing program 4 (id=10306):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a"], 0x58}, 0x1, 0x2}, 0x0)
102.182161ms ago: executing program 7 (id=10307):
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
ustat(0xfffffffeffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
0s ago: executing program 5 (id=10308):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
kernel console output (not intermixed with test programs):
:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 2939.191799][ T9834] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2939.327930][ T29] audit: type=1400 audit(2919.032:2384): avc: denied { read } for pid=9839 comm="syz.4.9574" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 2939.363989][ T29] audit: type=1400 audit(2919.032:2385): avc: denied { open } for pid=9839 comm="syz.4.9574" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 2940.636515][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9577'.
[ 2940.934841][ T9862] lo speed is unknown, defaulting to 1000
[ 2941.706022][ T29] audit: type=1400 audit(2920.931:2386): avc: denied { append } for pid=9857 comm="syz.5.9578" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2941.762603][ T29] audit: type=1400 audit(2921.146:2387): avc: denied { read } for pid=9857 comm="syz.5.9578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2941.902800][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9577'.
[ 2942.027950][ T29] audit: type=1400 audit(2921.586:2388): avc: denied { write } for pid=9873 comm="syz.7.9584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 2942.030414][ T9875] netlink: 300 bytes leftover after parsing attributes in process `syz.7.9584'.
[ 2942.046655][T22147] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 2942.056141][ T29] audit: type=1400 audit(2921.595:2389): avc: denied { write } for pid=9873 comm="syz.7.9584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2942.115344][ T29] audit: type=1400 audit(2921.595:2390): avc: denied { nlmsg_write } for pid=9873 comm="syz.7.9584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2942.541189][T22147] usb 9-1: Using ep0 maxpacket: 32
[ 2942.599447][ T9884] FAULT_INJECTION: forcing a failure.
[ 2942.599447][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2942.628842][ T9886] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2942.654477][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.5.9585 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2942.665159][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2942.675193][ T9884] Call Trace:
[ 2942.678445][ T9884] <TASK>
[ 2942.681352][ T9884] dump_stack_lvl+0x16c/0x1f0
[ 2942.686026][ T9884] should_fail_ex+0x497/0x5b0
[ 2942.690694][ T9884] strncpy_from_user+0x3b/0x2d0
[ 2942.695524][ T9884] getname_flags.part.0+0x8f/0x550
[ 2942.700626][ T9884] getname+0x8d/0xe0
[ 2942.704507][ T9884] do_sys_openat2+0x104/0x1e0
[ 2942.709261][ T9884] ? __pfx_do_sys_openat2+0x10/0x10
[ 2942.714446][ T9884] ? __fget_files+0x206/0x3a0
[ 2942.719103][ T9884] __x64_sys_openat+0x175/0x210
[ 2942.723932][ T9884] ? __pfx___x64_sys_openat+0x10/0x10
[ 2942.729285][ T9884] ? ksys_write+0x1ba/0x250
[ 2942.733768][ T9884] do_syscall_64+0xcd/0x250
[ 2942.738257][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2942.744129][ T9884] RIP: 0033:0x7f26f8384690
[ 2942.748519][ T9884] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[ 2942.768191][ T9884] RSP: 002b:00007f26f9259f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2942.776579][ T9884] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26f8384690
[ 2942.784539][ T9884] RDX: 0000000000000000 RSI: 00007f26f8401bc0 RDI: 00000000ffffff9c
[ 2942.792486][ T9884] RBP: 00007f26f8401bc0 R08: 0000000000000000 R09: 0000000000000000
[ 2942.800449][ T9884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2942.808392][ T9884] R13: 0000000000000000 R14: 00007f26f8575fa0 R15: 00007ffcaa98e328
[ 2942.816342][ T9884] </TASK>
[ 2942.821638][T22147] usb 9-1: config 105 has an invalid descriptor of length 66, skipping remainder of the config
[ 2942.832089][T22147] usb 9-1: config 105 has 0 interfaces, different from the descriptor's value: 1
[ 2942.863715][T22147] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 2942.872834][T22147] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2942.915619][T22147] usb 9-1: Product: syz
[ 2942.929018][T22147] usb 9-1: Manufacturer: syz
[ 2942.948535][T22147] usb 9-1: SerialNumber: syz
[ 2943.089667][ T9892] netlink: 'syz.5.9587': attribute type 10 has an invalid length.
[ 2943.312145][ T9892] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2944.225273][ T9905] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 2945.017011][T22147] usb 9-1: USB disconnect, device number 17
[ 2945.963551][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9595'.
[ 2946.707034][ T9919] siw: device registration error -23
[ 2946.787404][ T9913] delete_channel: no stack
[ 2947.046808][ T9936] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2947.772440][ T29] audit: type=1400 audit(2926.965:2391): avc: denied { append } for pid=9942 comm="syz.6.9601" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 2948.126683][ T9950] FAULT_INJECTION: forcing a failure.
[ 2948.126683][ T9950] name failslab, interval 1, probability 0, space 0, times 0
[ 2948.159550][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.4.9602 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2948.170255][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2948.180313][ T9950] Call Trace:
[ 2948.183590][ T9950] <TASK>
[ 2948.186518][ T9950] dump_stack_lvl+0x16c/0x1f0
[ 2948.191205][ T9950] should_fail_ex+0x497/0x5b0
[ 2948.195885][ T9950] ? fs_reclaim_acquire+0xae/0x150
[ 2948.201013][ T9950] should_failslab+0xc2/0x120
[ 2948.205695][ T9950] __kmalloc_noprof+0xcb/0x510
[ 2948.210470][ T9950] iovec_from_user.part.0+0xf3/0x130
[ 2948.215773][ T9950] __import_iovec+0xd6/0x6d0
[ 2948.220366][ T9950] ? __lock_acquire+0xcc5/0x3c40
[ 2948.225311][ T9950] import_iovec+0x108/0x140
[ 2948.229819][ T9950] vfs_writev+0x198/0xdd0
[ 2948.234145][ T9950] ? find_held_lock+0x2d/0x110
[ 2948.238922][ T9950] ? __pfx_vfs_writev+0x10/0x10
[ 2948.243777][ T9950] ? find_held_lock+0x2d/0x110
[ 2948.248555][ T9950] ? __pfx_lock_release+0x10/0x10
[ 2948.253586][ T9950] ? trace_lock_acquire+0x14e/0x1f0
[ 2948.258807][ T9950] ? __fget_files+0x206/0x3a0
[ 2948.263494][ T9950] ? do_writev+0x133/0x340
[ 2948.267910][ T9950] do_writev+0x133/0x340
[ 2948.269097][ T9952] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 2948.272141][ T9950] ? __pfx_do_writev+0x10/0x10
[ 2948.272168][ T9950] do_syscall_64+0xcd/0x250
[ 2948.287553][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2948.293457][ T9950] RIP: 0033:0x7fc8b1785d29
[ 2948.297865][ T9950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2948.317447][ T9950] RSP: 002b:00007fc8b254d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 2948.325832][ T9950] RAX: ffffffffffffffda RBX: 00007fc8b1975fa0 RCX: 00007fc8b1785d29
[ 2948.333794][ T9950] RDX: 10000000000000e5 RSI: 0000000020001400 RDI: 0000000000000003
[ 2948.341739][ T9950] RBP: 00007fc8b254d090 R08: 0000000000000000 R09: 0000000000000000
[ 2948.349685][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2948.357631][ T9950] R13: 0000000000000000 R14: 00007fc8b1975fa0 R15: 00007ffc5efcf5d8
[ 2948.365582][ T9950] </TASK>
[ 2949.331663][T22147] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 2949.594251][ T9974] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2949.607244][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9610'.
[ 2949.625486][ T9972] netlink: 'syz.5.9610': attribute type 4 has an invalid length.
[ 2949.640434][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9610'.
[ 2949.652790][T22147] usb 8-1: Using ep0 maxpacket: 32
[ 2949.659820][T22147] usb 8-1: config 0 has an invalid interface number: 9 but max is 0
[ 2949.675149][T22147] usb 8-1: config 0 has no interface number 0
[ 2949.689258][ T29] audit: type=1400 audit(2928.751:2392): avc: denied { write } for pid=9975 comm="syz.5.9613" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2949.717806][T22147] usb 8-1: config 0 interface 9 has no altsetting 0
[ 2949.735424][ T29] audit: type=1400 audit(2928.789:2393): avc: denied { ioctl } for pid=9975 comm="syz.5.9613" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2949.739659][T22147] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2949.830619][T22147] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2949.851142][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9612'.
[ 2949.890906][ T971] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2949.898821][T22147] usb 8-1: Product: syz
[ 2949.908571][T22147] usb 8-1: Manufacturer: syz
[ 2949.916661][T22147] usb 8-1: SerialNumber: syz
[ 2950.005927][T22147] usb 8-1: config 0 descriptor??
[ 2950.124304][T22147] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 2950.233826][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2950.272474][ T971] usb 5-1: Using ep0 maxpacket: 8
[ 2950.277986][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2950.286816][ T971] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 2950.303680][ T971] usb 5-1: config 0 has no interface number 0
[ 2950.502279][ T971] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2950.513184][ T971] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2950.525167][ T971] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 66, changing to 10
[ 2950.537160][ T971] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 17272, setting to 1024
[ 2951.148263][ T971] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2951.162440][ T971] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2951.172715][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2951.538750][ T29] audit: type=1400 audit(2930.482:2394): avc: denied { setattr } for pid=9954 comm="syz.7.9604" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2951.554538][ T971] usb 5-1: config 0 descriptor??
[ 2951.569927][ T971] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2952.040661][ T29] audit: type=1400 audit(2930.959:2395): avc: denied { map } for pid=10002 comm="syz.8.9619" path="socket:[164915]" dev="sockfs" ino=164915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2952.437490][T22147] gspca_topro: reg_w err -110
[ 2952.485280][T22147] gspca_topro: Sensor soi763a
[ 2952.542615][ T29] audit: type=1400 audit(2931.408:2396): avc: denied { read } for pid=10002 comm="syz.8.9619" path="socket:[164915]" dev="sockfs" ino=164915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2952.675674][ T29] audit: type=1400 audit(2931.548:2397): avc: denied { create } for pid=10002 comm="syz.8.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2952.714389][ T29] audit: type=1400 audit(2931.548:2398): avc: denied { accept } for pid=10002 comm="syz.8.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2952.827431][ T29] audit: type=1400 audit(2931.623:2399): avc: denied { setopt } for pid=10002 comm="syz.8.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2953.091995][T22147] usb 5-1: USB disconnect, device number 120
[ 2953.099873][T22147] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 2953.179171][T10016] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2953.716025][ T9710] usb 8-1: USB disconnect, device number 14
[ 2954.034648][ T6272] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 2954.704815][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9626'.
[ 2955.396509][T10043] Invalid ELF header magic: != ELF
[ 2955.401885][ T29] audit: type=1400 audit(2934.092:2400): avc: denied { module_load } for pid=10041 comm="syz.8.9630" path="/sys/kernel/notes" dev="sysfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[ 2955.425179][ C0] vkms_vblank_simulate: vblank timer overrun
[ 2955.449013][T10043] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 2955.457520][T10043] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 2955.879916][ T9710] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 2956.152341][ T2922] Bluetooth: hci2: command 0x1003 tx timeout
[ 2956.159624][ T9318] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 2957.187739][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9634'.
[ 2957.255876][ T9710] usb 8-1: config index 0 descriptor too short (expected 65531, got 129)
[ 2957.273170][ T9710] usb 8-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 2957.282694][ T9710] usb 8-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config
[ 2957.294452][ T9710] usb 8-1: config 255 has 1 interface, different from the descriptor's value: 255
[ 2957.333617][ T9710] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2957.342997][ T9710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2957.351159][ T9710] usb 8-1: Product: syz
[ 2957.360236][ T9710] usb 8-1: Manufacturer: syz
[ 2957.369222][ T9710] usb 8-1: SerialNumber: syz
[ 2957.448374][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9638'.
[ 2957.454467][T10066] binder: BINDER_SET_CONTEXT_MGR already set
[ 2957.464059][T10066] binder: 10064:10066 ioctl 4018620d 20000100 returned -16
[ 2957.579482][T10069] FAULT_INJECTION: forcing a failure.
[ 2957.579482][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2957.799605][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.6.9639 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2957.810388][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2957.820430][T10069] Call Trace:
[ 2957.823695][T10069] <TASK>
[ 2957.826621][T10069] dump_stack_lvl+0x16c/0x1f0
[ 2957.831285][T10069] should_fail_ex+0x497/0x5b0
[ 2957.835963][T10069] _copy_to_user+0x32/0xd0
[ 2957.840366][T10069] simple_read_from_buffer+0xd0/0x160
[ 2957.845742][T10069] proc_fail_nth_read+0x198/0x270
[ 2957.850757][T10069] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2957.856303][T10069] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2957.861833][T10069] vfs_read+0x1df/0xbe0
[ 2957.865980][T10069] ? __fget_files+0x1fc/0x3a0
[ 2957.870638][T10069] ? __pfx___mutex_lock+0x10/0x10
[ 2957.875660][T10069] ? __pfx_vfs_read+0x10/0x10
[ 2957.880331][T10069] ? __fget_files+0x206/0x3a0
[ 2957.884987][T10069] ksys_read+0x12b/0x250
[ 2957.889225][T10069] ? __pfx_ksys_read+0x10/0x10
[ 2957.893974][T10069] do_syscall_64+0xcd/0x250
[ 2957.898457][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2957.904364][T10069] RIP: 0033:0x7fd08738473c
[ 2957.908777][T10069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2957.930468][T10069] RSP: 002b:00007fd0880ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2957.938877][T10069] RAX: ffffffffffffffda RBX: 00007fd087576080 RCX: 00007fd08738473c
[ 2957.946828][T10069] RDX: 000000000000000f RSI: 00007fd0880ef0a0 RDI: 0000000000000003
[ 2957.954796][T10069] RBP: 00007fd0880ef090 R08: 0000000000000000 R09: 0000000000000000
[ 2957.962771][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2957.970748][T10069] R13: 0000000000000001 R14: 00007fd087576080 R15: 00007ffc772ed328
[ 2957.978734][T10069] </TASK>
[ 2957.981777][ C0] vkms_vblank_simulate: vblank timer overrun
[ 2958.689767][ T29] audit: type=1400 audit(2937.179:2401): avc: denied { read append } for pid=10075 comm="syz.4.9641" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 2958.716753][ T29] audit: type=1400 audit(2937.198:2402): avc: denied { ioctl open } for pid=10075 comm="syz.4.9641" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 2958.743199][ T29] audit: type=1400 audit(2937.226:2403): avc: denied { write } for pid=10075 comm="syz.4.9641" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 2958.779832][T10076] lo speed is unknown, defaulting to 1000
[ 2959.321251][ T29] audit: type=1400 audit(2937.684:2404): avc: denied { getopt } for pid=10071 comm="syz.8.9640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 2959.736578][ T9710] usb 8-1: 0:2 : does not exist
[ 2959.853440][ T9710] usb 8-1: USB disconnect, device number 15
[ 2959.884594][ T29] audit: type=1400 audit(2938.292:2405): avc: denied { ioctl } for pid=10091 comm="syz.6.9647" path="socket:[165075]" dev="sockfs" ino=165075 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2959.933673][T10094] FAULT_INJECTION: forcing a failure.
[ 2959.933673][T10094] name failslab, interval 1, probability 0, space 0, times 0
[ 2959.946610][T10094] CPU: 0 UID: 0 PID: 10094 Comm: syz.6.9648 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2959.957469][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2959.969681][T10094] Call Trace:
[ 2959.969691][T10094] <TASK>
[ 2959.969699][T10094] dump_stack_lvl+0x16c/0x1f0
[ 2959.969723][T10094] should_fail_ex+0x497/0x5b0
[ 2959.969743][T10094] ? fs_reclaim_acquire+0xae/0x150
[ 2959.969768][T10094] should_failslab+0xc2/0x120
[ 2959.969786][T10094] __kmalloc_noprof+0xcb/0x510
[ 2959.969805][T10094] ? rcu_is_watching+0x12/0xc0
[ 2959.969826][T10094] tomoyo_encode2+0x100/0x3e0
[ 2959.969847][T10094] tomoyo_encode+0x29/0x50
[ 2959.969863][T10094] tomoyo_realpath_from_path+0x19d/0x720
[ 2959.969883][T10094] ? tomoyo_path_number_perm+0x235/0x590
[ 2959.969901][T10094] tomoyo_path_number_perm+0x248/0x590
[ 2959.969915][T10094] ? tomoyo_path_number_perm+0x235/0x590
[ 2959.969932][T10094] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2959.969966][T10094] ? __pfx_lock_release+0x10/0x10
[ 2959.969981][T10094] ? trace_lock_acquire+0x14e/0x1f0
[ 2959.970003][T10094] ? lock_acquire+0x2f/0xb0
[ 2959.970017][T10094] ? __fget_files+0x40/0x3a0
[ 2959.970034][T10094] ? __fget_files+0x206/0x3a0
[ 2959.970051][T10094] security_file_ioctl+0x9b/0x240
[ 2959.970071][T10094] __x64_sys_ioctl+0xb7/0x200
[ 2959.970092][T10094] do_syscall_64+0xcd/0x250
[ 2959.970112][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2959.970131][T10094] RIP: 0033:0x7fd087385d29
[ 2959.970151][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2959.970165][T10094] RSP: 002b:00007fd088110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2959.970180][T10094] RAX: ffffffffffffffda RBX: 00007fd087575fa0 RCX: 00007fd087385d29
[ 2959.970190][T10094] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004
[ 2959.970199][T10094] RBP: 00007fd088110090 R08: 0000000000000000 R09: 0000000000000000
[ 2959.970208][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2959.970217][T10094] R13: 0000000000000000 R14: 00007fd087575fa0 R15: 00007ffc772ed328
[ 2959.970236][T10094] </TASK>
[ 2959.970301][ C0] vkms_vblank_simulate: vblank timer overrun
[ 2959.970705][T10094] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2960.260161][T22822] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 2960.628947][ T8426] udevd[8426]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2960.771077][T22822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2961.207935][T22822] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2961.345964][T22822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2961.359222][T22822] usb 6-1: config 0 descriptor??
[ 2962.237442][T10117] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2962.422985][ T29] audit: type=1400 audit(2940.416:2406): avc: denied { read write } for pid=10112 comm="syz.7.9654" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2962.461835][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2962.478089][ T4391] hid-generic 0001:0000:0000.0030: unknown main item tag 0x0
[ 2962.490575][ T29] audit: type=1400 audit(2940.416:2407): avc: denied { open } for pid=10112 comm="syz.7.9654" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2962.502517][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2962.588317][ T4391] hid-generic 0001:0000:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 2962.599760][T22822] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor
[ 2962.618701][T22822] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0031/input/input58
[ 2962.980290][ T5063] IPVS: starting estimator thread 0...
[ 2963.197454][ T9318] Bluetooth: hci1: unexpected event for opcode 0x0c5a
[ 2963.976917][ T29] audit: type=1400 audit(2942.109:2408): avc: denied { mount } for pid=10124 comm="syz.7.9655" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2964.026862][T22822] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 2964.493413][T10122] IPVS: using max 61 ests per chain, 146400 per kthread
[ 2964.713109][T22822] usb 6-1: USB disconnect, device number 95
[ 2964.812412][ T29] audit: type=1400 audit(2942.904:2409): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 2964.892300][ T29] audit: type=1400 audit(2942.904:2410): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2964.973395][ T29] audit: type=1400 audit(2942.904:2411): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2965.054078][ T29] audit: type=1400 audit(2942.904:2412): avc: denied { open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2965.126604][ T29] audit: type=1400 audit(2942.904:2413): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2965.263836][T10142] FAULT_INJECTION: forcing a failure.
[ 2965.263836][T10142] name failslab, interval 1, probability 0, space 0, times 0
[ 2965.292552][T22822] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 2965.300295][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.4.9659 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2965.311047][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2965.321083][T10142] Call Trace:
[ 2965.324349][T10142] <TASK>
[ 2965.327259][T10142] dump_stack_lvl+0x16c/0x1f0
[ 2965.331922][T10142] should_fail_ex+0x497/0x5b0
[ 2965.336592][T10142] ? fs_reclaim_acquire+0xae/0x150
[ 2965.341706][T10142] should_failslab+0xc2/0x120
[ 2965.346363][T10142] kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 2965.352142][T10142] ? __alloc_skb+0x2b1/0x380
[ 2965.356712][T10142] __alloc_skb+0x2b1/0x380
[ 2965.361105][T10142] ? __pfx___alloc_skb+0x10/0x10
[ 2965.366018][T10142] ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2965.371976][T10142] netlink_alloc_large_skb+0x69/0x130
[ 2965.377323][T10142] netlink_sendmsg+0x689/0xd70
[ 2965.382067][T10142] ? __pfx_netlink_sendmsg+0x10/0x10
[ 2965.387332][T10142] ____sys_sendmsg+0xaaf/0xc90
[ 2965.392070][T10142] ? copy_msghdr_from_user+0x10b/0x160
[ 2965.397498][T10142] ? __pfx_____sys_sendmsg+0x10/0x10
[ 2965.402762][T10142] ___sys_sendmsg+0x135/0x1e0
[ 2965.407410][T10142] ? __pfx____sys_sendmsg+0x10/0x10
[ 2965.412585][T10142] ? __pfx_lock_release+0x10/0x10
[ 2965.417594][T10142] ? trace_lock_acquire+0x14e/0x1f0
[ 2965.422772][T10142] ? __fget_files+0x206/0x3a0
[ 2965.427423][T10142] __sys_sendmsg+0x16e/0x220
[ 2965.431987][T10142] ? __pfx___sys_sendmsg+0x10/0x10
[ 2965.437078][T10142] do_syscall_64+0xcd/0x250
[ 2965.441556][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2965.447423][T10142] RIP: 0033:0x7fc8b1785d29
[ 2965.451809][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2965.471388][T10142] RSP: 002b:00007fc8b254d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2965.479772][T10142] RAX: ffffffffffffffda RBX: 00007fc8b1975fa0 RCX: 00007fc8b1785d29
[ 2965.487716][T10142] RDX: 0000000000004000 RSI: 0000000020000240 RDI: 0000000000000004
[ 2965.495660][T10142] RBP: 00007fc8b254d090 R08: 0000000000000000 R09: 0000000000000000
[ 2965.503614][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2965.511572][T10142] R13: 0000000000000000 R14: 00007fc8b1975fa0 R15: 00007ffc5efcf5d8
[ 2965.519523][T10142] </TASK>
[ 2965.632299][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9662'.
[ 2966.314188][ T29] audit: type=1400 audit(2944.298:2414): avc: denied { accept } for pid=10152 comm="syz.6.9665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2966.522189][T22822] usb 6-1: Using ep0 maxpacket: 16
[ 2966.565554][T22822] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 2966.600050][T22822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2966.705509][T22822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2966.809243][T22822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2966.840022][T22822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2966.848303][T10159] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 2966.869085][T22822] usb 6-1: Product: syz
[ 2966.873258][T22822] usb 6-1: Manufacturer: syz
[ 2966.899674][T22822] usb 6-1: SerialNumber: syz
[ 2967.135942][ T29] audit: type=1400 audit(2945.074:2415): avc: denied { mount } for pid=10138 comm="syz.5.9661" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2967.267464][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9669'.
[ 2967.558967][T22822] usb 6-1: 0:2 : does not exist
[ 2967.661795][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9671'.
[ 2967.994391][T10183] binder: BINDER_SET_CONTEXT_MGR already set
[ 2968.000567][T10183] binder: 10175:10183 ioctl 4018620d 20000100 returned -16
[ 2968.138702][T10184] binder_alloc: 7005: binder_alloc_buf, no vma
[ 2968.285417][ T29] audit: type=1400 audit(2946.019:2416): avc: denied { call } for pid=10175 comm="syz.8.9670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 2968.709349][ T29] audit: type=1400 audit(2946.524:2417): avc: denied { getopt } for pid=10186 comm="syz.6.9673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2968.802034][T10193] netlink: 'syz.6.9675': attribute type 2 has an invalid length.
[ 2969.412816][T22822] usb 6-1: 1:0: cannot get min/max values for control 6 (id 1)
[ 2969.458841][T10185] syz.7.9672: attempt to access beyond end of device
[ 2969.458841][T10185] loop7: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2969.473683][T22822] usb 6-1: USB disconnect, device number 96
[ 2969.525315][T10185] XFS (loop7): SB validate failed with error -5.
[ 2969.753338][ T8426] udevd[8426]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2969.876316][ T29] audit: type=1400 audit(2947.637:2418): avc: denied { setopt } for pid=10208 comm="syz.4.9678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2969.903658][ T29] audit: type=1400 audit(2947.656:2419): avc: denied { write } for pid=22147 comm="kworker/0:1" path="socket:[165280]" dev="sockfs" ino=165280 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 2970.049086][ T29] audit: type=1400 audit(2947.796:2420): avc: denied { getopt } for pid=10211 comm="syz.4.9679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2970.112119][ T29] audit: type=1400 audit(2947.796:2421): avc: denied { create } for pid=10211 comm="syz.4.9679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 2970.317716][ T29] audit: type=1400 audit(2947.964:2422): avc: denied { unmount } for pid=5375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2971.362254][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9684'.
[ 2971.392870][T22147] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 2972.039507][T10230] lo speed is unknown, defaulting to 1000
[ 2972.171510][T22147] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2972.182768][T22147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2972.211044][T22147] usb 6-1: Product: syz
[ 2972.217378][T22147] usb 6-1: Manufacturer: syz
[ 2972.223356][T22147] usb 6-1: SerialNumber: syz
[ 2972.242392][T22147] usb 6-1: config 0 descriptor??
[ 2972.387964][ T29] audit: type=1400 audit(2949.938:2423): avc: denied { name_bind } for pid=10231 comm="syz.4.9685" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 2972.596732][T10222] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[ 2972.675409][T22147] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22
[ 2972.722917][T22147] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2972.743338][T22147] usb 6-1: USB disconnect, device number 97
[ 2974.239871][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9689'.
[ 2974.268759][T10245] delete_channel: no stack
[ 2974.411927][ T971] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 2974.784902][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9695'.
[ 2975.866192][T10274] fuse: Unknown parameter 'M ?�K;�sU��8��?��E�V�Eg�cr��*��a�W%WJ'
[ 2975.891851][ T29] audit: type=1400 audit(2953.268:2424): avc: denied { read } for pid=10268 comm="syz.5.9696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2975.996315][ T971] usb 8-1: device descriptor read/64, error -71
[ 2976.053093][T10278] fuse: Bad value for 'group_id'
[ 2976.058190][T10278] fuse: Bad value for 'group_id'
[ 2976.790999][ T971] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 2976.934759][ T971] usb 8-1: device descriptor read/64, error -71
[ 2977.008214][ T29] audit: type=1400 audit(2954.297:2425): avc: denied { append } for pid=10282 comm="syz.5.9701" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 2977.052511][ T971] usb usb8-port1: attempt power cycle
[ 2977.166045][ T29] audit: type=1400 audit(2954.447:2426): avc: denied { shutdown } for pid=10282 comm="syz.5.9701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2977.431563][ T29] audit: type=1326 audit(2954.662:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2977.672509][ T29] audit: type=1326 audit(2954.662:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2977.704967][ T29] audit: type=1326 audit(2954.662:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2977.725725][ T971] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 2977.811288][ T29] audit: type=1326 audit(2954.662:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2977.895456][ T29] audit: type=1326 audit(2954.671:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2978.143718][ T971] usb 8-1: device not accepting address 18, error -71
[ 2978.207292][ T29] audit: type=1326 audit(2954.671:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2978.262099][ T29] audit: type=1326 audit(2954.671:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.9703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b1785d29 code=0x7fc00000
[ 2978.628507][T10310] pim6reg: entered allmulticast mode
[ 2978.676332][T10310] pim6reg: left allmulticast mode
[ 2979.954835][T10325] lo speed is unknown, defaulting to 1000
[ 2981.147097][T10332] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9712'.
[ 2981.655473][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2982.626677][ T29] kauditd_printk_skb: 66 callbacks suppressed
[ 2982.626692][ T29] audit: type=1400 audit(2959.563:2500): avc: denied { unmount } for pid=5375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 2982.669489][ T29] audit: type=1400 audit(2959.582:2501): avc: denied { unmount } for pid=5375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2983.128976][T10355] FAULT_INJECTION: forcing a failure.
[ 2983.128976][T10355] name failslab, interval 1, probability 0, space 0, times 0
[ 2983.141714][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.4.9721 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2983.152476][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2983.162506][T10355] Call Trace:
[ 2983.165765][T10355] <TASK>
[ 2983.168673][T10355] dump_stack_lvl+0x16c/0x1f0
[ 2983.173328][T10355] should_fail_ex+0x497/0x5b0
[ 2983.177992][T10355] ? fs_reclaim_acquire+0xae/0x150
[ 2983.183114][T10355] should_failslab+0xc2/0x120
[ 2983.187793][T10355] kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 2983.193593][T10355] ? __alloc_skb+0x2b1/0x380
[ 2983.198162][T10355] __alloc_skb+0x2b1/0x380
[ 2983.202559][T10355] ? __pfx___alloc_skb+0x10/0x10
[ 2983.207475][T10355] ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2983.213433][T10355] ? netlink_sendmsg+0x2fe/0xd70
[ 2983.218357][T10355] netlink_alloc_large_skb+0x69/0x130
[ 2983.223708][T10355] netlink_sendmsg+0x689/0xd70
[ 2983.228452][T10355] ? __pfx_netlink_sendmsg+0x10/0x10
[ 2983.233717][T10355] ____sys_sendmsg+0xaaf/0xc90
[ 2983.238471][T10355] ? copy_msghdr_from_user+0x10b/0x160
[ 2983.243904][T10355] ? __pfx_____sys_sendmsg+0x10/0x10
[ 2983.249184][T10355] ___sys_sendmsg+0x135/0x1e0
[ 2983.253853][T10355] ? __pfx____sys_sendmsg+0x10/0x10
[ 2983.259046][T10355] ? __pfx_lock_release+0x10/0x10
[ 2983.264084][T10355] ? trace_lock_acquire+0x14e/0x1f0
[ 2983.269267][T10355] ? __fget_files+0x206/0x3a0
[ 2983.273927][T10355] __sys_sendmsg+0x16e/0x220
[ 2983.278497][T10355] ? __pfx___sys_sendmsg+0x10/0x10
[ 2983.283585][T10355] ? fput+0x67/0x440
[ 2983.287463][T10355] do_syscall_64+0xcd/0x250
[ 2983.291961][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2983.297837][T10355] RIP: 0033:0x7fc8b1785d29
[ 2983.302226][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2983.321816][T10355] RSP: 002b:00007fc8b252c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2983.330218][T10355] RAX: ffffffffffffffda RBX: 00007fc8b1976080 RCX: 00007fc8b1785d29
[ 2983.338164][T10355] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003
[ 2983.346115][T10355] RBP: 00007fc8b252c090 R08: 0000000000000000 R09: 0000000000000000
[ 2983.354079][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2983.362029][T10355] R13: 0000000000000000 R14: 00007fc8b1976080 R15: 00007ffc5efcf5d8
[ 2983.369999][T10355] </TASK>
[ 2985.281957][T10359] netdevsim netdevsim7: Direct firmware load for printk failed with error -2
[ 2985.291131][T10359] netdevsim netdevsim7: Falling back to sysfs fallback for: printk
[ 2986.160193][T10381] binder: BINDER_SET_CONTEXT_MGR already set
[ 2986.166284][T10381] binder: 10376:10381 ioctl 4018620d 20000100 returned -16
[ 2986.176732][T10381] binder_alloc: 7005: binder_alloc_buf, no vma
[ 2986.726785][T10358] [U] v�3
[ 2988.155720][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9734'.
[ 2988.383392][T10412] netlink: 172 bytes leftover after parsing attributes in process `syz.8.9737'.
[ 2989.667296][ T2494] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 2990.415431][ T2494] usb 9-1: Using ep0 maxpacket: 8
[ 2990.480529][ T2494] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2990.500964][ T2494] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2990.533497][ T2494] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2990.543921][ T2494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2990.671534][ T2494] usb 9-1: config 0 descriptor??
[ 2991.723895][ T2494] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2991.858699][ T2494] usb 9-1: USB disconnect, device number 18
[ 2992.088040][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9753'.
[ 2992.131937][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9751'.
[ 2992.587207][T10457] delete_channel: no stack
[ 2992.712453][ T29] audit: type=1400 audit(2968.992:2502): avc: denied { ioctl } for pid=10465 comm="syz.7.9754" path="socket:[164763]" dev="sockfs" ino=164763 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2994.591935][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9762'.
[ 2994.794638][T10499] fuse: Unknown parameter 'grou00000000000000000000'
[ 2995.112994][ T29] audit: type=1400 audit(2971.247:2503): avc: denied { create } for pid=10497 comm="syz.6.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[ 2995.327998][ T29] audit: type=1400 audit(2971.434:2504): avc: denied { ioctl } for pid=10503 comm="syz.4.9767" path="socket:[165969]" dev="sockfs" ino=165969 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 2995.375860][ T29] audit: type=1400 audit(2971.480:2505): avc: denied { mount } for pid=10503 comm="syz.4.9767" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2995.498190][T10487] delete_channel: no stack
[ 2995.557707][ T29] audit: type=1400 audit(2971.518:2506): avc: denied { remount } for pid=10503 comm="syz.4.9767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2995.596767][T10515] netlink: 'syz.4.9770': attribute type 12 has an invalid length.
[ 2995.597201][ T29] audit: type=1400 audit(2971.649:2507): avc: denied { unmount } for pid=7767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2995.745129][ T29] audit: type=1400 audit(2971.686:2508): avc: denied { create } for pid=10510 comm="syz.7.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2995.764996][ T29] audit: type=1400 audit(2971.686:2509): avc: denied { setopt } for pid=10510 comm="syz.7.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2995.784649][ T29] audit: type=1400 audit(2971.696:2510): avc: denied { write } for pid=10510 comm="syz.7.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2996.143940][T10526] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 2996.247287][T10529] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.9772'.
[ 2996.267925][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9772'.
[ 2996.284681][ T5866] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 2996.936799][ T5866] usb 8-1: Using ep0 maxpacket: 32
[ 2996.947226][ T5866] usb 8-1: config 0 has an invalid interface number: 202 but max is 0
[ 2996.955783][ T5866] usb 8-1: config 0 has no interface number 0
[ 2996.964173][ T5866] usb 8-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=c5.93
[ 2996.975023][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2996.983527][ T5866] usb 8-1: Product: syz
[ 2996.987799][ T5866] usb 8-1: Manufacturer: syz
[ 2996.992641][ T5866] usb 8-1: SerialNumber: syz
[ 2997.007299][ T5866] usb 8-1: config 0 descriptor??
[ 2997.018168][ T5866] usb 8-1: bad CDC descriptors
[ 2997.026103][ T5866] cdc_acm 8-1:0.202: Zero length descriptor references
[ 2997.070487][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9776'.
[ 2997.376401][ T5866] cdc_acm 8-1:0.202: probe with driver cdc_acm failed with error -22
[ 2997.484267][T10542] fuse: Unknown parameter 'grou00000000000000000000'
[ 2997.520451][ T9710] usb 8-1: USB disconnect, device number 20
[ 2997.540332][ T29] audit: type=1400 audit(2973.501:2511): avc: denied { listen } for pid=10543 comm="syz.4.9778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 2998.104439][T10556] FAULT_INJECTION: forcing a failure.
[ 2998.104439][T10556] name failslab, interval 1, probability 0, space 0, times 0
[ 2998.701856][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.8.9784 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 2998.712637][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 2998.722672][T10556] Call Trace:
[ 2998.725944][T10556] <TASK>
[ 2998.728853][T10556] dump_stack_lvl+0x16c/0x1f0
[ 2998.733527][T10556] should_fail_ex+0x497/0x5b0
[ 2998.738216][T10556] ? fs_reclaim_acquire+0xae/0x150
[ 2998.743340][T10556] should_failslab+0xc2/0x120
[ 2998.748016][T10556] __kmalloc_node_noprof+0xd1/0x510
[ 2998.753194][T10556] ? __fget_files+0x206/0x3a0
[ 2998.757846][T10556] ? __kvmalloc_node_noprof+0xad/0x1a0
[ 2998.763286][T10556] __kvmalloc_node_noprof+0xad/0x1a0
[ 2998.768554][T10556] __sys_bpf+0x23d8/0x49c0
[ 2998.772955][T10556] ? __pfx___sys_bpf+0x10/0x10
[ 2998.777701][T10556] ? vfs_write+0x306/0x1150
[ 2998.782185][T10556] ? __mutex_unlock_slowpath+0x164/0x690
[ 2998.787806][T10556] ? fput+0x67/0x440
[ 2998.791680][T10556] ? ksys_write+0x1ba/0x250
[ 2998.796158][T10556] ? __pfx_ksys_write+0x10/0x10
[ 2998.800984][T10556] __x64_sys_bpf+0x78/0xc0
[ 2998.805380][T10556] ? lockdep_hardirqs_on+0x7c/0x110
[ 2998.810553][T10556] do_syscall_64+0xcd/0x250
[ 2998.815034][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2998.820926][T10556] RIP: 0033:0x7f4aa8b85d29
[ 2998.825328][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2998.844926][T10556] RSP: 002b:00007f4aa99cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2998.853315][T10556] RAX: ffffffffffffffda RBX: 00007f4aa8d75fa0 RCX: 00007f4aa8b85d29
[ 2998.861261][T10556] RDX: 0000000000000020 RSI: 0000000020000380 RDI: 0000000000000004
[ 2998.869207][T10556] RBP: 00007f4aa99cd090 R08: 0000000000000000 R09: 0000000000000000
[ 2998.877153][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2998.885101][T10556] R13: 0000000000000000 R14: 00007f4aa8d75fa0 R15: 00007ffcbcea5288
[ 2998.893068][T10556] </TASK>
[ 2998.934567][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 2998.934577][ T29] audit: type=1400 audit(2974.810:2513): avc: denied { read } for pid=10560 comm="syz.4.9785" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2999.033890][ T29] audit: type=1400 audit(2974.810:2514): avc: denied { ioctl } for pid=10560 comm="syz.4.9785" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2999.117983][ T29] audit: type=1400 audit(2974.885:2515): avc: denied { read } for pid=10560 comm="syz.4.9785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2999.440502][ T29] audit: type=1400 audit(2975.297:2516): avc: denied { getopt } for pid=10563 comm="syz.5.9787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2999.530072][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9788'.
[ 2999.842514][T10572] binder: 10571:10572 ioctl c0306201 20000080 returned -11
[ 2999.961541][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9790'.
[ 3000.051011][ T5866] usb 6-1: new full-speed USB device number 98 using dummy_hcd
[ 3000.257326][T10573] delete_channel: no stack
[ 3001.395087][ T5866] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 3001.542159][ T5866] usb 6-1: config 0 has no interface number 0
[ 3001.562010][ T5866] usb 6-1: config 0 interface 55 has no altsetting 0
[ 3001.600998][ T5866] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice= d.df
[ 3001.610114][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3001.619384][ T5866] usb 6-1: Product: syz
[ 3001.626367][ T5866] usb 6-1: Manufacturer: syz
[ 3001.631110][ T5866] usb 6-1: SerialNumber: syz
[ 3001.637249][ T5866] usb 6-1: config 0 descriptor??
[ 3001.644714][ T5866] usb 6-1: bad CDC descriptors
[ 3001.649792][ T5866] usb 6-1: unsupported MDLM descriptors
[ 3001.809218][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9794'.
[ 3002.765166][ T4391] IPVS: starting estimator thread 0...
[ 3002.824168][ T4391] usb 6-1: USB disconnect, device number 98
[ 3002.893288][T10590] delete_channel: no stack
[ 3002.904476][T10603] IPVS: using max 62 ests per chain, 148800 per kthread
[ 3004.780135][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9801'.
[ 3005.206068][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9805'.
[ 3005.401764][T10426] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 3006.746472][T10629] delete_channel: no stack
[ 3006.772995][T10642] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 3006.895557][T10426] usb 9-1: device descriptor read/64, error -71
[ 3007.022612][ T29] audit: type=1400 audit(2982.378:2517): avc: denied { connect } for pid=10643 comm="syz.7.9809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 3007.230721][T10426] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 3008.775992][T10426] usb 9-1: device descriptor read/64, error -71
[ 3008.860552][T10665] binder: 10663:10665 ioctl c0306201 0 returned -14
[ 3008.874856][T10665] binder: 10663:10665 ioctl c0306201 20000080 returned -11
[ 3008.900315][T10426] usb usb9-port1: attempt power cycle
[ 3010.270151][T10679] FAULT_INJECTION: forcing a failure.
[ 3010.270151][T10679] name failslab, interval 1, probability 0, space 0, times 0
[ 3010.284631][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.4.9818 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3010.295400][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3010.298738][T10681] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9817'.
[ 3010.305431][T10679] Call Trace:
[ 3010.305441][T10679] <TASK>
[ 3010.305449][T10679] dump_stack_lvl+0x16c/0x1f0
[ 3010.305477][T10679] should_fail_ex+0x497/0x5b0
[ 3010.329851][T10679] ? fs_reclaim_acquire+0xae/0x150
[ 3010.334951][T10679] should_failslab+0xc2/0x120
[ 3010.339619][T10679] kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 3010.345417][T10679] ? __alloc_skb+0x2b1/0x380
[ 3010.349990][T10679] __alloc_skb+0x2b1/0x380
[ 3010.354386][T10679] ? __pfx___alloc_skb+0x10/0x10
[ 3010.359303][T10679] ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 3010.365261][T10679] netlink_alloc_large_skb+0x69/0x130
[ 3010.370613][T10679] netlink_sendmsg+0x689/0xd70
[ 3010.375354][T10679] ? __pfx_netlink_sendmsg+0x10/0x10
[ 3010.380622][T10679] ____sys_sendmsg+0xaaf/0xc90
[ 3010.385362][T10679] ? copy_msghdr_from_user+0x10b/0x160
[ 3010.390794][T10679] ? __pfx_____sys_sendmsg+0x10/0x10
[ 3010.396060][T10679] ___sys_sendmsg+0x135/0x1e0
[ 3010.400712][T10679] ? __pfx____sys_sendmsg+0x10/0x10
[ 3010.405885][T10679] ? __pfx_lock_release+0x10/0x10
[ 3010.410883][T10679] ? trace_lock_acquire+0x14e/0x1f0
[ 3010.416064][T10679] ? __fget_files+0x206/0x3a0
[ 3010.420718][T10679] __sys_sendmsg+0x16e/0x220
[ 3010.425283][T10679] ? __pfx___sys_sendmsg+0x10/0x10
[ 3010.430372][T10679] do_syscall_64+0xcd/0x250
[ 3010.434854][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3010.440730][T10679] RIP: 0033:0x7fc8b1785d29
[ 3010.445121][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3010.464703][T10679] RSP: 002b:00007fc8b254d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3010.473087][T10679] RAX: ffffffffffffffda RBX: 00007fc8b1975fa0 RCX: 00007fc8b1785d29
[ 3010.481032][T10679] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[ 3010.488993][T10679] RBP: 00007fc8b254d090 R08: 0000000000000000 R09: 0000000000000000
[ 3010.496937][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3010.504882][T10679] R13: 0000000000000000 R14: 00007fc8b1975fa0 R15: 00007ffc5efcf5d8
[ 3010.512834][T10679] </TASK>
[ 3011.553185][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9820'.
[ 3011.580140][ T29] audit: type=1400 audit(2986.643:2518): avc: denied { block_suspend } for pid=10692 comm="syz.7.9823" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 3011.601106][ C1] vkms_vblank_simulate: vblank timer overrun
[ 3011.989426][T10683] delete_channel: no stack
[ 3012.096266][ T4391] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 3012.271357][ T4391] usb 9-1: device descriptor read/64, error -71
[ 3012.968760][T10716] IPv6: NLM_F_CREATE should be specified when creating new route
[ 3012.971087][ T4391] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 3013.122892][ T4391] usb 9-1: device descriptor read/64, error -71
[ 3013.262508][ T4391] usb usb9-port1: attempt power cycle
[ 3013.657146][ T4391] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 3013.700209][ T4391] usb 9-1: device descriptor read/8, error -71
[ 3014.929105][ T4391] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 3015.238587][ T4391] usb 9-1: device descriptor read/8, error -71
[ 3015.424431][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9833'.
[ 3015.434028][ T4391] usb usb9-port1: unable to enumerate USB device
[ 3015.696444][T10744] FAULT_INJECTION: forcing a failure.
[ 3015.696444][T10744] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.717611][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.4.9834 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3015.728382][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3015.738413][T10744] Call Trace:
[ 3015.741669][T10744] <TASK>
[ 3015.744589][T10744] dump_stack_lvl+0x16c/0x1f0
[ 3015.749247][T10744] should_fail_ex+0x497/0x5b0
[ 3015.753916][T10744] ? fs_reclaim_acquire+0xae/0x150
[ 3015.759045][T10744] should_failslab+0xc2/0x120
[ 3015.763725][T10744] __kmalloc_noprof+0xcb/0x510
[ 3015.768468][T10744] ? rcu_is_watching+0x12/0xc0
[ 3015.773209][T10744] tomoyo_encode2+0x100/0x3e0
[ 3015.777865][T10744] tomoyo_encode+0x29/0x50
[ 3015.782257][T10744] tomoyo_realpath_from_path+0x19d/0x720
[ 3015.787865][T10744] ? tomoyo_path_number_perm+0x235/0x590
[ 3015.793470][T10744] tomoyo_path_number_perm+0x248/0x590
[ 3015.798900][T10744] ? tomoyo_path_number_perm+0x235/0x590
[ 3015.804505][T10744] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3015.810471][T10744] ? __pfx_lock_release+0x10/0x10
[ 3015.815469][T10744] ? trace_lock_acquire+0x14e/0x1f0
[ 3015.820646][T10744] ? lock_acquire+0x2f/0xb0
[ 3015.825120][T10744] ? __fget_files+0x40/0x3a0
[ 3015.829685][T10744] ? __fget_files+0x206/0x3a0
[ 3015.834335][T10744] security_file_ioctl+0x9b/0x240
[ 3015.839336][T10744] __x64_sys_ioctl+0xb7/0x200
[ 3015.843991][T10744] do_syscall_64+0xcd/0x250
[ 3015.848481][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3015.854368][T10744] RIP: 0033:0x7fc8b1785d29
[ 3015.858758][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3015.878342][T10744] RSP: 002b:00007fc8b252c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3015.886729][T10744] RAX: ffffffffffffffda RBX: 00007fc8b1976080 RCX: 00007fc8b1785d29
[ 3015.894675][T10744] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004
[ 3015.902635][T10744] RBP: 00007fc8b252c090 R08: 0000000000000000 R09: 0000000000000000
[ 3015.910595][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.918567][T10744] R13: 0000000000000001 R14: 00007fc8b1976080 R15: 00007ffc5efcf5d8
[ 3015.926548][T10744] </TASK>
[ 3015.979914][T10744] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3016.236500][T10731] lo speed is unknown, defaulting to 1000
[ 3017.841610][T10774] FAULT_INJECTION: forcing a failure.
[ 3017.841610][T10774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3017.854880][T10774] CPU: 1 UID: 0 PID: 10774 Comm: syz.6.9841 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3017.865642][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3017.875697][T10774] Call Trace:
[ 3017.878979][T10774] <TASK>
[ 3017.881905][T10774] dump_stack_lvl+0x16c/0x1f0
[ 3017.886587][T10774] should_fail_ex+0x497/0x5b0
[ 3017.891274][T10774] _copy_to_user+0x32/0xd0
[ 3017.895691][T10774] simple_read_from_buffer+0xd0/0x160
[ 3017.901074][T10774] proc_fail_nth_read+0x198/0x270
[ 3017.906101][T10774] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3017.911652][T10774] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3017.917200][T10774] vfs_read+0x1df/0xbe0
[ 3017.921355][T10774] ? __fget_files+0x1fc/0x3a0
[ 3017.926031][T10774] ? __pfx___mutex_lock+0x10/0x10
[ 3017.931057][T10774] ? __pfx_vfs_read+0x10/0x10
[ 3017.935826][T10774] ? __fget_files+0x206/0x3a0
[ 3017.940512][T10774] ksys_read+0x12b/0x250
[ 3017.944751][T10774] ? __pfx_ksys_read+0x10/0x10
[ 3017.949528][T10774] do_syscall_64+0xcd/0x250
[ 3017.954035][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3017.959945][T10774] RIP: 0033:0x7fd08738473c
[ 3017.964362][T10774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3017.983977][T10774] RSP: 002b:00007fd0880ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3017.992393][T10774] RAX: ffffffffffffffda RBX: 00007fd087576160 RCX: 00007fd08738473c
[ 3018.000367][T10774] RDX: 000000000000000f RSI: 00007fd0880ce0a0 RDI: 0000000000000008
[ 3018.008336][T10774] RBP: 00007fd0880ce090 R08: 0000000000000000 R09: 0000000000000000
[ 3018.016301][T10774] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 3018.024267][T10774] R13: 0000000000000000 R14: 00007fd087576160 R15: 00007ffc772ed328
[ 3018.032250][T10774] </TASK>
[ 3018.127186][ T29] audit: type=1400 audit(2992.761:2519): avc: denied { ioctl } for pid=10776 comm="syz.6.9844" path="socket:[166455]" dev="sockfs" ino=166455 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 3018.211163][ T29] audit: type=1400 audit(2992.817:2520): avc: denied { shutdown } for pid=10777 comm="syz.5.9843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 3018.392861][T10426] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 3018.553487][T10426] usb 8-1: device descriptor read/64, error -71
[ 3019.325069][T10426] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 3019.579442][T10426] usb 8-1: device descriptor read/64, error -71
[ 3019.697455][T10426] usb usb8-port1: attempt power cycle
[ 3019.868144][ T3883] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 3020.103358][T10426] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 3020.425174][T10426] usb 8-1: device descriptor read/8, error -71
[ 3020.713359][T10426] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 3020.811416][ T3883] usb 5-1: Using ep0 maxpacket: 8
[ 3020.906362][ T3883] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 3020.925385][ T3883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3020.925909][T10426] usb 8-1: device descriptor read/8, error -71
[ 3020.955229][ T3883] usb 5-1: config 0 has no interface number 0
[ 3021.059973][T10426] usb usb8-port1: unable to enumerate USB device
[ 3021.475261][ T3883] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 3021.486320][ T3883] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 3021.496274][ T3883] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3021.509174][ T3883] usb 5-1: config 0 interface 52 has no altsetting 0
[ 3021.548816][ T3883] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 3021.558157][ T3883] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 3021.566261][ T3883] usb 5-1: Manufacturer: syz
[ 3021.719583][ T3883] usb 5-1: config 0 descriptor??
[ 3021.873948][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9853'.
[ 3022.075888][ T3883] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 3022.086812][ T3883] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5
[ 3022.209669][T22147] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 3022.235061][ T29] audit: type=1400 audit(2996.615:2521): avc: denied { write } for pid=10804 comm="syz.8.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 3022.347549][T10795] netlink: 'syz.4.9849': attribute type 7 has an invalid length.
[ 3022.357383][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9849'.
[ 3022.373813][ T29] audit: type=1400 audit(2996.746:2522): avc: denied { setopt } for pid=10794 comm="syz.4.9849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 3022.399666][T22147] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 3022.408764][T22147] usb 6-1: config 0 has no interface number 0
[ 3022.415930][T22147] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 3022.426887][T22147] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3022.523530][ T3883] usb 5-1: USB disconnect, device number 121
[ 3022.544155][T22147] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 3022.554077][T22147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3022.562305][T22147] usb 6-1: Product: syz
[ 3022.566601][T22147] usb 6-1: Manufacturer: syz
[ 3022.571204][T22147] usb 6-1: SerialNumber: syz
[ 3022.578933][T22147] usb 6-1: config 0 descriptor??
[ 3022.584431][ T29] audit: type=1400 audit(2996.942:2523): avc: denied { write } for pid=10818 comm="syz.7.9856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 3022.604364][T10816] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3022.615579][T22147] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 3022.649190][T22147] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3022.790686][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9857'.
[ 3023.603553][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9860'.
[ 3024.782650][ T3883] usb 6-1: USB disconnect, device number 99
[ 3024.793524][ T3883] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3024.816157][ T3883] cyberjack 6-1:0.69: device disconnected
[ 3026.243708][T22147] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 3026.702908][T10860] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.9868'.
[ 3026.754199][T22147] usb 9-1: device descriptor read/64, error -71
[ 3027.165270][T10875] netlink: 'syz.5.9876': attribute type 2 has an invalid length.
[ 3027.280876][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9877'.
[ 3028.292485][T22147] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 3029.073662][ T29] audit: type=1400 audit(3002.994:2524): avc: denied { accept } for pid=10869 comm="syz.7.9873" lport=33949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 3030.056232][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9880'.
[ 3030.221408][T10895] delete_channel: no stack
[ 3030.354998][T10913] lo speed is unknown, defaulting to 1000
[ 3030.816098][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9881'.
[ 3031.116896][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9883'.
[ 3031.307063][ T3883] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 3031.520981][ T3883] usb 5-1: Using ep0 maxpacket: 16
[ 3031.570665][ T3883] usb 5-1: config 0 interface 0 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3031.595866][ T3883] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3031.605247][ T3883] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 3031.616193][T10910] delete_channel: no stack
[ 3031.716599][ T3883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3032.376201][ T3883] usb 5-1: config 0 descriptor??
[ 3032.579319][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9886'.
[ 3034.473911][ T3883] usbhid 5-1:0.0: can't add hid device: -71
[ 3034.479942][ T3883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 3034.489436][ T3883] usb 5-1: USB disconnect, device number 122
[ 3035.327659][ T29] audit: type=1400 audit(3008.868:2525): avc: denied { create } for pid=10957 comm="syz.6.9893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 3035.455474][ T29] audit: type=1400 audit(3008.887:2526): avc: denied { ioctl } for pid=10957 comm="syz.6.9893" path="socket:[166909]" dev="sockfs" ino=166909 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 3037.023423][ T29] audit: type=1400 audit(3010.430:2527): avc: denied { create } for pid=10977 comm="syz.6.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 3037.105509][T10979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10979 comm=syz.6.9899
[ 3037.350851][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9901'.
[ 3037.369180][ T29] audit: type=1400 audit(3010.767:2528): avc: denied { write } for pid=10977 comm="syz.6.9899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 3037.456576][T12747] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 3039.102736][T11001] lo speed is unknown, defaulting to 1000
[ 3039.386644][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9904'.
[ 3039.400197][T12747] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3039.408941][T12747] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3039.419323][T12747] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3039.470997][T12747] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 3039.482041][T12747] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 3039.585254][T12747] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3039.598390][T12747] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3039.608314][T12747] usb 9-1: Product: syz
[ 3039.612449][T12747] usb 9-1: Manufacturer: syz
[ 3041.055088][T12747] usb 9-1: can't set config #1, error -71
[ 3041.137848][T12747] usb 9-1: USB disconnect, device number 28
[ 3041.379780][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9908'.
[ 3041.468200][T11011] delete_channel: no stack
[ 3041.478315][ T29] audit: type=1400 audit(3014.612:2529): avc: denied { append } for pid=11024 comm="syz.8.9911" name="loop6" dev="devtmpfs" ino=3802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 3041.887352][ T29] audit: type=1400 audit(3014.995:2530): avc: denied { cmd } for pid=11030 comm="syz.8.9915" path="socket:[168046]" dev="sockfs" ino=168046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 3044.482547][T11050] lo speed is unknown, defaulting to 1000
[ 3044.674341][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9917'.
[ 3045.225012][ T29] audit: type=1400 audit(3018.110:2531): avc: denied { listen } for pid=11055 comm="syz.8.9919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 3048.294709][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 3048.749827][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9928'.
[ 3052.342100][T11124] lo speed is unknown, defaulting to 1000
[ 3053.193323][T11132] binder: 11131:11132 ioctl c0306201 0 returned -14
[ 3054.769926][T11149] lo speed is unknown, defaulting to 1000
[ 3055.269624][T11150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9940'.
[ 3058.681175][ T29] audit: type=1400 audit(3030.701:2532): avc: denied { write } for pid=11188 comm="syz.5.9952" lport=58093 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 3058.711145][T11189] FAULT_INJECTION: forcing a failure.
[ 3058.711145][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3058.747174][ T29] audit: type=1400 audit(3030.701:2533): avc: denied { setopt } for pid=11188 comm="syz.5.9952" lport=58093 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 3058.770761][T11189] CPU: 1 UID: 0 PID: 11189 Comm: syz.5.9952 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3058.781542][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3058.791598][T11189] Call Trace:
[ 3058.794875][T11189] <TASK>
[ 3058.797806][T11189] dump_stack_lvl+0x16c/0x1f0
[ 3058.802495][T11189] should_fail_ex+0x497/0x5b0
[ 3058.807187][T11189] _copy_to_user+0x32/0xd0
[ 3058.811620][T11189] simple_read_from_buffer+0xd0/0x160
[ 3058.817006][T11189] proc_fail_nth_read+0x198/0x270
[ 3058.822037][T11189] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3058.827596][T11189] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3058.833149][T11189] vfs_read+0x1df/0xbe0
[ 3058.837313][T11189] ? __fget_files+0x1fc/0x3a0
[ 3058.841989][T11189] ? __pfx___mutex_lock+0x10/0x10
[ 3058.847109][T11189] ? __pfx_vfs_read+0x10/0x10
[ 3058.851794][T11189] ? __fget_files+0x206/0x3a0
[ 3058.856480][T11189] ksys_read+0x12b/0x250
[ 3058.860723][T11189] ? __pfx_ksys_read+0x10/0x10
[ 3058.865496][T11189] do_syscall_64+0xcd/0x250
[ 3058.870009][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3058.875918][T11189] RIP: 0033:0x7f26f838473c
[ 3058.880338][T11189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3058.899974][T11189] RSP: 002b:00007f26f925a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3058.908392][T11189] RAX: ffffffffffffffda RBX: 00007f26f8575fa0 RCX: 00007f26f838473c
[ 3058.916362][T11189] RDX: 000000000000000f RSI: 00007f26f925a0a0 RDI: 0000000000000005
[ 3058.924342][T11189] RBP: 00007f26f925a090 R08: 0000000000000000 R09: 0000000000000000
[ 3058.932327][T11189] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001
[ 3058.940306][T11189] R13: 0000000000000000 R14: 00007f26f8575fa0 R15: 00007ffcaa98e328
[ 3058.948391][T11189] </TASK>
[ 3060.001401][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9956'.
[ 3060.195372][T11208] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9957'.
[ 3060.232467][T11203] delete_channel: no stack
[ 3060.591382][T11219] bond0: (slave bond_slave_1): Releasing backup interface
[ 3060.646425][T11220] netlink: 'syz.4.9960': attribute type 1 has an invalid length.
[ 3060.672349][T23486] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 3060.705386][T11219] bridge0: port 3(bond_slave_1) entered blocking state
[ 3060.713019][T11219] bridge0: port 3(bond_slave_1) entered disabled state
[ 3060.722860][T11219] bond_slave_1: entered allmulticast mode
[ 3060.736937][T11219] bond_slave_1: entered promiscuous mode
[ 3060.828842][ T29] audit: type=1400 audit(3032.712:2534): avc: denied { read } for pid=11214 comm="syz.8.9961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 3060.866607][T23486] usb 8-1: Using ep0 maxpacket: 8
[ 3060.944700][T23486] usb 8-1: no configurations
[ 3060.984712][T12747] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 3061.018782][T23486] usb 8-1: can't read configurations, error -22
[ 3061.179204][T12747] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3061.190803][T12747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3061.226792][T12747] usb 5-1: Product: syz
[ 3061.240851][T12747] usb 5-1: Manufacturer: syz
[ 3061.251722][T23486] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 3061.262223][T12747] usb 5-1: SerialNumber: syz
[ 3061.287627][T12747] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3061.479899][T23486] usb 8-1: Using ep0 maxpacket: 8
[ 3061.658071][T23486] usb 8-1: no configurations
[ 3061.662768][T23486] usb 8-1: can't read configurations, error -22
[ 3061.778764][T23486] usb usb8-port1: attempt power cycle
[ 3061.926494][T22822] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3062.129036][T11233] lo speed is unknown, defaulting to 1000
[ 3062.517376][T11229] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9964'.
[ 3062.625635][T23486] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 3062.708487][T23486] usb 8-1: Using ep0 maxpacket: 8
[ 3062.746237][T23486] usb 8-1: no configurations
[ 3062.755866][T23486] usb 8-1: can't read configurations, error -22
[ 3062.897785][T23486] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 3062.944419][T23486] usb 8-1: Using ep0 maxpacket: 8
[ 3062.968807][T23486] usb 8-1: no configurations
[ 3062.973826][T23486] usb 8-1: can't read configurations, error -22
[ 3062.981569][T23486] usb usb8-port1: unable to enumerate USB device
[ 3063.057827][T22147] usb 5-1: USB disconnect, device number 123
[ 3063.087359][T22822] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 3063.099599][T22822] ath9k_htc: Failed to initialize the device
[ 3063.110401][T22147] usb 5-1: ath9k_htc: USB layer deinitialized
[ 3063.118635][ T29] audit: type=1400 audit(3034.835:2535): avc: denied { bind } for pid=11238 comm="syz.8.9966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 3063.570012][T11249] lo speed is unknown, defaulting to 1000
[ 3064.072853][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9967'.
[ 3065.892638][T11276] fuse: Invalid rootmode
[ 3066.694194][T11288] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 3069.339988][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9984'.
[ 3069.349115][T11299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3069.356311][T11299] IPv6: NLM_F_CREATE should be set when creating new route
[ 3069.363501][T11299] IPv6: NLM_F_CREATE should be set when creating new route
[ 3069.690174][T11324] fuse: Invalid rootmode
[ 3069.883666][T11328] lo speed is unknown, defaulting to 1000
[ 3070.356362][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9988'.
[ 3070.584787][T10426] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 3071.386263][T10426] usb 6-1: Using ep0 maxpacket: 32
[ 3071.399526][T10426] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[ 3071.408845][T10426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3071.416887][T10426] usb 6-1: Product: syz
[ 3071.424234][T10426] usb 6-1: Manufacturer: syz
[ 3071.446846][T10426] usb 6-1: SerialNumber: syz
[ 3071.447048][T11338] delete_channel: no stack
[ 3071.458147][T10426] usb 6-1: config 0 descriptor??
[ 3071.603421][ T29] audit: type=1400 audit(3042.795:2536): avc: denied { accept } for pid=11344 comm="syz.4.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 3071.924165][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9999'.
[ 3071.935883][T11348] delete_channel: no stack
[ 3072.439860][T10426] rtl8150 6-1:0.0: eth9: rtl8150 is detected
[ 3073.145105][ T29] audit: type=1400 audit(3044.236:2537): avc: denied { connect } for pid=11314 comm="syz.5.9987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 3073.179200][T22147] usb 6-1: USB disconnect, device number 100
[ 3073.409607][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10002'.
[ 3073.419307][T11369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3073.426549][T11369] IPv6: NLM_F_CREATE should be set when creating new route
[ 3073.433859][T11369] IPv6: NLM_F_CREATE should be set when creating new route
[ 3074.055123][T11378] @: renamed from vlan0 (while UP)
[ 3074.077260][ T29] audit: type=1400 audit(3045.096:2538): avc: denied { bind } for pid=11379 comm="syz.6.10005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 3074.122901][ T29] audit: type=1400 audit(3045.096:2539): avc: denied { connect } for pid=11379 comm="syz.6.10005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 3074.349747][T11390] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10010'.
[ 3074.360633][T11390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3074.547901][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10011'.
[ 3076.047648][T11385] delete_channel: no stack
[ 3076.327535][ T29] audit: type=1400 audit(3047.201:2540): avc: denied { create } for pid=11409 comm="syz.4.10016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 3076.358055][T11404] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10014'.
[ 3076.374059][T11410] veth0_vlan: entered allmulticast mode
[ 3076.539337][T10426] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 3076.663884][T11412] veth0_vlan: left promiscuous mode
[ 3076.733627][T11412] veth0_vlan: entered promiscuous mode
[ 3076.770129][T10426] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 3076.781702][T10426] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 3076.796733][T10426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.819584][T10426] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 3077.384450][ T29] audit: type=1400 audit(3048.034:2541): avc: denied { connect } for pid=11417 comm="syz.8.10018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 3077.584762][ T29] audit: type=1400 audit(3048.043:2542): avc: denied { map } for pid=11417 comm="syz.8.10018" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 3077.633425][ T29] audit: type=1400 audit(3048.043:2543): avc: denied { execute } for pid=11417 comm="syz.8.10018" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 3077.854159][T12747] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 3078.083168][T10426] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 3078.135308][T10426] stv0680 8-1:4.0: STV(e): camera ping failed!!
[ 3078.185426][T12747] usb 5-1: Using ep0 maxpacket: 8
[ 3078.190877][T10426] stv0680 8-1:4.0: last error: 0, command = 0x0
[ 3078.198122][T12747] usb 5-1: config 0 has an invalid interface number: 227 but max is 0
[ 3078.217147][T12747] usb 5-1: config 0 has no interface number 0
[ 3078.227930][T12747] usb 5-1: config 0 interface 227 has no altsetting 0
[ 3078.236680][T12747] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=aa.bf
[ 3078.256478][T12747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3078.270960][T12747] usb 5-1: Product: syz
[ 3078.286523][T12747] usb 5-1: Manufacturer: syz
[ 3078.291174][T12747] usb 5-1: SerialNumber: syz
[ 3078.315459][T12747] usb 5-1: config 0 descriptor??
[ 3078.349296][T12747] mvusb_mdio 5-1:0.227: probe with driver mvusb_mdio failed with error -5
[ 3078.363992][T11433] netlink: 156 bytes leftover after parsing attributes in process `syz.8.10022'.
[ 3078.398692][T11433] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[ 3078.413171][T10426] usb 8-1: USB disconnect, device number 29
[ 3078.543578][T12747] usb 5-1: USB disconnect, device number 124
[ 3078.646411][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10024'.
[ 3078.946527][T11439] delete_channel: no stack
[ 3079.141518][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10026'.
[ 3079.390376][T11446] delete_channel: no stack
[ 3081.351319][T11471] lo speed is unknown, defaulting to 1000
[ 3081.656490][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10033'.
[ 3083.716435][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10042'.
[ 3084.184883][T11502] delete_channel: no stack
[ 3085.326779][ T5866] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 3085.722281][ T29] audit: type=1400 audit(3055.994:2544): avc: denied { connect } for pid=11512 comm="syz.4.10045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 3085.828940][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10050'.
[ 3085.838800][T11530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3085.846042][T11530] IPv6: NLM_F_CREATE should be set when creating new route
[ 3085.853334][T11530] IPv6: NLM_F_CREATE should be set when creating new route
[ 3085.958959][ T5866] usb 9-1: config 0 has an invalid interface number: 69 but max is 0
[ 3085.967175][ T5866] usb 9-1: config 0 has no interface number 0
[ 3085.986507][ T5866] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 3086.023972][ T5866] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3086.061037][ T5866] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 3086.078027][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3086.105878][ T5866] usb 9-1: Product: syz
[ 3086.139823][ T5866] usb 9-1: Manufacturer: syz
[ 3086.155199][ T5866] usb 9-1: SerialNumber: syz
[ 3086.167557][ T5866] usb 9-1: config 0 descriptor??
[ 3086.193816][T11519] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 3086.202663][ T5866] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 3086.241024][ T5866] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3087.221589][T23486] usb 9-1: USB disconnect, device number 29
[ 3087.237146][T23486] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3087.249906][T23486] cyberjack 9-1:0.69: device disconnected
[ 3087.332500][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10056'.
[ 3088.188067][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10060'.
[ 3088.241237][T11576] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 3088.743248][ T29] audit: type=1326 audit(3058.529:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3088.768376][ T29] audit: type=1326 audit(3058.529:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3088.791690][ T29] audit: type=1326 audit(3058.529:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3088.814907][ T29] audit: type=1326 audit(3058.529:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3088.854040][ T29] audit: type=1326 audit(3058.529:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3089.199130][ T29] audit: type=1326 audit(3058.529:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3089.222334][ T29] audit: type=1326 audit(3058.529:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3089.246090][ T29] audit: type=1326 audit(3058.529:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3089.269868][ T29] audit: type=1326 audit(3058.529:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.6.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd087385d29 code=0x7fc00000
[ 3089.596418][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10068'.
[ 3089.998046][T11590] delete_channel: no stack
[ 3090.180413][T11562] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 3090.348135][T11562] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[ 3090.361850][T11562] usb 5-1: config 0 has no interface number 0
[ 3090.372903][T11562] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 3090.382915][T11562] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3090.533181][T11562] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 3090.605109][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10072'.
[ 3091.062798][T11562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3091.078225][T11562] usb 5-1: Product: syz
[ 3091.082425][T11562] usb 5-1: Manufacturer: syz
[ 3091.087009][T11562] usb 5-1: SerialNumber: syz
[ 3091.108606][T11562] usb 5-1: config 0 descriptor??
[ 3091.114932][T11582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 3091.126496][T11562] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 3091.144650][T11562] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3093.368427][ T2494] usb 5-1: USB disconnect, device number 125
[ 3093.387616][ T2494] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3093.424425][ T2494] cyberjack 5-1:0.69: device disconnected
[ 3094.434532][ T29] kauditd_printk_skb: 57 callbacks suppressed
[ 3094.434566][ T29] audit: type=1326 audit(3064.113:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.703448][ T29] audit: type=1326 audit(3064.122:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.726498][ T29] audit: type=1326 audit(3064.122:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.749742][ T29] audit: type=1326 audit(3064.122:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.773149][ T29] audit: type=1326 audit(3064.122:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.796302][ T29] audit: type=1326 audit(3064.122:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.819558][ T29] audit: type=1326 audit(3064.122:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.820146][ T5866] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 3094.842751][ T29] audit: type=1326 audit(3064.122:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.842787][ T29] audit: type=1326 audit(3064.122:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.842816][ T29] audit: type=1326 audit(3064.122:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.7.10077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7fc00000
[ 3094.966595][T11641] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 3095.192631][ T5866] usb 9-1: config 0 has an invalid interface number: 20 but max is 0
[ 3095.235549][ T5866] usb 9-1: config 0 has no interface number 0
[ 3095.272809][ T5866] usb 9-1: config 0 interface 20 altsetting 85 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3095.715278][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10086'.
[ 3095.802221][ T5866] usb 9-1: config 0 interface 20 has no altsetting 0
[ 3095.810264][T11649] delete_channel: no stack
[ 3095.814935][ T5866] usb 9-1: New USB device found, idVendor=0458, idProduct=4e83, bcdDevice=54.35
[ 3095.823968][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3095.859581][ T5866] usb 9-1: config 0 descriptor??
[ 3096.111863][T11656] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 3097.016840][T11662] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10088'.
[ 3097.214887][ T5866] hid-generic 0003:0458:4E83.0032: unknown main item tag 0x0
[ 3097.222318][ T5866] hid-generic 0003:0458:4E83.0032: unknown main item tag 0x0
[ 3097.229861][ T5866] hid-generic 0003:0458:4E83.0032: unknown main item tag 0x0
[ 3097.237590][ T5866] hid-generic 0003:0458:4E83.0032: unknown main item tag 0x0
[ 3097.244987][ T5866] hid-generic 0003:0458:4E83.0032: unknown main item tag 0x0
[ 3097.270511][ T5866] hid-generic 0003:0458:4E83.0032: hidraw0: USB HID v0.00 Device [HID 0458:4e83] on usb-dummy_hcd.8-1/input20
[ 3097.556906][T12747] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 3097.834577][T28318] usb 9-1: USB disconnect, device number 30
[ 3097.989605][T12747] usb 6-1: Using ep0 maxpacket: 8
[ 3098.071848][T12747] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 3098.108695][T12747] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 3098.122088][T12747] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3098.138853][T12747] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3098.159531][T12747] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3098.175267][T12747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3098.202564][T12747] usb 6-1: Product: syz
[ 3098.218329][T12747] usb 6-1: Manufacturer: syz
[ 3098.231878][T12747] usb 6-1: SerialNumber: syz
[ 3098.255711][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10093'.
[ 3098.294691][T28318] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 3098.333545][T11682] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10094'.
[ 3098.454871][T28318] usb 9-1: Using ep0 maxpacket: 8
[ 3098.468692][T11679] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[ 3098.471179][T28318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3098.496529][T28318] usb 9-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 3098.506774][T28318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3098.514924][T28318] usb 9-1: Product: syz
[ 3098.519385][T28318] usb 9-1: Manufacturer: syz
[ 3098.524084][T28318] usb 9-1: SerialNumber: syz
[ 3098.561071][T28318] usb 9-1: config 0 descriptor??
[ 3098.571731][T28318] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 3098.578226][T28318] usb 9-1: selecting invalid altsetting 1
[ 3098.679616][T12747] usb 6-1: 0:2 : does not exist
[ 3098.707207][T12747] usb 6-1: USB disconnect, device number 101
[ 3099.051793][T11691] lo speed is unknown, defaulting to 1000
[ 3099.129809][T28318] gspca_stk014: reg_r err -110
[ 3099.145594][T28318] stk014 9-1:0.0: probe with driver stk014 failed with error -110
[ 3099.189745][T10426] usb 9-1: USB disconnect, device number 31
[ 3099.355729][ T8426] udevd[8426]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3099.460739][T11698] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 3101.608599][ T2494] usb 6-1: new full-speed USB device number 102 using dummy_hcd
[ 3101.876820][ T2494] usb 6-1: not running at top speed; connect to a high speed hub
[ 3102.070363][ T2494] usb 6-1: config 92 has an invalid interface number: 189 but max is 0
[ 3102.078681][ T2494] usb 6-1: config 92 has no interface number 0
[ 3102.132358][ T2494] usb 6-1: config 92 interface 189 has no altsetting 0
[ 3102.133205][T11720] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10105'.
[ 3102.165493][ T2494] usb 6-1: New USB device found, idVendor=12d1, idProduct=f86f, bcdDevice=e9.e2
[ 3102.175364][ T2494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3102.183788][ T2494] usb 6-1: Product: syz
[ 3102.188365][ T2494] usb 6-1: Manufacturer: syz
[ 3102.192960][ T2494] usb 6-1: SerialNumber: syz
[ 3102.347350][T11731] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[ 3103.251398][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10101'.
[ 3103.255826][ T2494] option 6-1:92.189: GSM modem (1-port) converter detected
[ 3103.270332][ T2494] usb 6-1: USB disconnect, device number 102
[ 3103.277902][ T2494] option 6-1:92.189: device disconnected
[ 3103.560082][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10110'.
[ 3104.049048][T11741] delete_channel: no stack
[ 3104.186218][T11748] lo speed is unknown, defaulting to 1000
[ 3105.178755][T11759] lo speed is unknown, defaulting to 1000
[ 3105.786886][T11769] lo speed is unknown, defaulting to 1000
[ 3105.909004][ T29] kauditd_printk_skb: 3057 callbacks suppressed
[ 3105.909019][ T29] audit: type=1400 audit(3074.870:5678): avc: denied { mount } for pid=11756 comm="syz.8.10113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 3105.969789][ T29] audit: type=1400 audit(3074.908:5679): avc: denied { mounton } for pid=11756 comm="syz.8.10113" path="/436/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 3105.992864][T11780] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 3106.011903][T11780] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 3106.028033][ T29] audit: type=1400 audit(3074.917:5680): avc: denied { read } for pid=11756 comm="syz.8.10113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 3106.055649][ T29] audit: type=1400 audit(3074.917:5681): avc: denied { open } for pid=11756 comm="syz.8.10113" path="/436/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 3106.082827][T11780] bridge0: port 3(vlan2) entered blocking state
[ 3106.112750][T11780] bridge0: port 3(vlan2) entered disabled state
[ 3106.123423][ T29] audit: type=1400 audit(3074.936:5682): avc: denied { bind } for pid=11779 comm="syz.4.10117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 3106.128655][T11780] vlan2: entered allmulticast mode
[ 3106.146851][ T29] audit: type=1400 audit(3074.936:5683): avc: denied { write } for pid=11779 comm="syz.4.10117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 3106.207037][T11780] vlan2: left allmulticast mode
[ 3106.254823][ T29] audit: type=1400 audit(3075.207:5684): avc: denied { unmount } for pid=2918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 3106.280584][ T5866] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 3106.405116][T11784] input: syz1 as /devices/virtual/input/input60
[ 3107.044588][ T29] audit: type=1326 audit(3075.946:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.7.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7ffc0000
[ 3107.621093][ T29] audit: type=1326 audit(3075.974:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.7.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411585d29 code=0x7ffc0000
[ 3107.667399][ T29] audit: type=1326 audit(3075.974:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.7.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd411585d29 code=0x7ffc0000
[ 3107.893315][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10123'.
[ 3108.166107][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10121'.
[ 3108.812663][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10124'.
[ 3108.834128][T11803] delete_channel: no stack
[ 3109.658238][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10125'.
[ 3109.673367][T11813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3109.842214][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10122'.
[ 3110.411879][T12747] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 3110.718718][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10130'.
[ 3110.935830][T11828] delete_channel: no stack
[ 3110.985635][T11839] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[ 3110.994987][T10426] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 3111.035480][T12747] usb 9-1: device descriptor read/all, error -71
[ 3111.074003][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10127'.
[ 3111.155455][T10426] usb 6-1: Using ep0 maxpacket: 8
[ 3111.163059][T10426] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 3111.183596][T10426] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 3111.215382][T10426] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 3111.231782][T10426] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3111.286115][T10426] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3111.386914][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10136'.
[ 3111.397379][T11852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3111.404707][T11852] IPv6: NLM_F_CREATE should be set when creating new route
[ 3111.412004][T11852] IPv6: NLM_F_CREATE should be set when creating new route
[ 3111.519286][T10426] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3111.529318][T10426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3111.953591][T10426] usb 6-1: usb_control_msg returned -32
[ 3111.961921][ T29] kauditd_printk_skb: 34 callbacks suppressed
[ 3111.961932][ T29] audit: type=1400 audit(3080.548:5722): avc: denied { setopt } for pid=11829 comm="syz.5.10129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 3112.108090][T10426] usbtmc 6-1:16.0: can't read capabilities
[ 3112.937982][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10140'.
[ 3112.947317][T11866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3113.167886][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 3113.491933][T11875] fuse: Unknown parameter 'user_id00000000000000000000'
[ 3113.808543][ T9710] usb 6-1: USB disconnect, device number 103
[ 3115.438006][T11891] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10148'.
[ 3115.564083][T11899] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[ 3115.730906][ T9710] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 3115.912590][ T9710] usb 6-1: Using ep0 maxpacket: 32
[ 3116.009397][ T9710] usb 6-1: config 0 has an invalid interface number: 110 but max is 0
[ 3116.017612][ T9710] usb 6-1: config 0 has no interface number 0
[ 3116.017644][ T9710] usb 6-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3116.737959][ T9710] usb 6-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16
[ 3116.750022][ T9710] usb 6-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9
[ 3116.759213][ T9710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3116.767314][ T9710] usb 6-1: Product: syz
[ 3116.781277][ T9710] usb 6-1: Manufacturer: syz
[ 3116.786163][ T9710] usb 6-1: SerialNumber: syz
[ 3116.798766][ T9710] usb 6-1: config 0 descriptor??
[ 3116.809993][T11884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3116.824866][ T9710] spcp8x5 6-1:0.110: required endpoints missing
[ 3117.104207][T11920] fuse: Bad value for 'fd'
[ 3117.193667][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10154'.
[ 3117.515810][T11925] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3117.901080][ T29] audit: type=1400 audit(3086.095:5723): avc: denied { read } for pid=11916 comm="syz.8.10155" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 3118.077638][ T29] audit: type=1400 audit(3086.123:5724): avc: denied { open } for pid=11916 comm="syz.8.10155" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 3118.161212][T11941] lo speed is unknown, defaulting to 1000
[ 3118.606327][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10160'.
[ 3119.057164][T11949] lo speed is unknown, defaulting to 1000
[ 3119.682717][ T5866] usb 6-1: USB disconnect, device number 104
[ 3119.819863][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10163'.
[ 3119.884396][T11953] delete_channel: no stack
[ 3119.992543][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'.
[ 3120.689154][T11956] delete_channel: no stack
[ 3121.576640][T11980] overlayfs: missing 'workdir'
[ 3122.348268][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10167'.
[ 3122.360733][T11981] lo speed is unknown, defaulting to 1000
[ 3123.381254][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10172'.
[ 3123.618774][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10171'.
[ 3123.628129][T11991] lo speed is unknown, defaulting to 1000
[ 3123.764721][T11987] delete_channel: no stack
[ 3124.170567][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10174'.
[ 3125.504943][T12010] FAULT_INJECTION: forcing a failure.
[ 3125.504943][T12010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3125.518116][T12010] CPU: 0 UID: 0 PID: 12010 Comm: syz.4.10178 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3125.528968][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3125.539022][T12010] Call Trace:
[ 3125.542297][T12010] <TASK>
[ 3125.545228][T12010] dump_stack_lvl+0x16c/0x1f0
[ 3125.549916][T12010] should_fail_ex+0x497/0x5b0
[ 3125.554604][T12010] _copy_from_user+0x2e/0xd0
[ 3125.559202][T12010] video_usercopy+0xedb/0x1620
[ 3125.563980][T12010] ? __pfx___video_do_ioctl+0x10/0x10
[ 3125.569364][T12010] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 3125.576225][T12010] ? __pfx_video_usercopy+0x10/0x10
[ 3125.581451][T12010] v4l2_ioctl+0x1ba/0x250
[ 3125.585788][T12010] ? __pfx_v4l2_ioctl+0x10/0x10
[ 3125.590646][T12010] __x64_sys_ioctl+0x190/0x200
[ 3125.595402][T12010] do_syscall_64+0xcd/0x250
[ 3125.599895][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3125.605776][T12010] RIP: 0033:0x7fc8b1785d29
[ 3125.610192][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3125.629800][T12010] RSP: 002b:00007fc8b254d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3125.638212][T12010] RAX: ffffffffffffffda RBX: 00007fc8b1975fa0 RCX: 00007fc8b1785d29
[ 3125.646178][T12010] RDX: 0000000020000080 RSI: 00000000c0285628 RDI: 0000000000000003
[ 3125.654138][T12010] RBP: 00007fc8b254d090 R08: 0000000000000000 R09: 0000000000000000
[ 3125.662111][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3125.670071][T12010] R13: 0000000000000000 R14: 00007fc8b1975fa0 R15: 00007ffc5efcf5d8
[ 3125.678039][T12010] </TASK>
[ 3126.771071][ T29] audit: type=1400 audit(3094.364:5725): avc: denied { write } for pid=12023 comm="syz.5.10179" path="socket:[173429]" dev="sockfs" ino=173429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 3127.009679][ T5866] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 3127.330175][ T5866] usb 6-1: device descriptor read/64, error -71
[ 3127.440412][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10185'.
[ 3127.715172][T12035] delete_channel: no stack
[ 3127.854009][ T5866] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 3128.014434][ T5866] usb 6-1: device descriptor read/64, error -71
[ 3128.226606][ T5866] usb usb6-port1: attempt power cycle
[ 3129.093921][ T5866] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 3129.115991][ T29] audit: type=1400 audit(3096.581:5726): avc: denied { create } for pid=12054 comm="syz.6.10191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 3129.138009][ T5866] usb 6-1: device descriptor read/8, error -71
[ 3129.174490][T12055] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 3129.946719][ T5866] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 3129.993378][ T5866] usb 6-1: device descriptor read/8, error -71
[ 3130.257563][ T5866] usb usb6-port1: unable to enumerate USB device
[ 3130.853248][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10199'.
[ 3131.250739][T12075] delete_channel: no stack
[ 3131.471337][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10201'.
[ 3132.015004][T12084] delete_channel: no stack
[ 3134.087854][T12123] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 3134.102916][T12123] Error validating options; rc = [-22]
[ 3134.318339][ T29] audit: type=1400 audit(3101.248:5727): avc: denied { watch } for pid=12122 comm="syz.8.10211" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 3134.423254][ T29] audit: type=1400 audit(3101.248:5728): avc: denied { watch_sb watch_reads } for pid=12122 comm="syz.8.10211" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 3134.683445][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10215'.
[ 3134.934183][T12134] delete_channel: no stack
[ 3135.147826][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10216'.
[ 3135.233837][T12141] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 3135.469016][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b133400: rx timeout, send abort
[ 3135.477589][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b132c00: rx timeout, send abort
[ 3135.486358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b133400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 3135.503716][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b132c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 3135.733226][T12136] delete_channel: no stack
[ 3135.738220][T12139] delete_channel: no stack
[ 3136.460225][ T29] audit: type=1400 audit(3103.044:5729): avc: denied { read } for pid=12148 comm="syz.4.10219" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 3136.482940][ T29] audit: type=1400 audit(3103.044:5730): avc: denied { open } for pid=12148 comm="syz.4.10219" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 3136.519170][ T29] audit: type=1400 audit(3103.054:5731): avc: denied { ioctl } for pid=12148 comm="syz.4.10219" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 3136.563506][T12158] netlink: 'syz.6.10222': attribute type 2 has an invalid length.
[ 3136.586178][T12158] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.10222'.
[ 3136.662103][ T29] audit: type=1400 audit(3103.503:5732): avc: denied { read } for pid=12153 comm="syz.6.10222" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 3136.687154][ T29] audit: type=1400 audit(3103.503:5733): avc: denied { open } for pid=12153 comm="syz.6.10222" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 3136.716999][ T29] audit: type=1400 audit(3103.503:5734): avc: denied { write } for pid=12153 comm="syz.6.10222" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 3137.176454][T10426] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 3137.384409][T10426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3137.398354][T10426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3137.438570][T10426] usb 9-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 3137.725906][T10426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3138.770906][ T29] audit: type=1400 audit(3104.719:5735): avc: denied { getopt } for pid=12170 comm="syz.6.10225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 3138.812822][T10426] usb 9-1: config 0 descriptor??
[ 3139.964171][T10426] usbhid 9-1:0.0: can't add hid device: -71
[ 3139.977137][T10426] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 3140.015486][T10426] usb 9-1: USB disconnect, device number 34
[ 3140.053191][T12177] FAULT_INJECTION: forcing a failure.
[ 3140.053191][T12177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3140.088531][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.4.10228 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3140.099403][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3140.109458][T12177] Call Trace:
[ 3140.112714][T12177] <TASK>
[ 3140.115620][T12177] dump_stack_lvl+0x16c/0x1f0
[ 3140.120277][T12177] should_fail_ex+0x497/0x5b0
[ 3140.124933][T12177] _copy_from_user+0x2e/0xd0
[ 3140.129505][T12177] kvm_arch_vcpu_ioctl+0x2101/0x5070
[ 3140.134782][T12177] ? hlock_class+0x4e/0x130
[ 3140.139277][T12177] ? __lock_acquire+0x15a9/0x3c40
[ 3140.144285][T12177] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[ 3140.149909][T12177] ? kasan_save_track+0x14/0x30
[ 3140.154744][T12177] ? __kasan_slab_free+0x51/0x70
[ 3140.159668][T12177] ? __pfx___lock_acquire+0x10/0x10
[ 3140.164853][T12177] ? __x64_sys_ioctl+0xb7/0x200
[ 3140.169692][T12177] ? do_syscall_64+0xcd/0x250
[ 3140.174361][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3140.180442][T12177] ? hlock_class+0x4e/0x130
[ 3140.184935][T12177] ? lock_acquire.part.0+0x11b/0x380
[ 3140.190225][T12177] ? __mutex_trylock_common+0xea/0x250
[ 3140.195670][T12177] ? __pfx___mutex_trylock_common+0x10/0x10
[ 3140.201553][T12177] ? kvm_vcpu_ioctl+0x1de/0x1520
[ 3140.206477][T12177] ? rcu_is_watching+0x12/0xc0
[ 3140.211245][T12177] ? trace_contention_end+0xee/0x140
[ 3140.216517][T12177] ? __mutex_lock+0x1cc/0xa60
[ 3140.221200][T12177] ? kvm_vcpu_ioctl+0x1de/0x1520
[ 3140.226122][T12177] ? tomoyo_path_number_perm+0x298/0x590
[ 3140.231749][T12177] ? tomoyo_path_number_perm+0x190/0x590
[ 3140.237366][T12177] ? kvm_vcpu_ioctl+0x9e6/0x1520
[ 3140.242283][T12177] kvm_vcpu_ioctl+0x9e6/0x1520
[ 3140.247029][T12177] ? do_vfs_ioctl+0x513/0x1990
[ 3140.251782][T12177] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 3140.256968][T12177] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[ 3140.263457][T12177] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 3140.270294][T12177] ? __pfx_lock_release+0x10/0x10
[ 3140.275310][T12177] ? selinux_file_ioctl+0x180/0x270
[ 3140.280493][T12177] ? selinux_file_ioctl+0xb4/0x270
[ 3140.285592][T12177] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 3140.290784][T12177] __x64_sys_ioctl+0x190/0x200
[ 3140.295540][T12177] do_syscall_64+0xcd/0x250
[ 3140.300033][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3140.305925][T12177] RIP: 0033:0x7fc8b1785d29
[ 3140.310324][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3140.329926][T12177] RSP: 002b:00007fc8b254d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3140.338329][T12177] RAX: ffffffffffffffda RBX: 00007fc8b1975fa0 RCX: 00007fc8b1785d29
[ 3140.346286][T12177] RDX: 0000000020003680 RSI: 000000004080aebf RDI: 0000000000000005
[ 3140.354245][T12177] RBP: 00007fc8b254d090 R08: 0000000000000000 R09: 0000000000000000
[ 3140.362206][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3140.370167][T12177] R13: 0000000000000000 R14: 00007fc8b1975fa0 R15: 00007ffc5efcf5d8
[ 3140.378141][T12177] </TASK>
[ 3140.390708][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10227'.
[ 3140.601541][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10231'.
[ 3140.678046][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10231'.
[ 3140.802387][T12188] gtp0: entered promiscuous mode
[ 3142.472126][T12207] pim6reg1: entered promiscuous mode
[ 3142.477441][T12207] pim6reg1: entered allmulticast mode
[ 3142.498851][T12207] cgroup: Invalid name
[ 3142.914918][ T29] audit: type=1326 audit(3109.461:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3142.946598][ T29] audit: type=1326 audit(3109.461:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.132841][ T29] audit: type=1326 audit(3109.461:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.156509][ T29] audit: type=1326 audit(3109.461:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.181310][ T29] audit: type=1326 audit(3109.461:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.205229][ T5866] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 3143.213407][ T29] audit: type=1326 audit(3109.461:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.237087][ T29] audit: type=1326 audit(3109.461:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.260532][ T29] audit: type=1326 audit(3109.461:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.283777][ T29] audit: type=1326 audit(3109.461:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.307270][ T29] audit: type=1326 audit(3109.461:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.8.10238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa8b85d29 code=0x7fc00000
[ 3143.393048][ T5866] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[ 3143.401300][ T5866] usb 5-1: config 0 has no interface number 0
[ 3143.407356][ T5866] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 3143.436840][ T5866] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3143.487671][ T5866] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 3143.497241][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3143.620160][ T5866] usb 5-1: Product: syz
[ 3143.717892][ T5866] usb 5-1: Manufacturer: syz
[ 3143.723022][ T5866] usb 5-1: SerialNumber: syz
[ 3143.735969][ T5866] usb 5-1: config 0 descriptor??
[ 3143.752366][T12204] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 3143.785548][ T5866] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 3144.021823][ T5866] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3144.244251][T12218] delete_channel: no stack
[ 3146.143877][ T2494] usb 5-1: USB disconnect, device number 127
[ 3146.163692][ T2494] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3146.191881][ T2494] cyberjack 5-1:0.69: device disconnected
[ 3146.691635][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10245'.
[ 3146.715625][T12240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3146.800807][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10246'.
[ 3147.706664][ T2494] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 3147.847271][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10249'.
[ 3148.467488][ T2494] usb 5-1: Using ep0 maxpacket: 16
[ 3148.825969][T12257] fuse: Unknown parameter '0x0000000000000004'
[ 3149.741871][T12243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3149.763611][ T2494] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 3149.772022][ T2494] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 3149.786317][ T2494] usb 5-1: can't read configurations, error -71
[ 3151.726161][ T2494] usb 6-1: new full-speed USB device number 109 using dummy_hcd
[ 3151.890265][ T2494] usb 6-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30
[ 3151.908111][ T2494] usb 6-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68
[ 3151.951067][ T2494] usb 6-1: config 1 interface 0 has no altsetting 0
[ 3151.961732][ T2494] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3151.974184][ T2494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3151.996376][ T2494] usb 6-1: Product: syz
[ 3152.000600][ T2494] usb 6-1: Manufacturer: syz
[ 3152.021093][ T2494] usb 6-1: SerialNumber: syz
[ 3152.933791][ T2494] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 3154.046961][T12336] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3154.056043][T12336] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock
[ 3154.065299][T12336] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3154.073199][T12336] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock
[ 3154.090532][T12336] netlink: 'syz.8.10273': attribute type 1 has an invalid length.
[ 3154.098402][T12336] netlink: 224 bytes leftover after parsing attributes in process `syz.8.10273'.
[ 3154.766675][T12747] usb 6-1: USB disconnect, device number 109
[ 3154.774456][T12747] usblp0: removed
[ 3157.156708][T12370] binder: 12360:12370 ioctl c0306201 0 returned -14
[ 3158.261299][ T29] kauditd_printk_skb: 3038 callbacks suppressed
[ 3158.261316][ T29] audit: type=1400 audit(3123.857:8784): avc: denied { setopt } for pid=12385 comm="syz.4.10292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 3158.343292][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10293'.
[ 3158.814006][ T9710] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 3158.996283][ T9710] usb 6-1: Using ep0 maxpacket: 32
[ 3159.009799][ T9710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 3159.037526][ T9710] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 3159.052323][ T9710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3159.076676][ T9710] usb 6-1: Product: syz
[ 3159.089750][ T9710] usb 6-1: Manufacturer: syz
[ 3159.110855][ T9710] usb 6-1: SerialNumber: syz
[ 3159.130394][ T9710] usb 6-1: config 0 descriptor??
[ 3159.355563][ T9710] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 3159.372525][ T11] usb 6-1: Failed to submit usb control message: -71
[ 3159.426508][ T9318] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11
[ 3159.500662][ T11] usb 6-1: unable to send the bmi data to the device: -71
[ 3159.536916][ T9710] usb 6-1: USB disconnect, device number 110
[ 3159.590536][ T11] usb 6-1: unable to get target info from device
[ 3159.603907][ T11] usb 6-1: could not get target info (-71)
[ 3159.616801][ T11] usb 6-1: could not probe fw (-71)
[ 3160.478376][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10303'.
[ 3160.649199][ T3883] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 3160.810837][ T3883] usb 9-1: Using ep0 maxpacket: 8
[ 3160.817279][ T3883] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 3160.858094][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10306'.
[ 3160.866680][ T29] audit: type=1400 audit(3126.375:8785): avc: denied { ioctl } for pid=12426 comm="syz.4.10306" path="socket:[175337]" dev="sockfs" ino=175337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 3160.894494][T12427] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 3160.922832][ T3883] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3160.966535][ T3883] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3176.656809][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 3235.190273][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 3261.001624][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 3261.008585][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12060/1:b..l
[ 3261.017326][ C0] rcu: (detected by 0, t=10503 jiffies, g=178833, q=498 ncpus=2)
[ 3261.025123][ C0] task:syz.6.10191 state:R running task stack:27792 pid:12060 tgid:12060 ppid:596 flags:0x00404006
[ 3261.038163][ C0] Call Trace:
[ 3261.041443][ C0] <TASK>
[ 3261.044374][ C0] __schedule+0xe58/0x5ad0
[ 3261.048798][ C0] ? is_bpf_text_address+0x94/0x1a0
[ 3261.054009][ C0] ? __pfx___schedule+0x10/0x10
[ 3261.058863][ C0] ? stack_depot_save_flags+0x28/0x9c0
[ 3261.064330][ C0] preempt_schedule_irq+0x51/0x90
[ 3261.069354][ C0] irqentry_exit+0x36/0x90
[ 3261.073773][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3261.079752][ C0] RIP: 0010:lock_is_held_type+0x107/0x150
[ 3261.085469][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 4c f2 d8 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb
[ 3261.105071][ C0] RSP: 0018:ffffc90003517938 EFLAGS: 00000282
[ 3261.111133][ C0] RAX: 0000000000000046 RBX: ffff888031338ae0 RCX: 0000000000000001
[ 3261.119105][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1eba0
[ 3261.127072][ C0] RBP: ffffffff8e1bb900 R08: 0000000000000007 R09: 000000000007ffff
[ 3261.135036][ C0] R10: 000000000000000d R11: 0000000000000000 R12: ffff888031338000
[ 3261.142998][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000
[ 3261.150980][ C0] page_ext_get+0x132/0x310
[ 3261.155484][ C0] __page_table_check_zero+0xbf/0x360
[ 3261.160863][ C0] free_unref_page+0x6c8/0x1080
[ 3261.165714][ C0] vfree+0x17a/0x890
[ 3261.169606][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 3261.175415][ C0] ? __pfx_kcov_close+0x10/0x10
[ 3261.180263][ C0] kcov_put+0x2a/0x40
[ 3261.184243][ C0] kcov_close+0xd/0x20
[ 3261.188307][ C0] __fput+0x3f8/0xb60
[ 3261.192291][ C0] ? cleanup_mnt+0x266/0x450
[ 3261.196879][ C0] task_work_run+0x14e/0x250
[ 3261.201469][ C0] ? __pfx_task_work_run+0x10/0x10
[ 3261.206585][ C0] do_exit+0xadd/0x2d70
[ 3261.210745][ C0] ? get_signal+0x1d3e/0x26c0
[ 3261.215419][ C0] ? __pfx_do_exit+0x10/0x10
[ 3261.220008][ C0] ? cgroup_update_frozen_flag+0x107/0x210
[ 3261.225820][ C0] do_group_exit+0xd3/0x2a0
[ 3261.230329][ C0] get_signal+0x24ed/0x26c0
[ 3261.234838][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 3261.240317][ C0] ? __pfx_get_signal+0x10/0x10
[ 3261.245168][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 3261.250370][ C0] arch_do_signal_or_restart+0x90/0x7e0
[ 3261.255917][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 3261.262079][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10
[ 3261.268239][ C0] syscall_exit_to_user_mode+0x150/0x2a0
[ 3261.273871][ C0] do_syscall_64+0xda/0x250
[ 3261.278375][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3261.284267][ C0] RIP: 0033:0x7fd0873b85e5
[ 3261.288674][ C0] RSP: 002b:00007fd08810ff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 3261.297082][ C0] RAX: fffffffffffffdfc RBX: 00007fd087575fa0 RCX: 00007fd0873b85e5
[ 3261.305045][ C0] RDX: 00007fd08810ffc0 RSI: 0000000000000000 RDI: 0000000000000000
[ 3261.313008][ C0] RBP: 00007fd087401aa8 R08: 0000000000000000 R09: 0000000000000000
[ 3261.320976][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 3261.328940][ C0] R13: 0000000000000000 R14: 00007fd087575fa0 R15: 00007ffc772ed328
[ 3261.336916][ C0] </TASK>
[ 3261.339933][ C0] rcu: rcu_preempt kthread starved for 10260 jiffies! g178833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 3261.351203][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 3261.361162][ C0] rcu: RCU grace-period kthread stack dump:
[ 3261.367042][ C0] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000
[ 3261.378788][ C0] Call Trace:
[ 3261.382059][ C0] <TASK>
[ 3261.384990][ C0] __schedule+0xe58/0x5ad0
[ 3261.389406][ C0] ? __pfx___lock_acquire+0x10/0x10
[ 3261.394613][ C0] ? __pfx___schedule+0x10/0x10
[ 3261.399463][ C0] ? schedule+0x298/0x350
[ 3261.403788][ C0] ? __pfx_lock_release+0x10/0x10
[ 3261.408816][ C0] ? lock_acquire+0x2f/0xb0
[ 3261.413314][ C0] ? schedule+0x1fd/0x350
[ 3261.417643][ C0] schedule+0xe7/0x350
[ 3261.421709][ C0] schedule_timeout+0x124/0x280
[ 3261.426554][ C0] ? __pfx_schedule_timeout+0x10/0x10
[ 3261.431986][ C0] ? __pfx_process_timeout+0x10/0x10
[ 3261.437277][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 3261.443167][ C0] ? prepare_to_swait_event+0xf3/0x470
[ 3261.448626][ C0] rcu_gp_fqs_loop+0x1eb/0xb00
[ 3261.453391][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 3261.458670][ C0] ? rcu_gp_init+0xc82/0x1630
[ 3261.463345][ C0] ? _raw_spin_unlock_irq+0x2e/0x50
[ 3261.468545][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 3261.474351][ C0] rcu_gp_kthread+0x271/0x380
[ 3261.479028][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10
[ 3261.484225][ C0] ? lockdep_hardirqs_on+0x7c/0x110
[ 3261.489424][ C0] ? __kthread_parkme+0x148/0x220
[ 3261.494449][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10
[ 3261.499645][ C0] kthread+0x2c1/0x3a0
[ 3261.503718][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 3261.508911][ C0] ? __pfx_kthread+0x10/0x10
[ 3261.513501][ C0] ret_from_fork+0x45/0x80
[ 3261.517912][ C0] ? __pfx_kthread+0x10/0x10
[ 3261.522501][ C0] ret_from_fork_asm+0x1a/0x30
[ 3261.527278][ C0] </TASK>
[ 3261.530287][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 3261.536597][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
[ 3261.546916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 3261.556962][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20
[ 3261.562247][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 14 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 bf b3 00 fb f4 <fa> c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3261.581848][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246
[ 3261.587908][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29a759
[ 3261.595871][ C0] RDX: 0000000000000001 RSI: ffff888020ac9000 RDI: ffff888020ac9064
[ 3261.603834][ C0] RBP: ffff888020ac9064 R08: 0000000000000001 R09: ffffed10170c6fed
[ 3261.611797][ C0] R10: ffff8880b8637f6b R11: 0000000000000000 R12: ffff88801f373000
[ 3261.619759][ C0] R13: ffffffff8ee169e0 R14: 0000000000000000 R15: 0000000000000000
[ 3261.627721][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 3261.636645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3261.643225][ C0] CR2: 00007f2564a83f4e CR3: 00000000640d6000 CR4: 00000000003526f0
[ 3261.651192][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000004000e1
[ 3261.659157][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3261.667121][ C0] Call Trace:
[ 3261.670395][ C0] <IRQ>
[ 3261.673233][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450
[ 3261.679559][ C0] ? do_raw_spin_unlock+0x172/0x230
[ 3261.684757][ C0] ? rcu_sched_clock_irq+0x247a/0x3310
[ 3261.690226][ C0] ? timekeeping_advance+0x72e/0xa90
[ 3261.695504][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 3261.701143][ C0] ? __asan_memcpy+0x3c/0x60
[ 3261.705738][ C0] ? rcu_is_watching+0x12/0xc0
[ 3261.710503][ C0] ? update_process_times+0x178/0x2d0
[ 3261.715873][ C0] ? __pfx_update_process_times+0x10/0x10
[ 3261.721591][ C0] ? update_wall_time+0x1c/0x40
[ 3261.726438][ C0] ? tick_nohz_handler+0x376/0x530
[ 3261.731552][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 3261.737013][ C0] ? __hrtimer_run_queues+0x5fb/0xae0
[ 3261.742390][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 3261.748107][ C0] ? read_tsc+0x9/0x20
[ 3261.752183][ C0] ? hrtimer_interrupt+0x392/0x8e0
[ 3261.757307][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400
[ 3261.763461][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0
[ 3261.769264][ C0] </IRQ>
[ 3261.772186][ C0] <TASK>
[ 3261.775109][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3261.781273][ C0] ? ct_kernel_exit+0x139/0x190
[ 3261.786122][ C0] ? acpi_safe_halt+0x1a/0x20
[ 3261.790803][ C0] acpi_idle_enter+0xc5/0x160
[ 3261.795483][ C0] cpuidle_enter_state+0xaa/0x4f0
[ 3261.800510][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10
[ 3261.806312][ C0] cpuidle_enter+0x4e/0xa0
[ 3261.810732][ C0] do_idle+0x310/0x3f0
[ 3261.814800][ C0] ? __pfx_do_idle+0x10/0x10
[ 3261.819391][ C0] cpu_startup_entry+0x4f/0x60
[ 3261.824153][ C0] rest_init+0x16b/0x2b0
[ 3261.828395][ C0] ? acpi_subsystem_init+0x133/0x180
[ 3261.833676][ C0] ? __pfx_x86_late_time_init+0x10/0x10
[ 3261.839224][ C0] start_kernel+0x3e4/0x4d0
[ 3261.843729][ C0] x86_64_start_reservations+0x18/0x30
[ 3261.849189][ C0] x86_64_start_kernel+0xb2/0xc0
[ 3261.854126][ C0] common_startup_64+0x13e/0x148
[ 3261.859079][ C0] </TASK>