last executing test programs: 3m38.689639781s ago: executing program 2 (id=368): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="02"], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 3m38.445798624s ago: executing program 2 (id=372): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$inet6(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000009c0)="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", 0xdfc}, {0x0}, {&(0x7f0000000380)="77c21366484887a87f831b2e3e08422eb4cb7c1a4f92330e97745bd3394a99c27bbb76b74cdb1a8188dcdb298e1ece72c4081195b9c45b3418afcbae9808cec8fe04482f3445497b470b2d1b19d22eddea5b66e9835ffa395005d4999aeae5853a4eb25371493be4925c66ecd11987d5ff0c5ed56e29f320e23cf1cb691133f0ac3b9a89090be039ef41c4def1672f90f2eb1953e3a352c000f335e6cb25dcf76eaaf2fd5ce87b5b0603b6060ca75b8ffba0725a509513c672482ce3fb98a28569cc63c62f4ec3ae4b31d5bc4109331b7ff7f82cf82e5ac321ac40635eb111de5810022e16", 0xe5}, {&(0x7f00000019c0)="8e2dd14afd198f02e79bed92c7b53bb3b96a90a93b5ad3bfc558cc9b86e43b24b1708a179b762e3369b7a01ba04734a70be1ed0f2e6ee2c30919c42e8c264a044196322b5a6cc8e747b2b1021ee1a6e61951f133f90d1c7829a1051b5a4ae63630cacf4f379d01156389cf75a215c0608d94ccc8b17ddc7e9e227f71bbc8b8f446", 0x81}, {&(0x7f0000001a80)="72f98947025cbd01d69b7dc699264fbf6996b8e411b9709decd6c15962b3bb23a5bed882b52bfbbef6c25f0b512b29352bab9af2e53f33a7580f633564009a30482cef249eaca9ca567829a14a648c", 0x4f}, {&(0x7f0000000280)="2760f5b505fbf98eb1122e1fad42c0e1c58223168df87f848b8c8a4ea7652a4f093e93856bcd4dd487bbfc9301f528a44cb593914a5af8f025c8a8", 0x3b}], 0x6, &(0x7f0000001c80)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000a0000000014000000000000002900000034ff7f000000000000000000140000000000000029000000430000000100000000000000adad9c5235d9e7a62f0dd4eada7288e81d15c428cad217fc4b94437bbbd2d50ae032a7fbb87112a5ca5f2c501993c9e9347544beb9a9981b582359a2c3b56e8ddc5ac0f5a67335f821ef7125114cc4f26dbcddcbe55f410871096a396c45fc630895f658cfc393a2925f690afd9a8515ce673dd7f11ef2063b0b86073736a57ba53e34bfca242fef1971ed03fa89bf76b08e011cad2099d9b973cc51683f0e95ba41f457e6690f20"], 0x48}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000300)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "f42a97b96d025891dd3f75fdda"}}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB]) 3m37.839753839s ago: executing program 2 (id=374): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) flock(0xffffffffffffffff, 0x1780f9c373410dea) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0xfffffe0f, 0x5, 0x28, 0x6, 0x0, 0x2, 0x6, 0x40, 0x401, 0x9}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg(r1, &(0x7f0000000600), 0x0, 0x44010) 3m37.710158033s ago: executing program 2 (id=375): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000280)=0xde) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2e6680, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 3m37.672761634s ago: executing program 2 (id=376): syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20, @local, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000fc0)="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", 0xfe0, 0xfffffffffffffff9) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000fa940000000000005a00000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x89, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m37.213326149s ago: executing program 2 (id=378): unshare(0x40000000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r2 = dup(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(r2, 0x10, 0x0, 0x2001062200) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x4000000) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 3m21.908733941s ago: executing program 32 (id=378): unshare(0x40000000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r2 = dup(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(r2, 0x10, 0x0, 0x2001062200) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x4000000) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 2m29.933566957s ago: executing program 1 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030300000000000000002a0000000e0002006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r10 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5, 0x1, 0x8, 0x1}) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x45, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x38a}}, {0x0, 0x11}}}, 0xa0) sendfile(r10, r10, &(0x7f0000000080)=0x2, 0x7f03) 2m28.902719868s ago: executing program 1 (id=602): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = epoll_create(0x9) r8 = dup(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000016c0)={0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x3cf878, 0x15be59}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) (async) dup2(r0, r0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) write$dsp(r6, &(0x7f00000001c0)="5cba", 0x2) (async) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) (async) epoll_create(0x9) (async) dup(r6) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000016c0)={0x4}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x3cf878, 0x15be59}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 2m27.999988108s ago: executing program 1 (id=609): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000300)=0xffffffff, 0x4) 2m26.458111403s ago: executing program 1 (id=611): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x48000, 0x44) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) 2m26.455465381s ago: executing program 1 (id=613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000480)={0x0, 0xffff, 0x75, '\x00', &(0x7f0000000440)=0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x9, 0x0, [{0x806, 0x0, 0x6}, {0x285, 0x0, 0x2}, {0x38a, 0x0, 0x3}, {0xbcc, 0x0, 0xffffffffffffffff}, {0x2ff, 0x0, 0x6}, {0x63b, 0x0, 0x1}, {0x8ca, 0x0, 0x8}, {0xc0000083, 0x0, 0x101}, {0x668, 0x0, 0x9}]}) read$FUSE(r1, &(0x7f0000006840)={0x2020}, 0x2020) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x2000000000, 0x6, 0x7fffffff}, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) 2m25.595225434s ago: executing program 1 (id=618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r2, 0x4c057000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setgroups(0xefff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b00"/56, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="4ffce1adc651975867", 0x9}, {&(0x7f0000000480)="699948a5392e03369db39e127c519d9281561d7aa2db5f0ff7422cfff0e371e0c8a819fe8504153b13aa8fe866df2a60f18667e926ace1b04ef2cdf40902d0052a8466835b8831fd09c430a0aa34e25c17317dc8eb1992718dd67254d43d7d29e379c29eb80ef210e27a36ef1efd986aa829da7d41f50995c7a90fc6b2be7427c1", 0x81}, {&(0x7f0000000180)="aec9dcde0f33a5bc74daa56a16e16ad2d94abaab172a25701b0fd3814974d589146d3119e8c60df87f4e90", 0x2b}, {&(0x7f0000000200)="ee62309f18d792d3ae229e3a76dbb571", 0x10}, {&(0x7f0000000700)="3128931b40ff68e397ced704b4672f9b66a83992efee5f25b1d2fd3c6b6875dab6f1ed3a4fb10a7a63050b429bbec2f4760154d9e005ddcb1dbd6f4e670d3c8aaa55662fa92147001508bb31cb9934a972aa88106f3acde32dd2b62d100f6fa662755b054e22e22461b8c8e7b57c917318d50934bf0c9eb687f1bb193dcbdc15dd4bdd213eab50057701ab64885eedda9bc943df2d58cf6d4944bdbaf92a812f78efce71ef389c98198eadda4f34c139c68bb1ddd73bf06a9a508b76d194eed131b45203e365bd1e3a5e564dce72c080a0188ca4e62e266bf8cce383c257e5", 0xdf}, {&(0x7f0000000800)="83bcb6b1a567be92d5a1ca24ba1bcf6b2c8ef144a56c343e13ec45d44916a2def0bdf0e1b7f5f6d138dea5f834e95cddc10018dcdbc1ee2de765ec07480a57109ccb9a064f41b5a687e784f3115cf37b42f1545de75a23375cb8befe08e823edb0c533c452cb0409a089292a807e451c3bf86d9d45d1ff442a5238fb0b177b8467e3ebe222ff3bbf26938930d9592be04ebd78", 0x93}], 0x6}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000030500000000ecffffffffffffff", @ANYRES32=0x0, @ANYBLOB="154601004934070020001280080001006774700014000280050005000100000008000700e0000001"], 0x40}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x141, 0xe6, 0x77, 0xc8, 0x20, 0x572, 0xcb06, 0xdff2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcc, 0x2, 0x0, 0xa9, 0x6a, 0x9d}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003ebfcffff000333d0979b663db4f717f189a664c2796f8fa2711e0b63e3f172b3d7ffff0000000000004841cef3a75d78fc42912f4401ffc7fa5657a7629887ce3dcc3b71e61905b2d9d931f7b58af9928e04c960c36f592e5458aa19f6b59f29f456f11d0296f59f087466ab81e015dad54e4fa5f8169871bbcb871fb081043c15a75f06400cc7a587cc6d806deae8b47be4b8314d25e51675e4b86584d51958d798a947e1552327aa341c203dc643505a960ebce3723b6dff79371e7140134fd5db13d80e33c76831808bc6dd29aaee"], 0x0, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) openat$cgroup_ro(r9, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 2m10.51118738s ago: executing program 33 (id=618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r2, 0x4c057000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setgroups(0xefff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b00"/56, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="4ffce1adc651975867", 0x9}, {&(0x7f0000000480)="699948a5392e03369db39e127c519d9281561d7aa2db5f0ff7422cfff0e371e0c8a819fe8504153b13aa8fe866df2a60f18667e926ace1b04ef2cdf40902d0052a8466835b8831fd09c430a0aa34e25c17317dc8eb1992718dd67254d43d7d29e379c29eb80ef210e27a36ef1efd986aa829da7d41f50995c7a90fc6b2be7427c1", 0x81}, {&(0x7f0000000180)="aec9dcde0f33a5bc74daa56a16e16ad2d94abaab172a25701b0fd3814974d589146d3119e8c60df87f4e90", 0x2b}, {&(0x7f0000000200)="ee62309f18d792d3ae229e3a76dbb571", 0x10}, {&(0x7f0000000700)="3128931b40ff68e397ced704b4672f9b66a83992efee5f25b1d2fd3c6b6875dab6f1ed3a4fb10a7a63050b429bbec2f4760154d9e005ddcb1dbd6f4e670d3c8aaa55662fa92147001508bb31cb9934a972aa88106f3acde32dd2b62d100f6fa662755b054e22e22461b8c8e7b57c917318d50934bf0c9eb687f1bb193dcbdc15dd4bdd213eab50057701ab64885eedda9bc943df2d58cf6d4944bdbaf92a812f78efce71ef389c98198eadda4f34c139c68bb1ddd73bf06a9a508b76d194eed131b45203e365bd1e3a5e564dce72c080a0188ca4e62e266bf8cce383c257e5", 0xdf}, {&(0x7f0000000800)="83bcb6b1a567be92d5a1ca24ba1bcf6b2c8ef144a56c343e13ec45d44916a2def0bdf0e1b7f5f6d138dea5f834e95cddc10018dcdbc1ee2de765ec07480a57109ccb9a064f41b5a687e784f3115cf37b42f1545de75a23375cb8befe08e823edb0c533c452cb0409a089292a807e451c3bf86d9d45d1ff442a5238fb0b177b8467e3ebe222ff3bbf26938930d9592be04ebd78", 0x93}], 0x6}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000030500000000ecffffffffffffff", @ANYRES32=0x0, @ANYBLOB="154601004934070020001280080001006774700014000280050005000100000008000700e0000001"], 0x40}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x141, 0xe6, 0x77, 0xc8, 0x20, 0x572, 0xcb06, 0xdff2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcc, 0x2, 0x0, 0xa9, 0x6a, 0x9d}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003ebfcffff000333d0979b663db4f717f189a664c2796f8fa2711e0b63e3f172b3d7ffff0000000000004841cef3a75d78fc42912f4401ffc7fa5657a7629887ce3dcc3b71e61905b2d9d931f7b58af9928e04c960c36f592e5458aa19f6b59f29f456f11d0296f59f087466ab81e015dad54e4fa5f8169871bbcb871fb081043c15a75f06400cc7a587cc6d806deae8b47be4b8314d25e51675e4b86584d51958d798a947e1552327aa341c203dc643505a960ebce3723b6dff79371e7140134fd5db13d80e33c76831808bc6dd29aaee"], 0x0, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) openat$cgroup_ro(r9, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 18.974914095s ago: executing program 4 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000"], 0x280) 12.186511221s ago: executing program 4 (id=1035): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_procfs(r1, &(0x7f0000000500)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x1000000, 0xc19) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}, 0x24) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="6f73322ec80af3ce7f626f154f51c122e1cb51e45b086034faabfcb719ffe91ea4d816401e7a6bad386168fcc5279deee280dac84fcfab29a28556000000000000000000000084824d011e5a9eab372f92752faa89d4acb1aabec4024749107bda67964a831783de4ee0ce6024d4332923e5a8782fcb90dbadc07a07071bfe2caf485bef57e5b862da"], &(0x7f0000000200)='/dev/cpu/#/msr\x00', 0xf, 0x3) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x4000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) io_setup(0x9, &(0x7f0000000080)=0x0) r7 = epoll_create1(0x0) r8 = eventfd2(0xffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000b80)={0xa0001011}) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0xde, 0x0, 0x1, r8}]) socket$nl_route(0x10, 0x3, 0x0) 12.155727648s ago: executing program 6 (id=1037): timer_create(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000640)='\xdd \\\f\xf7\\_\xb2=+(F\x0e^}\xa0p\xa2\xe8\xb4N\xd6 \x03b/\xce]\xa9\x97\x1c7\x9dg\xef\xc7\x86@w\xdc\x8e\xb3\xd09\xbd\x89\x10}s\xe2\xe2\b\xf6\xd3\x83\r\xe1\x84@\x06\x9e\xfb<\xf0o\xec\xd0*\xbd\x8b\xfaQ\x0e\xd0\xa6p\xdc\x84\xb3\x14qJ\xc7-\xb6\x97/\x0e\x86\xfe\xb9a!\xe3}\xbag\xf5\x9f\x8b\xd3\xb3*\x90R\xff\x81A\x85\fU\xea\xc1\x03=\x7f38\x9a\"6#\x88\xb7\x80\xf2\xf8\xf0\xc8\xa8\\\x128\x97\xac{\xd1\x7f\xc0k\xe5(\xa8^ND\xf8\x0e\x03\x1f?\x9c\xa7\xd6e\xaf3i\v\xc8\xefk(_59\xbc\x92\a\xbf\xfeYu\'j\xb2\xe2=\xd6_\xba\xd7?\xfb`-\x862X\x81h\xf6\x8aY\x01|w5=\x0f\xcc\x8a\x9e\xddyvS\x15\xd5U\xd3yAg\x0fI\\g\x86\x94\xdc', &(0x7f0000000480)='+.\x00']}) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) setpriority(0x0, 0x0, 0x1) 11.254365743s ago: executing program 4 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 9.063965822s ago: executing program 5 (id=1046): getcwd(&(0x7f0000000100)=""/20, 0x14) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e8ffffffffffffff000000000000000000cf1729c0d154b800"], 0x48) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffff, 0x106}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff58b38500000006000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r10, 0x116, 0x80, &(0x7f00000001c0)="5c86a0b808b919249ddf7d0d68447d036ef2709df426b2315206fe610d9563ad95f7c7898e2d48b4361e71abc970b1d7a58d3e3d5e4bede049a9725a61a57a", 0x3f) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) 6.858240664s ago: executing program 5 (id=1051): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="08151f7566665c4d670c2cb6e9ddec9c92db294b4a646334cb121fec554c02dcada7672c4354e692a51151651c4820a25165fe95ba3d599edd1770b0d4c95aa21c5661e75e495b8b61211164d2ab61e5e9c92e9ba40063990f27b89e0ce1cf1c3f641eae4f803cbc", 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x0, 0x4, 0x0, 0xfffffffe]}}, 0x5c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) connect(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x200, 0x2, {0xa, 0x4e24, 0x15b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x80) getpeername$netlink(r4, 0x0, &(0x7f00000000c0)) r5 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$can_j1939(r5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) close(r5) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x448801, 0x0) memfd_secret(0x80000) r8 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 6.857190574s ago: executing program 4 (id=1052): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r3}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) cachestat(r6, &(0x7f0000000040), &(0x7f0000000080), 0x0) 6.085044192s ago: executing program 0 (id=1053): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x29, 0x0, 0x0) 6.008167626s ago: executing program 3 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r4, 0x8905, 0x1000000000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r7, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETA(r9, 0x8924, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 5.750104416s ago: executing program 0 (id=1055): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x80, 0x4) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1fffd) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000180)={0x0, 0x5}) 5.707965752s ago: executing program 5 (id=1056): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x2000000000, 0x6, 0x7fffffff}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) 5.156347944s ago: executing program 0 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef000100000000"], 0x280) 5.112801996s ago: executing program 0 (id=1058): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r3}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="68020000000501040000000000000000020000025402010003000000000400000d020900fff50d0073797a310000000000000000000000000000000000000000000000000000000038d998f600009dc23647762940cbbb5d4cbc57c1013a0630c3a388dfd4ec544c26b300dfd788990e79f068efcdd6e1ad8457b4e2c4f155d90caaeda4309e61fb050002000300000004000000040008000100000005000000020081000000000081000000050004000100000007000000fe7f110001000000000000000300090001000000ff030000080006000100000002000000ffffff0f030000000800000013007b0001000000000001008469020000000000000000030e000600030000000200000002007d0f000000000200000008000c0000000000000400000008000403000000780600000500f0000000000014a60000070071000100000001000000070001000000000000000100f7ff070002000000050000000900030003000000020000000900020003000000d70700001e0009000000000000080000008006000200000003000000ff01030001000000574a0000feffff03000000000000188383080053cb00000000090000000f00100000000000ff03000004000500010000000e000000020000000200000006000000ff03000001000000014d9867ff030300030000000200000004007f00020000000180000081005b6102000000000000000300060001000000070000000800020000000000010100000500090002000000080000000700000002000000ffffffff0700040003000000080000000200280202000000070000000600800001400000080000000088ff0f010000000286a872df7f757325"], 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) cachestat(r6, &(0x7f0000000040), &(0x7f0000000080), 0x0) socket$key(0xf, 0x3, 0x2) 5.079881888s ago: executing program 5 (id=1059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, 0x0}, 0x296) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x44801, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = getuid() mount$fuseblk(&(0x7f0000002440), 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=r4, @ANYBLOB="f2234031e1ed2ac104a4f9f27c7f6cfd21bbe66590e6193b1208c715b32c0c3d05470801000000000000f8cee5ddd5986b25df5976e836dfd18874973241fcd38ea3aec94b0dc7405bf384506c4f791f7160e842b03d07cc11b5acc723ee40539014a0c7aca23b2bd70aa8adc303ebbf4660534cd9c5ae26085aa8519e5914d0db36c1d05fdb943c091bcbe1ad8453f8c763aafa4b607aa85495bae6481cda4f95994398b37132b3e1ca8a03b3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioprio_set$uid(0x0, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) iopl(0x3) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0xc050) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4095}, 0x4800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000140)=""/20, 0x14}], 0x2}, 0x40010020) 5.037711985s ago: executing program 6 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) 4.993101959s ago: executing program 4 (id=1061): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, 0x0, 0xa1e1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x40000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x200) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) gettid() 4.712058743s ago: executing program 3 (id=1062): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0xffffffffffffff7f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f00003e8000/0x1000)=nil, 0x4000) write$rfkill(r5, &(0x7f00000000c0)={0x52, 0x8, 0x2, 0x2, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 3.987094784s ago: executing program 6 (id=1063): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 3.493145309s ago: executing program 6 (id=1064): r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000) 3.39615001s ago: executing program 3 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, 0x0}, 0x296) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x44801, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = getuid() mount$fuseblk(&(0x7f0000002440), 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=r4, @ANYBLOB="f2234031e1ed2ac104a4f9f27c7f6cfd21bbe66590e6193b1208c715b32c0c3d05470801000000000000f8cee5ddd5986b25df5976e836dfd18874973241fcd38ea3aec94b0dc7405bf384506c4f791f7160e842b03d07cc11b5acc723ee40539014a0c7aca23b2bd70aa8adc303ebbf4660534cd9c5ae26085aa8519e5914d0db36c1d05fdb943c091bcbe1ad8453f8c763aafa4b607aa85495bae6481cda4f95994398b37132b3e1ca8a03b3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioprio_set$uid(0x0, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) iopl(0x3) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0xc050) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4095}, 0x4800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000140)=""/20, 0x14}], 0x2}, 0x40010020) 3.305091648s ago: executing program 6 (id=1066): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) 3.227815427s ago: executing program 5 (id=1067): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x1fc, 0x30, 0x1, 0x0, 0x0, {}, [{0x1e8, 0x1, [@m_ct={0x70, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x31, 0x6, "23aab747fbb0a70f9a1f9bb540a5a1e6b71390eb6ceb69867b035bb2c65af3553f3aaeede0d443238929c35a36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x174, 0x1b, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2c350e6a, 0xffffffffffffffff, 0xfffffffc, 0x9}, @empty, @remote, 0x1fffffeff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2661c5ee, 0x20000000, 0x3, 0x7ff}, @rand_addr=0x64010102, @private=0xa010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x0, 0x8, 0xff}, @remote, @multicast1}}]}, {0xd4, 0x6, "406dbbd2c4f45f99e60d2656a1f52b4aaf7607f81eca545eff478360f2658d497ce91e7ead3b79017f0297fa89d73f0c389d9896ceac45bc5312ddb62e96b66fc162896f7862f66fe4f6a1dcb8952f037e211c29b1b558217fa056c9c750a3ab0b98a73aa68723d91b30092e98785b68978f2db577b7f84ac27c321489d7421892f2785d3317d4c02585c83cd5468063414d027d45241ad715e03f9c973bc35a26f6fe0e63ff10e35a0230fdbf7d95556464ba971ae1e8cc87a9522daff615fa5914a35b9d869d05b58077d14cae5430"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x1000}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x174e, 0x10a5, 0x10, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @multicast2}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x2e, &(0x7f0000000380)=""/145, &(0x7f0000000100)=0x91) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x1262, 0x0) sendmmsg$inet6(r9, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xe773, 0x3, [0x3, 0x4, 0xbd, 0x0, 0x2ac4661a, 0xe9]}}) 2.241501813s ago: executing program 6 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a00010000000000000000000a001400000200000000000005001b003a00000067bdb07b3bd22a8a9eefe4dfd8d64cb7c1fc87cda8b9d9e8efa78a2c8e896414c4af0a665f2fbbd91b13e9b2590bce370bbd870caf3edcd52fe06bda957e92c3621f90d1294c0525f1e77cb64915f13228a503549117edd75a19b672b7c37f612e9267203b6bf2d2fa5e307144fe3d20ff412a757f3d3b60083767c08752"], 0x24}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000040)='./file0\x00', 0x0) 2.144315519s ago: executing program 3 (id=1069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef000100000000"], 0x280) 2.131241414s ago: executing program 5 (id=1070): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x163c81) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) io_setup(0x3, &(0x7f0000001540)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x75c, r0, 0x0}]) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485"], 0x0) syz_usb_disconnect(r3) 2.043695943s ago: executing program 3 (id=1071): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r3}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="68020000000501040000000000000000020000025402010003000000000400000d020900fff50d0073797a310000000000000000000000000000000000000000000000000000000038d998f600009dc23647762940cbbb5d4cbc57c1013a0630c3a388dfd4ec544c26b300dfd788990e79f068efcdd6e1ad8457b4e2c4f155d90caaeda4309e61fb050002000300000004000000040008000100000005000000020081000000000081000000050004000100000007000000fe7f110001000000000000000300090001000000ff030000080006000100000002000000ffffff0f030000000800000013007b0001000000000001008469020000000000000000030e000600030000000200000002007d0f000000000200000008000c0000000000000400000008000403000000780600000500f0000000000014a60000070071000100000001000000070001000000000000000100f7ff070002000000050000000900030003000000020000000900020003000000d70700001e0009000000000000080000008006000200000003000000ff01030001000000574a0000feffff03000000000000188383080053cb00000000090000000f00100000000000ff03000004000500010000000e000000020000000200000006000000ff03000001000000014d9867ff030300030000000200000004007f00020000000180000081005b6102000000000000000300060001000000070000000800020000000000010100000500090002000000080000000700000002000000ffffffff0700040003000000080000000200280202000000070000000600800001400000080000000088ff0f010000000286a872df7f757325"], 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) cachestat(r6, &(0x7f0000000040), &(0x7f0000000080), 0x0) 848.182656ms ago: executing program 4 (id=1072): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev}) r5 = memfd_secret(0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xe4, 0x29, 0x2, {0x1, [{{0x2, 0x3, 0x3}, 0x4b463d14, 0x6, 0x7, './file0'}, {{0x2, 0x0, 0x2}, 0x1, 0x2, 0x7, './file0'}, {{0xc0, 0x0, 0x3}, 0x2, 0x1, 0x7, './file0'}, {{0x20, 0x0, 0x2}, 0x2d5, 0xb, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x643, 0x7, 0x7, './file0'}, {{0x55, 0x1}, 0xff, 0x0, 0x7, './file0'}, {{0x40, 0x3, 0x5}, 0x6, 0x2, 0x7, './file0'}]}}, 0xe4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000000000040"]) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1) 847.311541ms ago: executing program 3 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1b0000001a00010000000000000000000a001400000200000000000005001b003a00000067bdb07b3bd22a8a9eefe4dfd8d64cb7c1fc87cda8b9d9e8efa78a2c8e896414c4af0a665f2fbbd91b13e9b2590bce370bbd870caf3edcd52fe06bda957e92c3621f90d1294c0525f1e77cb64915f13228a503549117edd75a19b672b7c37f612e9267203b6bf2d2fa5e307144fe3d20ff412a757f3d3b60083767c08752"], 0x24}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 597.777023ms ago: executing program 0 (id=1074): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 0s ago: executing program 0 (id=1075): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) read(r2, &(0x7f00000004c0)=""/4096, 0x1000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000640)={0x20, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r8 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r8, 0x0, 0x100000000, 0x8000}) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r11, 0x0, 0x3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x200, @multicast2}}}, 0x88) kernel console output (not intermixed with test programs): [ T5869] usblcd 1-1:0.0: USBLCD model not supported. [ 187.964465][ T7583] erspan1: entered allmulticast mode [ 188.112714][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.204603][ T30] audit: type=1400 audit(1743552026.168:692): avc: denied { create } for pid=7548 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.330269][ T5869] usb 1-1: USB disconnect, device number 9 [ 188.339434][ T30] audit: type=1400 audit(1743552026.318:693): avc: denied { write } for pid=7548 comm="syz.0.449" path="socket:[13216]" dev="sockfs" ino=13216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.434883][ T7605] delete_channel: no stack [ 188.551505][ T30] audit: type=1400 audit(1743552026.318:694): avc: denied { nlmsg_read } for pid=7548 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.606406][ T30] audit: type=1400 audit(1743552026.328:695): avc: denied { write } for pid=7548 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.695135][ T30] audit: type=1400 audit(1743552026.328:696): avc: denied { nlmsg_write } for pid=7548 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.746874][ T30] audit: type=1326 audit(1743552026.528:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.1.457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b21f8d169 code=0x0 [ 188.920404][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.984354][ T7465] veth0_vlan: entered promiscuous mode [ 189.005549][ T7465] veth1_vlan: entered promiscuous mode [ 189.049208][ T7465] veth0_macvtap: entered promiscuous mode [ 189.076927][ T7465] veth1_macvtap: entered promiscuous mode [ 189.083019][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 189.094367][ T5869] usb 5-1: config 222 has an invalid interface number: 193 but max is 0 [ 189.124640][ T5869] usb 5-1: config 222 has no interface number 0 [ 189.141124][ T5869] usb 5-1: New USB device found, idVendor=05dc, idProduct=b002, bcdDevice= 0.c1 [ 189.151062][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.163845][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.176278][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.186995][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.198217][ T5869] usb 5-1: Product: syz [ 189.204966][ T5869] usb 5-1: Manufacturer: syz [ 189.209707][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.226473][ T5869] usb 5-1: SerialNumber: syz [ 189.232841][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.250875][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.264868][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.275744][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.290300][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.303445][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.314950][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.329851][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 189.344008][ T5870] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.355497][ T5870] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.368432][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.385488][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.397912][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.413047][ T5870] usb 1-1: config 1 has no interface number 0 [ 189.419373][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.432407][ T5870] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.450032][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.484810][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.485655][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.503189][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.503436][ T5870] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.513639][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.513660][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.513672][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.513681][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.513692][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.514727][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.564122][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.572987][ T7465] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.608357][ T7465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.617198][ T7465] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.631272][ T7624] netlink: 76 bytes leftover after parsing attributes in process `syz.1.457'. [ 189.697211][ T7465] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.716214][ T30] audit: type=1400 audit(1743552027.648:698): avc: denied { ioctl } for pid=7610 comm="syz.1.457" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.839991][ T5870] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.849531][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.858686][ T30] audit: type=1400 audit(1743552027.648:699): avc: denied { map } for pid=7610 comm="syz.1.457" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.889288][ T5135] Bluetooth: hci5: command tx timeout [ 189.909452][ T30] audit: type=1400 audit(1743552027.648:700): avc: denied { execute } for pid=7610 comm="syz.1.457" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.976435][ T5870] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 190.077425][ T7627] ======================================================= [ 190.077425][ T7627] WARNING: The mand mount option has been deprecated and [ 190.077425][ T7627] and is ignored by this kernel. Remove the mand [ 190.077425][ T7627] option from the mount to silence this warning. [ 190.077425][ T7627] ======================================================= [ 190.480963][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.485142][ T5870] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 190.586340][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.626163][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.717838][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.760313][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.822288][ T7636] FAULT_INJECTION: forcing a failure. [ 190.822288][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 190.841842][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.1.462 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 190.841866][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.841876][ T7636] Call Trace: [ 190.841882][ T7636] [ 190.841889][ T7636] dump_stack_lvl+0x16c/0x1f0 [ 190.841911][ T7636] should_fail_ex+0x512/0x640 [ 190.841933][ T7636] ? fs_reclaim_acquire+0xae/0x150 [ 190.841952][ T7636] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 190.841970][ T7636] should_failslab+0xc2/0x120 [ 190.841985][ T7636] __kmalloc_noprof+0xd2/0x510 [ 190.842014][ T7636] tomoyo_realpath_from_path+0xc2/0x6e0 [ 190.842033][ T7636] ? tomoyo_profile+0x47/0x60 [ 190.842055][ T7636] tomoyo_path_number_perm+0x245/0x580 [ 190.842074][ T7636] ? tomoyo_path_number_perm+0x237/0x580 [ 190.842095][ T7636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.842118][ T7636] ? find_held_lock+0x2b/0x80 [ 190.842155][ T7636] ? find_held_lock+0x2b/0x80 [ 190.842171][ T7636] ? hook_file_ioctl_common+0x145/0x410 [ 190.842192][ T7636] ? __fget_files+0x20e/0x3c0 [ 190.842214][ T7636] security_file_ioctl+0x9b/0x240 [ 190.842229][ T7636] __x64_sys_ioctl+0xb7/0x200 [ 190.842246][ T7636] do_syscall_64+0xcd/0x260 [ 190.842264][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.842278][ T7636] RIP: 0033:0x7f4b21f8d169 [ 190.842289][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.842302][ T7636] RSP: 002b:00007f4b22dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.842316][ T7636] RAX: ffffffffffffffda RBX: 00007f4b221a5fa0 RCX: 00007f4b21f8d169 [ 190.842328][ T7636] RDX: 0000200000000180 RSI: 00000000c008ae67 RDI: 0000000000000004 [ 190.842336][ T7636] RBP: 00007f4b22dba090 R08: 0000000000000000 R09: 0000000000000000 [ 190.842344][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.842351][ T7636] R13: 0000000000000000 R14: 00007f4b221a5fa0 R15: 00007fffb5ba4d48 [ 190.842369][ T7636] [ 190.842416][ T7636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.356631][ T7643] tmpfs: Bad value for 'mpol' [ 191.418956][ T7645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.452729][ T7645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.529630][ T872] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 191.585402][ T7645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.634236][ T7645] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.646101][ T7645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.691232][ T5869] usb-storage 5-1:222.193: USB Mass Storage device detected [ 191.700563][ T7645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.759342][ T7645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.803715][ T7645] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.831748][ T5869] usb-storage 5-1:222.193: Quirks match for vid 05dc pid b002: 8 [ 191.854809][ T7645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.872375][ T7645] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.898874][ T7645] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.909670][ T7645] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 191.918251][ T7645] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 191.935200][ T5869] usb 5-1: USB disconnect, device number 5 [ 191.945589][ T7645] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 192.006782][ T5973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.087482][ T5870] usb 1-1: USB disconnect, device number 10 [ 192.111854][ T5870] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 192.258963][ T7663] FAULT_INJECTION: forcing a failure. [ 192.258963][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 192.303446][ T7663] CPU: 0 UID: 0 PID: 7663 Comm: syz.1.468 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 192.303467][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.303473][ T7663] Call Trace: [ 192.303478][ T7663] [ 192.303482][ T7663] dump_stack_lvl+0x16c/0x1f0 [ 192.303496][ T7663] should_fail_ex+0x512/0x640 [ 192.303511][ T7663] ? fs_reclaim_acquire+0xae/0x150 [ 192.303525][ T7663] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 192.303537][ T7663] should_failslab+0xc2/0x120 [ 192.303547][ T7663] __kmalloc_noprof+0xd2/0x510 [ 192.303565][ T7663] tomoyo_realpath_from_path+0xc2/0x6e0 [ 192.303578][ T7663] ? tomoyo_profile+0x47/0x60 [ 192.303592][ T7663] tomoyo_path_number_perm+0x245/0x580 [ 192.303607][ T7663] ? tomoyo_path_number_perm+0x237/0x580 [ 192.303624][ T7663] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.303640][ T7663] ? find_held_lock+0x2b/0x80 [ 192.303665][ T7663] ? find_held_lock+0x2b/0x80 [ 192.303678][ T7663] ? hook_file_ioctl_common+0x145/0x410 [ 192.303694][ T7663] ? __fget_files+0x20e/0x3c0 [ 192.303710][ T7663] security_file_ioctl+0x9b/0x240 [ 192.303725][ T7663] __x64_sys_ioctl+0xb7/0x200 [ 192.303738][ T7663] do_syscall_64+0xcd/0x260 [ 192.303749][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.303760][ T7663] RIP: 0033:0x7f4b21f8d169 [ 192.303768][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.303778][ T7663] RSP: 002b:00007f4b22dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.303788][ T7663] RAX: ffffffffffffffda RBX: 00007f4b221a5fa0 RCX: 00007f4b21f8d169 [ 192.303795][ T7663] RDX: 00002000000004c0 RSI: 00000000c04c6100 RDI: 0000000000000003 [ 192.303800][ T7663] RBP: 00007f4b22dba090 R08: 0000000000000000 R09: 0000000000000000 [ 192.303806][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.303812][ T7663] R13: 0000000000000000 R14: 00007f4b221a5fa0 R15: 00007fffb5ba4d48 [ 192.303825][ T7663] [ 192.308260][ T7663] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.680323][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.850591][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 192.953194][ T5869] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 193.134431][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.180987][ T5869] usb 5-1: Product: syz [ 193.185156][ T5869] usb 5-1: Manufacturer: syz [ 193.222609][ T5869] usb 5-1: SerialNumber: syz [ 193.247869][ T5869] usb 5-1: config 0 descriptor?? [ 193.267404][ T5869] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 193.440592][ T5135] Bluetooth: hci1: command 0x0406 tx timeout [ 193.700258][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 193.760223][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 193.925096][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.933349][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.943436][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 193.950292][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.098882][ T5869] gspca_ov534_9: reg_w failed -71 [ 194.391592][ T5869] gspca_ov534_9: Unknown sensor 0000 [ 194.391669][ T5869] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 194.427225][ T5869] usb 5-1: USB disconnect, device number 6 [ 194.550310][ T872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.558018][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 195.151959][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.165079][ T872] usb 1-1: Using ep0 maxpacket: 8 [ 195.436964][ T872] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 195.451058][ T5870] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.480331][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.601426][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.630286][ T5135] Bluetooth: hci1: command 0x0406 tx timeout [ 195.684066][ T872] usb 1-1: config 0 has no interface number 0 [ 195.727768][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.744766][ T872] usb 1-1: New USB device found, idVendor=12d1, idProduct=c6e7, bcdDevice=dd.c1 [ 195.761155][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 195.762601][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 195.762613][ T30] audit: type=1326 audit(1743552033.768:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.1.478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b21f8d169 code=0x0 [ 195.767481][ T5870] usb 6-1: config 0 descriptor?? [ 195.810341][ T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.819120][ T872] usb 1-1: Product: syz [ 195.823785][ T872] usb 1-1: Manufacturer: syz [ 195.828742][ T872] usb 1-1: SerialNumber: syz [ 195.835307][ T872] usb 1-1: config 0 descriptor?? [ 195.844109][ T872] option 1-1:0.223: GSM modem (1-port) converter detected [ 195.856606][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 195.921220][ T5869] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 195.933081][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.979773][ T7697] bridge0: port 3(netdevsim2) entered blocking state [ 195.988320][ T30] audit: type=1400 audit(1743552033.998:716): avc: denied { nlmsg_read } for pid=7694 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.010293][ T7697] bridge0: port 3(netdevsim2) entered disabled state [ 196.019723][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 196.019732][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 196.026890][ T5869] usb 5-1: Product: syz [ 196.037936][ T7697] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 196.046350][ T5869] usb 5-1: Manufacturer: syz [ 196.079792][ T7697] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 196.098345][ T7697] bridge0: port 3(netdevsim2) entered blocking state [ 196.105860][ T7697] bridge0: port 3(netdevsim2) entered forwarding state [ 196.145191][ T5869] usb 5-1: SerialNumber: syz [ 196.218417][ T30] audit: type=1400 audit(1743552034.218:717): avc: denied { connect } for pid=7694 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.232552][ T5869] usb 5-1: config 0 descriptor?? [ 196.587124][ T30] audit: type=1400 audit(1743552034.258:718): avc: denied { ioctl } for pid=7694 comm="syz.3.479" path="socket:[14623]" dev="sockfs" ino=14623 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.644529][ T30] audit: type=1400 audit(1743552034.588:719): avc: denied { mount } for pid=7694 comm="syz.3.479" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.667050][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.755087][ T5870] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 197.776497][ T5870] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input11 [ 198.001945][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.022631][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.033168][ T30] audit: type=1400 audit(1743552034.628:720): avc: denied { read } for pid=7694 comm="syz.3.479" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.033208][ T30] audit: type=1400 audit(1743552034.628:721): avc: denied { open } for pid=7694 comm="syz.3.479" path="/96/file0" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.082461][ T5871] usb 1-1: USB disconnect, device number 11 [ 198.103785][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.109830][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 198.128760][ T5871] option 1-1:0.223: device disconnected [ 198.137799][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.207791][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.473'. [ 198.268123][ T7710] virtio-fs: tag <(null)> not found [ 198.329301][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.481'. [ 198.350657][ T30] audit: type=1400 audit(1743552036.328:722): avc: denied { create } for pid=7708 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.444789][ T30] audit: type=1400 audit(1743552036.328:723): avc: denied { write } for pid=7708 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.465000][ T30] audit: type=1400 audit(1743552036.448:724): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 198.498863][ T5870] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 198.602399][ T7718] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 198.658616][ T7718] lo speed is unknown, defaulting to 1000 [ 198.671194][ T7718] lo speed is unknown, defaulting to 1000 [ 198.679083][ T7718] lo speed is unknown, defaulting to 1000 [ 199.062622][ T7718] infiniband sz1: set active [ 199.067495][ T7718] infiniband sz1: added lo [ 199.142211][ T5870] usb 6-1: USB disconnect, device number 2 [ 199.172219][ T7718] RDS/IB: sz1: added [ 199.176834][ T7718] smc: adding ib device sz1 with port count 1 [ 199.183227][ T7718] smc: ib device sz1 port 1 has pnetid [ 199.190719][ T7718] lo speed is unknown, defaulting to 1000 [ 199.217661][ T5869] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 199.228605][ T82] lo speed is unknown, defaulting to 1000 [ 199.268882][ T5869] asix 5-1:0.0: probe with driver asix failed with error -71 [ 199.277835][ T24] lo speed is unknown, defaulting to 1000 [ 199.443822][ T5869] usb 5-1: USB disconnect, device number 7 [ 199.591640][ T7718] lo speed is unknown, defaulting to 1000 [ 199.659152][ T7718] lo speed is unknown, defaulting to 1000 [ 199.728638][ T7718] lo speed is unknown, defaulting to 1000 [ 199.796981][ T7718] lo speed is unknown, defaulting to 1000 [ 199.863855][ T7718] lo speed is unknown, defaulting to 1000 [ 200.331505][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.514117][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 200.530453][ T5870] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.559280][ T5870] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.614172][ T5870] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.812646][ T7733] mmap: syz.1.488 (7733): VmData 26103808 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 200.915885][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.925731][ T5870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.935544][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.977509][ T5956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.996430][ T5870] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.010759][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.023201][ T5870] usb 6-1: config 0 descriptor?? [ 201.133891][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 201.133906][ T30] audit: type=1400 audit(1743552039.138:730): avc: denied { setopt } for pid=7737 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.350044][ T7743] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 201.453711][ T5870] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.560740][ T30] audit: type=1400 audit(1743552039.338:731): avc: denied { read write } for pid=7738 comm="syz.4.489" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.599086][ T30] audit: type=1400 audit(1743552039.348:732): avc: denied { open } for pid=7738 comm="syz.4.489" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.755598][ T30] audit: type=1400 audit(1743552039.638:733): avc: denied { ioctl } for pid=7745 comm="syz.4.492" path="socket:[14679]" dev="sockfs" ino=14679 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.793233][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.877857][ T30] audit: type=1400 audit(1743552039.838:734): avc: denied { create } for pid=7744 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 201.910465][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.997903][ T30] audit: type=1400 audit(1743552039.838:735): avc: denied { ioctl } for pid=7744 comm="syz.1.491" path="socket:[14755]" dev="sockfs" ino=14755 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.075939][ T30] audit: type=1400 audit(1743552039.838:736): avc: denied { bind } for pid=7744 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 202.173533][ T30] audit: type=1400 audit(1743552039.838:737): avc: denied { name_bind } for pid=7744 comm="syz.1.491" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 202.226470][ T5868] usb 6-1: USB disconnect, device number 3 [ 202.252130][ T5868] usblp0: removed [ 202.310173][ T30] audit: type=1400 audit(1743552039.838:738): avc: denied { node_bind } for pid=7744 comm="syz.1.491" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 202.439136][ T7757] FAULT_INJECTION: forcing a failure. [ 202.439136][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 202.500326][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.4.493 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 202.500353][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.500363][ T7757] Call Trace: [ 202.500368][ T7757] [ 202.500375][ T7757] dump_stack_lvl+0x16c/0x1f0 [ 202.500398][ T7757] should_fail_ex+0x512/0x640 [ 202.500420][ T7757] ? fs_reclaim_acquire+0xae/0x150 [ 202.500453][ T7757] ? tomoyo_encode2+0x100/0x3e0 [ 202.500470][ T7757] should_failslab+0xc2/0x120 [ 202.500486][ T7757] __kmalloc_noprof+0xd2/0x510 [ 202.500517][ T7757] tomoyo_encode2+0x100/0x3e0 [ 202.500538][ T7757] tomoyo_encode+0x29/0x50 [ 202.500569][ T7757] tomoyo_realpath_from_path+0x18f/0x6e0 [ 202.500596][ T7757] ? tomoyo_profile+0x47/0x60 [ 202.500620][ T7757] tomoyo_path_number_perm+0x245/0x580 [ 202.500644][ T7757] ? tomoyo_path_number_perm+0x237/0x580 [ 202.500671][ T7757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.500698][ T7757] ? find_held_lock+0x2b/0x80 [ 202.500742][ T7757] ? find_held_lock+0x2b/0x80 [ 202.500762][ T7757] ? hook_file_ioctl_common+0x145/0x410 [ 202.500789][ T7757] ? __fget_files+0x20e/0x3c0 [ 202.500817][ T7757] security_file_ioctl+0x9b/0x240 [ 202.500837][ T7757] __x64_sys_ioctl+0xb7/0x200 [ 202.500859][ T7757] do_syscall_64+0xcd/0x260 [ 202.500878][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.500895][ T7757] RIP: 0033:0x7f1ac7b8d169 [ 202.500909][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.500924][ T7757] RSP: 002b:00007f1ac8952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.500941][ T7757] RAX: ffffffffffffffda RBX: 00007f1ac7da5fa0 RCX: 00007f1ac7b8d169 [ 202.500952][ T7757] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 202.500962][ T7757] RBP: 00007f1ac8952090 R08: 0000000000000000 R09: 0000000000000000 [ 202.500972][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.500981][ T7757] R13: 0000000000000000 R14: 00007f1ac7da5fa0 R15: 00007ffc789594c8 [ 202.501004][ T7757] [ 202.501020][ T7757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.960413][ T5963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.256121][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.326480][ T7765] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 204.376248][ T7765] team0: Device veth1_macvtap failed to register rx_handler [ 204.420911][ T30] audit: type=1400 audit(1743552042.418:739): avc: denied { read } for pid=7758 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.820295][ T5868] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.140208][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 205.185891][ T5868] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 205.247608][ T5868] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 205.295068][ T5868] usb 1-1: config 6 has no interface number 0 [ 205.317895][ T5868] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.367541][ T5868] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 205.392165][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.440321][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.450170][ T5868] usb 1-1: Product: syz [ 205.462210][ T5868] usb 1-1: Manufacturer: syz [ 205.473514][ T5868] usb 1-1: SerialNumber: syz [ 205.518260][ T5868] hso 1-1:6.2: Failed to find INT IN ep [ 205.641901][ T5869] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.718162][ T5869] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 205.731029][ T5868] usb 1-1: USB disconnect, device number 12 [ 205.759535][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.803114][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 205.822578][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2033, setting to 1024 [ 205.903002][ T5869] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.018548][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.050782][ T7800] mmap: syz.3.509 (7800) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.066008][ T5869] usb 5-1: Product: syz [ 206.070664][ T5869] usb 5-1: Manufacturer: syz [ 206.077728][ T7792] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 206.085430][ T5959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.131895][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 206.137129][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 206.171124][ T5869] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 206.177069][ T5869] cdc_wdm 5-1:1.0: Unknown control protocol [ 206.432209][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.460564][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.891106][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 207.891193][ T30] audit: type=1400 audit(1743552045.668:742): avc: denied { create } for pid=7816 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.070247][ T30] audit: type=1400 audit(1743552045.698:743): avc: denied { write } for pid=7816 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.144680][ T30] audit: type=1400 audit(1743552046.128:744): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 208.432161][ T24] usb 5-1: USB disconnect, device number 8 [ 209.352038][ T5976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.321422][ T7480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.854375][ T30] audit: type=1400 audit(1743552051.828:745): avc: denied { bind } for pid=7887 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.028286][ T7895] Bluetooth: MGMT ver 1.23 [ 214.053384][ T30] audit: type=1400 audit(1743552051.828:746): avc: denied { name_bind } for pid=7887 comm="syz.1.531" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 214.203143][ T30] audit: type=1400 audit(1743552051.828:747): avc: denied { node_bind } for pid=7887 comm="syz.1.531" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 214.274056][ T30] audit: type=1400 audit(1743552052.238:748): avc: denied { write } for pid=7886 comm="syz.5.530" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 214.330889][ T30] audit: type=1400 audit(1743552052.258:749): avc: denied { read } for pid=7901 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.348221][ T5868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.446692][ T30] audit: type=1400 audit(1743552052.258:750): avc: denied { open } for pid=7901 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.490248][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 214.516731][ T30] audit: type=1400 audit(1743552052.258:751): avc: denied { getattr } for pid=7901 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.131696][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 215.147982][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 215.163765][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.176242][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 215.186746][ T5868] usb 4-1: config 9 has an invalid interface number: 212 but max is 0 [ 215.196785][ T24] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 215.212963][ T5868] usb 4-1: config 9 has no interface number 0 [ 215.231446][ T5868] usb 4-1: config 9 interface 212 has no altsetting 0 [ 215.246493][ T24] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 215.276546][ T5868] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7f.22 [ 215.289879][ T24] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.315314][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.390376][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 215.400206][ T5868] usb 4-1: Product: syz [ 215.404382][ T5868] usb 4-1: Manufacturer: syz [ 215.408968][ T5868] usb 4-1: SerialNumber: syz [ 215.431207][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.440896][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.457119][ T24] usb 6-1: Product: syz [ 215.468426][ T24] usb 6-1: Manufacturer: syz [ 215.473306][ T24] usb 6-1: SerialNumber: syz [ 215.682459][ T5958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.713203][ T30] audit: type=1400 audit(1743552053.508:752): avc: denied { write } for pid=7896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.800630][ T5868] ttusbir 4-1:9.212: cannot find expected altsetting [ 215.813065][ T7892] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.823051][ T5868] usb 4-1: USB disconnect, device number 11 [ 215.847178][ T7892] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.895031][ T30] audit: type=1400 audit(1743552053.508:753): avc: denied { add_name } for pid=7896 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.017705][ T30] audit: type=1400 audit(1743552053.508:754): avc: denied { create } for pid=7896 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.524655][ T7926] netlink: 320 bytes leftover after parsing attributes in process `syz.1.538'. [ 217.620472][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.686396][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.769626][ T24] usb 6-1: USB disconnect, device number 4 [ 219.510292][ T7963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.546056][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 220.546073][ T30] audit: type=1400 audit(1743552058.548:765): avc: denied { setopt } for pid=7992 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.385777][ T6655] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.468004][ T7491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.710263][ T6655] usb 4-1: Using ep0 maxpacket: 32 [ 221.718637][ T6655] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 221.728255][ T6655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.816069][ T6655] usb 4-1: Product: syz [ 221.861114][ T6655] usb 4-1: Manufacturer: syz [ 222.012626][ T6655] usb 4-1: SerialNumber: syz [ 222.045347][ T6655] usb 4-1: config 0 descriptor?? [ 222.062181][ T6655] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 222.693397][ T30] audit: type=1400 audit(1743552060.698:766): avc: denied { ioctl } for pid=8014 comm="syz.5.570" path="socket:[15130]" dev="sockfs" ino=15130 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.841421][ T5953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.930254][ T30] audit: type=1400 audit(1743552061.918:767): avc: denied { write } for pid=8020 comm="syz.1.571" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.953213][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.699879][ T6655] gspca_ov534_9: reg_r err -110 [ 224.810234][ T30] audit: type=1400 audit(1743552061.918:768): avc: denied { open } for pid=8020 comm="syz.1.571" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.833577][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.961182][ T8032] delete_channel: no stack [ 225.070169][ T6655] gspca_ov534_9: Unknown sensor 0000 [ 225.070245][ T6655] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 225.316646][ T30] audit: type=1400 audit(1743552063.308:769): avc: denied { setattr } for pid=8045 comm="syz.0.576" name="NETLINK" dev="sockfs" ino=15174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.386312][ T30] audit: type=1400 audit(1743552063.318:770): avc: denied { setopt } for pid=8045 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.478414][ T5869] usb 4-1: USB disconnect, device number 12 [ 226.350355][ T6655] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.413257][ T30] audit: type=1400 audit(1743552064.418:771): avc: denied { bind } for pid=8045 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.432468][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.470219][ T30] audit: type=1400 audit(1743552064.418:772): avc: denied { name_bind } for pid=8045 comm="syz.0.576" src=19488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 226.526825][ T30] audit: type=1400 audit(1743552064.418:773): avc: denied { node_bind } for pid=8045 comm="syz.0.576" saddr=172.20.20.170 src=19488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 226.549421][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.567083][ T6655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.578364][ T82] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 226.620296][ T6655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.665063][ T6655] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.683283][ T6655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.708029][ T6655] usb 4-1: config 0 descriptor?? [ 226.796430][ T30] audit: type=1400 audit(1743552064.798:774): avc: denied { map } for pid=8067 comm="syz.1.584" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.820182][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.858570][ T82] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 226.877994][ T30] audit: type=1400 audit(1743552064.828:775): avc: denied { execute } for pid=8067 comm="syz.1.584" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.882733][ T82] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.902064][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.963591][ T82] usb 6-1: config 0 descriptor?? [ 227.100184][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 227.211934][ T7877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.250231][ T5868] usb 2-1: device descriptor read/64, error -71 [ 227.459842][ T6655] usb 4-1: string descriptor 0 read error: -22 [ 227.590586][ T5868] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.290384][ T82] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 228.304573][ T6655] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input13 [ 228.332571][ T5868] usb 2-1: device descriptor read/64, error -71 [ 228.448813][ T6655] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input14 [ 228.470293][ T5868] usb usb2-port1: attempt power cycle [ 228.480654][ T7488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.513714][ T6655] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input15 [ 228.558637][ T6655] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input16 [ 228.604661][ T5869] usb 6-1: USB disconnect, device number 5 [ 228.610610][ T6655] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 228.850416][ T5868] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.895513][ T5868] usb 2-1: device descriptor read/8, error -71 [ 229.189230][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.199249][ T6655] usb 4-1: USB disconnect, device number 13 [ 229.240656][ T5868] usb 2-1: device descriptor read/8, error -71 [ 229.350880][ T5868] usb usb2-port1: unable to enumerate USB device [ 229.399256][ T8079] delete_channel: no stack [ 229.992838][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 230.478355][ T30] audit: type=1400 audit(1743552068.478:776): avc: denied { create } for pid=8090 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.524180][ T30] audit: type=1400 audit(1743552068.508:777): avc: denied { read } for pid=8090 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.971022][ T30] audit: type=1400 audit(1743552068.968:778): avc: denied { create } for pid=8115 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 231.059158][ T30] audit: type=1400 audit(1743552068.968:779): avc: denied { connect } for pid=8115 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 231.840657][ T8093] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 232.055866][ T30] audit: type=1400 audit(1743552070.058:780): avc: denied { append } for pid=8130 comm="syz.1.602" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 232.139746][ T30] audit: type=1400 audit(1743552070.088:781): avc: denied { getopt } for pid=8131 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.401371][ T8126] delete_channel: no stack [ 232.689377][ T8148] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 232.740303][ T8148] CIFS: Unable to determine destination address [ 232.761922][ T8147] Illegal XDP return value 793586090 on prog (id 125) dev syz_tun, expect packet loss! [ 232.823507][ T30] audit: type=1400 audit(1743552070.818:782): avc: denied { setopt } for pid=8142 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.988430][ T6913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.775519][ T30] audit: type=1400 audit(1743552071.758:783): avc: denied { bind } for pid=8157 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.156182][ T30] audit: type=1400 audit(1743552071.758:784): avc: denied { listen } for pid=8157 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.235060][ T30] audit: type=1400 audit(1743552071.758:785): avc: denied { connect } for pid=8157 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.255282][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.328309][ T30] audit: type=1400 audit(1743552071.768:786): avc: denied { accept } for pid=8157 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.405847][ T30] audit: type=1400 audit(1743552071.778:787): avc: denied { read } for pid=8157 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.873862][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.070792][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 235.077683][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.090331][ T5869] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 235.100242][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.115802][ T5869] usb 5-1: config 0 descriptor?? [ 235.433033][ T30] audit: type=1400 audit(1743552073.428:788): avc: denied { ioctl } for pid=8183 comm="syz.0.619" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.513002][ T5869] usb 5-1: USB disconnect, device number 9 [ 235.560858][ T30] audit: type=1400 audit(1743552073.558:789): avc: denied { setopt } for pid=8186 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.581567][ T8187] netlink: 100 bytes leftover after parsing attributes in process `syz.0.620'. [ 235.627281][ T82] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 235.658722][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.621'. [ 235.773060][ T8175] delete_channel: no stack [ 235.860340][ T82] usb 2-1: Using ep0 maxpacket: 16 [ 235.872949][ T82] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.889262][ T82] usb 2-1: config 0 has no interface number 0 [ 235.897947][ T82] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.910480][ T82] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.953448][ T82] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 236.034834][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.090818][ T82] usb 2-1: config 0 descriptor?? [ 236.356039][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.413491][ T8199] bond0: (slave rose0): Enslaving as an active interface with an up link [ 236.475981][ T8205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.732387][ T5870] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.900283][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 237.908737][ T5870] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.939608][ T5870] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.981963][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.005372][ T5870] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 238.031271][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.302446][ T5870] usb 4-1: config 0 descriptor?? [ 238.746860][ T5879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.803566][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.814993][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.678087][ T8267] lo speed is unknown, defaulting to 1000 [ 239.739668][ T8267] lo speed is unknown, defaulting to 1000 [ 239.769851][ T8261] delete_channel: no stack [ 240.002383][ T5879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.349672][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 240.356724][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.445261][ T5870] usb 4-1: USB disconnect, device number 14 [ 241.618903][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 241.618922][ T30] audit: type=1400 audit(1743552079.608:800): avc: denied { bind } for pid=8296 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.090912][ T82] usbhid 2-1:0.1: can't add hid device: -32 [ 242.096906][ T82] usbhid 2-1:0.1: probe with driver usbhid failed with error -32 [ 243.853305][ T7488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.067556][ T30] audit: type=1400 audit(1743552082.068:801): avc: denied { read } for pid=8326 comm="syz.3.646" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 244.150573][ T30] audit: type=1400 audit(1743552082.068:802): avc: denied { open } for pid=8326 comm="syz.3.646" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 244.280828][ T30] audit: type=1400 audit(1743552082.188:803): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.355984][ T30] audit: type=1400 audit(1743552082.188:804): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.381534][ T30] audit: type=1400 audit(1743552082.198:805): avc: denied { rename } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.435535][ T30] audit: type=1400 audit(1743552082.198:806): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.458186][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 244.488209][ T30] audit: type=1400 audit(1743552082.198:807): avc: denied { unlink } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.516099][ T30] audit: type=1400 audit(1743552082.198:808): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.630192][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 244.664330][ T5870] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 244.685063][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.707364][ T5870] usb 6-1: Product: syz [ 244.715683][ T5870] usb 6-1: Manufacturer: syz [ 244.730165][ T5870] usb 6-1: SerialNumber: syz [ 244.777921][ T5870] usb 6-1: config 0 descriptor?? [ 244.783048][ T5869] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 244.803053][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 244.972067][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.008234][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 245.070265][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 245.107835][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.149335][ T5869] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 245.160628][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.168682][ T5869] usb 4-1: Product: syz [ 245.188692][ T5869] usb 4-1: Manufacturer: syz [ 245.195701][ T5869] usb 4-1: SerialNumber: syz [ 245.228721][ T5869] usb 4-1: config 0 descriptor?? [ 245.237497][ T8337] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.360376][ T5869] rc_core: IR keymap rc-imon-rsc not found [ 245.366354][ T5869] Registered IR keymap rc-empty [ 245.386357][ T5869] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 245.397200][ T5869] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 245.765432][ T6913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.871782][ T30] audit: type=1400 audit(1743552083.878:809): avc: denied { write } for pid=8354 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.045336][ T5870] gspca_stk1135: reg_w 0xd err -71 [ 246.058352][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.080556][ T5870] gspca_stk1135: Sensor write failed [ 246.090901][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.107603][ T5870] gspca_stk1135: Sensor write failed [ 246.131525][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.138060][ T5870] gspca_stk1135: Sensor read failed [ 246.160317][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.176956][ T5870] gspca_stk1135: Sensor read failed [ 246.193168][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 246.213355][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.219923][ T5870] gspca_stk1135: Sensor read failed [ 246.240224][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.256873][ T5870] gspca_stk1135: Sensor read failed [ 246.277224][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.292423][ T5870] gspca_stk1135: Sensor write failed [ 246.309776][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 246.328835][ T5870] gspca_stk1135: Sensor write failed [ 246.349338][ T5870] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 246.390522][ T5870] usb 6-1: USB disconnect, device number 6 [ 246.416918][ T8358] No control pipe specified [ 247.359149][ T30] audit: type=1326 audit(1743552085.328:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 247.536025][ T30] audit: type=1326 audit(1743552085.338:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 247.568496][ T30] audit: type=1326 audit(1743552085.338:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 247.703996][ T30] audit: type=1326 audit(1743552085.338:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 247.754099][ T30] audit: type=1326 audit(1743552085.338:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 247.783150][ T30] audit: type=1326 audit(1743552085.338:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 248.013932][ T30] audit: type=1326 audit(1743552085.338:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 248.056996][ T30] audit: type=1326 audit(1743552085.338:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 248.082396][ T30] audit: type=1326 audit(1743552085.348:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 248.189993][ T30] audit: type=1326 audit(1743552085.348:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cb58d169 code=0x7ffc0000 [ 249.608803][ T7872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.224293][ T8369] netlink: 'syz.0.659': attribute type 11 has an invalid length. [ 250.310756][ T872] usb 4-1: USB disconnect, device number 15 [ 251.360570][ T872] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 251.380526][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.390583][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.399911][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.412997][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.420821][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.478781][ T8402] lo speed is unknown, defaulting to 1000 [ 251.494220][ T8402] lo speed is unknown, defaulting to 1000 [ 251.522746][ T6913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.567561][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.620747][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.644757][ T872] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.665997][ T872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.688557][ T872] usb 4-1: config 0 descriptor?? [ 251.850201][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 251.953961][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 252.013665][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 252.067141][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 252.088211][ T5870] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 252.111033][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.132089][ T5870] usb 6-1: config 0 descriptor?? [ 252.251553][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.268782][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.276253][ T8402] bridge_slave_0: entered allmulticast mode [ 252.284205][ T8402] bridge_slave_0: entered promiscuous mode [ 252.308555][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.319874][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.327328][ T8402] bridge_slave_1: entered allmulticast mode [ 252.338741][ T8402] bridge_slave_1: entered promiscuous mode [ 252.354145][ T872] usb 4-1: string descriptor 0 read error: -22 [ 252.377051][ T5870] usb 6-1: USB disconnect, device number 7 [ 252.448024][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.485473][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.562860][ T872] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input18 [ 252.578804][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 252.578822][ T30] audit: type=1400 audit(1743552090.588:837): avc: denied { execute } for pid=8425 comm="syz.4.676" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 252.636414][ T8402] team0: Port device team_slave_0 added [ 252.643599][ T8402] team0: Port device team_slave_1 added [ 252.683185][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.693256][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.729843][ T872] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input19 [ 252.765989][ T872] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input20 [ 252.789076][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.806361][ T872] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input21 [ 252.823727][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.833733][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.872496][ T872] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 252.888191][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.249574][ T8402] hsr_slave_0: entered promiscuous mode [ 253.322026][ T8402] hsr_slave_1: entered promiscuous mode [ 253.329316][ T8402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.373606][ T8402] Cannot create hsr debugfs directory [ 254.134267][ T5823] Bluetooth: hci6: command tx timeout [ 254.188897][ T8434] netlink: 'syz.5.679': attribute type 10 has an invalid length. [ 254.370624][ T5819] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 254.594894][ T8434] team0: Device veth1_macvtap failed to register rx_handler [ 254.730576][ T8447] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 255.111805][ T8447] team0: Device veth1_macvtap failed to register rx_handler [ 255.269718][ T82] usb 4-1: USB disconnect, device number 16 [ 255.365580][ T5955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.380927][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.490916][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 256.160336][ T5823] Bluetooth: hci6: command tx timeout [ 256.512538][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 256.518937][ T24] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 256.664113][ T24] usb 6-1: config 0 has no interface number 0 [ 256.676822][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.694161][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 256.713256][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 256.726698][ T7219] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.755149][ T24] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.255852][ T8402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.519870][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 257.532895][ T8402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.540186][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.548197][ T24] usb 6-1: Product: syz [ 257.557476][ T24] usb 6-1: Manufacturer: syz [ 257.572477][ T24] usb 6-1: SerialNumber: syz [ 257.579698][ T24] usb 6-1: config 0 descriptor?? [ 257.645947][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 257.646000][ T8402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 257.705488][ T8402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 257.804344][ T8493] netlink: 'syz.0.695': attribute type 10 has an invalid length. [ 257.820030][ T8493] team0: Device veth1_macvtap failed to register rx_handler [ 257.869197][ T24] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 258.185504][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.282284][ T5823] Bluetooth: hci6: command tx timeout [ 258.946490][ T8453] lo speed is unknown, defaulting to 1000 [ 258.964303][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.014406][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.021590][ T7219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.075956][ T8513] FAULT_INJECTION: forcing a failure. [ 259.075956][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 259.081457][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.095806][ T7219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.110897][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.4.699 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 259.110921][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.110929][ T8513] Call Trace: [ 259.110935][ T8513] [ 259.110941][ T8513] dump_stack_lvl+0x16c/0x1f0 [ 259.110963][ T8513] should_fail_ex+0x512/0x640 [ 259.110984][ T8513] ? fs_reclaim_acquire+0xae/0x150 [ 259.111003][ T8513] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 259.111020][ T8513] should_failslab+0xc2/0x120 [ 259.111035][ T8513] __kmalloc_noprof+0xd2/0x510 [ 259.111062][ T8513] tomoyo_realpath_from_path+0xc2/0x6e0 [ 259.111087][ T8513] ? tomoyo_profile+0x47/0x60 [ 259.111108][ T8513] tomoyo_path_number_perm+0x245/0x580 [ 259.111130][ T8513] ? tomoyo_path_number_perm+0x237/0x580 [ 259.111154][ T8513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.111178][ T8513] ? find_held_lock+0x2b/0x80 [ 259.111218][ T8513] ? find_held_lock+0x2b/0x80 [ 259.111236][ T8513] ? hook_file_ioctl_common+0x145/0x410 [ 259.111260][ T8513] ? __fget_files+0x20e/0x3c0 [ 259.111284][ T8513] security_file_ioctl+0x9b/0x240 [ 259.111301][ T8513] __x64_sys_ioctl+0xb7/0x200 [ 259.111320][ T8513] do_syscall_64+0xcd/0x260 [ 259.111337][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.111352][ T8513] RIP: 0033:0x7f1ac7b8d169 [ 259.111364][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.111378][ T8513] RSP: 002b:00007f1ac8910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.111393][ T8513] RAX: ffffffffffffffda RBX: 00007f1ac7da6160 RCX: 00007f1ac7b8d169 [ 259.111403][ T8513] RDX: 0000200000000100 RSI: 00000000402c5342 RDI: 0000000000000004 [ 259.111412][ T8513] RBP: 00007f1ac8910090 R08: 0000000000000000 R09: 0000000000000000 [ 259.111427][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.111436][ T8513] R13: 0000000000000000 R14: 00007f1ac7da6160 R15: 00007ffc789594c8 [ 259.111459][ T8513] [ 259.111465][ T8513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.522717][ T8453] lo speed is unknown, defaulting to 1000 [ 259.653112][ T8402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.790218][ T6655] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 259.993429][ T6655] usb 4-1: Using ep0 maxpacket: 32 [ 260.024659][ T6655] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 260.055885][ T6655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.092748][ T6655] usb 4-1: Product: syz [ 260.104393][ T6655] usb 4-1: Manufacturer: syz [ 260.109018][ T6655] usb 4-1: SerialNumber: syz [ 260.125819][ T6655] usb 4-1: config 0 descriptor?? [ 260.142717][ T6655] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 260.190327][ T82] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 260.208984][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.250512][ T5868] usb 6-1: USB disconnect, device number 8 [ 260.320413][ T5823] Bluetooth: hci6: command tx timeout [ 260.350063][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.370494][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.380893][ T82] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.391922][ T82] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.456026][ T82] usb 5-1: config 0 descriptor?? [ 261.106202][ T82] usb 5-1: string descriptor 0 read error: -22 [ 261.140543][ T8541] netlink: 'syz.5.706': attribute type 2 has an invalid length. [ 261.148261][ T8541] netlink: 119 bytes leftover after parsing attributes in process `syz.5.706'. [ 261.226050][ T7858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.282011][ T8540] hub 9-0:1.0: USB hub found [ 261.288267][ T8540] hub 9-0:1.0: 1 port detected [ 261.340660][ T82] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input22 [ 261.417176][ T82] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input23 [ 261.432813][ T8402] veth0_vlan: entered promiscuous mode [ 261.497735][ T8402] veth1_vlan: entered promiscuous mode [ 261.501970][ T82] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input24 [ 261.589159][ T82] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input25 [ 261.689718][ T8402] veth0_macvtap: entered promiscuous mode [ 261.696540][ T82] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 261.736301][ T6655] gspca_stk1135: reg_w 0xf err -71 [ 261.744355][ T8402] veth1_macvtap: entered promiscuous mode [ 261.764178][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 261.847978][ T8545] netlink: 'syz.5.707': attribute type 10 has an invalid length. [ 261.853467][ T6655] gspca_stk1135: Sensor write failed [ 261.929806][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 261.943811][ T8545] team0: Device veth1_macvtap failed to register rx_handler [ 261.950251][ T6655] gspca_stk1135: Sensor write failed [ 262.059614][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.148860][ T6655] gspca_stk1135: Sensor read failed [ 262.173169][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.242082][ T6655] gspca_stk1135: Sensor read failed [ 262.262261][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.300487][ T6655] gspca_stk1135: Detected sensor type unknown (0x0) [ 262.345610][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.352501][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.507378][ T6655] gspca_stk1135: Sensor read failed [ 262.514548][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.525568][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.532222][ T6655] gspca_stk1135: Sensor read failed [ 262.537446][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.545588][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.555684][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.566562][ T6655] gspca_stk1135: Sensor write failed [ 262.572776][ T6655] gspca_stk1135: serial bus timeout: status=0x00 [ 262.579321][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.589443][ T6655] gspca_stk1135: Sensor write failed [ 262.595271][ T6655] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 262.603518][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.826650][ T6655] usb 4-1: USB disconnect, device number 17 [ 262.887953][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.961924][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.975518][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.986166][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.001480][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.018312][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.052204][ T7858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.105941][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.187146][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.710261][ T5871] usb 5-1: USB disconnect, device number 10 [ 263.746254][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.792581][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.852206][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.920264][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.965311][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.017893][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.099182][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.150335][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.170370][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.182656][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.199649][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.229653][ T8402] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.239008][ T8402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.248604][ T8402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.259233][ T8402] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.801408][ T8572] block device autoloading is deprecated and will be removed. [ 264.816335][ T30] audit: type=1400 audit(1743552102.798:838): avc: denied { read } for pid=8567 comm="syz.3.716" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 264.955770][ T30] audit: type=1400 audit(1743552102.798:839): avc: denied { open } for pid=8567 comm="syz.3.716" path="/137/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 265.106792][ T30] audit: type=1400 audit(1743552102.848:840): avc: denied { ioctl } for pid=8567 comm="syz.3.716" path="/137/file0/file0" dev="fuse" ino=64 ioctlcmd=0x935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 265.246376][ T8572] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 265.276100][ T30] audit: type=1400 audit(1743552103.248:841): avc: denied { load_policy } for pid=8567 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 265.397723][ T8579] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 265.431594][ T8579] team0: Device veth1_macvtap failed to register rx_handler [ 265.459099][ T30] audit: type=1400 audit(1743552103.458:842): avc: denied { map } for pid=8577 comm="syz.0.711" path="pipe:[18576]" dev="pipefs" ino=18576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 265.533980][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.639912][ T8572] SELinux: failed to load policy [ 265.685744][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.781074][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.860173][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.962554][ T30] audit: type=1400 audit(1743552103.968:843): avc: denied { connect } for pid=8586 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.141946][ T7851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.160240][ T6655] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.491510][ T6655] usb 7-1: Using ep0 maxpacket: 8 [ 267.511382][ T6655] usb 7-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 267.527374][ T6655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.677769][ T6655] usb 7-1: config 0 descriptor?? [ 268.516384][ T6655] pwc: Logitech QuickCam Zoom USB webcam detected. [ 268.741367][ T6655] pwc: Warning: more than 1 configuration available. [ 268.803545][ T7480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.863930][ T8629] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 270.633157][ T8629] team0: Device veth1_macvtap failed to register rx_handler [ 270.697410][ T6655] pwc: send_video_command error -71 [ 270.739782][ T6655] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 270.902749][ T6655] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 270.960380][ T6655] usb 7-1: USB disconnect, device number 2 [ 273.282139][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.795248][ T8675] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 273.819329][ T8675] team0: Device veth1_macvtap failed to register rx_handler [ 274.742258][ T5944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.302124][ T5870] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 275.311571][ T8669] delete_channel: no stack [ 275.482958][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 275.521337][ T5870] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 275.549927][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.583946][ T5870] usb 7-1: config 0 has no interface number 0 [ 275.606040][ T5870] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 275.615249][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.628763][ T5870] usb 7-1: Product: syz [ 275.644317][ T5870] usb 7-1: Manufacturer: syz [ 275.694410][ T5870] usb 7-1: SerialNumber: syz [ 275.732853][ T5870] usb 7-1: config 0 descriptor?? [ 275.964250][ T5870] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 276.000447][ T5870] usb 7-1: No valid video chain found. [ 276.167948][ T8692] netlink: 'syz.6.751': attribute type 3 has an invalid length. [ 276.207023][ T8692] overlayfs: missing 'lowerdir' [ 276.288293][ T5870] usb 7-1: USB disconnect, device number 3 [ 276.309127][ T30] audit: type=1400 audit(1743552114.268:844): avc: denied { audit_write } for pid=8691 comm="syz.6.751" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 276.992195][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.204917][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.268846][ T8713] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 277.656834][ T8718] pimreg: entered allmulticast mode [ 277.704948][ T8718] pimreg: left allmulticast mode [ 277.800726][ T30] audit: type=1400 audit(1743552115.798:845): avc: denied { mount } for pid=8715 comm="syz.4.756" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 277.893654][ T30] audit: type=1400 audit(1743552115.838:846): avc: denied { bind } for pid=8716 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.134919][ T8728] futex_wake_op: syz.6.759 tries to shift op by -33; fix this program [ 278.161725][ T8728] netdevsim netdevsim6: Direct firmware load for . [ 278.161725][ T8728] failed with error -2 [ 278.218953][ T8728] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 278.218953][ T8728] [ 278.231601][ T30] audit: type=1400 audit(1743552116.218:847): avc: denied { firmware_load } for pid=8723 comm="syz.6.759" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 278.254333][ T8730] capability: warning: `syz.6.759' uses 32-bit capabilities (legacy support in use) [ 279.041526][ T6913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.343209][ T6913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.736101][ T8775] SELinux: ebitmap: truncated map [ 282.770111][ T8775] SELinux: failed to load policy [ 283.617989][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 283.627048][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 283.671197][ T8777] lo speed is unknown, defaulting to 1000 [ 283.678662][ T8777] lo speed is unknown, defaulting to 1000 [ 283.950550][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 284.054444][ T8788] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 284.107489][ T8788] team0: Device veth1_macvtap failed to register rx_handler [ 284.151990][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.200264][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.210053][ T5871] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.264404][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.303208][ T5871] usb 5-1: config 0 descriptor?? [ 284.307285][ T8795] vivid-001: disconnect [ 284.957793][ T7871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.790318][ T10] vivid-001: reconnect [ 286.119245][ T8817] veth0_to_team: entered promiscuous mode [ 286.125289][ T8817] veth0_to_team: entered allmulticast mode [ 286.499052][ T5871] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 286.511923][ T5871] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 286.520206][ T5871] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 286.529419][ T5871] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 286.545220][ T5871] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 286.558938][ T5871] usb 5-1: USB disconnect, device number 11 [ 286.679106][ T6069] udevd[6069]: setting mode of /dev/bus/usb/005/011 to 020664 failed: No such file or directory [ 286.704016][ T6069] udevd[6069]: setting owner of /dev/bus/usb/005/011 to uid=0, gid=0 failed: No such file or directory [ 286.731724][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.000198][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 289.176914][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 289.211145][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.251548][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.293609][ T5871] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 289.328084][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.373767][ T5871] usb 7-1: config 0 descriptor?? [ 289.523217][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'. [ 289.770852][ T8870] FAULT_INJECTION: forcing a failure. [ 289.770852][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.790565][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.5.805 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 289.790590][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.790599][ T8870] Call Trace: [ 289.790604][ T8870] [ 289.790610][ T8870] dump_stack_lvl+0x16c/0x1f0 [ 289.790632][ T8870] should_fail_ex+0x512/0x640 [ 289.790657][ T8870] _copy_from_iter+0x2a4/0x15b0 [ 289.790684][ T8870] ? __alloc_skb+0x200/0x380 [ 289.790709][ T8870] ? __pfx__copy_from_iter+0x10/0x10 [ 289.790730][ T8870] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 289.790756][ T8870] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 289.790791][ T8870] netlink_sendmsg+0x829/0xdd0 [ 289.790814][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.790839][ T8870] ____sys_sendmsg+0xa95/0xc70 [ 289.790857][ T8870] ? copy_msghdr_from_user+0x10a/0x160 [ 289.790880][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.790908][ T8870] ___sys_sendmsg+0x134/0x1d0 [ 289.790932][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.790979][ T8870] __sys_sendmsg+0x16d/0x220 [ 289.791002][ T8870] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.791032][ T8870] ? rcu_is_watching+0x12/0xc0 [ 289.791059][ T8870] do_syscall_64+0xcd/0x260 [ 289.791077][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.791094][ T8870] RIP: 0033:0x7f223d78d169 [ 289.791108][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.791123][ T8870] RSP: 002b:00007f223e644038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.791139][ T8870] RAX: ffffffffffffffda RBX: 00007f223d9a5fa0 RCX: 00007f223d78d169 [ 289.791149][ T8870] RDX: 0000000004004814 RSI: 00002000000000c0 RDI: 0000000000000004 [ 289.791158][ T8870] RBP: 00007f223e644090 R08: 0000000000000000 R09: 0000000000000000 [ 289.791168][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.791177][ T8870] R13: 0000000000000000 R14: 00007f223d9a5fa0 R15: 00007ffd74aae0d8 [ 289.791197][ T8870] [ 289.807498][ T5871] glorious 0003:258A:0033.000A: item fetching failed at offset 0/3 [ 290.025326][ T5871] glorious 0003:258A:0033.000A: probe with driver glorious failed with error -22 [ 290.055337][ T5871] usb 7-1: USB disconnect, device number 4 [ 291.042609][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.997684][ T8901] /dev/nullb0: Can't open blockdev [ 292.117845][ T7479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.374778][ T30] audit: type=1400 audit(1743552130.378:848): avc: denied { listen } for pid=8909 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 294.604952][ T8894] lo speed is unknown, defaulting to 1000 [ 294.611337][ T8894] lo speed is unknown, defaulting to 1000 [ 294.617540][ T8894] lo speed is unknown, defaulting to 1000 [ 294.632798][ T8894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 294.683141][ T8894] lo speed is unknown, defaulting to 1000 [ 294.690457][ T8894] lo speed is unknown, defaulting to 1000 [ 294.698881][ T8894] lo speed is unknown, defaulting to 1000 [ 294.707239][ T8894] lo speed is unknown, defaulting to 1000 [ 294.714190][ T8894] lo speed is unknown, defaulting to 1000 [ 294.721155][ T8894] lo speed is unknown, defaulting to 1000 [ 294.728029][ T8894] lo speed is unknown, defaulting to 1000 [ 295.052813][ T8930] FAULT_INJECTION: forcing a failure. [ 295.052813][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.185737][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.4.820 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 295.185764][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.185774][ T8930] Call Trace: [ 295.185779][ T8930] [ 295.185786][ T8930] dump_stack_lvl+0x16c/0x1f0 [ 295.185808][ T8930] should_fail_ex+0x512/0x640 [ 295.185835][ T8930] _copy_from_user+0x2e/0xd0 [ 295.185861][ T8930] copy_from_sockptr_offset+0x15c/0x1b0 [ 295.185881][ T8930] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 295.185901][ T8930] ? find_held_lock+0x2b/0x80 [ 295.185926][ T8930] do_tcp_getsockopt+0x165/0x26c0 [ 295.185954][ T8930] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 295.185975][ T8930] ? unwind_get_return_address+0x59/0xa0 [ 295.186003][ T8930] ? __lock_acquire+0x5ca/0x1ba0 [ 295.186022][ T8930] ? __lock_acquire+0xaa4/0x1ba0 [ 295.186035][ T8930] ? _parse_integer_limit+0x17f/0x1d0 [ 295.186062][ T8930] ? find_held_lock+0x2b/0x80 [ 295.186083][ T8930] ? avc_has_perm_noaudit+0x117/0x3b0 [ 295.186109][ T8930] ? avc_has_perm_noaudit+0x149/0x3b0 [ 295.186133][ T8930] ? avc_has_perm+0x11a/0x1c0 [ 295.186155][ T8930] ? __pfx_avc_has_perm+0x10/0x10 [ 295.186179][ T8930] ? __lock_acquire+0xaa4/0x1ba0 [ 295.186198][ T8930] ? sock_has_perm+0x259/0x2f0 [ 295.186230][ T8930] ? find_held_lock+0x2b/0x80 [ 295.186250][ T8930] ? __might_fault+0xe3/0x190 [ 295.186266][ T8930] ? __might_fault+0xe3/0x190 [ 295.186279][ T8930] ? __might_fault+0x13b/0x190 [ 295.186297][ T8930] tcp_getsockopt+0xdf/0x100 [ 295.186320][ T8930] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.186342][ T8930] do_sock_getsockopt+0x3fc/0x800 [ 295.186363][ T8930] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 295.186380][ T8930] ? __fget_files+0x204/0x3c0 [ 295.186415][ T8930] __sys_getsockopt+0x12f/0x260 [ 295.186444][ T8930] __x64_sys_getsockopt+0xbd/0x160 [ 295.186473][ T8930] ? do_syscall_64+0x91/0x260 [ 295.186489][ T8930] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.186514][ T8930] do_syscall_64+0xcd/0x260 [ 295.186531][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.186548][ T8930] RIP: 0033:0x7f1ac7b8d169 [ 295.186562][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.186578][ T8930] RSP: 002b:00007f1ac8952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 295.186595][ T8930] RAX: ffffffffffffffda RBX: 00007f1ac7da5fa0 RCX: 00007f1ac7b8d169 [ 295.186606][ T8930] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 295.186616][ T8930] RBP: 00007f1ac8952090 R08: 0000200000000340 R09: 0000000000000000 [ 295.186627][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.186637][ T8930] R13: 0000000000000000 R14: 00007f1ac7da5fa0 R15: 00007ffc789594c8 [ 295.186660][ T8930] [ 295.997176][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.826'. [ 296.325315][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.867089][ T7212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.769310][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 298.845791][ T8969] netlink: 'syz.6.834': attribute type 10 has an invalid length. [ 299.120376][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.177363][ T5870] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 299.220158][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.230545][ T5870] usb 5-1: config 0 descriptor?? [ 300.460802][ T5870] nintendo 0003:057E:2017.000B: hidraw0: USB HID v80.00 Device [HID 057e:2017] on usb-dummy_hcd.4-1/input0 [ 300.551013][ T5870] nintendo 0003:057E:2017.000B: Failed to get joycon info; ret=-38 [ 300.773529][ T5870] nintendo 0003:057E:2017.000B: Failed to retrieve controller info; ret=-38 [ 300.791135][ T5870] nintendo 0003:057E:2017.000B: Failed to initialize controller; ret=-38 [ 300.808731][ T5870] nintendo 0003:057E:2017.000B: probe - fail = -38 [ 300.815429][ T5870] nintendo 0003:057E:2017.000B: probe with driver nintendo failed with error -38 [ 301.843833][ T8987] delete_channel: no stack [ 302.095766][ T5943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.363340][ T5949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.165284][ T8969] team0: Device veth1_macvtap failed to register rx_handler [ 304.693332][ T9015] fuse: Unknown parameter ' [ 304.693332][ T9015] 9' [ 305.733958][ T82] usb 5-1: USB disconnect, device number 12 [ 305.842278][ T5870] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 306.509988][ T9022] netlink: 'syz.6.848': attribute type 10 has an invalid length. [ 306.542394][ T9022] team0: Device veth1_macvtap failed to register rx_handler [ 306.668648][ T5870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 306.687724][ T5870] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 306.933049][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.976129][ T5870] usb 6-1: config 0 descriptor?? [ 307.205480][ T9019] input: syz0 as /devices/virtual/input/input26 [ 307.212666][ T30] audit: type=1400 audit(1743552145.208:849): avc: denied { ioctl } for pid=9012 comm="syz.5.849" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.842589][ T7215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.968967][ T5870] video4linux radio48: keene_cmd_main failed (-71) [ 307.980251][ T5870] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 308.038319][ T5870] usb 6-1: USB disconnect, device number 9 [ 308.123192][ T30] audit: type=1400 audit(1743552146.128:850): avc: denied { getopt } for pid=9049 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.143173][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 308.183323][ T9055] nbd: must specify a device to reconfigure [ 310.080515][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 310.088157][ T5871] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 310.124997][ T5871] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 312.235119][ T30] audit: type=1326 audit(1743552150.238:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76cb58d169 code=0x0 [ 312.280064][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 312.286699][ T5871] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 312.315042][ T5871] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 312.340574][ T30] audit: type=1400 audit(1743552150.308:852): avc: denied { create } for pid=9080 comm="syz.5.864" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.474866][ T30] audit: type=1400 audit(1743552150.478:853): avc: denied { write } for pid=9080 comm="syz.5.864" name="file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.529309][ T9092] delete_channel: no stack [ 312.546633][ T30] audit: type=1400 audit(1743552150.478:854): avc: denied { open } for pid=9080 comm="syz.5.864" path="/84/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.617418][ T30] audit: type=1400 audit(1743552150.528:855): avc: denied { setopt } for pid=9092 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 312.643416][ T30] audit: type=1400 audit(1743552150.578:856): avc: denied { ioctl } for pid=9080 comm="syz.5.864" path="/84/file0" dev="tmpfs" ino=450 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.795626][ T30] audit: type=1400 audit(1743552150.598:857): avc: denied { bind } for pid=9080 comm="syz.5.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 313.624910][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.771337][ T7479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.400198][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 314.433619][ T5871] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 314.439701][ T5871] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 315.818066][ T30] audit: type=1400 audit(1743552153.818:858): avc: denied { unlink } for pid=7465 comm="syz-executor" name="file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.585583][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 316.843771][ T5871] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 316.849906][ T5871] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 316.859980][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.050334][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.363686][ T7871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.181724][ T30] audit: type=1400 audit(1743552161.138:859): avc: denied { write } for pid=9165 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 323.322294][ T30] audit: type=1400 audit(1743552161.318:860): avc: denied { setattr } for pid=9172 comm="syz.5.878" name="PING" dev="sockfs" ino=20787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.553093][ T5969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.120568][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.206980][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.893'. [ 325.471371][ T30] audit: type=1400 audit(1743552163.478:861): avc: denied { ioctl } for pid=9212 comm="syz.0.896" path="socket:[20938]" dev="sockfs" ino=20938 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.519741][ T9216] sit0: entered allmulticast mode [ 325.597146][ T9216] sit0: entered promiscuous mode [ 326.062553][ T30] audit: type=1400 audit(1743552163.948:862): avc: denied { write } for pid=9219 comm="syz.4.898" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 326.355282][ T9217] delete_channel: no stack [ 326.540588][ T30] audit: type=1400 audit(1743552164.528:863): avc: denied { accept } for pid=9215 comm="syz.5.895" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.673822][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 326.817982][ T30] audit: type=1400 audit(1743552164.818:864): avc: denied { ioctl } for pid=9243 comm="syz.6.901" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 326.819936][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.901'. [ 326.843157][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.986698][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.901'. [ 327.033977][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.901'. [ 327.066924][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 327.088606][ T30] audit: type=1400 audit(1743552165.088:865): avc: denied { ioctl } for pid=9255 comm="syz.0.905" path="socket:[20169]" dev="sockfs" ino=20169 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 327.207203][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 327.216702][ T5871] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 327.237326][ T5871] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 327.353212][ T30] audit: type=1400 audit(1743552165.358:866): avc: denied { module_load } for pid=9272 comm="syz.6.908" path="/sys/power/wakeup_count" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 327.377311][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.396833][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 329.448539][ T5823] Bluetooth: hci6: command 0x0c1a tx timeout [ 329.458014][ T5871] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 329.480193][ T5871] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 329.601021][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 330.665953][ T9349] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 330.683475][ T9349] team0: Device veth1_macvtap failed to register rx_handler [ 330.914634][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.874505][ T30] audit: type=1400 audit(1743552170.878:867): avc: denied { connect } for pid=9376 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.981429][ T9389] FAULT_INJECTION: forcing a failure. [ 332.981429][ T9389] name failslab, interval 1, probability 0, space 0, times 0 [ 333.006742][ T9389] CPU: 1 UID: 0 PID: 9389 Comm: syz.4.937 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 333.006769][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.006778][ T9389] Call Trace: [ 333.006783][ T9389] [ 333.006790][ T9389] dump_stack_lvl+0x16c/0x1f0 [ 333.006812][ T9389] should_fail_ex+0x512/0x640 [ 333.006834][ T9389] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 333.006862][ T9389] should_failslab+0xc2/0x120 [ 333.006879][ T9389] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 333.006904][ T9389] ? __alloc_skb+0x2b2/0x380 [ 333.006934][ T9389] __alloc_skb+0x2b2/0x380 [ 333.006974][ T9389] ? __pfx___alloc_skb+0x10/0x10 [ 333.007000][ T9389] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 333.007022][ T9389] netlink_alloc_large_skb+0x69/0x130 [ 333.007041][ T9389] netlink_sendmsg+0x6a1/0xdd0 [ 333.007061][ T9389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.007087][ T9389] ____sys_sendmsg+0xa95/0xc70 [ 333.007107][ T9389] ? copy_msghdr_from_user+0x10a/0x160 [ 333.007132][ T9389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.007163][ T9389] ___sys_sendmsg+0x134/0x1d0 [ 333.007199][ T9389] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.007253][ T9389] __sys_sendmsg+0x16d/0x220 [ 333.007278][ T9389] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.007311][ T9389] ? rcu_is_watching+0x12/0xc0 [ 333.007338][ T9389] do_syscall_64+0xcd/0x260 [ 333.007357][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.007373][ T9389] RIP: 0033:0x7f1ac7b8d169 [ 333.007387][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.007403][ T9389] RSP: 002b:00007f1ac8952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.007419][ T9389] RAX: ffffffffffffffda RBX: 00007f1ac7da5fa0 RCX: 00007f1ac7b8d169 [ 333.007430][ T9389] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 333.007440][ T9389] RBP: 00007f1ac8952090 R08: 0000000000000000 R09: 0000000000000000 [ 333.007450][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.007459][ T9389] R13: 0000000000000000 R14: 00007f1ac7da5fa0 R15: 00007ffc789594c8 [ 333.007482][ T9389] [ 333.224148][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.016103][ T9404] netlink: 'syz.6.940': attribute type 10 has an invalid length. [ 334.039814][ T9404] team0: Device veth1_macvtap failed to register rx_handler [ 334.088597][ T9405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9405 comm=syz.4.939 [ 336.164977][ T7487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.486272][ T9445] FAULT_INJECTION: forcing a failure. [ 337.486272][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.510791][ T30] audit: type=1400 audit(1743552175.518:868): avc: denied { setopt } for pid=9443 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 337.530240][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.4.950 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 337.530265][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.530273][ T9445] Call Trace: [ 337.530278][ T9445] [ 337.530285][ T9445] dump_stack_lvl+0x16c/0x1f0 [ 337.530306][ T9445] should_fail_ex+0x512/0x640 [ 337.530331][ T9445] strncpy_from_user+0x3b/0x2e0 [ 337.530358][ T9445] getname_flags.part.0+0x8b/0x540 [ 337.530376][ T9445] getname_flags+0x93/0xf0 [ 337.530394][ T9445] do_readlinkat+0xb4/0x3a0 [ 337.530408][ T9445] ? fput+0x70/0xf0 [ 337.530422][ T9445] ? __pfx_do_readlinkat+0x10/0x10 [ 337.530435][ T9445] ? ksys_write+0x1b9/0x240 [ 337.530455][ T9445] ? __pfx_ksys_write+0x10/0x10 [ 337.530475][ T9445] ? rcu_is_watching+0x12/0xc0 [ 337.530501][ T9445] __x64_sys_readlink+0x78/0xc0 [ 337.530518][ T9445] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.530543][ T9445] do_syscall_64+0xcd/0x260 [ 337.530561][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.530577][ T9445] RIP: 0033:0x7f1ac7b8d169 [ 337.530591][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.530607][ T9445] RSP: 002b:00007f1ac8931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 337.530622][ T9445] RAX: ffffffffffffffda RBX: 00007f1ac7da6080 RCX: 00007f1ac7b8d169 [ 337.530633][ T9445] RDX: 00000000000000a7 RSI: 0000200000000080 RDI: 0000200000000040 [ 337.530643][ T9445] RBP: 00007f1ac8931090 R08: 0000000000000000 R09: 0000000000000000 [ 337.530651][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.530659][ T9445] R13: 0000000000000000 R14: 00007f1ac7da6080 R15: 00007ffc789594c8 [ 337.530679][ T9445] [ 338.490845][ T9435] delete_channel: no stack [ 340.233116][ T9469] syz.4.957: attempt to access beyond end of device [ 340.233116][ T9469] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 340.533784][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 340.721883][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.751994][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.778194][ T24] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 340.788129][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.796427][ T24] usb 5-1: Product: syz [ 340.804116][ T24] usb 5-1: Manufacturer: syz [ 340.808732][ T24] usb 5-1: SerialNumber: syz [ 340.816450][ T24] usb 5-1: config 0 descriptor?? [ 340.830792][ T24] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 341.105866][ T82] usb 5-1: USB disconnect, device number 13 [ 341.115614][ T9472] overlayfs: failed to clone upperpath [ 341.160959][ T9475] netlink: 36 bytes leftover after parsing attributes in process `syz.6.959'. [ 341.195756][ T30] audit: type=1400 audit(1743552179.198:869): avc: denied { setopt } for pid=9470 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.413694][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.442815][ T9495] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 342.449367][ T9495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.479767][ T30] audit: type=1400 audit(1743552180.478:870): avc: denied { mount } for pid=9496 comm="syz.6.967" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 342.504788][ T9495] vhci_hcd vhci_hcd.0: Device attached [ 342.516646][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 342.533324][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 342.540195][ T30] audit: type=1400 audit(1743552180.478:871): avc: denied { write } for pid=9496 comm="syz.6.967" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.568641][ T9498] vhci_hcd: connection closed [ 342.569862][ T7855] vhci_hcd: stop threads [ 342.580060][ T7855] vhci_hcd: release socket [ 342.581278][ T9501] ipvlan2: entered allmulticast mode [ 342.584591][ T7855] vhci_hcd: disconnect device [ 342.589866][ T9501] veth0_vlan: entered allmulticast mode [ 342.603598][ T30] audit: type=1400 audit(1743552180.478:872): avc: denied { open } for pid=9496 comm="syz.6.967" path="/36/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.691458][ T30] audit: type=1400 audit(1743552180.508:873): avc: denied { unmount } for pid=8402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 342.751989][ T9504] lo speed is unknown, defaulting to 1000 [ 342.758799][ T9504] lo speed is unknown, defaulting to 1000 [ 342.867104][ T9504] lo speed is unknown, defaulting to 1000 [ 342.908358][ T30] audit: type=1400 audit(1743552180.828:874): avc: denied { block_suspend } for pid=9503 comm="syz.6.969" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.386803][ T30] audit: type=1400 audit(1743552182.368:875): avc: denied { listen } for pid=9527 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.555748][ T30] audit: type=1400 audit(1743552182.508:876): avc: denied { ioctl } for pid=9531 comm="syz.4.978" path="socket:[21392]" dev="sockfs" ino=21392 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 345.086292][ T30] audit: type=1400 audit(1743552183.088:877): avc: denied { compute_member } for pid=9545 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 345.124183][ T9547] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 345.796495][ T9555] veth0_vlan: entered allmulticast mode [ 345.858635][ T9556] lo speed is unknown, defaulting to 1000 [ 345.931951][ T9556] lo speed is unknown, defaulting to 1000 [ 347.364205][ T9575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9575 comm=syz.6.990 [ 347.380875][ T9575] netlink: 'syz.6.990': attribute type 1 has an invalid length. [ 347.420486][ T30] audit: type=1400 audit(1743552185.418:878): avc: denied { ioctl } for pid=9572 comm="syz.0.989" path="socket:[22600]" dev="sockfs" ino=22600 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 347.445269][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.636425][ T9575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.910862][ T9579] bond1: (slave gretap1): making interface the new active one [ 347.929159][ T9579] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 348.283749][ T5967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.156592][ T9556] lo speed is unknown, defaulting to 1000 [ 350.042615][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'. [ 350.460303][ T30] audit: type=1400 audit(1743552188.378:879): avc: denied { relabelfrom } for pid=9604 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 350.527070][ T30] audit: type=1400 audit(1743552188.378:880): avc: denied { relabelto } for pid=9604 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 354.239182][ T8041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.963622][ T9624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.980191][ T30] audit: type=1400 audit(1743552192.938:881): avc: denied { getopt } for pid=9638 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.280010][ T30] audit: type=1400 audit(1743552193.278:882): avc: denied { write } for pid=9646 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.358528][ T30] audit: type=1400 audit(1743552193.358:883): avc: denied { write } for pid=9646 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 356.255402][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 356.432232][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 356.448156][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.470670][ T10] usb 6-1: config 0 descriptor?? [ 356.895215][ T10] hackrf 6-1:0.0: Board ID: 00 [ 356.900024][ T10] hackrf 6-1:0.0: Firmware version: [ 356.928060][ T10] hackrf 6-1:0.0: Registered as swradio24 [ 356.939968][ T10] videodev: could not get a free minor [ 356.947249][ T10] hackrf 6-1:0.0: Failed to register as video device (-23) [ 356.973949][ T10] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 358.521085][ T9660] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 358.529504][ T9660] team0: Device veth1_macvtap failed to register rx_handler [ 359.078696][ T6655] usb 6-1: USB disconnect, device number 10 [ 359.989041][ T7213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.353097][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 361.392684][ T30] audit: type=1400 audit(1743552199.388:884): avc: denied { setattr } for pid=9680 comm="syz.4.1016" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.615689][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1018'. [ 361.670224][ T5870] usb 7-1: device descriptor read/64, error -71 [ 361.897656][ T9695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.950289][ T5870] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 362.120408][ T5870] usb 7-1: device descriptor read/64, error -71 [ 362.240868][ T5870] usb usb7-port1: attempt power cycle [ 363.762847][ T5870] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 363.916231][ T5870] usb 7-1: device descriptor read/8, error -71 [ 364.046323][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1024'. [ 366.082297][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.265226][ T9731] netlink: 'syz.5.1028': attribute type 10 has an invalid length. [ 366.355161][ T9723] delete_channel: no stack [ 367.362316][ T9742] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 368.544771][ T9731] team0: Device veth1_macvtap failed to register rx_handler [ 368.596465][ T9742] team0: Device veth1_macvtap failed to register rx_handler [ 369.633421][ T9761] netlink: 'syz.3.1036': attribute type 10 has an invalid length. [ 369.643834][ T9761] team0: Device veth1_macvtap failed to register rx_handler [ 370.194015][ T30] audit: type=1400 audit(1743552208.198:885): avc: denied { name_bind } for pid=9771 comm="syz.5.1041" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 371.061703][ T9768] delete_channel: no stack [ 371.841498][ T5960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.844121][ T30] audit: type=1400 audit(1743552211.848:886): avc: denied { bind } for pid=9803 comm="syz.3.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.492524][ T9809] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 375.433300][ T9825] sp0: Synchronizing with TNC [ 377.027055][ T9841] netlink: 'syz.5.1059': attribute type 10 has an invalid length. [ 377.046432][ T9841] team0: Device veth1_macvtap failed to register rx_handler [ 377.604096][ T7858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.724456][ T9863] netlink: 'syz.3.1065': attribute type 10 has an invalid length. [ 377.741340][ T9863] team0: Device veth1_macvtap failed to register rx_handler [ 378.480503][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.784683][ T30] audit: type=1400 audit(1743552216.778:887): avc: denied { write } for pid=9869 comm="syz.6.1068" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.922522][ T30] audit: type=1400 audit(1743552216.778:888): avc: denied { create } for pid=9869 comm="syz.6.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 378.946682][ T30] audit: type=1400 audit(1743552216.788:889): avc: denied { ioctl } for pid=9869 comm="syz.6.1068" path="socket:[22997]" dev="sockfs" ino=22997 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 378.976897][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.036652][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.038595][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.120398][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.220201][ T5870] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 379.450570][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 379.470568][ T5870] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 379.496162][ T5870] usb 6-1: config 0 has no interface number 0 [ 379.529943][ T5870] usb 6-1: config 0 interface 133 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.608996][ T30] audit: type=1400 audit(1743552217.598:890): avc: denied { mount } for pid=9842 comm="syz.4.1061" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 379.709278][ T5870] usb 6-1: config 0 interface 133 has no altsetting 0 [ 379.836943][ T5870] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 379.848015][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.887468][ T5870] usb 6-1: Product: syz [ 379.892903][ T5870] usb 6-1: Manufacturer: syz [ 379.920207][ T5870] usb 6-1: SerialNumber: syz [ 379.943807][ T5870] usb 6-1: config 0 descriptor?? [ 380.183236][ T5870] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 380.197907][ T5870] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 380.232986][ T5870] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 380.251794][ T5870] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 380.279553][ T5870] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 380.298451][ T5870] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 380.431317][ T5870] usb 6-1: USB disconnect, device number 11 [ 380.450415][ T6655] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 380.491703][ T5870] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 380.620667][ T5870] keyspan 6-1:0.133: device disconnected [ 380.633113][ T6655] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 380.801429][ T31] INFO: task syz.1.618:8182 blocked for more than 143 seconds. [ 380.840267][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 380.894669][ T6655] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.912136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.932215][ T31] task:syz.1.618 state:D stack:27432 pid:8182 tgid:8180 ppid:5817 task_flags:0x440040 flags:0x00000004 [ 380.951997][ T6655] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.968787][ T6655] usb 5-1: config 1 has no interface number 0 [ 380.978193][ T31] Call Trace: [ 380.985068][ T31] [ 380.988555][ T6655] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.010159][ T31] __schedule+0x116f/0x5de0 [ 381.014971][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 381.032596][ T31] ? __pfx___schedule+0x10/0x10 [ 381.037884][ T31] ? find_held_lock+0x2b/0x80 [ 381.043866][ T31] ? schedule+0x2d7/0x3a0 [ 381.048693][ T31] schedule+0xe7/0x3a0 [ 381.055909][ T6655] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.067767][ T6655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.077360][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.085094][ T6655] usb 5-1: Product: syz [ 381.089544][ T6655] usb 5-1: Manufacturer: syz [ 381.097483][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 381.105378][ T6655] usb 5-1: SerialNumber: syz [ 381.110514][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 381.120016][ T31] ? __pfx___might_resched+0x10/0x10 [ 381.125875][ T6655] cdc_wdm 5-1:1.128: skipping garbage [ 381.170392][ T31] ? find_held_lock+0x2b/0x80 [ 381.176870][ T6655] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 381.207642][ T31] down_read+0xef/0x480 [ 381.224692][ T31] ? __pfx_down_read+0x10/0x10 [ 381.232991][ T31] page_cache_ra_order+0x322/0xd00 [ 381.238214][ T31] filemap_fault+0x147d/0x2850 [ 381.243459][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 381.248676][ T31] __do_fault+0x10a/0x490 [ 381.254698][ T31] do_pte_missing+0xed5/0x3ea0 [ 381.259553][ T31] ? mtree_range_walk+0x718/0xc00 [ 381.265058][ T31] ? find_held_lock+0x2b/0x80 [ 381.269820][ T31] __handle_mm_fault+0x1043/0x2a50 [ 381.275285][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 381.281112][ T31] ? find_vma+0xbf/0x140 [ 381.285493][ T31] ? __pfx_find_vma+0x10/0x10 [ 381.290442][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 381.295791][ T31] handle_mm_fault+0x404/0xae0 [ 381.310237][ T31] do_user_addr_fault+0x7a9/0x1430 [ 381.315494][ T31] exc_page_fault+0x5c/0xc0 [ 381.332445][ T31] asm_exc_page_fault+0x26/0x30 [ 381.344444][ T31] RIP: 0010:strncpy_from_user+0x1d5/0x2e0 [ 381.359067][ T31] Code: 0f 84 9b 00 00 00 e8 ea 4a bc fc 48 83 c3 01 48 83 ed 01 31 ff 48 89 ee e8 38 46 bc fc 48 85 ed 74 65 e8 ce 4a bc fc 45 31 ff <41> 8a 04 1c 31 ff 44 89 fe 41 89 c6 e8 ea 45 bc fc 45 85 ff 0f 84 [ 381.397469][ T9887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pid=9887 comm=syz.4.1072 [ 381.410372][ T31] RSP: 0018:ffffc9000b727ae0 EFLAGS: 00050246 [ 381.423313][ T31] RAX: 0000000000000063 RBX: 0000000000000000 RCX: ffffc9000c2c9000 [ 381.441006][ T31] RDX: 0000000000080000 RSI: ffffffff84fee862 RDI: 0000000000000007 [ 381.459713][ T31] RBP: 0000000000000004 R08: 0000000000000007 R09: 0000000000000007 [ 381.483971][ T31] R10: 0000000000000004 R11: 0000000000000000 R12: 0000200000000100 [ 381.496198][ T31] R13: ffffc9000b727ca0 R14: 0000000000000004 R15: 0000000000000000 [ 381.509925][ T31] ? strncpy_from_user+0x1d2/0x2e0 [ 381.515477][ T31] strncpy_from_sockptr+0x15f/0x1a0 [ 381.523310][ T31] ? __pfx_strncpy_from_sockptr+0x10/0x10 [ 381.529151][ T31] ? avc_has_perm+0x11a/0x1c0 [ 381.534540][ T31] do_tcp_setsockopt+0x4e1/0x2640 [ 381.539731][ T31] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 381.547212][ T31] ? sock_has_perm+0x259/0x2f0 [ 381.552396][ T31] ? __pfx_sock_has_perm+0x10/0x10 [ 381.557654][ T31] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 381.567493][ T31] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 381.575246][ T31] ? futex_wait+0x120/0x380 [ 381.579836][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 381.588061][ T31] tcp_setsockopt+0xe2/0x100 [ 381.593566][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 381.599604][ T31] do_sock_setsockopt+0x221/0x470 [ 381.607885][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 381.618136][ T31] __sys_setsockopt+0x1a0/0x230 [ 381.627702][ T31] __x64_sys_setsockopt+0xbd/0x160 [ 381.633512][ T31] ? do_syscall_64+0x91/0x260 [ 381.638530][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.646921][ T31] do_syscall_64+0xcd/0x260 [ 381.652649][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.658607][ T31] RIP: 0033:0x7f4b21f8d169 [ 381.665312][ T31] RSP: 002b:00007f4b22dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.674510][ T31] RAX: ffffffffffffffda RBX: 00007f4b221a5fa0 RCX: 00007f4b21f8d169 [ 381.830400][ T31] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000004 [ 381.940242][ T31] RBP: 00007f4b2200e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 381.957562][ T31] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 381.975180][ T31] R13: 0000000000000000 R14: 00007f4b221a5fa0 R15: 00007fffb5ba4d48 [ 381.985236][ T31] [ 381.988408][ T31] INFO: task syz.1.618:8211 blocked for more than 144 seconds. [ 382.085829][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 382.106457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.155030][ T31] task:syz.1.618 state:D stack:27032 pid:8211 tgid:8180 ppid:5817 task_flags:0x440140 flags:0x00004004 [ 382.167242][ T31] Call Trace: [ 382.170698][ T31] [ 382.173640][ T31] __schedule+0x116f/0x5de0 [ 382.178211][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.183235][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.188402][ T31] ? __pfx___schedule+0x10/0x10 [ 382.196127][ T31] ? find_held_lock+0x2b/0x80 [ 382.202277][ T31] ? schedule+0x2d7/0x3a0 [ 382.206637][ T31] schedule+0xe7/0x3a0 [ 382.211000][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.216482][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 382.222696][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 382.228954][ T31] ? __pfx___might_resched+0x10/0x10 [ 382.235606][ T31] ? find_held_lock+0x2b/0x80 [ 382.241513][ T31] down_read+0xef/0x480 [ 382.245774][ T31] ? __pfx_down_read+0x10/0x10 [ 382.253387][ T31] page_cache_ra_order+0x322/0xd00 [ 382.258531][ T31] filemap_fault+0x147d/0x2850 [ 382.264701][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 382.269861][ T31] __do_fault+0x10a/0x490 [ 382.277069][ T31] do_pte_missing+0xed5/0x3ea0 [ 382.283093][ T31] ? mtree_range_walk+0x718/0xc00 [ 382.288140][ T31] ? find_held_lock+0x2b/0x80 [ 382.295812][ T31] __handle_mm_fault+0x1043/0x2a50 [ 382.305094][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.313195][ T31] ? find_vma+0xbf/0x140 [ 382.317501][ T31] ? __pfx_find_vma+0x10/0x10 [ 382.322622][ T31] handle_mm_fault+0x404/0xae0 [ 382.327421][ T31] do_user_addr_fault+0x7a9/0x1430 [ 382.333012][ T31] exc_page_fault+0x5c/0xc0 [ 382.337545][ T31] asm_exc_page_fault+0x26/0x30 [ 382.342801][ T31] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 382.348627][ T31] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 382.369490][ T31] RSP: 0018:ffffc9000bd6faf8 EFLAGS: 00050206 [ 382.375852][ T31] RAX: 0000000000000001 RBX: 0000200000000440 RCX: 0000000000000038 [ 382.384230][ T31] RDX: fffff520017adf70 RSI: 0000200000000440 RDI: ffffc9000bd6fb48 [ 382.392470][ T31] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520017adf6f [ 382.400820][ T31] R10: ffffc9000bd6fb7f R11: 0000000000000000 R12: 0000000000000000 [ 382.408801][ T31] R13: ffffc9000bd6fb48 R14: ffffc9000bd6fc40 R15: ffffc9000bd6fb48 [ 382.417530][ T31] _copy_from_user+0x98/0xd0 [ 382.423402][ T31] copy_msghdr_from_user+0x98/0x160 [ 382.428757][ T31] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 382.434975][ T31] ___sys_sendmsg+0xfe/0x1d0 [ 382.439598][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.445349][ T31] __sys_sendmsg+0x16d/0x220 [ 382.450014][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.457334][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 382.463256][ T31] ? rcu_is_watching+0x12/0xc0 [ 382.468055][ T31] do_syscall_64+0xcd/0x260 [ 382.477374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.484073][ T31] RIP: 0033:0x7f4b21f8d169 [ 382.488518][ T31] RSP: 002b:00007f4b22d99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.500805][ T31] RAX: ffffffffffffffda RBX: 00007f4b221a6080 RCX: 00007f4b21f8d169 [ 382.508812][ T31] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 382.519401][ T31] RBP: 00007f4b2200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.527585][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.539108][ T31] R13: 0000000000000000 R14: 00007f4b221a6080 R15: 00007fffb5ba4d48 [ 382.547345][ T31] [ 382.553870][ T31] INFO: task syz.1.618:8220 blocked for more than 145 seconds. [ 382.608797][ T6655] usb 5-1: USB disconnect, device number 14 [ 382.619311][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 382.634540][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.658394][ T31] task:syz.1.618 state:D stack:28056 pid:8220 tgid:8180 ppid:5817 task_flags:0x440140 flags:0x00000004 [ 382.683418][ T31] Call Trace: [ 382.692225][ T31] [ 382.695199][ T31] __schedule+0x116f/0x5de0 [ 382.699716][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.705028][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.709985][ T31] ? __pfx___schedule+0x10/0x10 [ 382.714914][ T31] ? find_held_lock+0x2b/0x80 [ 382.719790][ T31] ? schedule+0x2d7/0x3a0 [ 382.724713][ T31] schedule+0xe7/0x3a0 [ 382.725678][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.728787][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.745206][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 382.750822][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 382.757071][ T31] ? __pfx___might_resched+0x10/0x10 [ 382.762456][ T31] ? find_held_lock+0x2b/0x80 [ 382.767385][ T31] down_read+0xef/0x480 [ 382.771601][ T31] ? __pfx_down_read+0x10/0x10 [ 382.776379][ T31] page_cache_ra_order+0x322/0xd00 [ 382.781745][ T31] filemap_fault+0x147d/0x2850 [ 382.786629][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 382.798769][ T31] __do_fault+0x10a/0x490 [ 382.803443][ T31] do_pte_missing+0xed5/0x3ea0 [ 382.808227][ T31] ? mtree_range_walk+0x718/0xc00 [ 382.813377][ T31] ? find_held_lock+0x2b/0x80 [ 382.818273][ T31] __handle_mm_fault+0x1043/0x2a50 [ 382.823806][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.829308][ T31] ? find_vma+0xbf/0x140 [ 382.834206][ T31] ? __pfx_find_vma+0x10/0x10 [ 382.838904][ T31] handle_mm_fault+0x404/0xae0 [ 382.846635][ T31] do_user_addr_fault+0x7a9/0x1430 [ 382.852395][ T31] exc_page_fault+0x5c/0xc0 [ 382.856928][ T31] asm_exc_page_fault+0x26/0x30 [ 382.864853][ T31] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 382.872136][ T31] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 382.893712][ T31] RSP: 0018:ffffc9000bde7b88 EFLAGS: 00050206 [ 382.899804][ T31] RAX: 0000000000000001 RBX: 0000200000000340 RCX: 0000000000000038 [ 382.907944][ T31] RDX: fffff520017bcf82 RSI: 0000200000000340 RDI: ffffc9000bde7bd8 [ 382.916165][ T31] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520017bcf81 [ 382.924206][ T31] R10: ffffc9000bde7c0f R11: 0000000000000000 R12: 0000000000000000 [ 382.932378][ T31] R13: ffffc9000bde7bd8 R14: ffffc9000bde7cc0 R15: ffffc9000bde7bd8 [ 382.940428][ T31] _copy_from_user+0x98/0xd0 [ 382.945181][ T31] copy_msghdr_from_user+0x98/0x160 [ 382.950463][ T31] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 382.956408][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 382.961844][ T31] ___sys_recvmsg+0xdb/0x1a0 [ 382.966461][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 382.971760][ T31] __sys_recvmsg+0x16a/0x220 [ 382.976524][ T31] ? __pfx___sys_recvmsg+0x10/0x10 [ 382.981732][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 382.986926][ T31] ? rcu_is_watching+0x12/0xc0 [ 382.993375][ T31] do_syscall_64+0xcd/0x260 [ 382.997951][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.005008][ T31] RIP: 0033:0x7f4b21f8d169 [ 383.009529][ T31] RSP: 002b:00007f4b22d78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 383.018392][ T31] RAX: ffffffffffffffda RBX: 00007f4b221a6160 RCX: 00007f4b21f8d169 [ 383.027543][ T31] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 383.035781][ T31] RBP: 00007f4b2200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.048278][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.056585][ T31] R13: 0000000000000000 R14: 00007f4b221a6160 R15: 00007fffb5ba4d48 [ 383.064902][ T31] [ 383.068054][ T31] INFO: task syz.1.618:8222 blocked for more than 145 seconds. [ 383.150167][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 383.163402][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.182314][ T31] task:syz.1.618 state:D stack:27816 pid:8222 tgid:8180 ppid:5817 task_flags:0x440040 flags:0x00004004 [ 383.223487][ T31] Call Trace: [ 383.229186][ T31] [ 383.235539][ T31] __schedule+0x116f/0x5de0 [ 383.243626][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 383.248642][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 383.253922][ T31] ? __pfx___schedule+0x10/0x10 [ 383.258857][ T31] ? find_held_lock+0x2b/0x80 [ 383.264079][ T31] ? schedule+0x2d7/0x3a0 [ 383.268492][ T31] schedule+0xe7/0x3a0 [ 383.272912][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.278438][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 383.284327][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 383.290703][ T31] ? __pfx___might_resched+0x10/0x10 [ 383.296045][ T31] ? find_held_lock+0x2b/0x80 [ 383.301852][ T31] down_read+0xef/0x480 [ 383.306075][ T31] ? __pfx_down_read+0x10/0x10 [ 383.311222][ T31] page_cache_ra_order+0x322/0xd00 [ 383.316409][ T31] filemap_fault+0x147d/0x2850 [ 383.322761][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 383.327967][ T31] __do_fault+0x10a/0x490 [ 383.333647][ T31] do_pte_missing+0xed5/0x3ea0 [ 383.338550][ T31] ? mtree_range_walk+0x718/0xc00 [ 383.344070][ T31] ? find_held_lock+0x2b/0x80 [ 383.348826][ T31] __handle_mm_fault+0x1043/0x2a50 [ 383.365755][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 383.376786][ T31] ? find_vma+0xbf/0x140 [ 383.385530][ T31] ? __pfx_find_vma+0x10/0x10 [ 383.400973][ T31] handle_mm_fault+0x404/0xae0 [ 383.405853][ T31] do_user_addr_fault+0x7a9/0x1430 [ 383.417709][ T31] exc_page_fault+0x5c/0xc0 [ 383.426662][ T31] asm_exc_page_fault+0x26/0x30 [ 383.440152][ T31] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 383.452356][ T31] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 383.495638][ T31] RSP: 0018:ffffc9000b33faf8 EFLAGS: 00050206 [ 383.508356][ T31] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000038 [ 383.525103][ T31] RDX: fffff52001667f70 RSI: 0000200000000100 RDI: ffffc9000b33fb48 [ 383.541854][ T31] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52001667f6f [ 383.555135][ T31] R10: ffffc9000b33fb7f R11: 0000000000000000 R12: 0000000000000000 [ 383.580309][ T31] R13: ffffc9000b33fb48 R14: ffffc9000b33fc40 R15: ffffc9000b33fb48 [ 383.588331][ T31] _copy_from_user+0x98/0xd0 [ 383.613526][ T31] copy_msghdr_from_user+0x98/0x160 [ 383.618774][ T31] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.633637][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 383.639492][ T31] ___sys_sendmsg+0xfe/0x1d0 [ 383.661858][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.667144][ T31] __sys_sendmsg+0x16d/0x220 [ 383.680148][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.685300][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 383.690316][ T31] ? rcu_is_watching+0x12/0xc0 [ 383.695100][ T31] do_syscall_64+0xcd/0x260 [ 383.699698][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.705941][ T31] RIP: 0033:0x7f4b21f8d169 [ 383.713620][ T31] RSP: 002b:00007f4b22d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.722159][ T31] RAX: ffffffffffffffda RBX: 00007f4b221a6240 RCX: 00007f4b21f8d169 [ 383.733576][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 383.741638][ T31] RBP: 00007f4b2200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.749616][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.757827][ T31] R13: 0000000000000000 R14: 00007f4b221a6240 R15: 00007fffb5ba4d48 [ 383.769245][ T31] [ 383.774492][ T31] INFO: task syz.1.618:8225 blocked for more than 146 seconds. [ 383.782297][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 383.789581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.798859][ T31] task:syz.1.618 state:D stack:28056 pid:8225 tgid:8180 ppid:5817 task_flags:0x440040 flags:0x00000004 [ 383.814229][ T31] Call Trace: [ 383.817530][ T31] [ 383.831772][ T31] __schedule+0x116f/0x5de0 [ 383.836340][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 383.900841][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 383.905915][ T31] ? __pfx___schedule+0x10/0x10 [ 383.914988][ T31] ? find_held_lock+0x2b/0x80 [ 383.919698][ T31] ? schedule+0x2d7/0x3a0 [ 383.924433][ T31] schedule+0xe7/0x3a0 [ 383.928537][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.934377][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 383.939954][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 383.946229][ T31] ? __pfx___might_resched+0x10/0x10 [ 383.951672][ T31] ? find_held_lock+0x2b/0x80 [ 383.956362][ T31] down_read+0xef/0x480 [ 383.960687][ T31] ? __pfx_down_read+0x10/0x10 [ 383.965462][ T31] page_cache_ra_order+0x322/0xd00 [ 383.970779][ T31] filemap_fault+0x147d/0x2850 [ 383.975564][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 383.980863][ T31] __do_fault+0x10a/0x490 [ 383.985203][ T31] do_pte_missing+0xed5/0x3ea0 [ 383.989975][ T31] ? mtree_range_walk+0x718/0xc00 [ 383.995947][ T31] ? find_held_lock+0x2b/0x80 [ 384.006156][ T31] __handle_mm_fault+0x1043/0x2a50 [ 384.019982][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 384.025660][ T31] ? find_vma+0xbf/0x140 [ 384.029914][ T31] ? __pfx_find_vma+0x10/0x10 [ 384.038226][ T31] handle_mm_fault+0x404/0xae0 [ 384.043462][ T31] do_user_addr_fault+0x7a9/0x1430 [ 384.048629][ T31] exc_page_fault+0x5c/0xc0 [ 384.056758][ T31] asm_exc_page_fault+0x26/0x30 [ 384.061758][ T31] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 384.067578][ T31] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 384.095490][ T31] RSP: 0018:ffffc9000b2f7b88 EFLAGS: 00050206 [ 384.105473][ T31] RAX: 0000000000000001 RBX: 00002000000003c0 RCX: 0000000000000038 [ 384.116552][ T31] RDX: fffff5200165ef82 RSI: 00002000000003c0 RDI: ffffc9000b2f7bd8 [ 384.126297][ T31] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200165ef81 [ 384.136381][ T31] R10: ffffc9000b2f7c0f R11: 0000000000000000 R12: 0000000000000000 [ 384.145959][ T31] R13: ffffc9000b2f7bd8 R14: ffffc9000b2f7cc0 R15: ffffc9000b2f7bd8 [ 384.156137][ T31] _copy_from_user+0x98/0xd0 [ 384.162408][ T31] copy_msghdr_from_user+0x98/0x160 [ 384.167633][ T31] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 384.176578][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.183128][ T31] ___sys_recvmsg+0xdb/0x1a0 [ 384.187748][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 384.195101][ T31] __sys_recvmsg+0x16a/0x220 [ 384.199707][ T31] ? __pfx___sys_recvmsg+0x10/0x10 [ 384.205734][ T31] ? do_user_addr_fault+0x850/0x1430 [ 384.213323][ T31] do_syscall_64+0xcd/0x260 [ 384.217849][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.224064][ T31] RIP: 0033:0x7f4b21f8d169 [ 384.228483][ T31] RSP: 002b:00007f4b22d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 384.237109][ T31] RAX: ffffffffffffffda RBX: 00007f4b221a6320 RCX: 00007f4b21f8d169 [ 384.245225][ T31] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 384.253357][ T31] RBP: 00007f4b2200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.261613][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.269707][ T31] R13: 0000000000000001 R14: 00007f4b221a6320 R15: 00007fffb5ba4d48 [ 384.277955][ T31] [ 384.281124][ T31] INFO: task syz.1.618:8228 blocked for more than 146 seconds. [ 384.288686][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 384.296183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.305471][ T31] task:syz.1.618 state:D stack:29080 pid:8228 tgid:8180 ppid:5817 task_flags:0x440040 flags:0x00000004 [ 384.318681][ T31] Call Trace: [ 384.324563][ T31] [ 384.327508][ T31] __schedule+0x116f/0x5de0 [ 384.332313][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.337263][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.343160][ T31] ? __pfx___schedule+0x10/0x10 [ 384.348036][ T31] ? find_held_lock+0x2b/0x80 [ 384.352890][ T31] ? schedule+0x2d7/0x3a0 [ 384.357241][ T31] schedule+0xe7/0x3a0 [ 384.361525][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.367019][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 384.373539][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 384.379631][ T31] ? __pfx___might_resched+0x10/0x10 [ 384.385096][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.390041][ T31] down_read+0xef/0x480 [ 384.394379][ T31] ? __pfx_down_read+0x10/0x10 [ 384.399170][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 384.404699][ T31] page_cache_ra_order+0x322/0xd00 [ 384.409847][ T31] filemap_fault+0x147d/0x2850 [ 384.414837][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 384.419981][ T31] __do_fault+0x10a/0x490 [ 384.424677][ T31] do_pte_missing+0xed5/0x3ea0 [ 384.429490][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.437744][ T31] __handle_mm_fault+0x1043/0x2a50 [ 384.443139][ T31] ? lock_vma_under_rcu+0x13d/0x980 [ 384.448350][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 384.454080][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 384.459286][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 384.464700][ T31] handle_mm_fault+0x404/0xae0 [ 384.469493][ T31] do_user_addr_fault+0x609/0x1430 [ 384.475578][ T31] exc_page_fault+0x5c/0xc0 [ 384.480510][ T31] asm_exc_page_fault+0x26/0x30 [ 384.485580][ T31] RIP: 0033:0x7f4b21f7123a [ 384.492128][ T31] RSP: 002b:00007f4b22d14be8 EFLAGS: 00010287 [ 384.498355][ T31] RAX: 00007f4b22d14c10 RBX: 6666666666666667 RCX: 0000000000000000 [ 384.508019][ T31] RDX: 00000000000003ff RSI: 0000200000000080 RDI: 00007f4b22d14c10 [ 384.518172][ T31] RBP: 00007f4b22d14c10 R08: 00000000000003ff R09: 0000000000000000 [ 384.527886][ T31] R10: 0000200000000080 R11: 0000000000000002 R12: 0000000000000000 [ 384.538657][ T31] R13: 0000000000000000 R14: 00007f4b221a6400 R15: 00007fffb5ba4d48 [ 384.549449][ T31] [ 384.554884][ T31] INFO: task syz.1.618:8234 blocked for more than 147 seconds. [ 384.564373][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 384.574319][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.584662][ T31] task:syz.1.618 state:D stack:28008 pid:8234 tgid:8180 ppid:5817 task_flags:0x440040 flags:0x00000004 [ 384.598927][ T31] Call Trace: [ 384.604022][ T31] [ 384.607005][ T31] __schedule+0x116f/0x5de0 [ 384.613655][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.618662][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.625295][ T31] ? __pfx___schedule+0x10/0x10 [ 384.633161][ T31] ? find_held_lock+0x2b/0x80 [ 384.637910][ T31] ? schedule+0x2d7/0x3a0 [ 384.647009][ T31] schedule+0xe7/0x3a0 [ 384.657537][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.664846][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 384.672542][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 384.678684][ T31] ? __pfx___might_resched+0x10/0x10 [ 384.685677][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.692765][ T31] down_read+0xef/0x480 [ 384.696979][ T31] ? __pfx_down_read+0x10/0x10 [ 384.703443][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 384.708812][ T31] page_cache_ra_order+0x322/0xd00 [ 384.716423][ T31] filemap_fault+0x147d/0x2850 [ 384.722970][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 384.728164][ T31] __do_fault+0x10a/0x490 [ 384.734629][ T31] do_pte_missing+0xed5/0x3ea0 [ 384.739458][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 384.746153][ T31] __handle_mm_fault+0x1043/0x2a50 [ 384.754909][ T31] ? lock_vma_under_rcu+0x13d/0x980 [ 384.766769][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 384.774624][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 384.779904][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 384.786873][ T31] ? do_user_addr_fault+0xde3/0x1430 [ 384.794302][ T31] handle_mm_fault+0x404/0xae0 [ 384.799139][ T31] do_user_addr_fault+0x609/0x1430 [ 384.807493][ T31] exc_page_fault+0x5c/0xc0 [ 384.814188][ T31] asm_exc_page_fault+0x26/0x30 [ 384.819195][ T31] RIP: 0033:0x7f4b21e5e8d9 [ 384.825598][ T31] RSP: 002b:00007f4b1edebf70 EFLAGS: 00010246 [ 384.833836][ T31] RAX: 0000200000000112 RBX: 0000000000000868 RCX: 0000000000000000 [ 384.843525][ T31] RDX: 0000000000000001 RSI: 00007f4b222d0320 RDI: 00007f4b222d13f0 [ 384.853703][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f4b222d0b88 [ 384.864244][ T31] R10: 0000000000000868 R11: 0000000000000293 R12: 0000000000000000 [ 384.878824][ T31] R13: 0000000000000024 R14: 0000200000000100 R15: 00007f4b222d0b88 [ 384.889747][ T31] [ 384.894898][ T31] [ 384.894898][ T31] Showing all locks held in the system: [ 384.906911][ T31] 1 lock held by ksoftirqd/0/15: [ 384.914663][ T31] 1 lock held by khungtaskd/31: [ 384.919576][ T31] #0: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 384.932656][ T31] 2 locks held by getty/5577: [ 384.937582][ T31] #0: ffff88814cb5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 384.949896][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450 [ 384.963736][ T31] 2 locks held by syz.2.378/7260: [ 384.971229][ T31] 1 lock held by syz.1.618/8182: [ 384.976334][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 384.994707][ T31] 1 lock held by syz.1.618/8211: [ 385.003201][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.015852][ T31] 1 lock held by syz.1.618/8220: [ 385.022999][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.035596][ T31] 1 lock held by syz.1.618/8222: [ 385.048624][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.061873][ T31] 1 lock held by syz.1.618/8225: [ 385.066884][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.079998][ T31] 1 lock held by syz.1.618/8228: [ 385.086655][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.101242][ T31] 1 lock held by syz.1.618/8234: [ 385.106245][ T31] #0: ffff888148c20940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_order+0x322/0xd00 [ 385.121229][ T31] [ 385.123626][ T31] ============================================= [ 385.123626][ T31] [ 385.139105][ T31] NMI backtrace for cpu 1 [ 385.139121][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 385.139141][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.139151][ T31] Call Trace: [ 385.139157][ T31] [ 385.139164][ T31] dump_stack_lvl+0x116/0x1f0 [ 385.139186][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 385.139210][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 385.139229][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 385.139253][ T31] watchdog+0xf70/0x12c0 [ 385.139276][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.139291][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.139319][ T31] ? __kthread_parkme+0x19e/0x250 [ 385.139345][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.139362][ T31] kthread+0x3c2/0x780 [ 385.139380][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139396][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139412][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139428][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139443][ T31] ? rcu_is_watching+0x12/0xc0 [ 385.139465][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139483][ T31] ret_from_fork+0x45/0x80 [ 385.139500][ T31] ? __pfx_kthread+0x10/0x10 [ 385.139518][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.139554][ T31] [ 385.139560][ T31] Sending NMI from CPU 1 to CPUs 0: [ 385.271056][ C0] NMI backtrace for cpu 0 [ 385.271070][ C0] CPU: 0 UID: 0 PID: 5805 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 385.271087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.271095][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 385.271114][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 385.271127][ C0] RSP: 0018:ffffc9001b49ecd8 EFLAGS: 00000012 [ 385.271139][ C0] RAX: 0000000040000000 RBX: ffff88807a758000 RCX: ffffffff815c1498 [ 385.271147][ C0] RDX: ffff88806f998000 RSI: 0000000000000000 RDI: 0000000000000007 [ 385.271155][ C0] RBP: ffff88806f998000 R08: 0000000000000007 R09: 0000000000000000 [ 385.271162][ C0] R10: 0000000000000080 R11: 0000000000000000 R12: 0000000000000000 [ 385.271170][ C0] R13: ffff88806f998558 R14: 0000000000000000 R15: ffff88806f999880 [ 385.271178][ C0] FS: 000055558c837500(0000) GS:ffff8881249cf000(0000) knlGS:0000000000000000 [ 385.271191][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.271199][ C0] CR2: 00007f1ac7d79178 CR3: 0000000035df4000 CR4: 00000000003526f0 [ 385.271208][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.271215][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.271222][ C0] Call Trace: [ 385.278739][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 385.426487][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 385.437923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.447962][ T31] Call Trace: [ 385.451257][ T31] [ 385.454174][ T31] dump_stack_lvl+0x3d/0x1f0 [ 385.458748][ T31] panic+0x71c/0x800 [ 385.462712][ T31] ? __pfx_panic+0x10/0x10 [ 385.467111][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 385.472480][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 385.478453][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 385.483824][ T31] ? watchdog+0xdda/0x12c0 [ 385.488232][ T31] ? watchdog+0xdcd/0x12c0 [ 385.492635][ T31] watchdog+0xdeb/0x12c0 [ 385.496865][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.501523][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.506709][ T31] ? __kthread_parkme+0x19e/0x250 [ 385.511727][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.516392][ T31] kthread+0x3c2/0x780 [ 385.520460][ T31] ? __pfx_kthread+0x10/0x10 [ 385.525038][ T31] ? __pfx_kthread+0x10/0x10 [ 385.529609][ T31] ? __pfx_kthread+0x10/0x10 [ 385.534180][ T31] ? __pfx_kthread+0x10/0x10 [ 385.538757][ T31] ? rcu_is_watching+0x12/0xc0 [ 385.543524][ T31] ? __pfx_kthread+0x10/0x10 [ 385.548108][ T31] ret_from_fork+0x45/0x80 [ 385.552512][ T31] ? __pfx_kthread+0x10/0x10 [ 385.557089][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.561848][ T31] [ 385.565061][ T31] Kernel Offset: disabled [ 385.569405][ T31] Rebooting in 86400 seconds..