last executing test programs: 2m41.571211368s ago: executing program 1 (id=1138): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m40.094888058s ago: executing program 1 (id=1143): mkdir(&(0x7f0000000480)='./file0\x00', 0x3d) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) mkdir(0x0, 0x0) open(0x0, 0x319c82, 0x5) mount$tmpfs(0x0, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x12003, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0}) 2m38.787392937s ago: executing program 1 (id=1150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 2m36.754669131s ago: executing program 1 (id=1156): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[]) 2m36.526274698s ago: executing program 1 (id=1159): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) unshare(0x62040200) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xfffff3d6, 0x7}) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m35.370093514s ago: executing program 1 (id=1163): eventfd(0xa0416d21) io_setup(0xc7d, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x9, 0x363, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0xb6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @end, @lsrr={0x83, 0x3, 0xb1}]}}}}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x5, 0x65, 0xde, 0x5}, {0x800, 0x10, 0x4, 0x10001}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz0\x00', {0x1, 0x8, 0xfff8, 0x8}, 0x9, [0x5, 0x40, 0x40000, 0x32b6d5ae, 0x0, 0x8, 0x3, 0x4, 0x5, 0x1, 0x10000, 0x7f, 0x1, 0x1ff, 0xdc, 0xde8, 0xb78, 0x3, 0x1ff, 0x7fa2, 0x3, 0x2, 0x5, 0x80000000, 0x2, 0x0, 0x5, 0x7, 0x5, 0x3, 0x4, 0xf00, 0x9, 0x0, 0x9, 0xc, 0x6, 0x3, 0x3, 0x3, 0x2400, 0x7, 0x9, 0x4, 0x7fff, 0x8000, 0xe, 0xfffffff7, 0x401, 0x401, 0xffff, 0x3, 0x7546, 0x3, 0x470, 0xffffffc0, 0x3, 0x7, 0x8, 0x1, 0x100, 0xfffff63f, 0x800, 0xa6], [0x7fff, 0x3, 0xffff, 0x6, 0xffff, 0x8, 0x9d6d, 0x3, 0x6, 0xffff, 0x0, 0x8, 0xe, 0x6, 0x0, 0x7, 0x68d37dc8, 0xc, 0x9, 0x4, 0x1, 0x1, 0x80000001, 0x10005, 0x791cff13, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x261, 0x9, 0x2, 0x7, 0x5, 0x10001, 0x8706, 0x3ff, 0xc8, 0x6, 0x445f, 0x9, 0x0, 0x5, 0x7, 0x40, 0x3ff, 0xc3d5, 0x2, 0x81, 0x0, 0x7, 0x5, 0x9, 0x9224, 0x9, 0xfff, 0x2, 0x1, 0x200, 0x200, 0x7ff, 0x7f], [0x7, 0xd364, 0x10000000, 0xc1, 0x737e, 0x2, 0x4, 0x9e4, 0x8, 0x7, 0xe, 0x3, 0x3, 0x2, 0x8000, 0xffff, 0xed3, 0x5, 0xc, 0x3, 0x5, 0x9, 0x7, 0x7, 0x7fff, 0x80, 0x7, 0x5, 0x9, 0x6, 0x5, 0x9, 0xdc45, 0x9, 0x943f, 0xb72e, 0x2, 0x7f, 0x7, 0x8, 0x7, 0x8, 0x100, 0x6, 0x5, 0x100000, 0x8000, 0xd, 0x4, 0xd8, 0x6, 0x0, 0x3, 0x8, 0x5, 0x5, 0x7f, 0x1ff, 0x1, 0xfffffeac, 0x2, 0x2, 0xfffffff9, 0xffffffff], [0x92, 0x5, 0x48, 0x15, 0x3, 0xfffffffa, 0x7, 0x9, 0x0, 0x8, 0x3ff, 0x8, 0x800, 0x400, 0x6b, 0x4, 0x2, 0x810, 0x6c68, 0xc, 0x6, 0x6, 0xa, 0x3ff, 0x0, 0x4, 0xffffff7f, 0xfffffffc, 0xb3, 0x1, 0x7, 0xa, 0x1000, 0xfd, 0x1, 0x7f5e, 0x3ff, 0x8, 0x5, 0x0, 0x101, 0x5, 0x7fffffff, 0x4, 0xdf, 0x3, 0x3f, 0x7, 0x7, 0xc, 0xfffffff8, 0x7, 0xff, 0x3, 0x3, 0x3, 0x4, 0x7, 0x100, 0xfffffffb, 0x8001, 0xffff, 0x3, 0x3]}, 0x45c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m35.256940551s ago: executing program 3 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) 2m33.191440475s ago: executing program 3 (id=1167): chdir(0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x9) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "77d4e1d5b593933b9b3f272fbf9f5e03"}) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x2}]}, 0x24}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1868, 0x0, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 2m31.621548215s ago: executing program 3 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="1200"/12, @ANYRES32, @ANYBLOB="0000592c81230000001e52", @ANYRES64=0x0], 0x10) 2m30.694561663s ago: executing program 3 (id=1176): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) r0 = socket(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xfffff3d6, 0x7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) 2m29.339430481s ago: executing program 3 (id=1177): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x803, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00000021000101000000000000000000000004000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000000000000000000000000000000f637629b37f73d89e6d7cd834000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000a00120002000000000000"], 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) geteuid() ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 2m27.721746279s ago: executing program 3 (id=1180): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001440)=""/4075, 0x106c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001000d", @ANYRES8=r7], 0x44}}, 0x0) 2m20.263795495s ago: executing program 32 (id=1163): eventfd(0xa0416d21) io_setup(0xc7d, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x9, 0x363, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0xb6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @end, @lsrr={0x83, 0x3, 0xb1}]}}}}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x5, 0x65, 0xde, 0x5}, {0x800, 0x10, 0x4, 0x10001}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz0\x00', {0x1, 0x8, 0xfff8, 0x8}, 0x9, [0x5, 0x40, 0x40000, 0x32b6d5ae, 0x0, 0x8, 0x3, 0x4, 0x5, 0x1, 0x10000, 0x7f, 0x1, 0x1ff, 0xdc, 0xde8, 0xb78, 0x3, 0x1ff, 0x7fa2, 0x3, 0x2, 0x5, 0x80000000, 0x2, 0x0, 0x5, 0x7, 0x5, 0x3, 0x4, 0xf00, 0x9, 0x0, 0x9, 0xc, 0x6, 0x3, 0x3, 0x3, 0x2400, 0x7, 0x9, 0x4, 0x7fff, 0x8000, 0xe, 0xfffffff7, 0x401, 0x401, 0xffff, 0x3, 0x7546, 0x3, 0x470, 0xffffffc0, 0x3, 0x7, 0x8, 0x1, 0x100, 0xfffff63f, 0x800, 0xa6], [0x7fff, 0x3, 0xffff, 0x6, 0xffff, 0x8, 0x9d6d, 0x3, 0x6, 0xffff, 0x0, 0x8, 0xe, 0x6, 0x0, 0x7, 0x68d37dc8, 0xc, 0x9, 0x4, 0x1, 0x1, 0x80000001, 0x10005, 0x791cff13, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x261, 0x9, 0x2, 0x7, 0x5, 0x10001, 0x8706, 0x3ff, 0xc8, 0x6, 0x445f, 0x9, 0x0, 0x5, 0x7, 0x40, 0x3ff, 0xc3d5, 0x2, 0x81, 0x0, 0x7, 0x5, 0x9, 0x9224, 0x9, 0xfff, 0x2, 0x1, 0x200, 0x200, 0x7ff, 0x7f], [0x7, 0xd364, 0x10000000, 0xc1, 0x737e, 0x2, 0x4, 0x9e4, 0x8, 0x7, 0xe, 0x3, 0x3, 0x2, 0x8000, 0xffff, 0xed3, 0x5, 0xc, 0x3, 0x5, 0x9, 0x7, 0x7, 0x7fff, 0x80, 0x7, 0x5, 0x9, 0x6, 0x5, 0x9, 0xdc45, 0x9, 0x943f, 0xb72e, 0x2, 0x7f, 0x7, 0x8, 0x7, 0x8, 0x100, 0x6, 0x5, 0x100000, 0x8000, 0xd, 0x4, 0xd8, 0x6, 0x0, 0x3, 0x8, 0x5, 0x5, 0x7f, 0x1ff, 0x1, 0xfffffeac, 0x2, 0x2, 0xfffffff9, 0xffffffff], [0x92, 0x5, 0x48, 0x15, 0x3, 0xfffffffa, 0x7, 0x9, 0x0, 0x8, 0x3ff, 0x8, 0x800, 0x400, 0x6b, 0x4, 0x2, 0x810, 0x6c68, 0xc, 0x6, 0x6, 0xa, 0x3ff, 0x0, 0x4, 0xffffff7f, 0xfffffffc, 0xb3, 0x1, 0x7, 0xa, 0x1000, 0xfd, 0x1, 0x7f5e, 0x3ff, 0x8, 0x5, 0x0, 0x101, 0x5, 0x7fffffff, 0x4, 0xdf, 0x3, 0x3f, 0x7, 0x7, 0xc, 0xfffffff8, 0x7, 0xff, 0x3, 0x3, 0x3, 0x4, 0x7, 0x100, 0xfffffffb, 0x8001, 0xffff, 0x3, 0x3]}, 0x45c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m12.589569277s ago: executing program 33 (id=1180): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001440)=""/4075, 0x106c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001000d", @ANYRES8=r7], 0x44}}, 0x0) 17.41681161s ago: executing program 4 (id=1534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) 17.097709113s ago: executing program 0 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1fffffffffe}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="2ad97ad94e4cb5b7d727ab531557f7543a98c31dcd8210760bbfd3e1bd1c7b316655d4e6"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x2}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) 16.325009171s ago: executing program 4 (id=1536): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 13.896197697s ago: executing program 0 (id=1540): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 12.831749468s ago: executing program 4 (id=1543): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff000000000000008fb9382ee66828b2bf057a94fc4842d4e627c0adc077026f53267c60c68dcddfc1f91cc7bcc7e94d4c07b3d8e245b269bfd523708fe7b26a7d8616f0470c5bc37fe19ff90e266f5f013e0c8983dd8379011c7ccf", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000000000008500000027000000180100002020732500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0xfffffdef}], 0x72368e, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c000700000000000000000008000900000000000800"], 0x54}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) 11.2945667s ago: executing program 6 (id=1547): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00000021000101000000000000000000000004000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000000000000000000000000000000f637629b37f73d89e6d7cd834000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000a00120002000000000000"], 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) geteuid() ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 9.656596275s ago: executing program 0 (id=1551): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a00000000"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 8.918331836s ago: executing program 6 (id=1552): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001440)=""/4075, 0x106c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001000d", @ANYRES8=r7], 0x44}}, 0x0) getresuid(&(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)) r8 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) getgid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) 8.80969255s ago: executing program 5 (id=1553): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) 8.400776589s ago: executing program 6 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0xffff, 0x529503) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x200000000000007, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r3}, &(0x7f0000000200), 0x0}, 0x20) bind$x25(0xffffffffffffffff, &(0x7f0000000e00), 0x12) bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000700)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fb94a914e1a70e0443ca06d35a1e672e20289cae61c6b025f62fb1b61b9f6fcdcae593475c12ebe4a9cc8a0d6cd814fd8e926e848df29b8cec55150fe2fa5face9c23a8e3c3ace75c08160ebef70e63f61a18c6a74d879b01fbe4dd354c847dcd98f6fd075bcff876458", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) 8.383319971s ago: executing program 0 (id=1555): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r3, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.192412641s ago: executing program 5 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="1200"/12, @ANYRES32, @ANYBLOB="0000592c81230000001e52", @ANYRES64=0x0], 0x10) 4.481717816s ago: executing program 2 (id=1558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) 4.379556638s ago: executing program 0 (id=1559): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$nl_rdma(0x10, 0x3, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r7}) 4.34115042s ago: executing program 5 (id=1560): socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.983339517s ago: executing program 6 (id=1561): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001440)=""/4075, 0x106c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001000d", @ANYRES8=r7], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) getgid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) 3.794426644s ago: executing program 4 (id=1562): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) 2.864521404s ago: executing program 2 (id=1563): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x803, 0x6) bind$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00000021000101000000000000000000000004000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000000000000000000000000000000f637629b37f73d89e6d7cd834000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000a00120002000000000000"], 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) geteuid() ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 2.728747368s ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1/file4/file7\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kvm_age_hva\x00'}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @echo_request}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x4004550d, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 1.982289598s ago: executing program 2 (id=1565): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001440)=""/4075, 0x106c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4100}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001000d", @ANYRES8=r7], 0x44}}, 0x0) getresuid(&(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)) r8 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) getgid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) 1.898051639s ago: executing program 6 (id=1566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.301735175s ago: executing program 2 (id=1567): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a00000000"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.188811551s ago: executing program 4 (id=1568): socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.035028001s ago: executing program 5 (id=1569): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7801, 0x0, 0x10000000, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000000b4af975cda405", 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 654.648782ms ago: executing program 4 (id=1570): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r5, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 449.4707ms ago: executing program 5 (id=1571): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x803, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00000021000101000000000000000000000004000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000000000000000000000000000000f637629b37f73d89e6d7cd834000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000a00120002000000000000"], 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) geteuid() ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 379.553919ms ago: executing program 6 (id=1572): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff000000000000008fb9382ee66828b2bf057a94fc4842d4e627c0adc077026f53267c60c68dcddfc1f91cc7bcc7e94d4c07b3d8e245b269bfd523708fe7b26a7d8616f0470c5bc37fe19ff90e266f5f013e0c8983dd8379011c7ccf", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000000000008500000027000000180100002020732500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0xfffffdef}], 0x72368e, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c000700000000000000000008000900000000000800"], 0x54}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) 362.810229ms ago: executing program 2 (id=1573): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./control\x00', 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) unlinkat(r1, &(0x7f0000000040)='./control\x00', 0x200) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8d77be6ea0fe21d4b45db5802843714a78cf224c44eef711a68480b6316e66739d5351eff17c8584a1d035d5aa2565c90a6d4943ba158bbd31d17d55bf45cbf3f3ebf6c925cd7a3c2d45ad3980b8db8e39e03cba7512220bc1ea05049e869713d6f807a8f04de66c2232e7ebad9d", @ANYRES16=0x0, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=0x0], 0x2c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) userfaultfd(0x80001) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000280)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r8, r7) 77.373097ms ago: executing program 2 (id=1574): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1575): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000b00000040de2805120000000000010902240001000000008100000000000000000921000600012205000b0081030000030000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="602c05000000053abca7"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x26222c0, 0x9, 0x3, 0x0, 0xfffffffd}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x2285, &(0x7f0000000040)=0x53) kernel console output (not intermixed with test programs): ks suppressed [ 335.037615][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.051471][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.131609][ T9] usb 3-1: USB disconnect, device number 17 [ 335.142359][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.177193][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.283168][ T29] audit: type=1400 audit(1731962014.171:1463): avc: denied { create } for pid=9502 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.375971][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.398359][ T29] audit: type=1400 audit(1731962014.201:1464): avc: denied { write } for pid=9502 comm="syz.2.923" path="socket:[23102]" dev="sockfs" ino=23102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.595162][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.604519][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.614535][ T29] audit: type=1400 audit(1731962014.201:1465): avc: denied { nlmsg_read } for pid=9502 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.647149][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.675146][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.707786][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.981757][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 335.989905][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.000228][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 336.008211][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.017265][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 336.025166][ T7207] ldm_validate_partition_table(): Disk read failed. [ 336.032020][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.041490][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 336.051300][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.060714][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 336.069037][ T7207] Dev nbd3: unable to read RDB block 0 [ 336.075124][ T7207] nbd3: unable to read partition table [ 336.075165][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 336.080858][ T7207] nbd3: partition table beyond EOD, truncated [ 336.102785][ T9516] binder: 9512:9516 ioctl c0306201 0 returned -14 [ 336.241233][ T7207] ldm_validate_partition_table(): Disk read failed. [ 336.248645][ T7207] Dev nbd3: unable to read RDB block 0 [ 336.255184][ T7207] nbd3: unable to read partition table [ 336.261014][ T7207] nbd3: partition table beyond EOD, truncated [ 336.292409][ T29] audit: type=1400 audit(1731962015.151:1466): avc: denied { read write } for pid=9517 comm="syz.0.927" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.454515][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 336.486378][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 336.530096][ T29] audit: type=1400 audit(1731962015.151:1467): avc: denied { open } for pid=9517 comm="syz.0.927" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.901532][ T29] audit: type=1400 audit(1731962015.511:1468): avc: denied { map } for pid=9522 comm="syz.3.929" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 337.163174][ T29] audit: type=1400 audit(1731962016.051:1469): avc: denied { append } for pid=9528 comm="syz.3.931" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.187282][ T9529] usb usb1: usbfs: process 9529 (syz.3.931) did not claim interface 0 before use [ 339.566128][ T9552] mmap: syz.0.935 (9552) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 340.417418][ T29] audit: type=1400 audit(1731962019.301:1470): avc: denied { mount } for pid=9560 comm="syz.1.938" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 340.898456][ T29] audit: type=1400 audit(1731962019.791:1471): avc: denied { getopt } for pid=9566 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.939684][ T9567] 9pnet_fd: Insufficient options for proto=fd [ 341.207957][ T29] audit: type=1326 audit(1731962020.091:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.264694][ T29] audit: type=1326 audit(1731962020.121:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.287974][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.342681][ T29] audit: type=1326 audit(1731962020.121:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.443390][ T29] audit: type=1326 audit(1731962020.121:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.529161][ T29] audit: type=1326 audit(1731962020.121:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.600235][ T29] audit: type=1326 audit(1731962020.121:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.623489][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.631512][ T29] audit: type=1326 audit(1731962020.121:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.654814][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.681027][ T29] audit: type=1326 audit(1731962020.121:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7ffc0000 [ 341.705256][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.836322][ T9583] netlink: 'syz.3.944': attribute type 29 has an invalid length. [ 341.873693][ T9585] FAULT_INJECTION: forcing a failure. [ 341.873693][ T9585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.873721][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.4.945 Not tainted 6.12.0-syzkaller #0 [ 341.873740][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 341.873751][ T9585] Call Trace: [ 341.873757][ T9585] [ 341.873765][ T9585] dump_stack_lvl+0x16c/0x1f0 [ 341.873787][ T9585] should_fail_ex+0x497/0x5b0 [ 341.873811][ T9585] _copy_to_user+0x32/0xd0 [ 341.873834][ T9585] copy_siginfo_to_user+0x23/0xc0 [ 341.930283][ T9585] x64_setup_rt_frame+0x814/0xcf0 [ 341.935292][ T9585] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 341.940813][ T9585] ? kfree+0x14f/0x4b0 [ 341.944854][ T9585] arch_do_signal_or_restart+0x5e6/0x7e0 [ 341.950470][ T9585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 341.956604][ T9585] syscall_exit_to_user_mode+0x150/0x2a0 [ 341.962213][ T9585] do_syscall_64+0xda/0x250 [ 341.966689][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.972562][ T9585] RIP: 0033:0x7ff0ab37e757 [ 341.976948][ T9585] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 341.996543][ T9585] RSP: 002b:00007ff0ac11e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 342.004938][ T9585] RAX: 00000000000001c1 RBX: 00007ff0ab535f80 RCX: 00007ff0ab37e759 [ 342.012884][ T9585] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001080 [ 342.020835][ T9585] RBP: 00007ff0ac11e090 R08: 0000000000000001 R09: 0000000000000000 [ 342.028787][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.036731][ T9585] R13: 0000000000000000 R14: 00007ff0ab535f80 R15: 00007ffc35d307c8 [ 342.044679][ T9585] [ 342.185584][ T9587] sp0: Synchronizing with TNC [ 342.216466][ T9587] ubi: mtd0 is already attached to ubi0 [ 342.229427][ T9586] [U] è [ 342.637971][ T9593] netlink: 256 bytes leftover after parsing attributes in process `syz.4.947'. [ 344.309996][ T53] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 344.738337][ T9624] netlink: 68 bytes leftover after parsing attributes in process `syz.0.953'. [ 344.780726][ T53] usb 3-1: device descriptor read/64, error -71 [ 345.087888][ T53] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 345.248119][ T53] usb 3-1: device descriptor read/64, error -71 [ 345.368417][ T53] usb usb3-port1: attempt power cycle [ 345.682781][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 345.682797][ T29] audit: type=1400 audit(1731962024.571:1533): avc: denied { getopt } for pid=9647 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.708933][ T53] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 345.748390][ T53] usb 3-1: device descriptor read/8, error -71 [ 345.873983][ T29] audit: type=1400 audit(1731962024.761:1534): avc: denied { append } for pid=9651 comm="syz.3.960" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 346.011887][ T9643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.026989][ T9643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.113918][ T29] audit: type=1400 audit(1731962025.001:1535): avc: denied { bind } for pid=9658 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.189853][ T29] audit: type=1400 audit(1731962025.081:1536): avc: denied { read write } for pid=9664 comm="syz.1.965" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 346.234735][ T29] audit: type=1400 audit(1731962025.081:1537): avc: denied { open } for pid=9664 comm="syz.1.965" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 346.259114][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.294493][ T29] audit: type=1400 audit(1731962025.171:1538): avc: denied { mount } for pid=9667 comm="syz.0.966" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 346.499558][ T29] audit: type=1326 audit(1731962025.181:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 346.522886][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.610312][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 347.625819][ T29] audit: type=1400 audit(1731962025.371:1540): avc: denied { setopt } for pid=9667 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.848216][ T29] audit: type=1400 audit(1731962025.381:1541): avc: denied { write } for pid=9667 comm="syz.0.966" path="socket:[23355]" dev="sockfs" ino=23355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.883822][ T29] audit: type=1326 audit(1731962026.761:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 347.938748][ T9685] netlink: 'syz.3.971': attribute type 8 has an invalid length. [ 348.128508][ T9688] netlink: 209192 bytes leftover after parsing attributes in process `syz.4.968'. [ 348.138384][ T9688] netlink: get zone limit has 8 unknown bytes [ 348.147269][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 352.317171][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.903127][ T29] audit: type=1400 audit(1731962032.771:1543): avc: denied { write } for pid=9742 comm="syz.2.983" path="socket:[23855]" dev="sockfs" ino=23855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 354.083720][ T29] audit: type=1400 audit(1731962032.971:1544): avc: denied { sqpoll } for pid=9744 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 354.121853][ T9754] futex_wake_op: syz.0.987 tries to shift op by -1; fix this program [ 354.131503][ T9754] overlay: Unknown parameter 'obj_role' [ 354.798140][ T5874] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 354.874872][ T1209] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 354.904590][ T9767] tipc: Cannot configure node identity twice [ 354.963618][ T5874] usb 1-1: No LPM exit latency info found, disabling LPM. [ 354.974662][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 354.994501][ T5874] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 355.006966][ T5874] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 355.019965][ T5874] usb 1-1: string descriptor 0 read error: -22 [ 355.026196][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.035761][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.064066][ T1209] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 355.072671][ T1209] usb 5-1: config 0 has no interface number 0 [ 355.085496][ T1209] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 355.087468][ T9754] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.099204][ T1209] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 355.115585][ T1209] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 355.144366][ T1209] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=9c.71 [ 355.156753][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.293568][ T1209] usb 5-1: Product: syz [ 355.297745][ T1209] usb 5-1: Manufacturer: syz [ 355.318004][ T1209] usb 5-1: SerialNumber: syz [ 355.319902][ T5874] cdc_ncm 1-1:1.0: bind() failure [ 355.327318][ T5874] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 355.340679][ T5874] cdc_ncm 1-1:1.1: bind() failure [ 355.856498][ T1209] usb 5-1: config 0 descriptor?? [ 355.863504][ T9752] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.871968][ T9752] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.893084][ T1209] kvaser_usb 5-1:0.119: error -ENODEV: Cannot get usb endpoint(s) [ 355.904258][ T5874] usb 1-1: USB disconnect, device number 20 [ 356.693843][ T5874] usb 5-1: USB disconnect, device number 17 [ 357.944382][ T9783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.459655][ T29] audit: type=1400 audit(1731962037.341:1545): avc: denied { bind } for pid=9800 comm="syz.0.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.908163][ T5874] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 360.107723][ T5874] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.146388][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.170944][ T5874] usb 3-1: Product: syz [ 360.181856][ T5874] usb 3-1: Manufacturer: syz [ 360.194036][ T5874] usb 3-1: SerialNumber: syz [ 360.681925][ T5874] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.883503][ T5876] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.966355][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1014'. [ 361.071515][ T9855] fuse: Unknown parameter '0x0000000000000003' [ 361.163540][ T29] audit: type=1400 audit(1731962040.051:1546): avc: denied { ioctl } for pid=9843 comm="syz.3.1012" path="socket:[24826]" dev="sockfs" ino=24826 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.209692][ T25] IPVS: starting estimator thread 0... [ 361.219532][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.229967][ T29] audit: type=1400 audit(1731962040.111:1547): avc: denied { bind } for pid=9858 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.245966][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.258587][ T9856] nbd3: detected capacity change from 0 to 22 [ 361.272254][ T9846] block nbd3: shutting down sockets [ 361.292411][ T42] blk_print_req_error: 25 callbacks suppressed [ 361.292426][ T42] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.307776][ T42] buffer_io_error: 25 callbacks suppressed [ 361.307790][ T42] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.324130][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.333308][ T9863] IPVS: using max 28 ests per chain, 67200 per kthread [ 361.344489][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.352960][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.362214][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.370824][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.380498][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.389999][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.399440][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.407273][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.420065][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.428352][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.437608][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.447453][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.456806][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.464950][ T7207] ldm_validate_partition_table(): Disk read failed. [ 361.472599][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.481819][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.490974][ T7207] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.500191][ T7207] Buffer I/O error on dev nbd3, logical block 0, async page read [ 361.511762][ T7207] Dev nbd3: unable to read RDB block 0 [ 361.518445][ T7207] nbd3: unable to read partition table [ 361.524841][ T7207] nbd3: partition table beyond EOD, truncated [ 361.618724][ T7207] ldm_validate_partition_table(): Disk read failed. [ 361.628127][ T7207] Dev nbd3: unable to read RDB block 0 [ 361.638628][ T7207] nbd3: unable to read partition table [ 361.647831][ T7207] nbd3: partition table beyond EOD, truncated [ 361.768355][ T1209] usb 3-1: USB disconnect, device number 22 [ 361.898193][ T5876] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 361.976260][ T5876] ath9k_htc: Failed to initialize the device [ 362.018115][ T1209] usb 3-1: ath9k_htc: USB layer deinitialized [ 362.468839][ T9887] VFS: could not find a valid V7 on nullb0. [ 362.488527][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 363.007512][ T29] audit: type=1400 audit(1731962041.891:1548): avc: denied { audit_write } for pid=9877 comm="syz.4.1024" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.620291][ T29] audit: type=1400 audit(1731962044.441:1549): avc: denied { connect } for pid=9908 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.662586][ T29] audit: type=1400 audit(1731962044.451:1550): avc: denied { bind } for pid=9908 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.706660][ T29] audit: type=1400 audit(1731962044.451:1551): avc: denied { write } for pid=9908 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.768690][ T9909] overlayfs: missing 'lowerdir' [ 366.010918][ T29] audit: type=1400 audit(1731962044.901:1552): avc: denied { ioctl } for pid=9933 comm="syz.3.1035" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 366.414010][ T9941] VFS: could not find a valid V7 on nullb0. [ 366.429275][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 367.011032][ T29] audit: type=1400 audit(1731962045.711:1553): avc: denied { bind } for pid=9938 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.032398][ T29] audit: type=1400 audit(1731962045.711:1554): avc: denied { name_bind } for pid=9938 comm="syz.2.1037" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 367.053443][ T29] audit: type=1400 audit(1731962045.711:1555): avc: denied { node_bind } for pid=9938 comm="syz.2.1037" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 367.074643][ T29] audit: type=1400 audit(1731962045.711:1556): avc: denied { listen } for pid=9938 comm="syz.2.1037" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.095814][ T29] audit: type=1400 audit(1731962045.721:1557): avc: denied { accept } for pid=9938 comm="syz.2.1037" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.226860][ T29] audit: type=1400 audit(1731962045.721:1558): avc: denied { read } for pid=9938 comm="syz.2.1037" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=33150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 368.893538][ T9956] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 368.902042][ T9956] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.679736][ T9959] trusted_key: encrypted_key: key trusted:syz not found [ 370.559401][ T29] audit: type=1400 audit(1731962049.451:1559): avc: denied { call } for pid=9967 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 370.585664][ T9968] binder_alloc: 9967: binder_alloc_buf, no vma [ 370.802960][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 370.848455][ T9970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.886721][ T9980] FAULT_INJECTION: forcing a failure. [ 370.886721][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.900165][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.0.1047 Not tainted 6.12.0-syzkaller #0 [ 370.908762][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 370.918813][ T9980] Call Trace: [ 370.922086][ T9980] [ 370.925018][ T9980] dump_stack_lvl+0x16c/0x1f0 [ 370.929707][ T9980] should_fail_ex+0x497/0x5b0 [ 370.934414][ T9980] _copy_to_user+0x32/0xd0 [ 370.938838][ T9980] pagemap_read+0x536/0x880 [ 370.943350][ T9980] ? __pfx_pagemap_read+0x10/0x10 [ 370.948394][ T9980] ? __pfx_pagemap_read+0x10/0x10 [ 370.953451][ T9980] vfs_read+0x1df/0xbe0 [ 370.957620][ T9980] ? __fget_files+0x23a/0x3f0 [ 370.962303][ T9980] ? __pfx_lock_release+0x10/0x10 [ 370.967323][ T9980] ? trace_lock_acquire+0x14a/0x1d0 [ 370.972525][ T9980] ? __pfx_vfs_read+0x10/0x10 [ 370.977210][ T9980] ? lock_acquire+0x2f/0xb0 [ 370.981714][ T9980] ? __fget_files+0x40/0x3f0 [ 370.986313][ T9980] ? __fget_files+0x244/0x3f0 [ 370.991002][ T9980] __x64_sys_pread64+0x200/0x260 [ 370.995938][ T9980] ? __pfx___x64_sys_pread64+0x10/0x10 [ 371.001408][ T9980] do_syscall_64+0xcd/0x250 [ 371.005920][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.011840][ T9980] RIP: 0033:0x7f8ef757e759 [ 371.016258][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.035893][ T9980] RSP: 002b:00007f8ef8411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 371.044315][ T9980] RAX: ffffffffffffffda RBX: 00007f8ef7735f80 RCX: 00007f8ef757e759 [ 371.052290][ T9980] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000003 [ 371.060256][ T9980] RBP: 00007f8ef8411090 R08: 0000000000000000 R09: 0000000000000000 [ 371.068230][ T9980] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000001 [ 371.076208][ T9980] R13: 0000000000000000 R14: 00007f8ef7735f80 R15: 00007ffe02c995a8 [ 371.084198][ T9980] [ 371.227843][ T29] audit: type=1326 audit(1731962050.101:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9969 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6f7e759 code=0x7ffc0000 [ 371.251299][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.258160][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 371.264743][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.275394][ T29] audit: type=1326 audit(1731962050.101:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9969 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6f7e759 code=0x7ffc0000 [ 371.276445][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.306331][ T29] audit: type=1326 audit(1731962050.111:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9969 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5fe6f7e759 code=0x7ffc0000 [ 371.313438][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 371.341833][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.354051][ T25] usb 3-1: config 0 descriptor?? [ 371.658522][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.659921][ T9966] 9pnet_fd: Insufficient options for proto=fd [ 371.734195][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 371.747378][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.771701][ T25] usb 3-1: USB disconnect, device number 23 [ 371.862598][ T9994] VFS: could not find a valid V7 on nullb0. [ 371.871247][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 372.552425][T10001] FAULT_INJECTION: forcing a failure. [ 372.552425][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.566994][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.0.1053 Not tainted 6.12.0-syzkaller #0 [ 372.575688][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 372.585729][T10001] Call Trace: [ 372.589010][T10001] [ 372.591925][T10001] dump_stack_lvl+0x16c/0x1f0 [ 372.596627][T10001] should_fail_ex+0x497/0x5b0 [ 372.601326][T10001] _copy_from_user+0x2e/0xd0 [ 372.605932][T10001] memdup_user+0x71/0xd0 [ 372.610177][T10001] strndup_user+0x78/0xe0 [ 372.614494][T10001] __x64_sys_mount+0x138/0x320 [ 372.619247][T10001] ? __pfx___x64_sys_mount+0x10/0x10 [ 372.624522][T10001] do_syscall_64+0xcd/0x250 [ 372.629013][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.634902][T10001] RIP: 0033:0x7f8ef757e759 [ 372.639305][T10001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.658917][T10001] RSP: 002b:00007f8ef8411038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.667330][T10001] RAX: ffffffffffffffda RBX: 00007f8ef7735f80 RCX: 00007f8ef757e759 [ 372.675286][T10001] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 372.683244][T10001] RBP: 00007f8ef8411090 R08: 00000000200003c0 R09: 0000000000000000 [ 372.691202][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.699160][T10001] R13: 0000000000000000 R14: 00007f8ef7735f80 R15: 00007ffe02c995a8 [ 372.707137][T10001] [ 372.731817][ T9992] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.769122][ T9992] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.778772][ T9992] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.787909][ T9992] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.243571][T10011] FAULT_INJECTION: forcing a failure. [ 373.243571][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 373.528431][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 373.608224][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.1.1056 Not tainted 6.12.0-syzkaller #0 [ 373.616945][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 373.627019][T10011] Call Trace: [ 373.630302][T10011] [ 373.633234][T10011] dump_stack_lvl+0x16c/0x1f0 [ 373.637921][T10011] should_fail_ex+0x497/0x5b0 [ 373.640099][T10009] 9pnet: Could not find request transport: fƒ#ò8’n³0x0000000000000003 [ 373.642621][T10011] ? fs_reclaim_acquire+0xae/0x150 [ 373.656037][T10011] should_failslab+0xc2/0x120 [ 373.660712][T10011] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 373.666072][T10011] ? security_inode_alloc+0x3b/0x2b0 [ 373.671348][T10011] security_inode_alloc+0x3b/0x2b0 [ 373.676446][T10011] inode_init_always_gfp+0xc5f/0xfb0 [ 373.681727][T10011] alloc_inode+0x82/0x230 [ 373.686071][T10011] sock_alloc+0x40/0x280 [ 373.690312][T10011] __sock_create+0xc0/0x840 [ 373.694818][T10011] __sys_socket+0x14f/0x260 [ 373.699404][T10011] ? __pfx___sys_socket+0x10/0x10 [ 373.704444][T10011] ? ksys_write+0x1ad/0x260 [ 373.708960][T10011] ? __pfx_ksys_write+0x10/0x10 [ 373.713808][T10011] __x64_sys_socket+0x72/0xb0 [ 373.718473][T10011] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.723664][T10011] do_syscall_64+0xcd/0x250 [ 373.728160][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.734056][T10011] RIP: 0033:0x7f6655b7e759 [ 373.738461][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.758057][T10011] RSP: 002b:00007f66568c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 373.766473][T10011] RAX: ffffffffffffffda RBX: 00007f6655d35f80 RCX: 00007f6655b7e759 [ 373.774437][T10011] RDX: 0000000000000300 RSI: 0200000000000002 RDI: 0000000000000011 [ 373.782404][T10011] RBP: 00007f66568c2090 R08: 0000000000000000 R09: 0000000000000000 [ 373.790360][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.798315][T10011] R13: 0000000000000000 R14: 00007f6655d35f80 R15: 00007ffc781cb7a8 [ 373.806280][T10011] [ 373.809370][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.833553][T10011] socket: no more sockets [ 373.903949][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.915432][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.963157][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.028206][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.086724][T10013] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 374.269529][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.659549][ T1209] usb 4-1: USB disconnect, device number 26 [ 374.692174][T10029] FAULT_INJECTION: forcing a failure. [ 374.692174][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.705766][ T5832] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 374.720263][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.4.1061 Not tainted 6.12.0-syzkaller #0 [ 374.728965][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 374.739035][T10029] Call Trace: [ 374.742310][T10029] [ 374.745234][T10029] dump_stack_lvl+0x16c/0x1f0 [ 374.749908][T10029] should_fail_ex+0x497/0x5b0 [ 374.754588][T10029] _copy_from_user+0x2e/0xd0 [ 374.759174][T10029] __keyctl_dh_compute+0x1b4/0xf50 [ 374.764294][T10029] ? __pfx___lock_acquire+0x10/0x10 [ 374.769482][T10029] ? psi_task_change+0x1a2/0x2d0 [ 374.774425][T10029] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 374.780066][T10029] ? __pfx_lock_release+0x10/0x10 [ 374.785106][T10029] ? trace_lock_acquire+0x14a/0x1d0 [ 374.790307][T10029] keyctl_dh_compute+0xd3/0x140 [ 374.795153][T10029] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 374.800598][T10029] ? sched_clock_cpu+0x6d/0x4d0 [ 374.805435][T10029] ? __pfx_sched_clock_cpu+0x10/0x10 [ 374.810705][T10029] ? rcu_is_watching+0x12/0xc0 [ 374.815457][T10029] ? trace_csd_function_exit+0x173/0x1f0 [ 374.821076][T10029] __do_sys_keyctl+0x4df/0x590 [ 374.825827][T10029] do_syscall_64+0xcd/0x250 [ 374.830324][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.836224][T10029] RIP: 0033:0x7ff0ab37e759 [ 374.840632][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.860257][T10029] RSP: 002b:00007ff0ac0fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 374.868663][T10029] RAX: ffffffffffffffda RBX: 00007ff0ab536058 RCX: 00007ff0ab37e759 [ 374.876634][T10029] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000017 [ 374.884590][T10029] RBP: 00007ff0ac0fd090 R08: 0000000020000280 R09: 0000000000000000 [ 374.892555][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.900516][T10029] R13: 0000000000000000 R14: 00007ff0ab536058 R15: 00007ffc35d307c8 [ 374.908577][T10029] [ 375.523442][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 375.523462][ T29] audit: type=1400 audit(1731962054.291:1590): avc: denied { write } for pid=10036 comm="syz.1.1064" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 376.033214][T10049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=10049 comm=syz.2.1065 [ 376.778299][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 378.389120][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.395426][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.650888][T10072] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 380.383178][T10087] FAULT_INJECTION: forcing a failure. [ 380.383178][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 380.396201][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.4.1077 Not tainted 6.12.0-syzkaller #0 [ 380.404904][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 380.415034][T10087] Call Trace: [ 380.418305][T10087] [ 380.421222][T10087] dump_stack_lvl+0x16c/0x1f0 [ 380.425896][T10087] should_fail_ex+0x497/0x5b0 [ 380.430559][T10087] ? fs_reclaim_acquire+0xae/0x150 [ 380.435668][T10087] should_failslab+0xc2/0x120 [ 380.440328][T10087] kmem_cache_alloc_node_noprof+0x71/0x310 [ 380.446112][T10087] ? __alloc_skb+0x2b1/0x380 [ 380.450701][T10087] __alloc_skb+0x2b1/0x380 [ 380.455136][T10087] ? __pfx___alloc_skb+0x10/0x10 [ 380.460060][T10087] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 380.466024][T10087] netlink_alloc_large_skb+0x69/0x130 [ 380.471386][T10087] netlink_sendmsg+0x689/0xd70 [ 380.476158][T10087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.481425][T10087] ____sys_sendmsg+0xaaf/0xc90 [ 380.486167][T10087] ? copy_msghdr_from_user+0x10b/0x160 [ 380.491601][T10087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.496865][T10087] ? __pfx___lock_acquire+0x10/0x10 [ 380.502056][T10087] ? __pfx___lock_acquire+0x10/0x10 [ 380.507241][T10087] ___sys_sendmsg+0x135/0x1e0 [ 380.511894][T10087] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.517086][T10087] ? lock_acquire+0x2f/0xb0 [ 380.521562][T10087] ? __fget_files+0x40/0x3f0 [ 380.526146][T10087] ? fdget+0x176/0x210 [ 380.530198][T10087] __sys_sendmsg+0x117/0x1f0 [ 380.534764][T10087] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.539854][T10087] ? __pfx___schedule+0x10/0x10 [ 380.544705][T10087] ? xfd_validate_state+0x5d/0x180 [ 380.549799][T10087] do_syscall_64+0xcd/0x250 [ 380.554278][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.560151][T10087] RIP: 0033:0x7ff0ab37e759 [ 380.564553][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.584145][T10087] RSP: 002b:00007ff0ac0fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.592534][T10087] RAX: ffffffffffffffda RBX: 00007ff0ab536058 RCX: 00007ff0ab37e759 [ 380.600502][T10087] RDX: 0000000000008040 RSI: 0000000020000140 RDI: 0000000000000007 [ 380.608452][T10087] RBP: 00007ff0ac0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 380.616399][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.624345][T10087] R13: 0000000000000000 R14: 00007ff0ab536058 R15: 00007ffc35d307c8 [ 380.632315][T10087] [ 380.878111][ T5832] Bluetooth: hci0: command tx timeout [ 381.041142][ T5880] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 382.096773][ T29] audit: type=1400 audit(1731962060.951:1591): avc: denied { write } for pid=10106 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 382.250456][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.262764][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.272633][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.285663][ T5880] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.294803][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.584010][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 382.791844][ T5880] usb 1-1: config 0 descriptor?? [ 382.798187][ T5880] usb 1-1: can't set config #0, error -71 [ 382.818246][ T5880] usb 1-1: USB disconnect, device number 21 [ 382.876216][T10117] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 383.813613][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.351266][ T5832] Bluetooth: hci0: command tx timeout [ 387.768595][T10167] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1095'. [ 387.778174][T10177] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 389.147964][ T29] audit: type=1400 audit(1731962068.031:1592): avc: denied { read } for pid=10185 comm="syz.0.1103" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.222627][ T29] audit: type=1400 audit(1731962068.031:1593): avc: denied { open } for pid=10185 comm="syz.0.1103" path="/251/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.323305][ T29] audit: type=1400 audit(1731962068.071:1594): avc: denied { map } for pid=10185 comm="syz.0.1103" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 389.555725][ T29] audit: type=1400 audit(1731962068.071:1595): avc: denied { ioctl } for pid=10185 comm="syz.0.1103" path="/251/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.580404][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.828194][ T5832] Bluetooth: hci0: command tx timeout [ 389.836008][T10194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 391.234358][T10226] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 391.428424][T10232] FAULT_INJECTION: forcing a failure. [ 391.428424][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.458971][T10234] FAULT_INJECTION: forcing a failure. [ 391.458971][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 391.507170][T10232] CPU: 0 UID: 0 PID: 10232 Comm: syz.0.1110 Not tainted 6.12.0-syzkaller #0 [ 391.515892][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 391.525984][T10232] Call Trace: [ 391.529262][T10232] [ 391.532197][T10232] dump_stack_lvl+0x16c/0x1f0 [ 391.536891][T10232] should_fail_ex+0x497/0x5b0 [ 391.541575][T10232] _copy_from_user+0x2e/0xd0 [ 391.546173][T10232] kstrtouint_from_user+0xd7/0x1c0 [ 391.551378][T10232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 391.557117][T10232] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 391.562758][T10232] proc_fail_nth_write+0x84/0x250 [ 391.567820][T10232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.573495][T10232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.579130][T10232] vfs_write+0x24c/0x1150 [ 391.583468][T10232] ? __fget_files+0x23a/0x3f0 [ 391.588151][T10232] ? fdget_pos+0x24c/0x360 [ 391.592564][T10232] ? __pfx_lock_release+0x10/0x10 [ 391.597584][T10232] ? trace_lock_acquire+0x14a/0x1d0 [ 391.602804][T10232] ? __pfx_vfs_write+0x10/0x10 [ 391.607597][T10232] ? __pfx___mutex_lock+0x10/0x10 [ 391.612648][T10232] ? __fget_files+0x244/0x3f0 [ 391.617344][T10232] ksys_write+0x12f/0x260 [ 391.621675][T10232] ? __pfx_ksys_write+0x10/0x10 [ 391.626550][T10232] do_syscall_64+0xcd/0x250 [ 391.631055][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.636955][T10232] RIP: 0033:0x7f8ef757d23f [ 391.641370][T10232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 391.660985][T10232] RSP: 002b:00007f8ef83f0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 391.669418][T10232] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ef757d23f [ 391.677402][T10232] RDX: 0000000000000001 RSI: 00007f8ef83f00a0 RDI: 0000000000000005 [ 391.685375][T10232] RBP: 00007f8ef83f0090 R08: 0000000000000000 R09: 0000000000000000 [ 391.693346][T10232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 391.701316][T10232] R13: 0000000000000000 R14: 00007f8ef7736058 R15: 00007ffe02c995a8 [ 391.709300][T10232] [ 391.712426][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.776509][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.3.1115 Not tainted 6.12.0-syzkaller #0 [ 391.785239][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 391.795398][T10234] Call Trace: [ 391.798681][T10234] [ 391.801617][T10234] dump_stack_lvl+0x16c/0x1f0 [ 391.806303][T10234] should_fail_ex+0x497/0x5b0 [ 391.810988][T10234] ? fs_reclaim_acquire+0xae/0x150 [ 391.816089][T10234] should_failslab+0xc2/0x120 [ 391.820753][T10234] kmem_cache_alloc_node_noprof+0x71/0x310 [ 391.826558][T10234] ? __alloc_skb+0x2b1/0x380 [ 391.831137][T10234] __alloc_skb+0x2b1/0x380 [ 391.835542][T10234] ? __pfx___alloc_skb+0x10/0x10 [ 391.840471][T10234] ? __lock_acquire+0x163e/0x3ce0 [ 391.845478][T10234] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 391.851804][T10234] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 391.858475][T10234] netlink_alloc_large_skb+0x69/0x130 [ 391.863862][T10234] netlink_sendmsg+0x689/0xd70 [ 391.868639][T10234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.873928][T10234] ____sys_sendmsg+0xaaf/0xc90 [ 391.878707][T10234] ? copy_msghdr_from_user+0x10b/0x160 [ 391.884155][T10234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.889437][T10234] ? __pfx___lock_acquire+0x10/0x10 [ 391.894626][T10234] ___sys_sendmsg+0x135/0x1e0 [ 391.899297][T10234] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.904491][T10234] ? lock_acquire+0x2f/0xb0 [ 391.908976][T10234] ? __fget_files+0x40/0x3f0 [ 391.913569][T10234] ? fdget+0x176/0x210 [ 391.917630][T10234] __sys_sendmsg+0x117/0x1f0 [ 391.922240][T10234] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.927371][T10234] ? __fget_files+0x244/0x3f0 [ 391.932063][T10234] do_syscall_64+0xcd/0x250 [ 391.936556][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.942454][T10234] RIP: 0033:0x7f5fe6f7e759 [ 391.946860][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.966463][T10234] RSP: 002b:00007f5fe7e50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.974868][T10234] RAX: ffffffffffffffda RBX: 00007f5fe7135f80 RCX: 00007f5fe6f7e759 [ 391.982826][T10234] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 391.990782][T10234] RBP: 00007f5fe7e50090 R08: 0000000000000000 R09: 0000000000000000 [ 391.998736][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.006690][T10234] R13: 0000000000000000 R14: 00007f5fe7135f80 R15: 00007ffe2d073a78 [ 392.014662][T10234] [ 392.049780][ T29] audit: type=1400 audit(1731962070.921:1596): avc: denied { write } for pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.072317][ T29] audit: type=1400 audit(1731962070.921:1597): avc: denied { remove_name } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.166123][ T29] audit: type=1400 audit(1731962070.921:1598): avc: denied { rename } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 392.188618][ T29] audit: type=1400 audit(1731962070.921:1599): avc: denied { add_name } for pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.211096][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.217507][ T29] audit: type=1400 audit(1731962070.921:1600): avc: denied { unlink } for pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 392.240143][ T29] audit: type=1400 audit(1731962070.921:1601): avc: denied { create } for pid=5185 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 392.260796][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.330024][T10244] overlayfs: failed to resolve './file1': -2 [ 392.584653][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.799848][T10252] FAULT_INJECTION: forcing a failure. [ 392.799848][T10252] name fail_futex, interval 1, probability 0, space 0, times 1 [ 392.813863][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.0.1119 Not tainted 6.12.0-syzkaller #0 [ 392.822579][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 392.832658][T10252] Call Trace: [ 392.835949][T10252] [ 392.838893][T10252] dump_stack_lvl+0x16c/0x1f0 [ 392.843577][T10252] should_fail_ex+0x497/0x5b0 [ 392.848241][T10252] get_futex_key+0x1bc/0x10a0 [ 392.852906][T10252] ? __pfx_get_futex_key+0x10/0x10 [ 392.857995][T10252] ? hlock_class+0x4e/0x130 [ 392.862491][T10252] ? __lock_acquire+0xbdd/0x3ce0 [ 392.867406][T10252] futex_wait_setup+0xb8/0x250 [ 392.872152][T10252] ? __pfx_futex_wait_setup+0x10/0x10 [ 392.877506][T10252] ? __pfx___lock_acquire+0x10/0x10 [ 392.882689][T10252] __futex_wait+0x267/0x3c0 [ 392.887187][T10252] ? __pfx___futex_wait+0x10/0x10 [ 392.892191][T10252] ? __pfx_futex_wake_mark+0x10/0x10 [ 392.897471][T10252] ? find_held_lock+0x2d/0x110 [ 392.902213][T10252] futex_wait+0xe9/0x380 [ 392.906433][T10252] ? __pfx_futex_wait+0x10/0x10 [ 392.911265][T10252] ? vfs_write+0x306/0x1150 [ 392.915775][T10252] do_futex+0x22b/0x350 [ 392.919930][T10252] ? __pfx_do_futex+0x10/0x10 [ 392.924586][T10252] __x64_sys_futex+0x1e1/0x4c0 [ 392.929341][T10252] ? fput+0x30/0x390 [ 392.933216][T10252] ? __pfx___x64_sys_futex+0x10/0x10 [ 392.938494][T10252] ? ksys_write+0x1ad/0x260 [ 392.942972][T10252] ? __pfx_ksys_write+0x10/0x10 [ 392.947805][T10252] do_syscall_64+0xcd/0x250 [ 392.952294][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.958180][T10252] RIP: 0033:0x7f8ef757e759 [ 392.962574][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.982175][T10252] RSP: 002b:00007f8ef8411038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 392.990575][T10252] RAX: ffffffffffffffda RBX: 00007f8ef7735f80 RCX: 00007f8ef757e759 [ 392.998535][T10252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.006484][T10252] RBP: 00007f8ef8411090 R08: 0000000000000000 R09: 0000000000000000 [ 393.014529][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.022477][T10252] R13: 0000000000000000 R14: 00007f8ef7735f80 R15: 00007ffe02c995a8 [ 393.030443][T10252] [ 393.260941][ T5832] Bluetooth: hci0: command tx timeout [ 396.078854][T10280] FAULT_INJECTION: forcing a failure. [ 396.078854][T10280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.098822][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.0.1126 Not tainted 6.12.0-syzkaller #0 [ 396.107524][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 396.117610][T10280] Call Trace: [ 396.120892][T10280] [ 396.123826][T10280] dump_stack_lvl+0x16c/0x1f0 [ 396.128531][T10280] should_fail_ex+0x497/0x5b0 [ 396.133203][T10280] _copy_to_user+0x32/0xd0 [ 396.137608][T10280] simple_read_from_buffer+0xd0/0x160 [ 396.142972][T10280] proc_fail_nth_read+0x198/0x270 [ 396.147972][T10280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.153500][T10280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.159058][T10280] vfs_read+0x1df/0xbe0 [ 396.163208][T10280] ? __fget_files+0x23a/0x3f0 [ 396.167864][T10280] ? fdget_pos+0x24c/0x360 [ 396.172252][T10280] ? __pfx_lock_release+0x10/0x10 [ 396.177253][T10280] ? trace_lock_acquire+0x14a/0x1d0 [ 396.182438][T10280] ? __pfx_vfs_read+0x10/0x10 [ 396.187097][T10280] ? __pfx___mutex_lock+0x10/0x10 [ 396.192112][T10280] ? __fget_files+0x244/0x3f0 [ 396.196775][T10280] ksys_read+0x12f/0x260 [ 396.200997][T10280] ? __pfx_ksys_read+0x10/0x10 [ 396.205742][T10280] do_syscall_64+0xcd/0x250 [ 396.210224][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.216109][T10280] RIP: 0033:0x7f8ef757d19c [ 396.220513][T10280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 396.240099][T10280] RSP: 002b:00007f8ef83f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.248493][T10280] RAX: ffffffffffffffda RBX: 00007f8ef7736058 RCX: 00007f8ef757d19c [ 396.256445][T10280] RDX: 000000000000000f RSI: 00007f8ef83f00a0 RDI: 0000000000000009 [ 396.264396][T10280] RBP: 00007f8ef83f0090 R08: 0000000000000000 R09: 0000000000000000 [ 396.272355][T10280] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 396.280315][T10280] R13: 0000000000000000 R14: 00007f8ef7736058 R15: 00007ffe02c995a8 [ 396.288279][T10280] [ 397.395487][T10296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=10296 comm=syz.3.1131 [ 397.605916][T10299] block nbd2: shutting down sockets [ 397.648747][ T1209] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 397.848467][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 397.905012][T10303] ebt_among: src integrity fail: 30a [ 397.914567][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.935520][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.953337][ T1209] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 397.978454][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.979546][T10303] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 398.020764][ T1209] usb 4-1: config 0 descriptor?? [ 398.039632][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 398.039648][ T29] audit: type=1400 audit(1731962076.931:1603): avc: denied { shutdown } for pid=10305 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.519441][ T1209] apple 0003:05AC:024F.000B: failed to start in urb: -90 [ 398.527865][ T1209] apple 0003:05AC:024F.000B: hidraw0: USB HID v7.ff Device [HID 05ac:024f] on usb-dummy_hcd.3-1/input0 [ 398.985504][ T25] usb 4-1: USB disconnect, device number 27 [ 399.988792][ T29] audit: type=1400 audit(1731962078.871:1604): avc: denied { connect } for pid=10326 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.390013][ T29] audit: type=1400 audit(1731962079.221:1605): avc: denied { write } for pid=10326 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.409672][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.424589][ T29] audit: type=1400 audit(1731962079.221:1606): avc: denied { setopt } for pid=10326 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.444058][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.028182][T10349] nbd2: detected capacity change from 0 to 22 [ 401.043941][T10346] block nbd2: shutting down sockets [ 401.100209][ C1] blk_print_req_error: 25 callbacks suppressed [ 401.100228][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.115570][ C1] buffer_io_error: 25 callbacks suppressed [ 401.115583][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.133904][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.145547][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.165210][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.187562][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.201794][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.233587][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.356002][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.374796][T10357] FAULT_INJECTION: forcing a failure. [ 401.374796][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 401.407240][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.439850][T10357] CPU: 0 UID: 0 PID: 10357 Comm: syz.4.1149 Not tainted 6.12.0-syzkaller #0 [ 401.448567][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 401.458620][T10357] Call Trace: [ 401.462072][T10357] [ 401.464989][T10357] dump_stack_lvl+0x16c/0x1f0 [ 401.469658][T10357] should_fail_ex+0x497/0x5b0 [ 401.474323][T10357] ? fs_reclaim_acquire+0xae/0x150 [ 401.479442][T10357] should_failslab+0xc2/0x120 [ 401.484116][T10357] __kmalloc_noprof+0xcb/0x400 [ 401.488876][T10357] tomoyo_encode2+0x100/0x3e0 [ 401.493547][T10357] tomoyo_encode+0x29/0x50 [ 401.497948][T10357] tomoyo_realpath_from_path+0x19d/0x720 [ 401.503572][T10357] ? tomoyo_path_number_perm+0x232/0x590 [ 401.509190][T10357] tomoyo_path_number_perm+0x245/0x590 [ 401.514635][T10357] ? tomoyo_path_number_perm+0x232/0x590 [ 401.520254][T10357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.526263][T10357] ? trace_lock_acquire+0x14a/0x1d0 [ 401.531494][T10357] ? lock_acquire+0x2f/0xb0 [ 401.536003][T10357] ? __fget_files+0x40/0x3f0 [ 401.540591][T10357] ? __fget_files+0x244/0x3f0 [ 401.545278][T10357] security_file_ioctl+0x9b/0x240 [ 401.550295][T10357] __x64_sys_ioctl+0xbb/0x220 [ 401.554976][T10357] do_syscall_64+0xcd/0x250 [ 401.559467][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.565349][T10357] RIP: 0033:0x7ff0ab37e759 [ 401.569749][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.589369][T10357] RSP: 002b:00007ff0ac11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.597771][T10357] RAX: ffffffffffffffda RBX: 00007ff0ab535f80 RCX: 00007ff0ab37e759 [ 401.605729][T10357] RDX: 0000000020000000 RSI: 000000004008ae90 RDI: 0000000000000006 [ 401.613702][T10357] RBP: 00007ff0ac11e090 R08: 0000000000000000 R09: 0000000000000000 [ 401.621680][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.629646][T10357] R13: 0000000000000000 R14: 00007ff0ab535f80 R15: 00007ffc35d307c8 [ 401.637619][T10357] [ 401.640704][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.718112][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.727558][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.753687][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.768069][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.783949][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.800119][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.808325][T10357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.809362][ T7207] ldm_validate_partition_table(): Disk read failed. [ 401.843119][ T29] audit: type=1400 audit(1731962080.731:1607): avc: denied { setopt } for pid=10359 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 401.939170][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.970500][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.979391][ T7207] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.988982][ T7207] Buffer I/O error on dev nbd2, logical block 0, async page read [ 401.997655][ T7207] Dev nbd2: unable to read RDB block 0 [ 402.003676][ T7207] nbd2: unable to read partition table [ 402.009641][ T7207] nbd2: partition table beyond EOD, truncated [ 402.021201][ T7207] ldm_validate_partition_table(): Disk read failed. [ 402.032505][ T7207] Dev nbd2: unable to read RDB block 0 [ 402.038378][ T7207] nbd2: unable to read partition table [ 402.044159][ T7207] nbd2: partition table beyond EOD, truncated [ 402.459927][ T5911] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 403.404786][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 403.412684][ T29] audit: type=1400 audit(1731962082.301:1608): avc: denied { shutdown } for pid=10377 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 403.450402][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.479168][ T5911] usb 4-1: New USB device found, idVendor=1cd2, idProduct=606f, bcdDevice=e7.b4 [ 403.489651][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.497771][ T5911] usb 4-1: Product: syz [ 403.518755][ T5911] usb 4-1: Manufacturer: syz [ 403.523680][ T5911] usb 4-1: SerialNumber: syz [ 403.762553][ T5911] gs_usb 4-1:5.0: Couldn't send data format (err=-71) [ 403.814724][T10390] FAULT_INJECTION: forcing a failure. [ 403.814724][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.828308][ T5911] gs_usb 4-1:5.0: probe with driver gs_usb failed with error -71 [ 403.938584][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.4.1160 Not tainted 6.12.0-syzkaller #0 [ 403.947319][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 403.957395][T10390] Call Trace: [ 403.960685][T10390] [ 403.963617][T10390] dump_stack_lvl+0x16c/0x1f0 [ 403.968298][T10390] should_fail_ex+0x497/0x5b0 [ 403.972980][T10390] _copy_from_user+0x2e/0xd0 [ 403.977575][T10390] do_ip6t_set_ctl+0x901/0xc40 [ 403.982348][T10390] ? rcu_is_watching+0x12/0xc0 [ 403.987119][T10390] ? trace_contention_end+0xea/0x140 [ 403.992411][T10390] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 403.997705][T10390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.003700][T10390] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 404.009692][T10390] nf_setsockopt+0x8a/0xf0 [ 404.014118][T10390] ipv6_setsockopt+0x135/0x170 [ 404.018889][T10390] tcp_setsockopt+0xa4/0x100 [ 404.023508][T10390] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 404.029436][T10390] do_sock_setsockopt+0x222/0x480 [ 404.034490][T10390] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 404.040154][T10390] ? fdget+0x176/0x210 [ 404.044240][T10390] __sys_setsockopt+0x1a4/0x270 [ 404.049097][T10390] ? __pfx___sys_setsockopt+0x10/0x10 [ 404.054473][T10390] ? fput+0x30/0x390 [ 404.058636][T10390] ? ksys_write+0x1ad/0x260 [ 404.063398][T10390] ? __pfx_ksys_write+0x10/0x10 [ 404.068263][T10390] __x64_sys_setsockopt+0xbd/0x160 [ 404.073384][T10390] ? do_syscall_64+0x91/0x250 [ 404.078072][T10390] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.083274][T10390] do_syscall_64+0xcd/0x250 [ 404.087777][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.093673][T10390] RIP: 0033:0x7ff0ab37e759 [ 404.098087][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.117712][T10390] RSP: 002b:00007ff0ac11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 404.126126][T10390] RAX: ffffffffffffffda RBX: 00007ff0ab535f80 RCX: 00007ff0ab37e759 [ 404.134097][T10390] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 404.140258][ T5911] usb 4-1: USB disconnect, device number 28 [ 404.142056][T10390] RBP: 00007ff0ac11e090 R08: 0000000000000428 R09: 0000000000000000 [ 404.142072][T10390] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 404.142083][T10390] R13: 0000000000000000 R14: 00007ff0ab535f80 R15: 00007ffc35d307c8 [ 404.142106][T10390] [ 405.180046][T10410] nbd1: detected capacity change from 0 to 22 [ 406.409771][ T5832] block nbd1: Receive control failed (result -104) [ 407.598347][ T5983] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 407.630465][ T29] audit: type=1400 audit(1731962086.511:1609): avc: denied { name_bind } for pid=10421 comm="syz.3.1167" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 408.616984][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.625928][ T5983] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 409.165288][ T5983] usb 5-1: can't read configurations, error -71 [ 409.242196][T10451] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 409.250316][T10451] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1173'. [ 409.260230][T10451] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 409.269894][T10451] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 409.508265][ T5983] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 409.667953][ T5983] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.688073][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.696135][ T5983] usb 5-1: Product: syz [ 409.722989][ T5983] usb 5-1: Manufacturer: syz [ 409.727640][ T5983] usb 5-1: SerialNumber: syz [ 409.744312][ T5983] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.759781][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.967984][T10466] VFS: could not find a valid V7 on nullb0. [ 410.975330][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 412.438183][T10470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 412.446776][T10470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 412.639472][T10478] netlink: 209192 bytes leftover after parsing attributes in process `syz.4.1179'. [ 412.649514][T10478] netlink: get zone limit has 8 unknown bytes [ 412.747582][ T29] audit: type=1326 audit(1731962091.631:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 412.771093][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.897312][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 413.175228][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 413.423863][ T29] audit: type=1326 audit(1731962092.301:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 413.497042][ T29] audit: type=1326 audit(1731962092.301:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 413.730457][ T29] audit: type=1326 audit(1731962092.301:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 413.973436][T10495] ubi: mtd0 is already attached to ubi0 [ 413.981668][T10495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1000 sclass=netlink_xfrm_socket pid=10495 comm=syz.2.1184 [ 414.190504][ T29] audit: type=1326 audit(1731962092.301:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 414.275891][ T29] audit: type=1326 audit(1731962092.301:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 414.319926][ T29] audit: type=1326 audit(1731962092.311:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 414.343404][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.377269][ T29] audit: type=1326 audit(1731962092.311:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 414.649895][ T29] audit: type=1326 audit(1731962092.311:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 414.673429][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.704991][ T29] audit: type=1326 audit(1731962092.311:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef757e759 code=0x7fc00000 [ 415.359820][T10505] : renamed from bond0 (while UP) [ 415.382458][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 417.773881][T10520] VFS: could not find a valid V7 on nullb0. [ 417.785260][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 418.084704][T10527] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1192'. [ 419.167618][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 419.167633][ T29] audit: type=1400 audit(1731962098.051:1678): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.482366][ T29] audit: type=1400 audit(1731962098.371:1679): avc: denied { ioctl } for pid=10531 comm="syz.0.1194" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 419.901935][ T1209] usb 2-1: USB disconnect, device number 25 [ 422.979491][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.993964][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.003830][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.015807][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.109831][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.120494][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.167609][ T29] audit: type=1400 audit(1731962102.051:1680): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 424.450569][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 424.483978][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 425.296439][T10549] chnl_net:caif_netlink_parms(): no params data found [ 425.315633][ T55] Bluetooth: hci5: command tx timeout [ 425.931606][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.959689][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.989514][T10549] bridge_slave_0: entered allmulticast mode [ 426.012728][T10549] bridge_slave_0: entered promiscuous mode [ 426.049449][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.083090][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.126610][T10549] bridge_slave_1: entered allmulticast mode [ 426.153303][T10549] bridge_slave_1: entered promiscuous mode [ 426.256854][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.308986][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.432223][T10549] team0: Port device team_slave_0 added [ 426.465112][T10549] team0: Port device team_slave_1 added [ 426.692152][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.728195][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.838127][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.864979][ T29] audit: type=1400 audit(1731962105.751:1681): avc: denied { ioctl } for pid=10582 comm="syz.4.1206" path="socket:[28124]" dev="sockfs" ino=28124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.936895][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.962016][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.048144][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.340453][ T55] Bluetooth: hci5: command tx timeout [ 427.528302][ T1209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 427.757071][ T1209] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 427.786932][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.814380][T10549] hsr_slave_0: entered promiscuous mode [ 427.835084][ T1209] usb 3-1: Product: syz [ 427.850611][ T1209] usb 3-1: Manufacturer: syz [ 427.866719][ T1209] usb 3-1: SerialNumber: syz [ 427.878927][T10549] hsr_slave_1: entered promiscuous mode [ 427.895512][ T1209] usb 3-1: config 0 descriptor?? [ 427.916659][T10549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.942765][T10549] Cannot create hsr debugfs directory [ 427.985636][ T5876] usb 5-1: USB disconnect, device number 19 [ 428.025507][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 428.034849][ T25] ath9k_htc: Failed to initialize the device [ 428.091559][ T5876] usb 5-1: ath9k_htc: USB layer deinitialized [ 428.143461][ T29] audit: type=1400 audit(1731962107.031:1682): avc: denied { map_create } for pid=10584 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 428.195615][T10591] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 428.209814][ T29] audit: type=1400 audit(1731962107.031:1683): avc: denied { ioctl } for pid=10584 comm="syz.2.1207" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.269947][ T29] audit: type=1400 audit(1731962107.061:1684): avc: denied { create } for pid=10589 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.288187][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.311315][T10590] netlink: 'syz.0.1210': attribute type 29 has an invalid length. [ 428.320767][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.360637][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.377604][ T1209] usb 3-1: Firmware version (0.0) predates our first public release. [ 428.387441][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.395381][ T1209] usb 3-1: Please update to version 0.2 or newer [ 428.402181][ T5834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 428.409541][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.428290][ T5876] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 428.467458][ T29] audit: type=1400 audit(1731962107.111:1685): avc: denied { read } for pid=5185 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 428.490650][ T29] audit: type=1400 audit(1731962107.111:1686): avc: denied { search } for pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.523359][ T29] audit: type=1400 audit(1731962107.111:1687): avc: denied { append } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.524183][T10598] autofs4:pid:10598:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 428.598336][ T1209] usb 3-1: USB disconnect, device number 24 [ 428.598702][ T29] audit: type=1400 audit(1731962107.111:1688): avc: denied { open } for pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.627667][ T5876] usb 5-1: device descriptor read/64, error -71 [ 428.637744][ T29] audit: type=1400 audit(1731962107.111:1689): avc: denied { getattr } for pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.672217][ T29] audit: type=1400 audit(1731962107.151:1690): avc: denied { create } for pid=10594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.878588][ T5876] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 428.889130][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.459896][ T5834] Bluetooth: hci5: command tx timeout [ 429.537269][ T5876] usb 5-1: device descriptor read/64, error -71 [ 429.571894][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.697246][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.761766][ T5876] usb usb5-port1: attempt power cycle [ 430.362482][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.388503][ T5876] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 430.396791][T10549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 430.410107][T10549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.467586][T10549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 430.476814][T10549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.538256][ T5834] Bluetooth: hci6: command tx timeout [ 430.603589][ T5876] usb 5-1: device not accepting address 22, error -71 [ 431.326537][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.507843][ T5834] Bluetooth: hci5: command tx timeout [ 431.873817][T10549] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.032162][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.039347][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.112398][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 432.112436][ T29] audit: type=1400 audit(1731962110.981:1734): avc: denied { create } for pid=10630 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.475094][ T29] audit: type=1400 audit(1731962110.991:1735): avc: denied { setopt } for pid=10630 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.581629][ T29] audit: type=1400 audit(1731962110.991:1736): avc: denied { connect } for pid=10630 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.619987][ T55] Bluetooth: hci6: command tx timeout [ 432.698345][ T29] audit: type=1400 audit(1731962110.991:1737): avc: denied { name_connect } for pid=10630 comm="syz.0.1218" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 432.711071][T10630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.995724][ T29] audit: type=1400 audit(1731962111.061:1738): avc: denied { getopt } for pid=10630 comm="syz.0.1218" lport=54831 faddr=::ffff:172.30.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.079604][ T29] audit: type=1400 audit(1731962111.071:1739): avc: denied { ioctl } for pid=10630 comm="syz.0.1218" path="socket:[28937]" dev="sockfs" ino=28937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.111544][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 433.116645][ T29] audit: type=1400 audit(1731962111.221:1740): avc: denied { map } for pid=10637 comm="syz.4.1219" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 433.275185][ T29] audit: type=1400 audit(1731962111.221:1741): avc: denied { read write } for pid=10637 comm="syz.4.1219" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 433.300646][ T29] audit: type=1400 audit(1731962112.001:1742): avc: denied { write } for pid=10637 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.321819][ T29] audit: type=1400 audit(1731962112.011:1743): avc: denied { write } for pid=10631 comm="syz.2.1217" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 434.086242][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 434.707560][ T55] Bluetooth: hci6: command tx timeout [ 434.808744][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.823693][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.836066][ T33] bond0 (unregistering): Released all slaves [ 434.846154][ T33] bond1 (unregistering): Released all slaves [ 434.866060][T10594] chnl_net:caif_netlink_parms(): no params data found [ 434.890473][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.897649][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.965439][ T33] tipc: Disabling bearer [ 434.994706][ T33] tipc: Left network mode [ 435.404002][ T42] block nbd1: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 30 seconds [ 436.523993][T10549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.816735][ T5834] Bluetooth: hci6: command tx timeout [ 437.166489][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.209904][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.251375][T10594] bridge_slave_0: entered allmulticast mode [ 437.258884][T10594] bridge_slave_0: entered promiscuous mode [ 437.325649][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.340197][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.348299][T10594] bridge_slave_1: entered allmulticast mode [ 437.361913][T10594] bridge_slave_1: entered promiscuous mode [ 437.537039][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.559990][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.601700][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.678435][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.896499][T10594] team0: Port device team_slave_0 added [ 438.065383][T10594] team0: Port device team_slave_1 added [ 438.170391][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 438.170409][ T29] audit: type=1400 audit(1731962117.061:1761): avc: denied { create } for pid=10691 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 438.256519][ T29] audit: type=1400 audit(1731962117.061:1762): avc: denied { bind } for pid=10691 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 438.276098][ T29] audit: type=1400 audit(1731962117.061:1763): avc: denied { name_bind } for pid=10691 comm="syz.4.1229" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 438.297269][ T29] audit: type=1400 audit(1731962117.061:1764): avc: denied { node_bind } for pid=10691 comm="syz.4.1229" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 438.318431][ T29] audit: type=1400 audit(1731962117.061:1765): avc: denied { listen } for pid=10691 comm="syz.4.1229" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 438.339241][ T29] audit: type=1400 audit(1731962117.061:1766): avc: denied { connect } for pid=10691 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 438.359292][ T29] audit: type=1400 audit(1731962117.061:1767): avc: denied { name_connect } for pid=10691 comm="syz.4.1229" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 438.380948][ T29] audit: type=1400 audit(1731962117.061:1768): avc: denied { accept } for pid=10691 comm="syz.4.1229" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 438.645074][ T29] audit: type=1400 audit(1731962117.531:1769): avc: denied { create } for pid=10703 comm="syz.2.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 438.858105][ T29] audit: type=1400 audit(1731962117.561:1770): avc: denied { write } for pid=10703 comm="syz.2.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 438.919819][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.926802][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.958144][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.342975][ T33] hsr_slave_0: left promiscuous mode [ 439.376497][ T33] hsr_slave_1: left promiscuous mode [ 439.423946][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.544476][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.644291][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.682761][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.737438][ T33] veth1_macvtap: left promiscuous mode [ 439.746291][ T33] veth0_macvtap: left promiscuous mode [ 439.755732][ T33] veth1_vlan: left promiscuous mode [ 439.763299][ T33] veth0_vlan: left promiscuous mode [ 439.829849][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.836388][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.978187][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 440.195113][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 440.204682][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.248530][ T9] usb 1-1: Product: syz [ 440.252748][ T9] usb 1-1: Manufacturer: syz [ 440.278549][ T9] usb 1-1: SerialNumber: syz [ 440.294429][ T9] usb 1-1: config 0 descriptor?? [ 441.109832][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 441.118388][ T9] usb 1-1: Please update to version 0.2 or newer [ 442.546900][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.766206][ T33] team0 (unregistering): Port device team_slave_1 removed [ 443.433432][ T33] team0 (unregistering): Port device team_slave_0 removed [ 443.640229][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 443.640248][ T29] audit: type=1400 audit(1731962122.531:1784): avc: denied { read } for pid=10750 comm="syz.2.1240" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.693494][ T29] audit: type=1400 audit(1731962122.571:1785): avc: denied { open } for pid=10750 comm="syz.2.1240" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.717524][ T29] audit: type=1400 audit(1731962122.581:1786): avc: denied { ioctl } for pid=10750 comm="syz.2.1240" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.863401][T10756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 443.871922][T10756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 443.943687][ T29] audit: type=1400 audit(1731962122.711:1787): avc: denied { create } for pid=10750 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 444.446913][ T29] audit: type=1400 audit(1731962122.721:1788): avc: denied { create } for pid=10750 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 444.488126][ T29] audit: type=1400 audit(1731962122.741:1789): avc: denied { bind } for pid=10750 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 444.565670][ T29] audit: type=1400 audit(1731962122.741:1790): avc: denied { write } for pid=10750 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 446.998820][ T29] audit: type=1400 audit(1731962125.701:1791): avc: denied { create } for pid=10772 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 447.237375][ T29] audit: type=1400 audit(1731962126.021:1792): avc: denied { create } for pid=10774 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.850224][ T29] audit: type=1400 audit(1731962126.741:1793): avc: denied { mounton } for pid=10786 comm="syz.4.1250" path="/255/file0" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 447.880730][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.887715][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.920182][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.963748][ T9] usb 1-1: USB disconnect, device number 22 [ 448.113995][T10594] hsr_slave_0: entered promiscuous mode [ 448.137933][T10594] hsr_slave_1: entered promiscuous mode [ 448.151651][T10594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.160505][T10594] Cannot create hsr debugfs directory [ 448.918939][T10549] veth0_vlan: entered promiscuous mode [ 448.920397][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.959954][T10549] veth1_vlan: entered promiscuous mode [ 449.124169][T10549] veth0_macvtap: entered promiscuous mode [ 449.135633][T10549] veth1_macvtap: entered promiscuous mode [ 449.210228][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.228916][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.437885][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.842978][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.859239][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.897451][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.918743][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.926945][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 449.934048][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.047251][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.173465][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.189371][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.199844][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.231404][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.246576][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.257342][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.267592][T10549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.278283][T10549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.307526][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.343450][T10810] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.1256'. [ 450.383986][T10549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.393116][T10549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.402235][T10549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.414548][T10549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.484507][T10594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 450.516586][T10594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.536366][ T5834] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 450.536436][ T5834] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 450.544252][ T5834] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 450.553151][ T5834] Bluetooth: hci4: Malformed LE Event: 0x02 [ 450.602380][T10594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 450.684559][T10594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.830885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.841363][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.914389][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.932925][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.943939][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.980975][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 450.980992][ T29] audit: type=1400 audit(1731962129.871:1796): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/root/syzkaller.HV7lAy/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 451.029423][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.097386][ T29] audit: type=1400 audit(1731962129.911:1797): avc: denied { mount } for pid=10549 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 451.121614][T10594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.179500][ T29] audit: type=1400 audit(1731962129.911:1798): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/root/syzkaller.HV7lAy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 451.237023][ T29] audit: type=1400 audit(1731962129.911:1799): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/root/syzkaller.HV7lAy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 451.296011][ T29] audit: type=1400 audit(1731962129.911:1800): avc: denied { unmount } for pid=10549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 451.316008][T10594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.348992][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.356118][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.373901][ T29] audit: type=1400 audit(1731962129.921:1801): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 451.408258][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.415364][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.451277][ T29] audit: type=1400 audit(1731962129.941:1802): avc: denied { mount } for pid=10549 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 452.199558][ T29] audit: type=1400 audit(1731962129.941:1803): avc: denied { mounton } for pid=10549 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 452.229325][ T29] audit: type=1400 audit(1731962130.801:1804): avc: denied { create } for pid=10818 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.249827][ T29] audit: type=1400 audit(1731962130.801:1805): avc: denied { bind } for pid=10818 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.433645][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.615975][T10594] veth0_vlan: entered promiscuous mode [ 452.628518][T10594] veth1_vlan: entered promiscuous mode [ 452.653015][T10594] veth0_macvtap: entered promiscuous mode [ 452.663169][T10594] veth1_macvtap: entered promiscuous mode [ 452.686306][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.697119][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.715179][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.725900][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.736173][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.746733][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.756984][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.768145][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.778121][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.789922][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.801246][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.815563][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.834599][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.845615][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.856522][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.869277][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.880012][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.891236][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.901830][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.912187][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.922767][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.935732][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.950251][T10594] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.959425][T10594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.968589][T10594] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.977294][T10594] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.271762][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.294718][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.361775][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.407207][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.156844][T10849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.961749][T10864] VFS: could not find a valid V7 on nullb0. [ 454.973176][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1266'. [ 456.180150][T10873] fuse: Bad value for 'fd' [ 457.278999][T10885] can0: slcan on ttyS3. [ 457.502210][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 457.502231][ T29] audit: type=1400 audit(1731962136.081:1821): avc: denied { shutdown } for pid=10883 comm="syz.0.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.532437][ T29] audit: type=1400 audit(1731962136.091:1822): avc: denied { write } for pid=10883 comm="syz.0.1271" path="socket:[30455]" dev="sockfs" ino=30455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.758389][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 457.990135][T10882] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 458.574508][ T5874] IPVS: starting estimator thread 0... [ 458.658230][T10883] can0 (unregistered): slcan off ttyS3. [ 458.818292][T10626] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 458.993133][T10905] IPVS: using max 48 ests per chain, 115200 per kthread [ 459.117815][T10912] VFS: could not find a valid V7 on nullb0. [ 459.127267][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1278'. [ 459.725278][T10626] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 459.734600][T10626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.744032][T10626] usb 7-1: Product: syz [ 459.758114][T10626] usb 7-1: Manufacturer: syz [ 459.763092][T10626] usb 7-1: SerialNumber: syz [ 460.224588][T10626] usb 7-1: config 0 descriptor?? [ 460.438271][ T29] audit: type=1400 audit(1731962139.271:1823): avc: denied { create } for pid=10920 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 460.730728][ T29] audit: type=1400 audit(1731962139.271:1824): avc: denied { bind } for pid=10920 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 460.797310][ T29] audit: type=1400 audit(1731962139.281:1825): avc: denied { connect } for pid=10920 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 461.072102][ T29] audit: type=1326 audit(1731962139.941:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 461.350698][T10626] usb 7-1: Firmware version (0.0) predates our first public release. [ 461.367792][T10626] usb 7-1: Please update to version 0.2 or newer [ 461.555637][T10626] usb 7-1: USB disconnect, device number 2 [ 461.592078][ T29] audit: type=1326 audit(1731962140.481:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 462.083470][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1288'. [ 463.652433][ T29] audit: type=1400 audit(1731962142.531:1828): avc: denied { write } for pid=10960 comm="syz.5.1291" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=57652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 465.828261][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 466.075104][ T42] block nbd1: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 60 seconds [ 466.078336][ T25] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 466.092176][T10999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 466.164766][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.354377][ T25] usb 7-1: Product: syz [ 466.405201][ T25] usb 7-1: Manufacturer: syz [ 466.414958][ T25] usb 7-1: SerialNumber: syz [ 466.444631][ T25] usb 7-1: config 0 descriptor?? [ 466.842357][ T29] audit: type=1400 audit(1731962145.721:1829): avc: denied { open } for pid=11001 comm="syz.0.1302" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 467.163656][ T29] audit: type=1400 audit(1731962146.051:1830): avc: denied { write } for pid=11010 comm="syz.2.1304" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 467.203163][ T29] audit: type=1400 audit(1731962146.051:1831): avc: denied { open } for pid=11010 comm="syz.2.1304" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 467.384343][ T29] audit: type=1400 audit(1731962146.091:1832): avc: denied { read } for pid=11010 comm="syz.2.1304" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 467.414744][ T25] usb 7-1: Firmware version (0.0) predates our first public release. [ 467.423712][ T25] usb 7-1: Please update to version 0.2 or newer [ 468.032461][ T29] audit: type=1400 audit(1731962146.271:1833): avc: denied { name_bind } for pid=11010 comm="syz.2.1304" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 468.056248][ T29] audit: type=1400 audit(1731962146.271:1834): avc: denied { node_bind } for pid=11010 comm="syz.2.1304" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 468.157233][ T25] usb 7-1: USB disconnect, device number 3 [ 468.364010][ T5880] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 469.241563][ T5880] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 469.254139][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.277933][ T5880] usb 1-1: Product: syz [ 469.284876][ T5880] usb 1-1: Manufacturer: syz [ 469.289826][ T5880] usb 1-1: SerialNumber: syz [ 469.412435][ T5880] usb 1-1: config 0 descriptor?? [ 470.396689][ T5880] usb 1-1: Firmware version (0.0) predates our first public release. [ 470.433335][ T5880] usb 1-1: Please update to version 0.2 or newer [ 470.928735][ T5880] usb 1-1: USB disconnect, device number 23 [ 471.211057][T11066] VFS: could not find a valid V7 on nullb0. [ 471.225238][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 473.186968][T11095] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 474.503365][ T29] audit: type=1400 audit(1731962153.391:1835): avc: denied { execute } for pid=11085 comm="syz.0.1320" path="/302/cpu.stat" dev="tmpfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 475.264470][ T5834] Bluetooth: hci0: command tx timeout [ 475.383437][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 477.052563][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 477.423909][ T29] audit: type=1400 audit(1731962156.301:1836): avc: denied { mount } for pid=11146 comm="syz.2.1335" name="/" dev="ramfs" ino=31997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 477.518107][ T29] audit: type=1400 audit(1731962156.351:1837): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 478.639237][T11165] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.1339'. [ 478.854102][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1339'. [ 479.058651][T11170] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 481.629796][ T5834] Bluetooth: hci0: command tx timeout [ 481.659153][T11189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.203575][T11245] VFS: could not find a valid V7 on nullb0. [ 485.265426][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 487.726505][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 488.184305][T11288] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.1371'. [ 488.329468][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 489.040338][ T29] audit: type=1400 audit(1731962167.931:1838): avc: denied { ioctl } for pid=11287 comm="syz.4.1373" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.220452][T11300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 489.228584][T11300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 491.657044][T11331] VFS: could not find a valid V7 on nullb0. [ 491.687927][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 492.608772][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 492.616355][ T1209] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 493.348308][ T29] audit: type=1400 audit(1731962172.231:1839): avc: denied { write } for pid=11327 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.375625][ T5880] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 493.406176][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.440769][ T29] audit: type=1400 audit(1731962172.281:1840): avc: denied { read } for pid=11327 comm="syz.2.1384" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 493.445543][ T5880] usb 7-1: Product: syz [ 493.472851][T11348] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 493.501047][ T5880] usb 7-1: Manufacturer: syz [ 493.516475][ T5880] usb 7-1: SerialNumber: syz [ 493.531581][ T29] audit: type=1400 audit(1731962172.281:1841): avc: denied { open } for pid=11327 comm="syz.2.1384" path="/281/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 493.540784][T11348] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 493.581196][ T5880] usb 7-1: config 0 descriptor?? [ 493.592801][ T1209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.603166][ T1209] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 493.612080][ T29] audit: type=1400 audit(1731962172.281:1842): avc: denied { ioctl } for pid=11327 comm="syz.2.1384" path="/281/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 493.636989][ T1209] usb 3-1: can't read configurations, error -71 [ 494.021512][ T5880] usb 7-1: Firmware version (0.0) predates our first public release. [ 494.033591][ T5880] usb 7-1: Please update to version 0.2 or newer [ 494.106311][ T5880] usb 7-1: USB disconnect, device number 4 [ 494.231259][ T29] audit: type=1326 audit(1731962173.121:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ab37e759 code=0x7fc00000 [ 496.760668][ T42] block nbd1: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 90 seconds [ 497.102961][T11399] VFS: could not find a valid V7 on nullb0. [ 497.110537][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1401'. [ 497.331326][T11402] netlink: 2052 bytes leftover after parsing attributes in process `syz.6.1400'. [ 497.340967][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1400'. [ 498.053019][T11410] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 498.062020][T11410] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 498.759067][ T29] audit: type=1326 audit(1731962177.651:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ab37e759 code=0x7fc00000 [ 501.503810][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.510389][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.881927][T11450] VFS: could not find a valid V7 on nullb0. [ 501.889160][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1413'. [ 502.966398][ T29] audit: type=1400 audit(1731962181.841:1845): avc: denied { create } for pid=11457 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 503.282065][T11465] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 503.290592][T11465] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 503.454316][ T29] audit: type=1326 audit(1731962182.341:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830f37e759 code=0x7fc00000 [ 503.797261][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 503.964841][ T29] audit: type=1326 audit(1731962182.781:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f830f37e759 code=0x7fc00000 [ 504.150374][ T5874] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 504.159656][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.208170][ T5874] usb 5-1: Product: syz [ 504.212475][ T5874] usb 5-1: Manufacturer: syz [ 504.217185][ T5874] usb 5-1: SerialNumber: syz [ 504.263947][ T5874] usb 5-1: config 0 descriptor?? [ 504.274875][ T5874] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 505.414697][ T5874] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 505.422876][ T5874] sq905c 5-1:0.0: Get version command failed [ 505.429281][ T5874] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 506.922319][ T5876] usb 5-1: USB disconnect, device number 24 [ 507.157529][T11507] VFS: could not find a valid V7 on nullb0. [ 507.165375][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 508.595568][T11519] netlink: 209192 bytes leftover after parsing attributes in process `syz.6.1427'. [ 508.605445][T11519] netlink: get zone limit has 8 unknown bytes [ 508.612193][T11522] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 508.622172][T11522] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 509.850037][ T29] audit: type=1326 audit(1731962188.721:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 510.400223][ T29] audit: type=1326 audit(1731962189.241:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde8e37e759 code=0x7fc00000 [ 510.697599][T11568] VFS: could not find a valid V7 on nullb0. [ 510.706252][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 510.763780][T11567] netlink: 2052 bytes leftover after parsing attributes in process `syz.6.1440'. [ 510.792510][T11567] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 514.355059][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 514.750770][T11616] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1453'. [ 515.754007][T11631] VFS: could not find a valid V7 on nullb0. [ 515.887891][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1456'. [ 516.028288][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 516.207529][ T25] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 516.272962][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.301626][ T25] usb 1-1: Product: syz [ 516.313152][ T25] usb 1-1: Manufacturer: syz [ 516.318314][ T25] usb 1-1: SerialNumber: syz [ 516.329911][ T25] usb 1-1: config 0 descriptor?? [ 516.374218][ T29] audit: type=1326 audit(1731962195.261:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ab37e759 code=0x7fc00000 [ 516.400276][ T29] audit: type=1326 audit(1731962195.291:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0ab37e759 code=0x7fc00000 [ 516.773296][ T25] usb 1-1: Firmware version (0.0) predates our first public release. [ 516.799271][ T25] usb 1-1: Please update to version 0.2 or newer [ 516.924489][ T25] usb 1-1: USB disconnect, device number 24 [ 517.068610][ T1209] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 517.208254][ T1209] usb 3-1: device descriptor read/64, error -71 [ 517.668155][T11657] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 518.260944][ T1209] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 519.198306][ T1209] usb 3-1: device descriptor read/64, error -71 [ 519.318433][ T1209] usb usb3-port1: attempt power cycle [ 519.658093][ T55] Bluetooth: hci0: command tx timeout [ 519.668165][ T1209] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 519.723367][ T1209] usb 3-1: device descriptor read/8, error -71 [ 519.814165][T11680] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1469'. [ 521.266110][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 522.221486][T11717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 522.342283][T11717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 522.382620][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 522.776745][T11728] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 524.710875][T11751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 524.719512][T11751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 525.345887][ T55] Bluetooth: hci0: command tx timeout [ 526.761631][T11775] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.1491'. [ 526.859924][ T42] block nbd1: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 120 seconds [ 527.089305][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 528.916970][T11802] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 528.925543][T11802] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.574412][T11830] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 534.052083][T10626] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 534.258489][T10626] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 534.283782][T10626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.312147][T10626] usb 1-1: Product: syz [ 534.316366][T10626] usb 1-1: Manufacturer: syz [ 534.337235][ T29] audit: type=1326 audit(1731962213.221:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830f37e759 code=0x7fc00000 [ 534.368039][T10626] usb 1-1: SerialNumber: syz [ 534.380251][T10626] usb 1-1: config 0 descriptor?? [ 534.548255][ T55] Bluetooth: hci0: command tx timeout [ 534.648252][T11846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.947196][ T29] audit: type=1326 audit(1731962213.831:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f830f37e759 code=0x7fc00000 [ 534.968410][T11864] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.1513'. [ 535.177316][T11867] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1514'. [ 536.417781][T10626] usb 1-1: Firmware version (0.0) predates our first public release. [ 536.426687][T10626] usb 1-1: Please update to version 0.2 or newer [ 536.643364][T10626] usb 1-1: USB disconnect, device number 25 [ 538.691616][T11905] netlink: 209192 bytes leftover after parsing attributes in process `syz.2.1523'. [ 538.702276][T11905] netlink: get zone limit has 8 unknown bytes [ 539.697193][T11907] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 540.520529][T11925] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1528'. [ 541.603965][ T55] Bluetooth: hci0: command tx timeout [ 543.936319][T11956] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 545.990047][ T55] Bluetooth: hci0: command tx timeout [ 546.400805][T11976] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 548.508639][ T5834] Bluetooth: hci0: command tx timeout [ 549.421390][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 549.460722][T12002] VFS: could not find a valid V7 on nullb0. [ 549.489307][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1547'. [ 550.908407][T12020] netlink: 2080 bytes leftover after parsing attributes in process `syz.0.1551'. [ 551.459733][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1552'. [ 555.625172][ T5203] udevd[5203]: worker [7207] /devices/virtual/block/nbd1 is taking a long time [ 556.738821][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 557.228471][ T42] block nbd1: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 150 seconds [ 557.258054][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 557.389591][T12059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 557.474465][T12067] VFS: could not find a valid V7 on nullb0. [ 557.487154][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 558.053390][T12059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 558.632787][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 558.853168][T12080] netlink: 1832 bytes leftover after parsing attributes in process `syz.6.1566'. [ 558.939596][T12082] netlink: 2080 bytes leftover after parsing attributes in process `syz.2.1567'. [ 559.913779][T12100] VFS: could not find a valid V7 on nullb0. [ 559.921368][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 560.138436][ T30] INFO: task syz.1.1163:10400 blocked for more than 143 seconds. [ 560.146902][ T30] Not tainted 6.12.0-syzkaller #0 [ 560.155127][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.169403][T12103] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 560.198483][ T30] task:syz.1.1163 state:D stack:25312 pid:10400 tgid:10400 ppid:5826 flags:0x00000004 [ 560.255018][ T30] Call Trace: [ 560.281562][ T30] [ 560.284551][ T30] __schedule+0xe55/0x5740 [ 560.289217][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.294455][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.299745][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.304979][ T30] ? __pfx___schedule+0x10/0x10 [ 560.310351][ T30] ? schedule+0x298/0x350 [ 560.314704][ T30] ? __pfx_lock_release+0x10/0x10 [ 560.319783][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 560.348556][ T30] ? lock_acquire+0x2f/0xb0 [ 560.353130][ T30] ? schedule+0x1fd/0x350 [ 560.357496][ T30] schedule+0xe7/0x350 [ 560.361657][ T30] schedule_preempt_disabled+0x13/0x30 [ 560.367132][ T30] __mutex_lock+0x5b8/0x9c0 [ 560.371714][ T30] ? bdev_release+0x15a/0x6d0 [ 560.376429][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 560.381555][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 560.387373][ T30] ? bdev_release+0x15a/0x6d0 [ 560.392159][ T30] bdev_release+0x15a/0x6d0 [ 560.396690][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 560.401965][ T30] blkdev_release+0x15/0x20 [ 560.406488][ T30] __fput+0x3f6/0xb60 [ 560.410841][ T30] task_work_run+0x14e/0x250 [ 560.415453][ T30] ? __pfx_task_work_run+0x10/0x10 [ 560.420894][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 560.426549][ T30] do_syscall_64+0xda/0x250 [ 560.431110][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.437026][ T30] RIP: 0033:0x7f6655b7e759 [ 560.441521][ T30] RSP: 002b:00007ffc781cb908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 560.450006][ T30] RAX: 0000000000000000 RBX: 00007f6655d37a80 RCX: 00007f6655b7e759 [ 560.458022][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 560.466004][ T30] RBP: 00007f6655d37a80 R08: 0000000000000006 R09: 00007ffc781cbbff [ 560.474081][ T30] R10: 00000000003fe440 R11: 0000000000000246 R12: 0000000000063049 [ 560.482095][ T30] R13: 00007ffc781cba10 R14: 0000000000000032 R15: ffffffffffffffff [ 560.490370][ T30] [ 560.493411][ T30] INFO: task syz.1.1163:10410 blocked for more than 143 seconds. [ 560.501473][ T30] Not tainted 6.12.0-syzkaller #0 [ 560.507501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.534657][ T30] task:syz.1.1163 state:D stack:28144 pid:10410 tgid:10400 ppid:5826 flags:0x00004004 [ 560.548107][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 560.565230][ T30] Call Trace: [ 560.568740][ T30] [ 560.571694][ T30] __schedule+0xe55/0x5740 [ 560.576140][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.581473][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.586687][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 560.592206][ T30] ? __pfx___schedule+0x10/0x10 [ 560.597095][ T30] ? schedule+0x298/0x350 [ 560.601788][ T30] ? __pfx_lock_release+0x10/0x10 [ 560.606832][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 560.612154][ T30] ? lock_acquire+0x2f/0xb0 [ 560.617125][ T30] ? schedule+0x1fd/0x350 [ 560.621592][ T30] schedule+0xe7/0x350 [ 560.625687][ T30] schedule_preempt_disabled+0x13/0x30 [ 560.631217][ T30] __mutex_lock+0x5b8/0x9c0 [ 560.635746][ T30] ? bdev_release+0x15a/0x6d0 [ 560.640552][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 560.645601][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 560.650861][ T30] ? bdev_release+0x15a/0x6d0 [ 560.655549][ T30] bdev_release+0x15a/0x6d0 [ 560.660187][ T30] ? task_work_run+0x126/0x250 [ 560.664966][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 560.670223][ T30] blkdev_release+0x15/0x20 [ 560.674737][ T30] __fput+0x3f6/0xb60 [ 560.678797][ T30] task_work_run+0x14e/0x250 [ 560.683399][ T30] ? __pfx_task_work_run+0x10/0x10 [ 560.688557][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 560.694726][ T30] do_syscall_64+0xda/0x250 [ 560.699295][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.705213][ T30] RIP: 0033:0x7f6655b7e759 [ 560.709693][ T30] RSP: 002b:00007f6653db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.718406][ T30] RAX: 0000000000000000 RBX: 00007f6655d36208 RCX: 00007f6655b7e759 [ 560.726398][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 560.734695][ T30] RBP: 00007f6655bf175e R08: 0000000000000000 R09: 0000000000000000 [ 560.742744][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.750798][ T30] R13: 0000000000000000 R14: 00007f6655d36208 R15: 00007ffc781cb7a8 [ 560.758837][ T30] [ 560.761898][ T30] [ 560.761898][ T30] Showing all locks held in the system: [ 560.769702][ T30] 5 locks held by kworker/0:1/9: [ 560.774644][ T30] #0: ffff888144a8fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 560.787180][ T30] #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 560.822654][ T30] #2: ffff888145ff8190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 560.831650][ T30] #3: ffff8880283b7510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 560.841670][ T30] #4: ffff888144b4a268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 560.851449][ T30] 1 lock held by khungtaskd/30: [ 560.856312][ T30] #0: ffffffff8e1b83c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 560.866280][ T30] 3 locks held by kworker/u8:9/3483: [ 560.871611][ T30] 2 locks held by getty/5594: [ 560.876291][ T30] #0: ffff888031da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 560.886211][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 560.896694][ T30] 1 lock held by udevd/7207: [ 560.901654][ T30] #0: ffff888025fb34c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe20 [ 560.911058][ T30] 1 lock held by syz.1.1163/10400: [ 560.916181][ T30] #0: ffff888025fb34c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x15a/0x6d0 [ 560.926053][ T30] 1 lock held by syz.1.1163/10410: [ 560.931415][ T30] #0: ffff888025fb34c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x15a/0x6d0 [ 560.941092][ T30] 1 lock held by syz.6.1572/12109: [ 560.946232][ T30] 2 locks held by syz.6.1572/12112: [ 560.951489][ T30] 2 locks held by syz.0.1575/12105: [ 560.956703][ T30] #0: ffff88805e419408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 560.967385][ T30] #1: ffffffff8e1c3cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 560.977528][ T30] [ 560.979923][ T30] ============================================= [ 560.979923][ T30] [ 560.982079][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.988383][ T30] NMI backtrace for cpu 1 [ 560.988400][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller #0 [ 560.988422][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 560.988432][ T30] Call Trace: [ 560.988441][ T30] [ 560.988448][ T30] dump_stack_lvl+0x116/0x1f0 [ 560.988476][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 560.988500][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.988526][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 560.988553][ T30] watchdog+0xf0c/0x1240 [ 560.988575][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.988591][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.006691][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 561.008925][ T30] ? __kthread_parkme+0x148/0x220 [ 561.008956][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.008972][ T30] kthread+0x2c1/0x3a0 [ 561.008993][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.009016][ T30] ? __pfx_kthread+0x10/0x10 [ 561.009037][ T30] ret_from_fork+0x45/0x80 [ 561.009054][ T30] ? __pfx_kthread+0x10/0x10 [ 561.009074][ T30] ret_from_fork_asm+0x1a/0x30 [ 561.066145][ T9] usb 1-1: can't read configurations, error -71 [ 561.068436][ T30] [ 561.069015][ T30] Sending NMI from CPU 1 to CPUs 0: [ 561.121700][ C0] NMI backtrace for cpu 0 [ 561.121713][ C0] CPU: 0 UID: 0 PID: 12104 Comm: syz.2.1574 Not tainted 6.12.0-syzkaller #0 [ 561.121728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 561.121736][ C0] RIP: 0010:__lock_acquire+0xef/0x3ce0 [ 561.121755][ C0] Code: 35 f5 0e 85 c9 0f 84 dd 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 02 2d 00 00 49 8b 04 24 <48> 3d 20 e7 79 93 0f 84 b2 0d 00 00 8b 15 9f b9 a0 0c 85 d2 0f 84 [ 561.121767][ C0] RSP: 0018:ffffc90004dbfa50 EFLAGS: 00000046 [ 561.121780][ C0] RAX: ffffffff93797d80 RBX: 0000000000000000 RCX: 0000000000000001 [ 561.121788][ C0] RDX: 1ffff1100ef093c3 RSI: 1ffff920009b7f5c RDI: ffff888077849e18 [ 561.121797][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 561.121805][ C0] R10: ffffffff905f5e0f R11: 0000000000000001 R12: ffff888077849e18 [ 561.121814][ C0] R13: ffff888077849e18 R14: 0000000000000000 R15: ffff88807e49a440 [ 561.121823][ C0] FS: 00007fde8f15a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 561.121837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.121846][ C0] CR2: 0000001b31a1dff8 CR3: 00000000517ba000 CR4: 00000000003526f0 [ 561.121855][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 561.121863][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 561.121871][ C0] Call Trace: [ 561.121877][ C0] [ 561.121882][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 561.121901][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 561.121920][ C0] ? nmi_handle+0x1a9/0x5c0 [ 561.121934][ C0] ? __lock_acquire+0xef/0x3ce0 [ 561.121945][ C0] ? default_do_nmi+0x6a/0x160 [ 561.121961][ C0] ? exc_nmi+0x170/0x1e0 [ 561.121976][ C0] ? end_repeat_nmi+0xf/0x53 [ 561.121992][ C0] ? __lock_acquire+0xef/0x3ce0 [ 561.122004][ C0] ? __lock_acquire+0xef/0x3ce0 [ 561.122015][ C0] ? __lock_acquire+0xef/0x3ce0 [ 561.122030][ C0] [ 561.122034][ C0] [ 561.122040][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.122056][ C0] ? kfree+0x274/0x4b0 [ 561.122069][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 561.122083][ C0] lock_acquire.part.0+0x11b/0x380 [ 561.122095][ C0] ? __might_fault+0xe3/0x190 [ 561.122113][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 561.122126][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.122140][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 561.122156][ C0] ? __might_fault+0xe3/0x190 [ 561.122173][ C0] ? lock_acquire+0x2f/0xb0 [ 561.122184][ C0] ? __might_fault+0xe3/0x190 [ 561.122200][ C0] ? __might_fault+0xe3/0x190 [ 561.122216][ C0] __might_fault+0x11b/0x190 [ 561.122233][ C0] ? __might_fault+0xe3/0x190 [ 561.122249][ C0] do_recvmmsg+0x2e7/0x750 [ 561.122266][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 561.122283][ C0] ? do_futex+0x123/0x350 [ 561.122302][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 561.122318][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 561.122334][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 561.122352][ C0] do_syscall_64+0xcd/0x250 [ 561.122364][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.122383][ C0] RIP: 0033:0x7fde8e37e759 [ 561.122393][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.122404][ C0] RSP: 002b:00007fde8f15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 561.122416][ C0] RAX: ffffffffffffffda RBX: 00007fde8e536058 RCX: 00007fde8e37e759 [ 561.122425][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000006 [ 561.122433][ C0] RBP: 00007fde8e3f175e R08: 0000000000000000 R09: 0000000000000000 [ 561.122442][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 561.122450][ C0] R13: 0000000000000000 R14: 00007fde8e536058 R15: 00007ffef2a9f448 [ 561.122462][ C0] [ 561.122699][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 561.503749][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller #0 [ 561.512161][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 561.522200][ T30] Call Trace: [ 561.525463][ T30] [ 561.528383][ T30] dump_stack_lvl+0x3d/0x1f0 [ 561.532977][ T30] panic+0x71d/0x800 [ 561.536869][ T30] ? __pfx_panic+0x10/0x10 [ 561.541279][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 561.546639][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.552611][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 561.557971][ T30] ? watchdog+0xd76/0x1240 [ 561.562375][ T30] ? watchdog+0xd69/0x1240 [ 561.566778][ T30] watchdog+0xd87/0x1240 [ 561.571010][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.575667][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.580858][ T30] ? __kthread_parkme+0x148/0x220 [ 561.585881][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.590550][ T30] kthread+0x2c1/0x3a0 [ 561.594603][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.599792][ T30] ? __pfx_kthread+0x10/0x10 [ 561.604374][ T30] ret_from_fork+0x45/0x80 [ 561.608773][ T30] ? __pfx_kthread+0x10/0x10 [ 561.613349][ T30] ret_from_fork_asm+0x1a/0x30 [ 561.618115][ T30] [ 561.621363][ T30] Kernel Offset: disabled [ 561.625667][ T30] Rebooting in 86400 seconds..