last executing test programs: 7m18.336605107s ago: executing program 4 (id=127): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000100)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup3(r5, r4, 0x0) r6 = io_uring_setup(0x4111, &(0x7f0000000200)={0x0, 0x10000000, 0x0, 0xfdfffffc, 0xd8}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 7m17.302100607s ago: executing program 4 (id=129): syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) socket(0x10, 0x803, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000200)={0x80}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x3, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="f459855e94bcdfa994ededc7416d05943ac9371dc23d5bd713c1cbb374c2f7a1e58a69c0d63581e41399d84c5a31f844946c66035e1451aa566b0e9127b9d5f91094f18f81614e5cf60927539c8f397dd3e16c5abb066b8113", 0x59}, {&(0x7f0000000340)="8b791f5f458c6886812abcca31c149a5e14e38bbad513f7e7ce5bc776da31fc1db9859bb18d7ac9013a35c135dda56d27adb1e774f0d747e8685fbcc6ce2db19c8fa6d80bce6382b167050e594b363cfda27c3724e023d48e1f96a8104d9bf276404efe5ef2c5c1c65e012e9aa1daf0fc6a01337502af2000f2118a475c3e897fcb2ae05422f4892815a36763d9ec08b37ef9d9bd059a99ac07999853c77e4e2359cd81709f717f09782b869d6919c255309c5fd7f98", 0xb6}], 0x2) 7m16.809890881s ago: executing program 4 (id=130): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x48, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r4 = syz_io_uring_setup(0x5993, &(0x7f0000000000)={0x0, 0x455f, 0x4, 0x0, 0x275, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, r4, 0x10000000) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 7m16.232263252s ago: executing program 4 (id=134): ustat(0xbb6, &(0x7f0000000300)) ustat(0x10000, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440)) fcntl$getownex(r2, 0x10, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000001800)) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4008840) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0xc0a5) madvise(&(0x7f0000002000/0xe000)=nil, 0xe000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) 7m14.806599919s ago: executing program 4 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008113b0ffbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103600000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x54, r1, 0x1, 0x2000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x1, 0x6e}}, 0x39, @val={0x8c, 0x18, {0xea, "456cc1f3e08c", @long="7df36e27d2b85b9ce264a669fc372f08"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0xff, 0x7, 0x1, 0x1, 0xfff, 0x7fffffff, 0xff, 0x0, 0x3, 0x800, 0x400, 0x7, 0xa9, 0x0, 0x8, 0x20, {0xfff, 0x1000}, 0x7, 0x2}}) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f00000004c0)={'\x00', 0x3, 0x3, 0x6}) 7m13.542608041s ago: executing program 4 (id=140): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='rxrpc_client\x00', r5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000180), 0x67, 0x200) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464d0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000580)) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000340)={0xd, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x402, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000001c0)={&(0x7f0000000a00)=[{0x9, 0x0, 0x0, 0x0}], 0x1}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x9, "93e9180c2678daee76c37cb8b0328ab70c175193a205e0b2115119e09edc88f8", 0x3, 0x3, 0x3, 0x20, 0x20133, 0x2}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) 7m12.489549429s ago: executing program 32 (id=140): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='rxrpc_client\x00', r5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000180), 0x67, 0x200) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464d0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000580)) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000340)={0xd, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x402, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000001c0)={&(0x7f0000000a00)=[{0x9, 0x0, 0x0, 0x0}], 0x1}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x9, "93e9180c2678daee76c37cb8b0328ab70c175193a205e0b2115119e09edc88f8", 0x3, 0x3, 0x3, 0x20, 0x20133, 0x2}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) 2m10.933725467s ago: executing program 2 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000140)={'macvlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r6, 0x0}]) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="66b8000000000f23d80f21f86635400000100f23f8660f73f706260f303515000f10bd0800660f3809c8f2f3f30f019fbd35660fc7b10000d1f6660fd2b9afb4", 0x40}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x0, 0x2, 0x5, 0x1, 0x5}, 0xffffffffffffff4b) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m10.282454471s ago: executing program 2 (id=688): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x6, 0x0, @void}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x10}) 2m10.192741316s ago: executing program 2 (id=690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) close_range(r5, r6, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000000)=0x16, 0x4) 2m8.388026379s ago: executing program 2 (id=698): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0xffff1000, 0x7, &(0x7f0000000080)=""/7}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x2, 0x80, 0x0, 'queue0\x00', 0x400}) 2m6.827149694s ago: executing program 2 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000240004802000018007000100"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20008040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x3, '\a'}]}}}}}}}}, 0x0) 2m6.231108147s ago: executing program 2 (id=705): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0xa00, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x3) fchdir(r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r6, r5, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x101880) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) 2m4.893504193s ago: executing program 33 (id=705): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0xa00, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x3) fchdir(r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r6, r5, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x101880) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) 21.998976972s ago: executing program 1 (id=1014): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x2, 0x9, 0x1000}], 0x1) lseek(r0, 0x289e0cb5, 0x0) 20.358882731s ago: executing program 1 (id=1018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x9, r2}) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0x419}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xd, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xc0, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x0, 0x8, 0x8, 0xcd}, 0x147, &(0x7f0000000340)={0x5, 0xf, 0x147, 0x5, [@generic={0xeb, 0x10, 0x2, "b3e1c614e2fba7eb7374c8eabe5835a35c0f1f41bfb4cc1347a04aac3330917e4f15b1c4a085788e39462f3075971460c0ca0d21f365be8a15895d2c2364c6eec7d8bd1ce7afcfcc9da605ab0c32d940a7848a239d70caef199fc63c1000d44f89a1ae3f4435677573180e3439db992c2af15a2e93275ca0c9a6910521db48c1af9067b6196f1ffafc009e2284ef291acf8249fa3183601182e0bf49df7e4a61af9aa87c56d4962840e12f83f61edb5b708667d4ee766ec518515b9ca827c558df03ab49a56810296e0290f4604c122da1db0318e826697a23e5a521c6fa7f55d9f50712964213f1"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0x780, 0x6, [0x3f00, 0x14000, 0x30, 0xffc00f, 0xff0090]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xc, 0xf9, 0xffff, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ba12dcfa913291554b46a4b5ac230ac7"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0x1e, 0x1, [0xffffcf, 0x37, 0xff00ff]}]}, 0x1, [{0x97, &(0x7f0000000580)=@string={0x97, 0x3, "101b34d1bb9c5cb1b13f1b69c1061f95c8ed93aabb04f3f43a70ce4e85cc5b89cc73eb2048dacd436a4fda624826eb2855453e5ade5f116b9ae6ded10e3f5eabf2169b52c2a9da67d37a0744e9a6480fde57d503adece38bbf2ed47eba7edae05c3198d4372b45194685a6a193ecf143e215ba6b9dfdf79ed567b73c0401576eb84464bd701cb004d86a7ff8dbd6216d58b0f9c41b"}}]}) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0x23, 0x5a, {0x5a, 0x10, "96433a6805cbf96edff041327d3d897bd72305c1d4ce686960dca7350d0fb7cb4da335896679e13f1746d0a70408774216493bccd0a4463812d068c81b5ab120dbe113689dec4c0af6f0b1f2f6f421d5daab3bd9a7835223"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000680)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9e, 0x0, 0xe, 0xa0, "a8504bb3", 'iB\fQ'}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0xfb, 0x4, 0xa, 0xd, 0x19a1}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000780)={0x20, 0x5, 0x8b, "d60eaede27f289d374d750136c83c1a98b47b4b2ebc238efaf72af933ab2c6779f03812f37748f4d0705b2cb3021e9467545e79299359094ffcc2453e472e700037cffc187f4cdb5a478c65a5000186ac8186091ece430205ecd2f9073d636b12d5162b541afba247836e3cd806378c0aaf15e5adb0aaf7e1e47b48bdbc34a871d6ed72e1ac767a627fb24"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x40, 0x4}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x13}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "836e"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xf869}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "046e"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xa}}) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) 17.997850981s ago: executing program 1 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x192) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x0) read$FUSE(r1, &(0x7f00000102c0)={0x2020}, 0x2073) 17.086754173s ago: executing program 1 (id=1027): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mount$9p_xen(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x22, &(0x7f00000003c0)={'trans=xen,', {[{@cache_readahead}, {@cache_none}], [{@uid_lt={'uid<', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}}) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16.830639988s ago: executing program 1 (id=1029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x2, 0x9, 0x1000}], 0x1) lseek(r0, 0x289e0cb5, 0x0) 16.567826878s ago: executing program 5 (id=1031): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000640)={@random="1c0323288bb8", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x1, 0xb, 0x9}}}}}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000002000000950000000027d508"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)}, {&(0x7f00000003c0)}], 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x900) sendfile(r0, r1, 0x0, 0x1000004) 16.29874674s ago: executing program 1 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000200)=""/82, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f00000003c0)="01", 0x1) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x18) getdents64(r5, &(0x7f0000000a00)=""/4096, 0x1000) socket(0x1, 0x80002, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r9, r6, 0x4, r6}, 0x10) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) 13.996632862s ago: executing program 5 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000b8e) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x84, 0x30, 0x12f, 0xfffffffd, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x17, 0x0, 0x0, 0x0, {0xff, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) shutdown(r2, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 13.434093893s ago: executing program 3 (id=1040): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000fc7000000cb3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x0, 0x4d28ad32d89dc9ca, 0x94, {0x94, 0x10, "57dd534e8cc9db8ce1bfc78c37f64cb16548ebe57c2e1a38d653bf5b687481d7b39792fbf7cdf1148d993118b4f1c7b267bbd2332f5c38153d46b92bd20a132aee0dcb4a26107851b211422a144e9982f0164ccad270d742015129b92781c51b31a36137d65630d9135e95f38914109df28fa2f7095c0f18c95502b72f42f089da0c50c4f70b0f0d8568c8f8eb3be4158fe2"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x0, 0xe, 0xb3, "157fb915fe096ae5b4ab16f7f295268a6376c668b21a776688c09820dd40087a6a3df0ecf9213bbef61cc9c8fc3620d622e6cdcf6969e4473460b4a2456103fa143c2e07b61f959832c7f40518b47fad25836064f9fb9e88ff6179979e699efbafa3f83ef12a81639b0f08863e1e381e7148b963d46fd8f35815dc3d284d59b53705c3cee173e194b76371e498adbdc40cfd6492e6f7117b2290cf6ceb5ec8290d58344fb2ede02352714783e7bf8b1dab2d40"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0xd3, {0xd1, "e81f414d0c9d8e69f0058713f0db3f1d62c67e9a2334654cab38aea476dbc42f0eceb33dfccce378d5f2ce1a462d6bc5773089ce3bec08f7800b56987be52b5aff266b4830f40fc94006000000d6de0000000000000000c7bdab207df72df76928bf8bb7efe3329fa2d2d1157be955287ce1d8002d32eae920a0d480a14e209cba4cf282fd9ffa2f04b6f48eb729fd018593d6663556e49be386f7db39c421fd4ab9b5936448dd0fd348597af55d5b9146e5e7937c195a4d0c80682eae2568c8ac2fd6364b55f9380e00aa2f34fe80d851"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x9a}}) 10.480363684s ago: executing program 3 (id=1047): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002000000406b1d01014000010203010902b30003010300080904000000010100000a24d5d700090201020c24020504021403040004fb0c2402080102050600008f01072408040600f70624040200e20c240204ff01044008000007090401000001020000090401010101020000112402020b000e00084bbac7b9ff82efc009050109200002020507250103030104090402000001020000090402010101020000072401080f06100b2402010201018161c426090582092000310ac207250183e80700"], &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x26, 0x7, 0x10}, 0xb7, &(0x7f0000000540)=ANY=[@ANYBLOB="050fb700040c100aeba0ffffff001f07000710021152fe0c071002105105009810028a71ef2cec3187b2bef7d2903c45d8b69e0a54d0208542a8aeb3e08d6804a44673d631e97b60c6530be278754d51f1177e93e8ae355ec08f584233019ebd06e7f5992d43254b1ffdef8c2b6d8a723e93a7f7bda28a81e7ed5828d13983c20a90a5c14f470c59925215da624d1b5783c7f568cc81a6359af2d3cb4eada88a120ddb1f256bfd44934ab5bdd8ba02a8fa5bb612af131a"], 0x3, [{0xe6, &(0x7f0000000800)=ANY=[@ANYBLOB="e603f5fa93b81eaed56726d7b0df06cdd3152baa934091f34952531afa1d35afa745ec0488adae564049a630f28dd47559ebce5659a529bd50f5f0375b1a21f1f7a103543b5001bab0f65fa28c13e02adfd02cd767653f807f032877d43d0c578c27230688844c4e6cb427d88130156fbb05df4e16cf4881acb04ed0249c3c8aa0554d5b908201277157d9d6808bd190961a581dbac59d40911272eb9716f5213e7ea90e50295e0dd201eedc9ceef8bf9ebc12aa2cfe162b3b92bf72fad868ac1188d26a145993199280bfa45b1a215b074832bb41e3c7cc315e9c57680e830290de9d69747e"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x457}}, {0x19, &(0x7f0000000500)=ANY=[]}]}) r1 = socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2000007fff, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.current\x00', 0x275a, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002000010300000000000000000214000000000000000000000800100009000000080001000b0b5cf6e621"], 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 10.288255676s ago: executing program 5 (id=1048): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x9, 0x7f, 0x6, 0x4, 0x200, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff0000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184100000000000000000000000000001837000002000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000fa8400cf000cbf91000000000000b702000001000000a500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x11c7c, 0xcd, &(0x7f0000000500)=""/205, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x45c, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2], 0x0, 0x10, 0x800, @void, @value}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) fallocate(r3, 0x19, 0x9, 0x5) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000000c0)={0x10}) syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000940)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000240)={0xfffffffffffffeff, 0x2, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xb}) 10.211271673s ago: executing program 0 (id=1050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x28, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.293156022s ago: executing program 0 (id=1051): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x2000, 0x1, 0x2, 0x1e, 0x200, &(0x7f0000000880)="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"}) 9.112248637s ago: executing program 0 (id=1052): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x90a03, 0x84) dup3(0xffffffffffffffff, r0, 0x0) iopl(0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pwrite64(r1, 0x0, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6f61642065637279707466c96b199debeb63e77275737465643a2030303030303230303030303030306de2133fdb9907945a8531991a533030303036342000"], 0x32, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ac0)={0x20, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) 8.190294513s ago: executing program 0 (id=1054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) memfd_create(0x0, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x295) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, &(0x7f00000007c0)={0x2c, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0x20, 0x1, 0x87, "dd67cd3b6b318fd9124439a38763b127dd4534fce4b2fa7f987fe5bbb04257a6089d7a1d5efbcecc1e829253a39e30c3f8a2494c48fef9f1059a2b24342d1da6a8b6932285ef6c256a88a06fea707eb96d0dd346a170a7cd2c84f02e74aa1f15fccf4c23f1e689a321d02ac5470054b22b61ce2432aa458bfbfc9df1d930fab251bbedbe2b364c"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, 0x0, 0xfffffffffffffdf1) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.851594201s ago: executing program 6 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x8, 0x20, 0x3, 0x9}, &(0x7f0000000140)=0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4087, 0xff7}], 0x4}, 0xc}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 5.158013227s ago: executing program 5 (id=1057): socket$rxrpc(0x21, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x3000000, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 4.94814861s ago: executing program 3 (id=1058): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000640)={@random="1c0323288bb8", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x4b, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x1, 0xb, 0x9, "b7b2347d3fd3d9d22706e1d97935d6630b0b9e2805b9f768f7ecef7801b37e573a4d790c8d42ad5beb188ade7f6d9f1ce2c37cc80741973ed7cf85"}}}}}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000002000000950000000027d508"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)}, {&(0x7f00000003c0)}], 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x900) sendfile(r0, r1, 0x0, 0x1000004) 4.754227144s ago: executing program 0 (id=1059): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x2e2c2b09, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7f8}, {&(0x7f00000011c0)="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", 0x117}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="30000000dafbf16cd176b3572a3af35609e55924cdf0a4f23f26e1c3c6c596270000000000000000000020000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf250b0000000c0099000000000032000000090007009d19a0b85900000004000b00"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x6afe, &(0x7f0000000140)={0x0, 0xef57, 0x8000}, &(0x7f0000000100), &(0x7f0000000340)) r4 = socket$inet6(0xa, 0x1, 0xfffffffe) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000040)=0xb) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r11, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x208000, 0x0) ppoll(&(0x7f0000000280)=[{r7}, {r8, 0x8000}, {r7, 0x200}, {r7, 0x1440}, {r7, 0x402}, {r7, 0x1a}, {r8, 0x20}, {r12, 0x4201}], 0x8, &(0x7f0000000100)={r9, r10+10000000}, &(0x7f0000000180)={[0x9]}, 0x8) 4.665870883s ago: executing program 6 (id=1060): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000e15fcdb02a90c88a05a8b1c0241d824d7c0e148a2ace3f09c12fc59d2cd1278a6a4d0b481da3cd79e0ee7140d580d28d24e0ba7c9be1cdc862a37b25d884b2f0c9af205a788620d04c74c77a74bcd66e9f70244f25e220fc6852c4b210a15081682019e9332aaab3"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000100)="d6fcf88add45ab8d8bc4e8867974c36f36289d0c64f9a818584743feb0976281c0f914c436e158ec0619115e12a32aca7053c37eacaae2d34470c6d7e57ca967abeb2fa8aa", 0x1b, 0x4004844, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010101}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) io_getevents(r9, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r10, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 3.423329869s ago: executing program 6 (id=1061): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x3, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 3.414903982s ago: executing program 3 (id=1062): iopl(0x3) r0 = gettid() fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002500010024bd7000fcdbdf2d07"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000044) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x24, &(0x7f0000000040)=ANY=[], 0x1000f) 3.370642451s ago: executing program 5 (id=1063): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000100)=""/177) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, 0x0) 2.459049139s ago: executing program 6 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)}, 0x40010001) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6], 0x54}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x800) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x9) sendto$inet6(r3, &(0x7f00000007c0)="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", 0x1000, 0x40840, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @local, 0x1}, 0x1c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x800}}]}, 0x50}, 0x1, 0x0, 0x0, 0x802}, 0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x181802) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x7368, 0x0, 0x0, 0x0, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.301664839s ago: executing program 3 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r2 = socket(0x11, 0x3, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003d00090000000800000801"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) sendto$packet(r2, &(0x7f00000002c0)="fb5797bac8000000000000000000", 0xe, 0x0, 0x0, 0x0) sync() 1.289543038s ago: executing program 6 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000b8e) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x84, 0x30, 0x12f, 0xfffffffd, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x17, 0x0, 0x0, 0x0, {0xff, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) shutdown(r2, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}}) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 1.148533773s ago: executing program 5 (id=1067): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x9, 0x7f, 0x6, 0x4, 0x200, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff0000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184100000000000000000000000000001837000002000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000fa8400cf000cbf91000000000000b702000001000000a500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x11c7c, 0xcd, &(0x7f0000000500)=""/205, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x45c, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2], 0x0, 0x10, 0x800, @void, @value}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) fallocate(r3, 0x19, 0x9, 0x5) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000000c0)={0x10}) syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000940)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000240)={0xfffffffffffffeff, 0x2, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xb}) 1.146199992s ago: executing program 3 (id=1068): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002000000406b1d01014000010203010902b30003010300080904000000010100000a24d5d700090201020c24020504021403040004fb0c2402080102050600008f01072408040600f70624040200e20c240204ff01044008000007090401000001020000090401010101020000112402020b000e00084bbac7b9ff82efc009050109200002020507250103030104090402000001020000090402010101020000072401080f06100b2402010201018161c426090582092000310ac207250183e80700"], &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x26, 0x7, 0x10}, 0xb7, &(0x7f0000000540)=ANY=[@ANYBLOB="050fb700040c100aeba0ffffff001f07000710021152fe0c071002105105009810028a71ef2cec3187b2bef7d2903c45d8b69e0a54d0208542a8aeb3e08d6804a44673d631e97b60c6530be278754d51f1177e93e8ae355ec08f584233019ebd06e7f5992d43254b1ffdef8c2b6d8a723e93a7f7bda28a81e7ed5828d13983c20a90a5c14f470c59925215da624d1b5783c7f568cc81a6359af2d3cb4eada88a120ddb1f256bfd44934ab5bdd8ba02a8fa5bb612af131a"], 0x3, [{0xe6, &(0x7f0000000800)=ANY=[@ANYBLOB="e603f5fa93b81eaed56726d7b0df06cdd3152baa934091f34952531afa1d35afa745ec0488adae564049a630f28dd47559ebce5659a529bd50f5f0375b1a21f1f7a103543b5001bab0f65fa28c13e02adfd02cd767653f807f032877d43d0c578c27230688844c4e6cb427d88130156fbb05df4e16cf4881acb04ed0249c3c8aa0554d5b908201277157d9d6808bd190961a581dbac59d40911272eb9716f5213e7ea90e50295e0dd201eedc9ceef8bf9ebc12aa2cfe162b3b92bf72fad868ac1188d26a145993199280bfa45b1a215b074832bb41e3c7cc315e9c57680e830290de9d69747e"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x457}}, {0x19, &(0x7f0000000500)=ANY=[@ANYBLOB]}]}) r1 = socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2000007fff, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.current\x00', 0x275a, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002000010300000000000000000214000000000000000000000800100009000000080001000b0b5cf6e621"], 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 591.444624ms ago: executing program 0 (id=1069): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004a00)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) (fail_nth: 9) 0s ago: executing program 6 (id=1070): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902120001000000000904"], 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000580)=0x4) socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0xc0) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @control={0x4, 0x31, 0x10001}}, {0x0, 0x0, 0x7f, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4ea2, 0x0, @local}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x880c1, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = add_key(&(0x7f00000007c0)='cifs.idmap\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="66ebba82d4576aa6e7dd2f0e99d4a834f49014810f41f8112ebd4e3cc22e1508c4035c2e65151a0a2d30ef69503e864754686b5b7355384d71cc4b9eab6a14e6342b950ce49a13c66e3f902bcdf4538a96aeb4825d2bf396f59ec9db65cbf9798344259b7b90d0a9df2126980cb257fde45cf21fa0f41059753332a49110ce94cef773e7d66599e89be0c4791c1a8f226bfc5e50c79f2d04ab69002bfa4a37271e73f926234929cc89d1e9025ac6a02ba889b9b9a99327afa050d0477a430353dd073f26c445466e1019e70dbcb4800057f80e91dd3cec005fe611341c4f93948108f18d68efc6d2df1548697c66654206", 0xf1, 0xfffffffffffffff9) r7 = add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="17b03968fa2cd73769a08b0d17d4d13218ba3f210091ae36e8b8751768d63025ef658d042d7e524e01ad0bb1ca468d3071f23e0990a625ac24a796a537c955b2f2d87675b4fe918ff07ca95f30fba69bef227d5f7632b518107511dce94562bb161e92e27a454d49991a304a8cfc9e3732bd9b7b6b932fc848551f6a85af10ae778bccec3f3d6901", 0x88, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000a80)={0x0, r6, r7}, &(0x7f0000000ac0)=""/136, 0x88, &(0x7f0000000c00)={&(0x7f0000000b80)={'digest_null-generic\x00'}, &(0x7f0000000bc0)="ab7173b52d9b010d43261bdd94cd91993f4eb2a36a", 0x15}) r8 = socket$caif_stream(0x25, 0x1, 0x4) writev(r8, &(0x7f0000000780)=[{&(0x7f0000000340)="1a1229a2a2", 0x5}], 0x1) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "03bd6631408d5c0dd1d3d03b734ad6d2acfc2f876ec4082f374a2050a071f86b57201fdcb6122fe8af8ab4118b4df17f417db6cca626e3a7c62d6901fec24e5c", 0x2a}, 0x48, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/cpu_byteorder', 0x0, 0x2) ioctl$SOUND_MIXER_WRITE_VOLUME(r10, 0xc0044d18, &(0x7f0000000600)=0xf) kernel console output (not intermixed with test programs): adm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.370656][ T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.443015][ T30] audit: type=1400 audit(1742860050.859:1734): avc: denied { mounton } for pid=8966 comm="syz-executor" path="/root/syzkaller.lFRYTh/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 428.485427][ T30] audit: type=1400 audit(1742860050.859:1735): avc: denied { mount } for pid=8966 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 428.527114][ T30] audit: type=1400 audit(1742860050.869:1736): avc: denied { mounton } for pid=8966 comm="syz-executor" path="/root/syzkaller.lFRYTh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 428.602846][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 428.610369][ T30] audit: type=1400 audit(1742860050.869:1737): avc: denied { mounton } for pid=8966 comm="syz-executor" path="/root/syzkaller.lFRYTh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 428.634081][ T9204] unsupported nlmsg_type 40 [ 428.686959][ T30] audit: type=1400 audit(1742860050.899:1738): avc: denied { mounton } for pid=8966 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 428.770589][ T973] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 428.820403][ T30] audit: type=1400 audit(1742860050.899:1739): avc: denied { mount } for pid=8966 comm="syz-executor" name="/" dev="gadgetfs" ino=6791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 428.891696][ T30] audit: type=1400 audit(1742860051.029:1740): avc: denied { mounton } for pid=8966 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 428.941279][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 428.967019][ T973] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 429.037992][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49664, setting to 1024 [ 429.080863][ T30] audit: type=1400 audit(1742860051.029:1741): avc: denied { setopt } for pid=9180 comm="syz.5.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.835826][ T973] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.849402][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.920522][ T973] usb 1-1: Product: syz [ 429.924749][ T973] usb 1-1: Manufacturer: syz [ 429.929362][ T973] usb 1-1: SerialNumber: syz [ 429.984535][ T973] usb 1-1: config 0 descriptor?? [ 430.012093][ T973] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 430.046946][ T973] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 430.565732][ T9187] delete_channel: no stack [ 430.627872][ T973] em28xx 1-1:0.0: unknown em28xx chip ID (203) [ 430.843900][ T973] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 430.852429][ T973] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 430.867154][ T973] em28xx 1-1:0.0: No AC97 audio processor [ 430.869460][ T9248] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.902595][ T973] usb 1-1: USB disconnect, device number 24 [ 430.926613][ T973] em28xx 1-1:0.0: Disconnecting em28xx [ 430.956283][ T973] em28xx 1-1:0.0: Freeing device [ 431.519336][ T9268] 9pnet_fd: Insufficient options for proto=fd [ 432.461177][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 432.522649][ T9297] syz.0.764 (9297): /proc/9297/oom_adj is deprecated, please use /proc/9297/oom_score_adj instead. [ 433.430538][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 433.766489][ T47] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 433.790389][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 52, changing to 7 [ 433.813455][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 9272, setting to 1024 [ 433.904246][ T47] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 433.928438][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.936574][ T47] usb 7-1: Product: syz [ 433.940821][ T47] usb 7-1: Manufacturer: syz [ 433.945417][ T47] usb 7-1: SerialNumber: syz [ 433.953981][ T47] usb 7-1: config 0 descriptor?? [ 433.965340][ T47] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0231 [ 434.140436][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 434.140455][ T30] audit: type=1326 audit(1742860056.569:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.0.766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f428c78d169 code=0x0 [ 434.669043][ T30] audit: type=1400 audit(1742860057.119:1759): avc: denied { write } for pid=9318 comm="syz.5.767" path="socket:[21830]" dev="sockfs" ino=21830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.540600][ T10] usb 7-1: USB disconnect, device number 2 [ 436.311919][ T9331] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 436.321489][ T9305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.381641][ T9349] 9pnet_fd: Insufficient options for proto=fd [ 436.719764][ T30] audit: type=1400 audit(1742860059.149:1760): avc: denied { setopt } for pid=9356 comm="syz.1.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.739144][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.853666][ T30] audit: type=1400 audit(1742860059.149:1761): avc: denied { bind } for pid=9356 comm="syz.1.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.895801][ T30] audit: type=1400 audit(1742860059.159:1762): avc: denied { name_bind } for pid=9356 comm="syz.1.775" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 436.959899][ T30] audit: type=1400 audit(1742860059.159:1763): avc: denied { node_bind } for pid=9356 comm="syz.1.775" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 437.093513][ T30] audit: type=1400 audit(1742860059.159:1764): avc: denied { write } for pid=9356 comm="syz.1.775" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.161043][ T30] audit: type=1400 audit(1742860059.159:1765): avc: denied { name_connect } for pid=9356 comm="syz.1.775" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 437.323005][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 438.350440][ T5910] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 438.814237][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 438.825915][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 438.837888][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 52, changing to 7 [ 438.879848][ T30] audit: type=1400 audit(1742860061.329:1766): avc: denied { ioctl } for pid=9382 comm="syz.1.784" path="socket:[21894]" dev="sockfs" ino=21894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 438.880358][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 9272, setting to 1024 [ 438.904425][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.905675][ T9383] FAULT_INJECTION: forcing a failure. [ 438.905675][ T9383] name failslab, interval 1, probability 0, space 0, times 0 [ 438.938295][ T30] audit: type=1400 audit(1742860061.329:1767): avc: denied { bind } for pid=9382 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 438.978249][ T5910] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 438.979739][ T9383] CPU: 1 UID: 0 PID: 9383 Comm: syz.1.784 Not tainted 6.14.0-syzkaller #0 [ 438.979759][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.979768][ T9383] Call Trace: [ 438.979772][ T9383] [ 438.979778][ T9383] dump_stack_lvl+0x16c/0x1f0 [ 438.979804][ T9383] should_fail_ex+0x50a/0x650 [ 438.979827][ T9383] ? fs_reclaim_acquire+0xae/0x150 [ 438.979850][ T9383] ? j1939_session_new+0x7a/0x550 [ 438.979867][ T9383] should_failslab+0xc2/0x120 [ 438.979885][ T9383] __kmalloc_cache_noprof+0x68/0x410 [ 438.979918][ T9383] j1939_session_new+0x7a/0x550 [ 438.979939][ T9383] j1939_tp_send+0x1fd/0x860 [ 438.979960][ T9383] j1939_sk_sendmsg+0xb00/0x1350 [ 438.979987][ T9383] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 438.980009][ T9383] ____sys_sendmsg+0xaaf/0xc90 [ 438.980027][ T9383] ? copy_msghdr_from_user+0x10b/0x160 [ 438.980049][ T9383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.980077][ T9383] ___sys_sendmsg+0x135/0x1e0 [ 438.980099][ T9383] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.980129][ T9383] ? __pfx_lock_release+0x10/0x10 [ 438.980150][ T9383] ? trace_lock_acquire+0x14e/0x1f0 [ 438.980174][ T9383] ? __fget_files+0x206/0x3a0 [ 438.980195][ T9383] __sys_sendmsg+0x16e/0x220 [ 438.980221][ T9383] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.980257][ T9383] do_syscall_64+0xcd/0x250 [ 438.980279][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.980303][ T9383] RIP: 0033:0x7f19b3d8d169 [ 438.980315][ T9383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.980329][ T9383] RSP: 002b:00007f19b4c22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.980343][ T9383] RAX: ffffffffffffffda RBX: 00007f19b3fa5fa0 RCX: 00007f19b3d8d169 [ 438.980352][ T9383] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 438.980361][ T9383] RBP: 00007f19b4c22090 R08: 0000000000000000 R09: 0000000000000000 [ 438.980370][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.980378][ T9383] R13: 0000000000000000 R14: 00007f19b3fa5fa0 R15: 00007ffe01605318 [ 438.980404][ T9383] [ 439.407558][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.437013][ T5910] usb 1-1: Product: syz [ 439.452854][ T5910] usb 1-1: Manufacturer: syz [ 439.466355][ T5910] usb 1-1: SerialNumber: syz [ 439.489082][ T5910] usb 1-1: config 0 descriptor?? [ 439.630427][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 439.630445][ T30] audit: type=1400 audit(1742860062.019:1770): avc: denied { connect } for pid=9396 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 439.673442][ T5910] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0231 [ 439.711342][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.717839][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.911631][ T30] audit: type=1400 audit(1742860062.019:1771): avc: denied { bind } for pid=9396 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.026894][ T30] audit: type=1400 audit(1742860062.019:1772): avc: denied { write } for pid=9396 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.189192][ T30] audit: type=1400 audit(1742860062.639:1773): avc: denied { ioctl } for pid=9413 comm="syz.6.789" path="socket:[21940]" dev="sockfs" ino=21940 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 440.189971][ T9418] netlink: 112 bytes leftover after parsing attributes in process `syz.6.789'. [ 440.388981][ T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 440.560567][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 440.578756][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 440.596638][ T9378] delete_channel: no stack [ 440.596880][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49664, setting to 1024 [ 440.745947][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 440.755249][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.763801][ T47] usb 2-1: Product: syz [ 440.767968][ T47] usb 2-1: Manufacturer: syz [ 440.772629][ T47] usb 2-1: SerialNumber: syz [ 440.782076][ T47] usb 2-1: config 0 descriptor?? [ 440.796309][ T47] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 441.393823][ T5906] usb 1-1: USB disconnect, device number 25 [ 441.426539][ T47] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 441.503549][ T30] audit: type=1400 audit(1742860063.949:1774): avc: denied { read } for pid=9395 comm="syz.5.786" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 441.569132][ T30] audit: type=1400 audit(1742860063.949:1775): avc: denied { open } for pid=9395 comm="syz.5.786" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 441.650669][ T30] audit: type=1400 audit(1742860063.989:1776): avc: denied { ioctl } for pid=9395 comm="syz.5.786" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 441.813701][ T9438] netlink: 44 bytes leftover after parsing attributes in process `syz.3.792'. [ 441.838130][ T47] em28xx 2-1:0.0: unknown em28xx chip ID (21) [ 441.849191][ T9440] FAULT_INJECTION: forcing a failure. [ 441.849191][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 441.894382][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.6.793 Not tainted 6.14.0-syzkaller #0 [ 441.894404][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.894415][ T9440] Call Trace: [ 441.894419][ T9440] [ 441.894425][ T9440] dump_stack_lvl+0x16c/0x1f0 [ 441.894454][ T9440] should_fail_ex+0x50a/0x650 [ 441.894477][ T9440] ? trace_contention_end+0xee/0x140 [ 441.894505][ T9440] should_failslab+0xc2/0x120 [ 441.894524][ T9440] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 441.894541][ T9440] ? hci_sock_sendmsg+0xdee/0x25e0 [ 441.894558][ T9440] ? __alloc_skb+0x2b1/0x380 [ 441.894582][ T9440] ? __pfx___mutex_lock+0x10/0x10 [ 441.894606][ T9440] __alloc_skb+0x2b1/0x380 [ 441.894628][ T9440] ? __pfx___alloc_skb+0x10/0x10 [ 441.894659][ T9440] hci_sock_sendmsg+0x1a47/0x25e0 [ 441.894682][ T9440] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 441.894707][ T9440] sock_write_iter+0x4fe/0x5b0 [ 441.894726][ T9440] ? __pfx_sock_write_iter+0x10/0x10 [ 441.894754][ T9440] ? bpf_lsm_file_permission+0x9/0x10 [ 441.894771][ T9440] ? security_file_permission+0x71/0x210 [ 441.894798][ T9440] ? rw_verify_area+0xcf/0x680 [ 441.894824][ T9440] vfs_write+0x5ae/0x1150 [ 441.894849][ T9440] ? __pfx_sock_write_iter+0x10/0x10 [ 441.894869][ T9440] ? __pfx_vfs_write+0x10/0x10 [ 441.894895][ T9440] ? __fget_files+0x40/0x3a0 [ 441.894924][ T9440] ksys_write+0x207/0x250 [ 441.894938][ T9440] ? __pfx_ksys_write+0x10/0x10 [ 441.894960][ T9440] do_syscall_64+0xcd/0x250 [ 441.894989][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.895010][ T9440] RIP: 0033:0x7f413b58d169 [ 441.895024][ T9440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.895039][ T9440] RSP: 002b:00007f413c42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.895055][ T9440] RAX: ffffffffffffffda RBX: 00007f413b7a5fa0 RCX: 00007f413b58d169 [ 441.895066][ T9440] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 441.895076][ T9440] RBP: 00007f413c42b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.895085][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.895094][ T9440] R13: 0000000000000000 R14: 00007f413b7a5fa0 R15: 00007ffccfa5b048 [ 441.895118][ T9440] [ 441.896533][ T9440] Bluetooth: MGMT ver 1.23 [ 442.039008][ T47] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 442.212809][ T47] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 442.219819][ T47] em28xx 2-1:0.0: No AC97 audio processor [ 442.250782][ T47] usb 2-1: USB disconnect, device number 19 [ 442.937890][ T47] em28xx 2-1:0.0: Disconnecting em28xx [ 442.951067][ T47] em28xx 2-1:0.0: Freeing device [ 444.100389][ T47] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 444.263190][ T30] audit: type=1400 audit(1742860066.709:1777): avc: denied { write } for pid=9457 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 444.302925][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.331278][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 444.358988][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 444.369528][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.440521][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 444.524453][ T47] usb 2-1: config 0 descriptor?? [ 444.529963][ T9450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.811409][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.897945][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.130439][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 445.138099][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.156293][ T47] usb 2-1: USB disconnect, device number 20 [ 445.171947][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.292808][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.451365][ T5868] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.512579][ T5868] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.566724][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.813825][ T5868] usb 7-1: GET_CAPABILITIES returned 0 [ 445.819358][ T5868] usbtmc 7-1:16.0: can't read capabilities [ 445.836233][ T9497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.804'. [ 446.030921][ T5871] usb 7-1: USB disconnect, device number 3 [ 446.335336][ T30] audit: type=1400 audit(1742860068.589:1778): avc: denied { setopt } for pid=9488 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.384574][ T30] audit: type=1400 audit(1742860068.619:1779): avc: denied { write } for pid=9488 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.392755][ T9503] 9pnet_fd: Insufficient options for proto=fd [ 446.410625][ T9483] delete_channel: no stack [ 446.572883][ T9508] 9pnet_fd: Insufficient options for proto=fd [ 446.981933][ T30] audit: type=1400 audit(1742860069.429:1780): avc: denied { mount } for pid=9512 comm="syz.6.808" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 447.057894][ T9511] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 447.057894][ T9511] program syz.0.807 not setting count and/or reply_len properly [ 447.090508][ T30] audit: type=1400 audit(1742860069.469:1781): avc: denied { unmount } for pid=8966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 448.099319][ T30] audit: type=1400 audit(1742860069.859:1782): avc: denied { create } for pid=9526 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 448.120256][ T9531] 9pnet_fd: Insufficient options for proto=fd [ 449.298821][ T9536] input: syz0 as /devices/virtual/input/input40 [ 450.086429][ T9552] input: syz0 as /devices/virtual/input/input41 [ 450.444105][ T9561] x_tables: ip_tables: osf match: only valid for protocol 6 [ 450.931296][ T9568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=9568 comm=syz.0.820 [ 450.948434][ T9568] netlink: 'syz.0.820': attribute type 30 has an invalid length. [ 450.958870][ T9568] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.967858][ T9568] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.976684][ T9568] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.985413][ T9568] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.009023][ T9568] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.018081][ T9568] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.027043][ T9568] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.035943][ T9568] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.180961][ T30] audit: type=1400 audit(1742860073.509:1783): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.210593][ T5868] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 451.228859][ T30] audit: type=1400 audit(1742860073.509:1784): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.806620][ T30] audit: type=1400 audit(1742860073.509:1785): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 451.831378][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 451.857603][ T9565] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 451.902641][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.937446][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.948832][ T30] audit: type=1400 audit(1742860073.509:1786): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.006472][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.039751][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.056182][ T30] audit: type=1400 audit(1742860073.509:1787): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 452.105512][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.123372][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.135134][ T30] audit: type=1400 audit(1742860073.509:1788): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 452.160635][ T30] audit: type=1400 audit(1742860074.569:1789): avc: denied { write } for pid=9575 comm="syz.6.822" name="file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.199461][ T30] audit: type=1400 audit(1742860074.569:1790): avc: denied { open } for pid=9575 comm="syz.6.822" path="/20/file0/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.234673][ T30] audit: type=1400 audit(1742860074.629:1791): avc: denied { append } for pid=9581 comm="syz.0.823" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 452.289442][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 452.369169][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 452.378207][ T9564] netlink: 11 bytes leftover after parsing attributes in process `syz.3.819'. [ 452.404804][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 452.430453][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 452.782788][ T5910] usb 4-1: USB disconnect, device number 30 [ 454.410324][ T30] audit: type=1400 audit(1742860076.339:1792): avc: denied { setopt } for pid=9605 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.592645][ T30] audit: type=1400 audit(1742860076.339:1793): avc: denied { write } for pid=9605 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 454.891619][ T30] audit: type=1400 audit(1742860076.339:1794): avc: denied { nlmsg_read } for pid=9605 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 455.029754][ T9616] 9pnet_fd: Insufficient options for proto=fd [ 455.250398][ T5910] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 455.260443][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 455.284057][ T9632] Device name cannot be null; rc = [-22] [ 455.402356][ T10] usb 4-1: device descriptor read/64, error -71 [ 455.431657][ T5910] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 455.446346][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.469260][ T5910] usb 7-1: config 0 descriptor?? [ 455.652615][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 455.680876][ T5910] usb 7-1: string descriptor 0 read error: -71 [ 455.688927][ T5910] ldusb 7-1:0.0: Interrupt in endpoint not found [ 455.714106][ T5910] usb 7-1: USB disconnect, device number 4 [ 455.810437][ T10] usb 4-1: device descriptor read/64, error -71 [ 455.857114][ T9665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.836'. [ 456.001431][ T10] usb usb4-port1: attempt power cycle [ 456.052670][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 456.466059][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 456.563454][ T10] usb 4-1: device descriptor read/8, error -71 [ 456.925363][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 456.966507][ T9617] Bluetooth: hci0: command 0x0405 tx timeout [ 457.021618][ T10] usb 4-1: device descriptor read/8, error -71 [ 457.180635][ T10] usb usb4-port1: unable to enumerate USB device [ 457.490363][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 457.530455][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 457.530472][ T30] audit: type=1400 audit(1742860079.979:1798): avc: denied { create } for pid=9699 comm="syz.5.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 457.712528][ T9718] FAULT_INJECTION: forcing a failure. [ 457.712528][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.725829][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.6.845 Not tainted 6.14.0-syzkaller #0 [ 457.725851][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.725861][ T9718] Call Trace: [ 457.725867][ T9718] [ 457.725873][ T9718] dump_stack_lvl+0x16c/0x1f0 [ 457.725903][ T9718] should_fail_ex+0x50a/0x650 [ 457.725933][ T9718] _copy_to_user+0x32/0xd0 [ 457.725958][ T9718] simple_read_from_buffer+0xd0/0x160 [ 457.725986][ T9718] proc_fail_nth_read+0x198/0x270 [ 457.726011][ T9718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.726036][ T9718] ? rw_verify_area+0xcf/0x680 [ 457.726059][ T9718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.726082][ T9718] vfs_read+0x1df/0xbf0 [ 457.726106][ T9718] ? __fget_files+0x1fc/0x3a0 [ 457.726123][ T9718] ? __pfx___mutex_lock+0x10/0x10 [ 457.726146][ T9718] ? __pfx_vfs_read+0x10/0x10 [ 457.726178][ T9718] ? __fget_files+0x206/0x3a0 [ 457.726201][ T9718] ksys_read+0x12b/0x250 [ 457.726224][ T9718] ? __pfx_ksys_read+0x10/0x10 [ 457.726256][ T9718] do_syscall_64+0xcd/0x250 [ 457.726282][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.726305][ T9718] RIP: 0033:0x7f413b58bb7c [ 457.726320][ T9718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.726336][ T9718] RSP: 002b:00007f413c3e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.726352][ T9718] RAX: ffffffffffffffda RBX: 00007f413b7a6160 RCX: 00007f413b58bb7c [ 457.726362][ T9718] RDX: 000000000000000f RSI: 00007f413c3e90a0 RDI: 0000000000000007 [ 457.726372][ T9718] RBP: 00007f413c3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 457.726382][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.726391][ T9718] R13: 0000000000000000 R14: 00007f413b7a6160 R15: 00007ffccfa5b048 [ 457.726415][ T9718] [ 458.040817][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.270387][ T30] audit: type=1400 audit(1742860080.639:1799): avc: denied { create } for pid=9713 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 458.302243][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.353068][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.356254][ T9722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.847'. [ 458.389348][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.452701][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.468901][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 458.482176][ T10] usb 2-1: config 0 descriptor?? [ 458.660876][ T30] audit: type=1400 audit(1742860081.079:1800): avc: denied { name_bind } for pid=9723 comm="syz.6.848" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 458.876762][ T30] audit: type=1400 audit(1742860081.329:1801): avc: denied { write } for pid=9713 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 459.025116][ T9708] kexec: Could not allocate control_code_buffer [ 459.140804][ T10] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 459.165788][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 459.270453][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 459.927771][ T5868] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 460.007194][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.040080][ T47] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 460.119370][ T5868] usb 4-1: config 0 descriptor?? [ 460.176446][ T9742] 9pnet_fd: Insufficient options for proto=fd [ 460.300501][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 461.116970][ T5868] usb 4-1: string descriptor 0 read error: -71 [ 461.132429][ T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 461.148377][ T5868] ldusb 4-1:0.0: Interrupt in endpoint not found [ 461.167106][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49664, setting to 1024 [ 461.198566][ T5868] usb 4-1: USB disconnect, device number 35 [ 461.238841][ T47] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.279799][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.324990][ T47] usb 6-1: Product: syz [ 461.355973][ T47] usb 6-1: Manufacturer: syz [ 461.365762][ T47] usb 6-1: SerialNumber: syz [ 461.418570][ T47] usb 6-1: config 0 descriptor?? [ 461.448644][ T47] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.508953][ T47] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 462.422967][ T47] em28xx 6-1:0.0: unknown em28xx chip ID (21) [ 462.597979][ T9774] FAULT_INJECTION: forcing a failure. [ 462.597979][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 462.611020][ T9774] CPU: 0 UID: 0 PID: 9774 Comm: syz.6.858 Not tainted 6.14.0-syzkaller #0 [ 462.611033][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.611039][ T9774] Call Trace: [ 462.611042][ T9774] [ 462.611046][ T9774] dump_stack_lvl+0x16c/0x1f0 [ 462.611068][ T9774] should_fail_ex+0x50a/0x650 [ 462.611092][ T9774] ? fs_reclaim_acquire+0xae/0x150 [ 462.611117][ T9774] should_failslab+0xc2/0x120 [ 462.611135][ T9774] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 462.611150][ T9774] ? __pfx___might_resched+0x10/0x10 [ 462.611168][ T9774] ? alloc_vmap_area+0x636/0x2a60 [ 462.611184][ T9774] alloc_vmap_area+0x636/0x2a60 [ 462.611204][ T9774] ? __pfx_alloc_vmap_area+0x10/0x10 [ 462.611229][ T9774] __get_vm_area_node+0x19e/0x2f0 [ 462.611256][ T9774] vmap+0x15a/0x350 [ 462.611276][ T9774] ? xdp_umem_create+0xdee/0x1270 [ 462.611294][ T9774] ? __pfx_vmap+0x10/0x10 [ 462.611308][ T9774] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 462.611328][ T9774] xdp_umem_create+0xdee/0x1270 [ 462.611343][ T9774] xsk_setsockopt+0x7fc/0xa10 [ 462.611353][ T9774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.611376][ T9774] ? selinux_socket_setsockopt+0x6a/0x80 [ 462.611399][ T9774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.611414][ T9774] do_sock_setsockopt+0x222/0x480 [ 462.611431][ T9774] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 462.611447][ T9774] ? lock_acquire+0x2f/0xb0 [ 462.611468][ T9774] __sys_setsockopt+0x1a0/0x230 [ 462.611485][ T9774] __x64_sys_setsockopt+0xbd/0x160 [ 462.611499][ T9774] ? do_syscall_64+0x91/0x250 [ 462.611520][ T9774] ? lockdep_hardirqs_on+0x7c/0x110 [ 462.611540][ T9774] do_syscall_64+0xcd/0x250 [ 462.611562][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.611583][ T9774] RIP: 0033:0x7f413b58d169 [ 462.611594][ T9774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.611604][ T9774] RSP: 002b:00007f413c42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.611614][ T9774] RAX: ffffffffffffffda RBX: 00007f413b7a5fa0 RCX: 00007f413b58d169 [ 462.611621][ T9774] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 462.611626][ T9774] RBP: 00007f413c42b090 R08: 000000000000001c R09: 0000000000000000 [ 462.611632][ T9774] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 462.611638][ T9774] R13: 0000000000000000 R14: 00007f413b7a5fa0 R15: 00007ffccfa5b048 [ 462.611654][ T9774] [ 462.904931][ T47] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 462.917408][ T26] usb 2-1: USB disconnect, device number 21 [ 462.924532][ T30] audit: type=1400 audit(1742860085.069:1802): avc: denied { create } for pid=9773 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 462.944350][ T30] audit: type=1400 audit(1742860085.069:1803): avc: denied { write } for pid=9773 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 462.963803][ T10] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 462.968796][ T47] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 463.025243][ T47] em28xx 6-1:0.0: No AC97 audio processor [ 463.122462][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 463.135163][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 463.146654][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 463.155922][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.452106][ T30] audit: type=1400 audit(1742860085.899:1804): avc: denied { append } for pid=9766 comm="syz.3.857" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.554986][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.567592][ T47] usb 6-1: USB disconnect, device number 18 [ 463.577646][ T47] em28xx 6-1:0.0: Disconnecting em28xx [ 463.589929][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.625690][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.861'. [ 463.631117][ T47] em28xx 6-1:0.0: Freeing device [ 463.670455][ T117] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 464.050440][ T117] usb 7-1: Using ep0 maxpacket: 16 [ 464.056922][ T117] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 464.068618][ T117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49664, setting to 1024 [ 464.084208][ T117] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 464.095088][ T117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.103548][ T117] usb 7-1: Product: syz [ 464.108005][ T117] usb 7-1: Manufacturer: syz [ 464.113588][ T117] usb 7-1: SerialNumber: syz [ 464.126047][ T117] usb 7-1: config 0 descriptor?? [ 464.136020][ T117] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 464.145380][ T117] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 465.206383][ T10] usb 4-1: string descriptor 0 read error: -71 [ 465.218574][ T117] em28xx 7-1:0.0: unknown em28xx chip ID (21) [ 465.227992][ T10] hub 4-1:32.0: USB hub found [ 465.250710][ T10] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 465.316240][ T10] usb 4-1: USB disconnect, device number 36 [ 465.427395][ T117] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 465.506552][ T9818] sg_write: data in/out 2031668/1 bytes for SCSI command 0x26-- guessing data in; [ 465.506552][ T9818] program syz.1.867 not setting count and/or reply_len properly [ 465.543870][ T117] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 465.578226][ T117] em28xx 7-1:0.0: No AC97 audio processor [ 465.626796][ T117] usb 7-1: USB disconnect, device number 5 [ 465.648426][ T117] em28xx 7-1:0.0: Disconnecting em28xx [ 465.733130][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.997483][ T117] em28xx 7-1:0.0: Freeing device [ 467.280695][ T30] audit: type=1400 audit(1742860089.719:1805): avc: denied { mount } for pid=9834 comm="syz.0.871" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 467.332017][ T30] audit: type=1400 audit(1742860089.729:1806): avc: denied { setattr } for pid=9834 comm="syz.0.871" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.353858][ T30] audit: type=1400 audit(1742860089.729:1807): avc: denied { write } for pid=9834 comm="syz.0.871" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.377479][ T30] audit: type=1400 audit(1742860089.729:1808): avc: denied { open } for pid=9834 comm="syz.0.871" path="/180/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.407154][ T30] audit: type=1400 audit(1742860089.789:1809): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 467.460485][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 468.581839][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 468.609647][ T10] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 468.712357][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.756827][ T10] usb 7-1: config 0 descriptor?? [ 468.766927][ T9831] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 469.596145][ T10] bigben 0003:146B:0902.0014: unexpected rdesc, please submit for review [ 469.715276][ T10] bigben 0003:146B:0902.0014: item fetching failed at offset 4/5 [ 469.718789][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.724612][ T10] bigben 0003:146B:0902.0014: parse failed [ 469.739977][ T10] bigben 0003:146B:0902.0014: probe with driver bigben failed with error -22 [ 469.750615][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.521760][ T10] usb 7-1: USB disconnect, device number 6 [ 470.729129][ T9870] Device name cannot be null; rc = [-22] [ 470.804440][ T47] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 470.992135][ T9867] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 471.070470][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 471.083547][ T47] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 471.101615][ T47] usb 4-1: config 0 has no interface number 0 [ 471.125404][ T47] usb 4-1: config 0 interface 184 has no altsetting 0 [ 471.128049][ T9876] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 471.128049][ T9876] program syz.1.880 not setting count and/or reply_len properly [ 471.163195][ T47] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.330443][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.338912][ T47] usb 4-1: Product: syz [ 471.343335][ T47] usb 4-1: Manufacturer: syz [ 471.361053][ T47] usb 4-1: SerialNumber: syz [ 471.491391][ T47] usb 4-1: config 0 descriptor?? [ 471.525550][ T47] smsc75xx v1.0.0 [ 471.758189][ T9885] FAULT_INJECTION: forcing a failure. [ 471.758189][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 471.770912][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.6.884 Not tainted 6.14.0-syzkaller #0 [ 471.770924][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.770931][ T9885] Call Trace: [ 471.770934][ T9885] [ 471.770938][ T9885] dump_stack_lvl+0x16c/0x1f0 [ 471.770957][ T9885] should_fail_ex+0x50a/0x650 [ 471.770976][ T9885] should_failslab+0xc2/0x120 [ 471.770989][ T9885] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 471.771001][ T9885] ? skb_clone+0x190/0x3f0 [ 471.771019][ T9885] skb_clone+0x190/0x3f0 [ 471.771035][ T9885] netlink_deliver_tap+0xabd/0xd30 [ 471.771053][ T9885] netlink_unicast+0x5e1/0x7f0 [ 471.771069][ T9885] ? __pfx_netlink_unicast+0x10/0x10 [ 471.771088][ T9885] netlink_sendmsg+0x8b8/0xd70 [ 471.771112][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.771132][ T9885] sock_write_iter+0x4fe/0x5b0 [ 471.771144][ T9885] ? __pfx_sock_write_iter+0x10/0x10 [ 471.771162][ T9885] ? __pfx_file_has_perm+0x10/0x10 [ 471.771176][ T9885] do_iter_readv_writev+0x655/0x950 [ 471.771192][ T9885] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 471.771207][ T9885] ? selinux_file_permission+0x11f/0x580 [ 471.771225][ T9885] ? bpf_lsm_file_permission+0x9/0x10 [ 471.771236][ T9885] ? security_file_permission+0x71/0x210 [ 471.771253][ T9885] ? rw_verify_area+0xcf/0x680 [ 471.771268][ T9885] vfs_writev+0x363/0xdd0 [ 471.771282][ T9885] ? find_held_lock+0x2d/0x110 [ 471.771298][ T9885] ? __pfx_vfs_writev+0x10/0x10 [ 471.771312][ T9885] ? find_held_lock+0x2d/0x110 [ 471.771325][ T9885] ? __pfx_lock_release+0x10/0x10 [ 471.771340][ T9885] ? trace_lock_acquire+0x14e/0x1f0 [ 471.771356][ T9885] ? __fget_files+0x206/0x3a0 [ 471.771370][ T9885] ? do_writev+0x297/0x340 [ 471.771384][ T9885] do_writev+0x297/0x340 [ 471.771398][ T9885] ? __pfx_do_writev+0x10/0x10 [ 471.771417][ T9885] do_syscall_64+0xcd/0x250 [ 471.771433][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.771448][ T9885] RIP: 0033:0x7f413b58d169 [ 471.771457][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.771467][ T9885] RSP: 002b:00007f413c42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 471.771477][ T9885] RAX: ffffffffffffffda RBX: 00007f413b7a5fa0 RCX: 00007f413b58d169 [ 471.771483][ T9885] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 471.771489][ T9885] RBP: 00007f413c42b090 R08: 0000000000000000 R09: 0000000000000000 [ 471.771495][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.771500][ T9885] R13: 0000000000000000 R14: 00007f413b7a5fa0 R15: 00007ffccfa5b048 [ 471.771513][ T9885] [ 472.182692][ T9881] fuse: Bad value for 'fd' [ 472.350994][ T30] audit: type=1400 audit(1742860094.749:1810): avc: denied { mount } for pid=9889 comm="syz.6.886" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 472.394115][ T30] audit: type=1400 audit(1742860094.749:1811): avc: denied { search } for pid=9889 comm="syz.6.886" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 472.425821][ T30] audit: type=1400 audit(1742860094.759:1812): avc: denied { write } for pid=9889 comm="syz.6.886" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 472.477838][ T30] audit: type=1400 audit(1742860094.759:1813): avc: denied { add_name } for pid=9889 comm="syz.6.886" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 472.498888][ T30] audit: type=1400 audit(1742860094.759:1814): avc: denied { create } for pid=9889 comm="syz.6.886" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 473.008886][ T117] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 473.070980][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 473.354872][ T117] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 473.364616][ T117] usb 7-1: config 0 has no interface number 0 [ 473.376221][ T117] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 473.490558][ T117] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 473.504767][ T117] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 473.516785][ T117] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 473.553607][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.564324][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 473.568599][ T117] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 473.577659][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 473.680503][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 473.705339][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 473.709832][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.859965][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 473.868113][ T117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.874606][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 473.890749][ T47] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 473.895566][ T117] usb 7-1: config 0 descriptor?? [ 473.975397][ T47] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 474.006911][ T47] usb 4-1: USB disconnect, device number 37 [ 474.092295][ T10] usb 1-1: config 0 descriptor?? [ 474.110075][ T9905] netlink: 84 bytes leftover after parsing attributes in process `syz.3.890'. [ 474.177373][ T117] hub 7-1:0.3: bad descriptor, ignoring hub [ 474.258580][ T117] hub 7-1:0.3: probe with driver hub failed with error -5 [ 474.550837][ T30] audit: type=1400 audit(1742860096.949:1815): avc: denied { nlmsg_read } for pid=9889 comm="syz.6.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.865640][ T10] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 474.874948][ T117] sierra 7-1:0.3: Sierra USB modem converter detected [ 474.894623][ T117] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 474.904161][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0015/input/input43 [ 474.917410][ T117] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 474.976347][ T117] usb 7-1: USB disconnect, device number 7 [ 475.037786][ T117] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 475.054470][ T10] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 475.075462][ T9916] Device name cannot be null; rc = [-22] [ 475.162732][ T117] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 475.175009][ T117] sierra 7-1:0.3: device disconnected [ 475.211301][ T30] audit: type=1326 audit(1742860097.659:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.5.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92718d169 code=0x7ffc0000 [ 475.276638][ T30] audit: type=1326 audit(1742860097.659:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.5.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92718d169 code=0x7ffc0000 [ 475.306538][ T30] audit: type=1326 audit(1742860097.659:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.5.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe92718d169 code=0x7ffc0000 [ 475.331000][ T30] audit: type=1326 audit(1742860097.659:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.5.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92718d169 code=0x7ffc0000 [ 475.444179][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.895'. [ 475.900560][ T26] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 476.183692][ T26] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 476.206591][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.291212][ T26] usb 7-1: config 0 descriptor?? [ 476.383544][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 476.398673][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 476.417007][ T9947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.900'. [ 476.519616][ T26] usb 7-1: string descriptor 0 read error: -71 [ 476.542708][ T26] ldusb 7-1:0.0: Interrupt in endpoint not found [ 476.569109][ T26] usb 7-1: USB disconnect, device number 8 [ 476.733613][ T9211] usb 1-1: USB disconnect, device number 26 [ 477.796349][ T9967] kvm: kvm [9962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x35000bf4a7e59801 [ 477.887764][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 477.887778][ T30] audit: type=1400 audit(1742860100.339:1852): avc: denied { mount } for pid=9968 comm="syz.6.905" name="/" dev="rpc_pipefs" ino=24307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 478.334662][ T30] audit: type=1400 audit(1742860100.339:1853): avc: denied { watch } for pid=9968 comm="syz.6.905" path="/35/file0" dev="rpc_pipefs" ino=24307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 478.603184][ T30] audit: type=1400 audit(1742860100.339:1854): avc: denied { unmount } for pid=9968 comm="syz.6.905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 479.341210][ T9960] delete_channel: no stack [ 479.746134][ T9988] Device name cannot be null; rc = [-22] [ 480.940814][ T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 481.251217][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.274884][ T26] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 481.275685][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.913'. [ 481.296160][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.307026][T10004] bridge0: port 3(netdevsim0) entered blocking state [ 481.313830][T10004] bridge0: port 3(netdevsim0) entered disabled state [ 481.320881][T10004] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 481.329562][T10004] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 481.337306][T10004] bridge0: port 3(netdevsim0) entered blocking state [ 481.344082][T10004] bridge0: port 3(netdevsim0) entered forwarding state [ 481.916147][ T9999] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 482.094257][ T26] usb 1-1: config 0 descriptor?? [ 482.205903][T10002] delete_channel: no stack [ 482.360937][ T5906] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 482.454576][ T30] audit: type=1400 audit(1742860104.909:1855): avc: denied { mount } for pid=10012 comm="syz.5.916" name="/" dev="hugetlbfs" ino=24925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 482.537463][ T26] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 482.567382][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input44 [ 482.611647][ T5906] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 482.621029][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.671471][ T5906] usb 7-1: config 0 descriptor?? [ 482.798022][ T26] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 483.420593][ T5906] usb 7-1: string descriptor 0 read error: -71 [ 483.426840][ T5906] ldusb 7-1:0.0: Interrupt in endpoint not found [ 483.440868][ T5906] usb 7-1: USB disconnect, device number 9 [ 483.540922][T10014] delete_channel: no stack [ 483.630337][ T30] audit: type=1400 audit(1742860106.079:1856): avc: denied { unmount } for pid=6446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 484.397929][ T30] audit: type=1400 audit(1742860106.419:1857): avc: denied { bind } for pid=10024 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.821478][ T5906] usb 1-1: USB disconnect, device number 27 [ 485.231357][T10036] fuse: Unknown parameter '0000000000000000000500000000000000000000005' [ 485.283575][ T30] audit: type=1400 audit(1742860107.739:1858): avc: denied { execute_no_trans } for pid=10035 comm="syz.3.922" path="/181/file0" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 485.391084][T10037] Device name cannot be null; rc = [-22] [ 486.277984][T10040] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 486.361705][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.928'. [ 487.449344][ T30] audit: type=1400 audit(1742860109.869:1859): avc: denied { create } for pid=10054 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 487.551503][T10054] delete_channel: no stack [ 487.584444][ T30] audit: type=1400 audit(1742860109.869:1860): avc: denied { write } for pid=10054 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 487.643695][T10060] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 487.733961][ T30] audit: type=1400 audit(1742860110.019:1861): avc: denied { map_create } for pid=10063 comm="syz.6.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 487.818421][ T30] audit: type=1400 audit(1742860110.019:1862): avc: denied { map_read map_write } for pid=10063 comm="syz.6.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 487.888581][ T30] audit: type=1400 audit(1742860110.039:1863): avc: denied { read } for pid=10063 comm="syz.6.930" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.952732][ T30] audit: type=1400 audit(1742860110.039:1864): avc: denied { open } for pid=10063 comm="syz.6.930" path="net:[4026532793]" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.054950][ T5906] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 488.082018][ T30] audit: type=1400 audit(1742860110.069:1865): avc: denied { create } for pid=10063 comm="syz.6.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.247262][T10085] netlink: 'syz.6.935': attribute type 1 has an invalid length. [ 488.260346][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.6.935'. [ 488.306141][ T5906] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 488.322459][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.355507][ T5906] usb 2-1: config 0 descriptor?? [ 488.660521][ T5906] usb 2-1: string descriptor 0 read error: -71 [ 488.666953][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 488.666986][ T30] audit: type=1400 audit(1742860111.119:1910): avc: denied { create } for pid=10095 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.726822][ T5906] ldusb 2-1:0.0: Interrupt in endpoint not found [ 488.738317][ T30] audit: type=1400 audit(1742860111.169:1911): avc: denied { bind } for pid=10095 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.760509][ T5906] usb 2-1: USB disconnect, device number 22 [ 488.920539][ T30] audit: type=1400 audit(1742860111.359:1912): avc: denied { mount } for pid=10095 comm="syz.6.939" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 489.008696][ T30] audit: type=1400 audit(1742860111.459:1913): avc: denied { write } for pid=10095 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.097678][ T30] audit: type=1400 audit(1742860111.549:1914): avc: denied { read write } for pid=10103 comm="syz.5.937" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 489.204913][ T30] audit: type=1400 audit(1742860111.549:1915): avc: denied { open } for pid=10103 comm="syz.5.937" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 489.419640][ T30] audit: type=1400 audit(1742860111.599:1916): avc: denied { unmount } for pid=8966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 489.442735][ T30] audit: type=1400 audit(1742860111.619:1917): avc: denied { ioctl } for pid=10103 comm="syz.5.937" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 489.840752][ T30] audit: type=1400 audit(1742860111.719:1918): avc: denied { create } for pid=10108 comm="syz.6.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 490.333645][ T30] audit: type=1400 audit(1742860111.719:1919): avc: denied { write } for pid=10108 comm="syz.6.941" name="if_inet6" dev="proc" ino=4026533665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 490.821256][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 490.980758][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 491.037605][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 491.068512][T10110] delete_channel: no stack [ 491.166600][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 52, changing to 7 [ 491.256115][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 9272, setting to 1024 [ 491.420871][ T10] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 491.459933][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.328472][ T10] usb 7-1: Product: syz [ 492.342511][ T10] usb 7-1: Manufacturer: syz [ 492.350503][ T10] usb 7-1: SerialNumber: syz [ 492.374293][ T10] usb 7-1: config 0 descriptor?? [ 492.407444][ T10] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0231 [ 493.091260][T10163] No such timeout policy "syz1" [ 493.137529][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 493.280548][ T10] usb 1-1: device descriptor read/64, error -71 [ 493.613377][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 493.821423][ T10] usb 1-1: device descriptor read/64, error -71 [ 493.981926][ T5906] usb 7-1: USB disconnect, device number 10 [ 494.060623][ T10] usb usb1-port1: attempt power cycle [ 494.112620][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 494.112635][ T30] audit: type=1400 audit(1742860116.569:1947): avc: denied { write } for pid=10173 comm="syz.1.954" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 494.260369][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.6.955'. [ 494.720479][ T30] audit: type=1400 audit(1742860117.169:1948): avc: denied { module_request } for pid=10173 comm="syz.1.954" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 495.394550][T10177] input: syz0 as /devices/virtual/input/input45 [ 495.430481][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 495.942598][T10180] delete_channel: no stack [ 496.095485][ T30] audit: type=1400 audit(1742860117.839:1949): avc: denied { read } for pid=10173 comm="syz.1.954" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 496.118828][ T30] audit: type=1400 audit(1742860117.839:1950): avc: denied { open } for pid=10173 comm="syz.1.954" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 496.142625][ T30] audit: type=1400 audit(1742860117.849:1951): avc: denied { ioctl } for pid=10173 comm="syz.1.954" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 496.169107][ T10] usb 1-1: device descriptor read/8, error -71 [ 496.175554][ T30] audit: type=1400 audit(1742860117.909:1952): avc: denied { read append } for pid=10173 comm="syz.1.954" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.203791][ T30] audit: type=1400 audit(1742860117.909:1953): avc: denied { open } for pid=10173 comm="syz.1.954" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.232173][ T30] audit: type=1400 audit(1742860118.079:1954): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=3228 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.267705][ T30] audit: type=1400 audit(1742860118.079:1955): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3228 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.308117][ T30] audit: type=1400 audit(1742860118.079:1956): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3228 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.370434][T10192] nbd3: detected capacity change from 0 to 510 [ 496.380168][T10192] FAULT_INJECTION: forcing a failure. [ 496.380168][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.439205][ T9191] block nbd3: Send control failed (result -89) [ 496.483106][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.3.957 Not tainted 6.14.0-syzkaller #0 [ 496.483132][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 496.483142][T10192] Call Trace: [ 496.483147][T10192] [ 496.483153][T10192] dump_stack_lvl+0x16c/0x1f0 [ 496.483183][T10192] should_fail_ex+0x50a/0x650 [ 496.483213][T10192] _copy_from_user+0x2e/0xd0 [ 496.483232][T10192] memdup_user+0x71/0xd0 [ 496.483257][T10192] strndup_user+0x78/0xe0 [ 496.483281][T10192] __x64_sys_mount+0x138/0x310 [ 496.483302][T10192] ? __pfx___x64_sys_mount+0x10/0x10 [ 496.483328][T10192] do_syscall_64+0xcd/0x250 [ 496.483353][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.483377][T10192] RIP: 0033:0x7f738558d169 [ 496.483392][T10192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.483407][T10192] RSP: 002b:00007f73863e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.483424][T10192] RAX: ffffffffffffffda RBX: 00007f73857a5fa0 RCX: 00007f738558d169 [ 496.483436][T10192] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 496.483447][T10192] RBP: 00007f73863e3090 R08: 0000000000000000 R09: 0000000000000000 [ 496.483457][T10192] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000001 [ 496.483467][T10192] R13: 0000000000000000 R14: 00007f73857a5fa0 R15: 00007fff76c55208 [ 496.483488][T10192] [ 496.634097][ T9191] block nbd3: Request send failed, requeueing [ 497.213483][ T9617] block nbd3: Receive control failed (result -32) [ 497.265544][ T1159] block nbd3: Dead connection, failed to find a fallback [ 497.273569][ T1159] block nbd3: shutting down sockets [ 497.279120][ T1159] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.288766][ T1159] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.298758][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.308312][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.318468][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.327589][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.336202][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.345302][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.355178][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.364890][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.373515][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.383933][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.393551][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.402839][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.411429][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.420550][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.440350][ T9191] ldm_validate_partition_table(): Disk read failed. [ 497.466863][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.476153][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.485305][ T9191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.504802][ T9191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 497.516849][ T9191] Dev nbd3: unable to read RDB block 0 [ 497.526583][ T9191] nbd3: unable to read partition table [ 497.542708][ T9191] ldm_validate_partition_table(): Disk read failed. [ 497.550998][ T9191] Dev nbd3: unable to read RDB block 0 [ 497.556896][ T9191] nbd3: unable to read partition table [ 497.565471][T10198] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 497.565471][T10198] program syz.1.959 not setting count and/or reply_len properly [ 498.651031][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 498.920952][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 498.937726][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 498.951107][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.961035][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.971380][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 498.983204][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 498.993954][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 499.003488][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.019182][ T10] usb 1-1: config 0 descriptor?? [ 499.026195][T10210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.051316][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 499.170647][T10217] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 499.231080][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 499.240107][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 499.266258][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 49664, setting to 1024 [ 499.282511][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 499.292802][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.306783][ T5906] usb 2-1: Product: syz [ 499.319854][ T5906] usb 2-1: Manufacturer: syz [ 499.330785][T10217] usb 4-1: Using ep0 maxpacket: 8 [ 499.338697][ T5906] usb 2-1: SerialNumber: syz [ 499.355861][T10217] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 499.378744][ T5906] usb 2-1: config 0 descriptor?? [ 499.404268][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 499.421521][T10217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 52, changing to 7 [ 499.439765][ T5906] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 499.450973][T10217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 9272, setting to 1024 [ 499.502314][ T9211] usb 1-1: USB disconnect, device number 32 [ 499.506327][T10217] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 499.509706][ T9617] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 499.519889][T10217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.538780][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 499.538794][ T30] audit: type=1400 audit(1742860121.929:1963): avc: denied { name_bind } for pid=10209 comm="syz.0.963" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 499.590559][T10217] usb 4-1: Product: syz [ 499.622111][T10217] usb 4-1: Manufacturer: syz [ 499.627084][T10217] usb 4-1: SerialNumber: syz [ 499.670614][T10217] usb 4-1: config 0 descriptor?? [ 499.849233][ T30] audit: type=1400 audit(1742860122.299:1964): avc: denied { read write } for pid=10224 comm="syz.6.968" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 499.859761][T10217] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0231 [ 499.886923][T10225] vivid-007: ================= START STATUS ================= [ 499.908869][T10225] vivid-007: Generate PTS: true [ 499.912197][ T30] audit: type=1400 audit(1742860122.339:1965): avc: denied { open } for pid=10224 comm="syz.6.968" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 499.915726][T10225] vivid-007: Generate SCR: [ 499.937776][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.944373][ T30] audit: type=1400 audit(1742860122.339:1966): avc: denied { ioctl } for pid=10224 comm="syz.6.968" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x561e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 499.949210][T10225] true [ 499.973638][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.069185][T10225] [ 500.530458][T10222] delete_channel: no stack [ 500.607361][ T5906] em28xx 2-1:0.0: unknown em28xx chip ID (21) [ 500.703538][T10225] tpg source WxH: 640x360 (Y'CbCr) [ 500.708765][T10225] tpg field: 1 [ 500.714541][T10225] tpg crop: 640x360@0x0 [ 500.733372][T10225] tpg compose: 640x360@0x0 [ 500.743449][T10225] tpg colorspace: 8 [ 500.761294][T10225] tpg transfer function: 0/0 [ 500.816765][ T5906] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 500.825745][ T5906] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 500.835778][ T5906] em28xx 2-1:0.0: No AC97 audio processor [ 500.862094][T10225] tpg Y'CbCr encoding: 0/0 [ 500.869983][ T5906] usb 2-1: USB disconnect, device number 23 [ 500.884227][T10225] tpg quantization: 0/0 [ 500.888874][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 500.899370][T10225] tpg RGB range: 0/2 [ 500.906734][T10225] vivid-007: ================== END STATUS ================== [ 500.919382][ T5906] em28xx 2-1:0.0: Freeing device [ 501.151465][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.193941][ T9211] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 501.809375][ T9211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.824202][ T9211] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 501.834036][ T9211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.844527][ T9211] usb 1-1: config 0 descriptor?? [ 501.940599][ T5906] usb 4-1: USB disconnect, device number 38 [ 502.068450][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.090691][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.262619][ T30] audit: type=1400 audit(1742860124.719:1967): avc: denied { ioctl } for pid=10247 comm="syz.3.973" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25866 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 502.316413][ T9211] nintendo 0003:057E:2017.0017: hidraw0: USB HID v80.00 Device [HID 057e:2017] on usb-dummy_hcd.0-1/input0 [ 502.341018][ T30] audit: type=1400 audit(1742860124.799:1968): avc: denied { read } for pid=10247 comm="syz.3.973" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.365634][ T973] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 502.376850][ T30] audit: type=1400 audit(1742860124.799:1969): avc: denied { open } for pid=10247 comm="syz.3.973" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.390406][T10217] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 502.402523][ T9211] nintendo 0003:057E:2017.0017: Failed to get joycon info; ret=-38 [ 502.417414][ T30] audit: type=1400 audit(1742860124.829:1970): avc: denied { ioctl } for pid=10247 comm="syz.3.973" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.442945][ T9211] nintendo 0003:057E:2017.0017: Failed to retrieve controller info; ret=-38 [ 502.451996][ T9211] nintendo 0003:057E:2017.0017: Failed to initialize controller; ret=-38 [ 502.481760][ T9211] nintendo 0003:057E:2017.0017: probe - fail = -38 [ 502.488545][ T9211] nintendo 0003:057E:2017.0017: probe with driver nintendo failed with error -38 [ 502.529268][ T9211] usb 1-1: USB disconnect, device number 33 [ 502.536793][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.549493][ T973] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 502.563663][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.575609][ T973] usb 2-1: config 0 descriptor?? [ 502.590851][T10217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.610481][T10217] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 502.619982][T10217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.635920][T10217] usb 6-1: config 0 descriptor?? [ 502.670545][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.6.976'. [ 503.005564][ T973] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 503.027934][ T30] audit: type=1400 audit(1742860125.479:1971): avc: denied { sqpoll } for pid=10259 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 503.076947][ T973] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input46 [ 503.090528][ T30] audit: type=1400 audit(1742860125.479:1972): avc: denied { bind } for pid=10259 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.532531][T10217] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 503.534283][ T973] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 503.559643][T10217] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0019/input/input47 [ 503.659199][T10217] keytouch 0003:0926:3333.0019: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 504.152820][T10271] geneve2: entered promiscuous mode [ 505.145203][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 505.145218][ T30] audit: type=1326 audit(1742860127.599:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f413b58d169 code=0x7fc00000 [ 505.202618][ T973] usb 2-1: USB disconnect, device number 24 [ 505.215757][T10272] delete_channel: no stack [ 506.459971][ T30] audit: type=1400 audit(1742860128.909:1984): avc: denied { append } for pid=10298 comm="syz.1.985" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 506.528671][T10289] input: syz0 as /devices/virtual/input/input48 [ 506.881480][ T5906] usb 6-1: USB disconnect, device number 19 [ 507.465686][ T30] audit: type=1400 audit(1742860129.909:1985): avc: denied { shutdown } for pid=10311 comm="syz.6.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 507.737189][ T30] audit: type=1400 audit(1742860130.179:1986): avc: denied { ioctl } for pid=10311 comm="syz.6.987" path="socket:[26030]" dev="sockfs" ino=26030 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 508.120134][ T30] audit: type=1400 audit(1742860130.559:1987): avc: denied { bind } for pid=10305 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 508.467488][ T30] audit: type=1400 audit(1742860130.559:1988): avc: denied { name_bind } for pid=10305 comm="syz.5.989" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 508.566013][ T30] audit: type=1400 audit(1742860130.559:1989): avc: denied { node_bind } for pid=10305 comm="syz.5.989" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 508.688328][ T30] audit: type=1400 audit(1742860130.639:1990): avc: denied { setopt } for pid=10305 comm="syz.5.989" laddr=::ffff:172.20.20.57 lport=20001 faddr=::ffff:172.20.20.57 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 508.720732][ T30] audit: type=1400 audit(1742860130.699:1991): avc: denied { recv } for pid=10311 comm="syz.6.987" saddr=10.128.0.169 src=30006 daddr=10.128.0.21 dest=48066 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 509.712535][ T9211] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 509.779152][ T30] audit: type=1400 audit(1742860132.229:1992): avc: denied { read } for pid=10336 comm="syz.5.995" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 509.826332][T10331] delete_channel: no stack [ 510.023302][ T9211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.038176][ T9211] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.050924][ T9211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.065219][ T9211] usb 7-1: config 0 descriptor?? [ 510.187905][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 510.187920][ T30] audit: type=1400 audit(1742860132.639:1997): avc: denied { mount } for pid=10342 comm="syz.3.997" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 510.284993][ T30] audit: type=1400 audit(1742860132.679:1998): avc: denied { setopt } for pid=10342 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 510.316875][ T30] audit: type=1400 audit(1742860132.679:1999): avc: denied { create } for pid=10342 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.345358][ T30] audit: type=1400 audit(1742860132.679:2000): avc: denied { ioctl } for pid=10342 comm="syz.3.997" path="socket:[25586]" dev="sockfs" ino=25586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.513742][ T9211] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 510.528809][ T9211] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001A/input/input49 [ 510.653178][ T9211] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 511.142347][ C1] Mem-Info: [ 511.145495][ C1] active_anon:13442 inactive_anon:0 isolated_anon:0 [ 511.145495][ C1] active_file:12464 inactive_file:38824 isolated_file:0 [ 511.145495][ C1] unevictable:768 dirty:39 writeback:0 [ 511.145495][ C1] slab_reclaimable:11497 slab_unreclaimable:102079 [ 511.145495][ C1] mapped:36603 shmem:8200 pagetables:1302 [ 511.145495][ C1] sec_pagetables:0 bounce:0 [ 511.145495][ C1] kernel_misc_reclaimable:0 [ 511.145495][ C1] free:1308863 free_pcp:2125 free_cma:0 [ 511.190767][ C1] Node 0 active_anon:53768kB inactive_anon:0kB active_file:49856kB inactive_file:155220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146412kB dirty:156kB writeback:0kB shmem:31264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11560kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no [ 511.223106][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 511.253195][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.280254][ C1] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 511.286018][ C1] Node 0 DMA32 free:1311420kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:53868kB inactive_anon:0kB active_file:49856kB inactive_file:155128kB unevictable:5936kB writepending:156kB present:3129332kB managed:2547360kB mlocked:4500kB bounce:0kB free_pcp:1932kB local_pcp:688kB free_cma:0kB [ 511.316511][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 511.321209][ C1] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 511.347776][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 511.352465][ C1] Node 1 Normal free:3903572kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6860kB local_pcp:316kB free_cma:0kB [ 511.381557][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 511.386237][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 511.398807][ C1] Node 0 DMA32: 202*4kB (UE) 668*8kB (UME) 172*16kB (UME) 145*32kB (UME) 360*64kB (UME) 139*128kB (UME) 66*256kB (UME) 32*512kB (UME) 17*1024kB (UME) 11*2048kB (UM) 289*4096kB (UM) = 1311336kB [ 511.417792][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 511.429229][ C1] Node 1 Normal: 220*4kB (UME) 49*8kB (UME) 37*16kB (UME) 188*32kB (UM) 111*64kB (UME) 34*128kB (UME) 21*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 942*4096kB (M) = 3903624kB [ 511.447760][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.457278][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.466540][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.476068][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.485328][ C1] 59488 total pagecache pages [ 511.489982][ C1] 0 pages in swap cache [ 511.494107][ C1] Free swap = 124756kB [ 511.498230][ C1] Total swap = 124996kB [ 511.502355][ C1] 2097051 pages RAM [ 511.506140][ C1] 0 pages HighMem/MovableOnly [ 511.510786][ C1] 428553 pages reserved [ 511.514916][ C1] 0 pages cma reserved [ 512.055665][T10356] input: syz0 as /devices/virtual/input/input50 [ 512.213554][T10217] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 512.421775][T10217] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 512.438653][T10217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.523963][T10217] usb 4-1: config 0 descriptor?? [ 513.187651][ T5906] usb 7-1: USB disconnect, device number 11 [ 513.276614][T10217] usb 4-1: string descriptor 0 read error: -71 [ 513.291771][T10217] ldusb 4-1:0.0: Interrupt in endpoint not found [ 513.394241][T10217] usb 4-1: USB disconnect, device number 39 [ 513.672896][ T30] audit: type=1400 audit(1742860136.029:2001): avc: denied { execute } for pid=10372 comm="syz.6.1007" path="/55/bus" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 513.958092][ T30] audit: type=1800 audit(1742860136.029:2002): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1007" name="bus" dev="tmpfs" ino=315 res=0 errno=0 [ 516.355070][ T30] audit: type=1400 audit(1742860138.809:2003): avc: denied { open } for pid=10393 comm="syz.3.1009" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 516.430419][ T30] audit: type=1400 audit(1742860138.809:2004): avc: denied { ioctl } for pid=10393 comm="syz.3.1009" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 516.536109][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.581073][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.647596][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.660631][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.673642][ T30] audit: type=1400 audit(1742860139.129:2005): avc: denied { ioctl } for pid=10399 comm="syz.0.1011" path="socket:[26138]" dev="sockfs" ino=26138 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 516.747948][ T30] audit: type=1400 audit(1742860139.129:2006): avc: denied { setopt } for pid=10395 comm="syz.5.1010" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 516.768863][ T5906] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 517.031464][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 517.041472][ T5906] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 517.049763][ T5906] usb 4-1: config 0 has no interface number 0 [ 517.057993][ T5906] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 517.067568][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.075695][ T5906] usb 4-1: Product: syz [ 517.079929][ T5906] usb 4-1: Manufacturer: syz [ 517.085118][ T5906] usb 4-1: SerialNumber: syz [ 517.100624][ T5906] usb 4-1: config 0 descriptor?? [ 517.112238][ T5906] redrat3 4-1:0.31: Couldn't find all endpoints [ 517.260924][T10399] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 517.313690][ T5906] usb 4-1: USB disconnect, device number 40 [ 517.781395][ T30] audit: type=1326 audit(1742860140.079:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.120437][ T30] audit: type=1326 audit(1742860140.079:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.189673][ T30] audit: type=1326 audit(1742860140.089:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.298411][ T30] audit: type=1326 audit(1742860140.089:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.399036][T10426] serio: Serial port ttyS3 [ 518.420442][ T30] audit: type=1326 audit(1742860140.089:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.460560][ T30] audit: type=1326 audit(1742860140.089:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f428c78d169 code=0x7ffc0000 [ 518.880761][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 519.181613][ T5906] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 519.196505][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.222379][ T5906] usb 2-1: config 0 descriptor?? [ 519.366656][T10395] delete_channel: no stack [ 519.560384][ T5906] usb 2-1: string descriptor 0 read error: -71 [ 519.573329][ T5906] ldusb 2-1:0.0: Interrupt in endpoint not found [ 520.166816][ T5906] usb 2-1: USB disconnect, device number 25 [ 520.177645][ T973] IPVS: starting estimator thread 0... [ 520.271335][T10443] IPVS: using max 52 ests per chain, 124800 per kthread [ 520.901370][ T5828] Bluetooth: hci0: command 0x0405 tx timeout [ 521.584949][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 521.584963][ T30] audit: type=1400 audit(1742860144.039:2038): avc: denied { create } for pid=10459 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 521.632204][ T30] audit: type=1400 audit(1742860144.069:2039): avc: denied { setopt } for pid=10459 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 521.658840][ T30] audit: type=1400 audit(1742860144.079:2040): avc: denied { egress } for pid=25 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 521.684678][ T30] audit: type=1400 audit(1742860144.079:2041): avc: denied { sendto } for pid=25 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 521.738425][ T30] audit: type=1400 audit(1742860144.139:2042): avc: denied { connect } for pid=10459 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 521.758730][ T30] audit: type=1400 audit(1742860144.189:2043): avc: denied { getopt } for pid=10461 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.010094][T10464] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 522.010094][T10464] program syz.0.1028 not setting count and/or reply_len properly [ 522.151542][T10455] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 522.226341][T10471] syz.0.1030: attempt to access beyond end of device [ 522.226341][T10471] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 522.266847][T10470] nbd0: detected capacity change from 0 to 510 [ 522.395784][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 523.108793][ T9191] block nbd0: Send control failed (result -89) [ 523.167743][ T9191] block nbd0: Request send failed, requeueing [ 523.168076][T10477] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 523.168076][T10477] program syz.3.1032 not setting count and/or reply_len properly [ 523.412460][ T9617] block nbd0: Receive control failed (result -32) [ 523.420783][ T1159] block nbd0: Dead connection, failed to find a fallback [ 523.427927][ T1159] block nbd0: shutting down sockets [ 523.433279][ T1159] blk_print_req_error: 27 callbacks suppressed [ 523.433292][ T1159] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.449053][ T1159] buffer_io_error: 27 callbacks suppressed [ 523.449066][ T1159] Buffer I/O error on dev nbd0, logical block 0, async page read [ 523.468590][T10471] I/O error, dev nbd0, sector 508 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.480500][ T9191] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.489977][ T9191] Buffer I/O error on dev nbd0, logical block 1, async page read [ 523.491087][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=254, location=254 [ 523.507623][ T9191] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.507733][ T9191] Buffer I/O error on dev nbd0, logical block 2, async page read [ 523.508078][ T9191] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.508139][ T9191] Buffer I/O error on dev nbd0, logical block 3, async page read [ 523.508295][ T9191] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.519638][T10471] I/O error, dev nbd0, sector 506 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.525086][ T9191] Buffer I/O error on dev nbd0, logical block 0, async page read [ 523.534273][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=253, location=253 [ 523.542282][ T9191] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.586985][T10471] I/O error, dev nbd0, sector 504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.620354][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=252, location=252 [ 523.655932][T10471] I/O error, dev nbd0, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.692546][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=104, location=104 [ 523.708305][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=102, location=102 [ 523.727746][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 523.778001][ T9191] Buffer I/O error on dev nbd0, logical block 1, async page read [ 523.801847][T10484] input: syz0 as /devices/virtual/input/input51 [ 523.806231][ T9191] Buffer I/O error on dev nbd0, logical block 2, async page read [ 523.819331][ T30] audit: type=1400 audit(1742860146.239:2044): avc: denied { write } for pid=10483 comm="syz.6.1035" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 523.831259][ T9191] Buffer I/O error on dev nbd0, logical block 3, async page read [ 523.948834][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 523.950351][ T9191] Buffer I/O error on dev nbd0, logical block 0, async page read [ 523.976874][ T3697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.998168][ T9191] Buffer I/O error on dev nbd0, logical block 1, async page read [ 524.020160][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=126, location=126 [ 524.028796][ T9191] ldm_validate_partition_table(): Disk read failed. [ 524.046644][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=125, location=125 [ 524.049616][ T9191] Dev nbd0: unable to read RDB block 0 [ 524.058216][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=124, location=124 [ 524.078088][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 524.212507][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 524.231513][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62 [ 524.232874][ T9191] nbd0: unable to read partition table [ 524.247078][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=61, location=61 [ 524.265728][ T30] audit: type=1400 audit(1742860146.719:2045): avc: denied { create } for pid=10486 comm="syz.6.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 524.291256][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60 [ 524.300991][T10471] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 524.315817][T10471] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 524.347313][ T9191] ldm_validate_partition_table(): Disk read failed. [ 524.354846][ T30] audit: type=1400 audit(1742860146.749:2046): avc: denied { shutdown } for pid=10486 comm="syz.6.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 524.395974][ T9191] Dev nbd0: unable to read RDB block 0 [ 524.396280][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.402012][ T9191] nbd0: unable to read partition table [ 524.413305][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.425075][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.434323][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.441838][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 524.450858][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.469928][ T30] audit: type=1400 audit(1742860146.909:2047): avc: denied { mounton } for pid=10489 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 524.507948][ T3697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.609756][ T3697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.687555][ T3697] bridge0: port 3(netdevsim0) entered disabled state [ 524.860423][ T3697] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 524.890331][ T3697] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 524.901833][ T3697] bridge0: port 3(netdevsim0) entered disabled state [ 525.157966][ T3697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.366455][T10489] chnl_net:caif_netlink_parms(): no params data found [ 525.537611][ T3697] bridge_slave_1: left allmulticast mode [ 525.550696][ T3697] bridge_slave_1: left promiscuous mode [ 525.600894][ T973] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 525.761145][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 525.783673][ T973] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 525.849736][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.861430][ T3697] bridge_slave_0: left allmulticast mode [ 525.867087][ T3697] bridge_slave_0: left promiscuous mode [ 525.874287][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.950565][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.975016][ T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.990405][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.000342][ T973] usb 4-1: Product: syz [ 526.004586][ T973] usb 4-1: Manufacturer: syz [ 526.009377][ T973] usb 4-1: SerialNumber: syz [ 526.029897][ T973] usb 4-1: config 0 descriptor?? [ 526.067409][ T973] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 526.080965][ T973] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 526.513633][ T5828] Bluetooth: hci2: command tx timeout [ 526.795816][ T30] audit: type=1400 audit(1742860149.199:2048): avc: denied { create } for pid=10513 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 527.023757][ T973] em28xx 4-1:0.0: unknown em28xx chip ID (203) [ 527.034526][ T30] audit: type=1400 audit(1742860149.219:2049): avc: denied { setopt } for pid=10513 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 527.191747][ T973] em28xx 4-1:0.0: Config register raw data: 0x15 [ 527.327022][ T30] audit: type=1400 audit(1742860149.729:2050): avc: denied { write } for pid=10520 comm="syz.0.1042" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 527.398938][ T973] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 527.425124][ T973] em28xx 4-1:0.0: No AC97 audio processor [ 527.445259][ T973] usb 4-1: USB disconnect, device number 41 [ 527.473712][ T30] audit: type=1400 audit(1742860149.929:2051): avc: denied { ioctl } for pid=10528 comm="syz.0.1044" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 527.478823][ T973] em28xx 4-1:0.0: Disconnecting em28xx [ 527.533766][ T973] em28xx 4-1:0.0: Freeing device [ 527.646301][ T30] audit: type=1400 audit(1742860150.029:2052): avc: denied { map } for pid=10530 comm="syz.6.1043" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 528.123848][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.192567][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.237304][ T3697] bond0 (unregistering): Released all slaves [ 528.279162][T10537] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 528.279162][T10537] program syz.6.1046 not setting count and/or reply_len properly [ 528.326608][T10489] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.420591][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.513986][T10489] bridge_slave_0: entered allmulticast mode [ 528.541210][T10489] bridge_slave_0: entered promiscuous mode [ 528.564965][T10489] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.572405][T10489] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.579584][T10489] bridge_slave_1: entered allmulticast mode [ 528.580484][ T5828] Bluetooth: hci2: command tx timeout [ 528.586770][T10489] bridge_slave_1: entered promiscuous mode [ 529.405653][ T30] audit: type=1400 audit(1742860151.859:2053): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.426956][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.436618][ T30] audit: type=1400 audit(1742860151.889:2054): avc: denied { read } for pid=5490 comm="dhcpcd" name="n128" dev="tmpfs" ino=6813 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.458836][ T30] audit: type=1400 audit(1742860151.889:2055): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n128" dev="tmpfs" ino=6813 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.481848][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.488481][ T30] audit: type=1400 audit(1742860151.889:2056): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n128" dev="tmpfs" ino=6813 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.511812][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.672374][ T26] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 529.712062][T10489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.869256][ T26] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 529.899484][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 530.038220][ T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.176472][T10489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.246508][T10571] FAULT_INJECTION: forcing a failure. [ 530.246508][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.259711][T10571] CPU: 0 UID: 0 PID: 10571 Comm: syz.6.1053 Not tainted 6.14.0-syzkaller #0 [ 530.259733][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 530.259743][T10571] Call Trace: [ 530.259749][T10571] [ 530.259755][T10571] dump_stack_lvl+0x16c/0x1f0 [ 530.259784][T10571] should_fail_ex+0x50a/0x650 [ 530.259813][T10571] _copy_from_user+0x2e/0xd0 [ 530.259832][T10571] do_handle_open+0x628/0xb60 [ 530.259855][T10571] ? __fget_files+0x206/0x3a0 [ 530.259873][T10571] ? __pfx_do_handle_open+0x10/0x10 [ 530.259901][T10571] ? ksys_write+0x1ba/0x250 [ 530.259925][T10571] ? do_syscall_64+0xcd/0x250 [ 530.259948][T10571] do_syscall_64+0xcd/0x250 [ 530.259973][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.259997][T10571] RIP: 0033:0x7f413b58d169 [ 530.260010][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.260026][T10571] RSP: 002b:00007f413c3e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 530.260043][T10571] RAX: ffffffffffffffda RBX: 00007f413b7a6160 RCX: 00007f413b58d169 [ 530.260057][T10571] RDX: 0000000000408100 RSI: 0000200000000100 RDI: 000000000000000a [ 530.260067][T10571] RBP: 00007f413c3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 530.260077][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.260086][T10571] R13: 0000000000000000 R14: 00007f413b7a6160 R15: 00007ffccfa5b048 [ 530.260109][T10571] [ 530.408196][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.508418][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.551952][ T26] usb 4-1: Manufacturer: ї [ 530.556501][ T26] usb 4-1: SerialNumber: syz [ 530.617570][ T30] audit: type=1400 audit(1742860153.069:2057): avc: denied { read } for pid=10575 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.647538][T10489] team0: Port device team_slave_0 added [ 530.662679][ T5828] Bluetooth: hci2: command tx timeout [ 530.673770][T10489] team0: Port device team_slave_1 added [ 530.727209][ T3697] hsr_slave_0: left promiscuous mode [ 530.738985][ T3697] hsr_slave_1: left promiscuous mode [ 530.756779][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.776144][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.788749][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.803745][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.839698][ T3697] veth1_macvtap: left promiscuous mode [ 530.852897][ T3697] veth0_macvtap: left promiscuous mode [ 530.860579][ T3697] veth1_vlan: left promiscuous mode [ 530.865895][ T3697] veth0_vlan: left promiscuous mode [ 530.880453][ T9211] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 531.058439][ T9211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.071779][ T9211] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 531.087297][ T9211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.108335][ T9211] usb 1-1: config 0 descriptor?? [ 531.558553][ T9211] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 531.575876][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 531.588109][ T9211] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001B/input/input52 [ 531.656586][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 531.713561][ T9211] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 532.175779][ C1] Mem-Info: [ 532.178932][ C1] active_anon:18472 inactive_anon:0 isolated_anon:0 [ 532.178932][ C1] active_file:12464 inactive_file:38838 isolated_file:0 [ 532.178932][ C1] unevictable:3523 dirty:148 writeback:0 [ 532.178932][ C1] slab_reclaimable:11583 slab_unreclaimable:100771 [ 532.178932][ C1] mapped:33743 shmem:5370 pagetables:1262 [ 532.178932][ C1] sec_pagetables:0 bounce:0 [ 532.178932][ C1] kernel_misc_reclaimable:0 [ 532.178932][ C1] free:1302382 free_pcp:1844 free_cma:0 [ 532.224336][ C1] Node 0 active_anon:73888kB inactive_anon:0kB active_file:49856kB inactive_file:155276kB unevictable:12556kB isolated(anon):0kB isolated(file):0kB mapped:134972kB dirty:592kB writeback:0kB shmem:19944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no [ 532.256727][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 532.286767][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.313789][ C1] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 532.319513][ C1] Node 0 DMA32 free:1289020kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:73888kB inactive_anon:0kB active_file:49856kB inactive_file:155184kB unevictable:12556kB writepending:592kB present:3129332kB managed:2547360kB mlocked:11172kB bounce:0kB free_pcp:2044kB local_pcp:884kB free_cma:0kB [ 532.350167][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 532.354874][ C1] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 532.381527][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 532.386223][ C1] Node 1 Normal free:3905148kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5316kB local_pcp:572kB free_cma:0kB [ 532.415298][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 532.419990][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.432655][ C1] Node 0 DMA32: 149*4kB (UME) 17*8kB (ME) 257*16kB (UME) 652*32kB (UME) 304*64kB (UME) 79*128kB (UME) 59*256kB (UME) 28*512kB (UME) 14*1024kB (UME) 15*2048kB (U) 283*4096kB (UM) = 1288940kB [ 532.451601][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 532.463017][ C1] Node 1 Normal: 242*4kB (UME) 53*8kB (UME) 38*16kB (UME) 199*32kB (UM) 114*64kB (UME) 37*128kB (UME) 23*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 942*4096kB (M) = 3905200kB [ 532.481527][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.491042][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 532.500301][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.509920][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 532.519202][ C1] 56672 total pagecache pages [ 532.523850][ C1] 0 pages in swap cache [ 532.527974][ C1] Free swap = 124760kB [ 532.532147][ C1] Total swap = 124996kB [ 532.536290][ C1] 2097051 pages RAM [ 532.540084][ C1] 0 pages HighMem/MovableOnly [ 532.544751][ C1] 428553 pages reserved [ 532.548877][ C1] 0 pages cma reserved [ 532.744192][ T5828] Bluetooth: hci2: command tx timeout [ 533.564058][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 533.664848][ T26] usb 4-1: cannot find UAC_HEADER [ 533.675755][T10489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.700374][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.726313][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.734684][T10489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.762121][ T26] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.831756][T10489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.848786][ T26] usb 4-1: USB disconnect, device number 42 [ 533.854184][ T9191] udevd[9191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.857025][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.934797][T10217] usb 1-1: USB disconnect, device number 34 [ 533.977772][T10602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64474 sclass=netlink_route_socket pid=10602 comm=syz.0.1059 [ 533.998329][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 533.998349][ T30] audit: type=1400 audit(1742860156.429:2067): avc: denied { write } for pid=10601 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.104754][ T30] audit: type=1400 audit(1742860156.559:2068): avc: denied { setopt } for pid=10601 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 534.132776][T10489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.982627][T10489] hsr_slave_0: entered promiscuous mode [ 535.020633][T10489] hsr_slave_1: entered promiscuous mode [ 535.029116][T10489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.046352][T10489] Cannot create hsr debugfs directory [ 535.412077][ T30] audit: type=1400 audit(1742860157.869:2069): avc: denied { read write } for pid=10625 comm="syz.6.1061" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 535.436766][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.617555][ T30] audit: type=1400 audit(1742860157.869:2070): avc: denied { open } for pid=10625 comm="syz.6.1061" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 535.642091][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.146865][T10489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.351118][T10489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.360088][T10489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.377894][T10489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.490672][T10646] sp0: Synchronizing with TNC [ 537.417865][T10489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.487811][T10489] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.010147][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.017468][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.058624][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.065823][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.156120][T10668] FAULT_INJECTION: forcing a failure. [ 538.156120][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 538.209651][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.1069 Not tainted 6.14.0-syzkaller #0 [ 538.209674][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 538.209684][T10668] Call Trace: [ 538.209689][T10668] [ 538.209695][T10668] dump_stack_lvl+0x16c/0x1f0 [ 538.209722][T10668] should_fail_ex+0x50a/0x650 [ 538.209747][T10668] ? fs_reclaim_acquire+0xae/0x150 [ 538.209773][T10668] ? rfkill_alloc+0xac/0x330 [ 538.209794][T10668] should_failslab+0xc2/0x120 [ 538.209814][T10668] __kmalloc_noprof+0xcb/0x510 [ 538.209837][T10668] rfkill_alloc+0xac/0x330 [ 538.209863][T10668] wiphy_new_nm+0x1217/0x2160 [ 538.209887][T10668] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 538.209906][T10668] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 538.209925][T10668] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 538.209944][T10668] ieee80211_alloc_hw_nm+0x495/0x2260 [ 538.209967][T10668] ? __local_bh_enable_ip+0xa4/0x120 [ 538.209997][T10668] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 538.210054][T10668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 538.210083][T10668] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 538.210115][T10668] hwsim_new_radio_nl+0xb42/0x12b0 [ 538.210141][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 538.210173][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 538.210201][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 538.210231][T10668] genl_family_rcv_msg_doit+0x202/0x2f0 [ 538.210262][T10668] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.210294][T10668] ? bpf_lsm_capable+0x9/0x10 [ 538.210313][T10668] ? security_capable+0x7e/0x260 [ 538.210333][T10668] ? ns_capable+0xd7/0x110 [ 538.210358][T10668] genl_rcv_msg+0x565/0x800 [ 538.210378][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.210395][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 538.210419][T10668] ? __pfx___lock_acquire+0x10/0x10 [ 538.210448][T10668] netlink_rcv_skb+0x16b/0x440 [ 538.210469][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.210484][T10668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.210518][T10668] ? down_read+0xc9/0x330 [ 538.210542][T10668] ? __pfx_down_read+0x10/0x10 [ 538.210566][T10668] ? netlink_deliver_tap+0x1ae/0xd30 [ 538.210593][T10668] genl_rcv+0x28/0x40 [ 538.210614][T10668] netlink_unicast+0x53c/0x7f0 [ 538.210641][T10668] ? __pfx_netlink_unicast+0x10/0x10 [ 538.210671][T10668] netlink_sendmsg+0x8b8/0xd70 [ 538.210698][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.210732][T10668] ____sys_sendmsg+0xaaf/0xc90 [ 538.210753][T10668] ? copy_msghdr_from_user+0x10b/0x160 [ 538.210777][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.210809][T10668] ___sys_sendmsg+0x135/0x1e0 [ 538.210834][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.210870][T10668] ? __pfx_lock_release+0x10/0x10 [ 538.210890][T10668] ? trace_lock_acquire+0x14e/0x1f0 [ 538.210919][T10668] ? __fget_files+0x206/0x3a0 [ 538.210942][T10668] __sys_sendmsg+0x16e/0x220 [ 538.210967][T10668] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.211014][T10668] do_syscall_64+0xcd/0x250 [ 538.211040][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.211062][T10668] RIP: 0033:0x7f428c78d169 [ 538.211077][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.211093][T10668] RSP: 002b:00007f428a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.211110][T10668] RAX: ffffffffffffffda RBX: 00007f428c9a5fa0 RCX: 00007f428c78d169 [ 538.211120][T10668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 538.211130][T10668] RBP: 00007f428a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.211139][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.211148][T10668] R13: 0000000000000000 R14: 00007f428c9a5fa0 R15: 00007ffc99218818 [ 538.211170][T10668] [ 538.580267][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.712042][T10668] INFO: trying to register non-static key. [ 538.717870][T10668] The code is fine but needs lockdep annotation, or maybe [ 538.724951][T10668] you didn't initialize this object before use? [ 538.731218][T10668] turning off the locking correctness validator. [ 538.737517][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.1069 Not tainted 6.14.0-syzkaller #0 [ 538.737533][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 538.737541][T10668] Call Trace: [ 538.737545][T10668] [ 538.737550][T10668] dump_stack_lvl+0x116/0x1f0 [ 538.737574][T10668] register_lock_class+0xc39/0x1240 [ 538.737595][T10668] ? hlock_class+0x4e/0x130 [ 538.737609][T10668] ? __pfx_register_lock_class+0x10/0x10 [ 538.737628][T10668] ? __pfx_mark_lock+0x10/0x10 [ 538.737645][T10668] ? __pfx_mark_lock+0x10/0x10 [ 538.737663][T10668] __lock_acquire+0x135/0x3c40 [ 538.737681][T10668] ? mark_lock+0xb5/0xc60 [ 538.737699][T10668] ? __pfx___lock_acquire+0x10/0x10 [ 538.737717][T10668] ? mark_held_locks+0x9f/0xe0 [ 538.737736][T10668] lock_acquire.part.0+0x11b/0x380 [ 538.737754][T10668] ? cfg80211_dev_free+0x30/0x3d0 [ 538.737776][T10668] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 538.737794][T10668] ? rcu_is_watching+0x12/0xc0 [ 538.737808][T10668] ? trace_lock_acquire+0x14e/0x1f0 [ 538.737823][T10668] ? cfg80211_dev_free+0x30/0x3d0 [ 538.737842][T10668] ? lock_acquire+0x2f/0xb0 [ 538.737859][T10668] ? cfg80211_dev_free+0x30/0x3d0 [ 538.737879][T10668] _raw_spin_lock_irqsave+0x3a/0x60 [ 538.737895][T10668] ? cfg80211_dev_free+0x30/0x3d0 [ 538.737915][T10668] cfg80211_dev_free+0x30/0x3d0 [ 538.737935][T10668] ? __pfx_wiphy_dev_release+0x10/0x10 [ 538.737948][T10668] device_release+0xa1/0x240 [ 538.737968][T10668] kobject_put+0x1e4/0x5a0 [ 538.737988][T10668] put_device+0x1f/0x30 [ 538.738006][T10668] wiphy_new_nm+0x1c1f/0x2160 [ 538.738024][T10668] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 538.738040][T10668] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 538.738056][T10668] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 538.738072][T10668] ieee80211_alloc_hw_nm+0x495/0x2260 [ 538.738092][T10668] ? __local_bh_enable_ip+0xa4/0x120 [ 538.738112][T10668] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 538.738135][T10668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 538.738157][T10668] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 538.738178][T10668] hwsim_new_radio_nl+0xb42/0x12b0 [ 538.738197][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 538.738218][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 538.738242][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 538.738266][T10668] genl_family_rcv_msg_doit+0x202/0x2f0 [ 538.738292][T10668] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.738316][T10668] ? bpf_lsm_capable+0x9/0x10 [ 538.738333][T10668] ? security_capable+0x7e/0x260 [ 538.738349][T10668] ? ns_capable+0xd7/0x110 [ 538.738367][T10668] genl_rcv_msg+0x565/0x800 [ 538.738381][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.738393][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 538.738412][T10668] ? __pfx___lock_acquire+0x10/0x10 [ 538.738431][T10668] netlink_rcv_skb+0x16b/0x440 [ 538.738449][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.738462][T10668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.738484][T10668] ? down_read+0xc9/0x330 [ 538.738502][T10668] ? __pfx_down_read+0x10/0x10 [ 538.738520][T10668] ? netlink_deliver_tap+0x1ae/0xd30 [ 538.738539][T10668] genl_rcv+0x28/0x40 [ 538.738558][T10668] netlink_unicast+0x53c/0x7f0 [ 538.738576][T10668] ? __pfx_netlink_unicast+0x10/0x10 [ 538.738597][T10668] netlink_sendmsg+0x8b8/0xd70 [ 538.738616][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.738637][T10668] ____sys_sendmsg+0xaaf/0xc90 [ 538.738653][T10668] ? copy_msghdr_from_user+0x10b/0x160 [ 538.738672][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.738690][T10668] ___sys_sendmsg+0x135/0x1e0 [ 538.738710][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.738732][T10668] ? __pfx_lock_release+0x10/0x10 [ 538.738749][T10668] ? trace_lock_acquire+0x14e/0x1f0 [ 538.738766][T10668] ? __fget_files+0x206/0x3a0 [ 538.738781][T10668] __sys_sendmsg+0x16e/0x220 [ 538.738800][T10668] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.738824][T10668] do_syscall_64+0xcd/0x250 [ 538.738843][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.738862][T10668] RIP: 0033:0x7f428c78d169 [ 538.738872][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.738885][T10668] RSP: 002b:00007f428a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.738898][T10668] RAX: ffffffffffffffda RBX: 00007f428c9a5fa0 RCX: 00007f428c78d169 [ 538.738906][T10668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 538.738914][T10668] RBP: 00007f428a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.738922][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.738929][T10668] R13: 0000000000000000 R14: 00007f428c9a5fa0 R15: 00007ffc99218818 [ 538.738941][T10668] [ 538.739470][T10668] ------------[ cut here ]------------ [ 539.205230][T10668] WARNING: CPU: 1 PID: 10668 at net/wireless/core.c:1197 cfg80211_dev_free+0x2e7/0x3d0 [ 539.214857][T10668] Modules linked in: [ 539.218746][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.1069 Not tainted 6.14.0-syzkaller #0 [ 539.227482][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 539.237605][T10668] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 539.243314][T10668] Code: 00 00 49 8b bd e0 08 00 00 e8 b5 63 69 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 9f 63 69 f7 e8 ea fd 10 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 79 17 74 f7 e9 aa fe ff ff 4c [ 539.262903][T10668] RSP: 0018:ffffc9000ea5f1b8 EFLAGS: 00010093 [ 539.268955][T10668] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 539.276906][T10668] RDX: ffff8880605cc880 RSI: ffffffff8aa8f286 RDI: ffffc9000ea5f128 [ 539.284858][T10668] RBP: ffff8880277806a8 R08: 0000000000000001 R09: fffff52001d4be25 [ 539.292816][T10668] R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880277806b8 [ 539.300767][T10668] R13: ffff888027780000 R14: ffff888034ebd500 R15: 0000000000000000 [ 539.308723][T10668] FS: 00007f428a5f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 539.317634][T10668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.324199][T10668] CR2: 00007ffda2e0e1b8 CR3: 000000007bb74000 CR4: 00000000003526f0 [ 539.332154][T10668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 539.340988][T10668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 539.348951][T10668] Call Trace: [ 539.352217][T10668] [ 539.355131][T10668] ? __warn+0xea/0x3c0 [ 539.359185][T10668] ? cfg80211_dev_free+0x2e7/0x3d0 [ 539.364285][T10668] ? report_bug+0x3c0/0x580 [ 539.368772][T10668] ? handle_bug+0x54/0xa0 [ 539.373088][T10668] ? exc_invalid_op+0x17/0x50 [ 539.377750][T10668] ? asm_exc_invalid_op+0x1a/0x20 [ 539.382765][T10668] ? do_raw_spin_lock+0x12d/0x2c0 [ 539.387770][T10668] ? cfg80211_dev_free+0x2e6/0x3d0 [ 539.392868][T10668] ? cfg80211_dev_free+0x2e7/0x3d0 [ 539.397964][T10668] ? cfg80211_dev_free+0x2e6/0x3d0 [ 539.403061][T10668] ? __pfx_wiphy_dev_release+0x10/0x10 [ 539.408505][T10668] device_release+0xa1/0x240 [ 539.413080][T10668] kobject_put+0x1e4/0x5a0 [ 539.417488][T10668] put_device+0x1f/0x30 [ 539.421631][T10668] wiphy_new_nm+0x1c1f/0x2160 [ 539.426306][T10668] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 539.432526][T10668] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 539.439010][T10668] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 539.445498][T10668] ieee80211_alloc_hw_nm+0x495/0x2260 [ 539.450856][T10668] ? __local_bh_enable_ip+0xa4/0x120 [ 539.456126][T10668] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 539.461747][T10668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.467625][T10668] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 539.473679][T10668] hwsim_new_radio_nl+0xb42/0x12b0 [ 539.478784][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.484315][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 539.491674][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 539.499031][T10668] genl_family_rcv_msg_doit+0x202/0x2f0 [ 539.504584][T10668] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 539.510664][T10668] ? bpf_lsm_capable+0x9/0x10 [ 539.515341][T10668] ? security_capable+0x7e/0x260 [ 539.520265][T10668] ? ns_capable+0xd7/0x110 [ 539.524669][T10668] genl_rcv_msg+0x565/0x800 [ 539.529155][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.534156][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.539782][T10668] ? __pfx___lock_acquire+0x10/0x10 [ 539.544973][T10668] netlink_rcv_skb+0x16b/0x440 [ 539.549722][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.554731][T10668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.560004][T10668] ? down_read+0xc9/0x330 [ 539.564322][T10668] ? __pfx_down_read+0x10/0x10 [ 539.569083][T10668] ? netlink_deliver_tap+0x1ae/0xd30 [ 539.574352][T10668] genl_rcv+0x28/0x40 [ 539.578318][T10668] netlink_unicast+0x53c/0x7f0 [ 539.583072][T10668] ? __pfx_netlink_unicast+0x10/0x10 [ 539.588342][T10668] netlink_sendmsg+0x8b8/0xd70 [ 539.593098][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.598369][T10668] ____sys_sendmsg+0xaaf/0xc90 [ 539.603113][T10668] ? copy_msghdr_from_user+0x10b/0x160 [ 539.608555][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.613823][T10668] ___sys_sendmsg+0x135/0x1e0 [ 539.618494][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.623682][T10668] ? __pfx_lock_release+0x10/0x10 [ 539.628690][T10668] ? trace_lock_acquire+0x14e/0x1f0 [ 539.633872][T10668] ? __fget_files+0x206/0x3a0 [ 539.638555][T10668] __sys_sendmsg+0x16e/0x220 [ 539.643131][T10668] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.648235][T10668] do_syscall_64+0xcd/0x250 [ 539.652722][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.658599][T10668] RIP: 0033:0x7f428c78d169 [ 539.663004][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.682591][T10668] RSP: 002b:00007f428a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.690995][T10668] RAX: ffffffffffffffda RBX: 00007f428c9a5fa0 RCX: 00007f428c78d169 [ 539.699053][T10668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 539.707013][T10668] RBP: 00007f428a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.714992][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.722976][T10668] R13: 0000000000000000 R14: 00007f428c9a5fa0 R15: 00007ffc99218818 [ 539.730943][T10668] [ 539.733947][T10668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 539.741207][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.1069 Not tainted 6.14.0-syzkaller #0 [ 539.749858][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 539.759893][T10668] Call Trace: [ 539.763154][T10668] [ 539.766066][T10668] dump_stack_lvl+0x3d/0x1f0 [ 539.770648][T10668] panic+0x71d/0x800 [ 539.774540][T10668] ? __pfx_panic+0x10/0x10 [ 539.778949][T10668] ? show_trace_log_lvl+0x29d/0x3d0 [ 539.784139][T10668] ? check_panic_on_warn+0x1f/0xb0 [ 539.789231][T10668] ? cfg80211_dev_free+0x2e7/0x3d0 [ 539.794344][T10668] check_panic_on_warn+0xab/0xb0 [ 539.799262][T10668] __warn+0xf6/0x3c0 [ 539.803148][T10668] ? cfg80211_dev_free+0x2e7/0x3d0 [ 539.808250][T10668] report_bug+0x3c0/0x580 [ 539.812571][T10668] handle_bug+0x54/0xa0 [ 539.816720][T10668] exc_invalid_op+0x17/0x50 [ 539.821209][T10668] asm_exc_invalid_op+0x1a/0x20 [ 539.826049][T10668] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 539.831755][T10668] Code: 00 00 49 8b bd e0 08 00 00 e8 b5 63 69 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 9f 63 69 f7 e8 ea fd 10 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 79 17 74 f7 e9 aa fe ff ff 4c [ 539.851341][T10668] RSP: 0018:ffffc9000ea5f1b8 EFLAGS: 00010093 [ 539.857387][T10668] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 539.865335][T10668] RDX: ffff8880605cc880 RSI: ffffffff8aa8f286 RDI: ffffc9000ea5f128 [ 539.873285][T10668] RBP: ffff8880277806a8 R08: 0000000000000001 R09: fffff52001d4be25 [ 539.881244][T10668] R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880277806b8 [ 539.889212][T10668] R13: ffff888027780000 R14: ffff888034ebd500 R15: 0000000000000000 [ 539.897274][T10668] ? do_raw_spin_lock+0x12d/0x2c0 [ 539.902290][T10668] ? cfg80211_dev_free+0x2e6/0x3d0 [ 539.907408][T10668] ? cfg80211_dev_free+0x2e6/0x3d0 [ 539.912506][T10668] ? __pfx_wiphy_dev_release+0x10/0x10 [ 539.917945][T10668] device_release+0xa1/0x240 [ 539.922545][T10668] kobject_put+0x1e4/0x5a0 [ 539.927060][T10668] put_device+0x1f/0x30 [ 539.931218][T10668] wiphy_new_nm+0x1c1f/0x2160 [ 539.935900][T10668] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 539.942125][T10668] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 539.948610][T10668] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 539.955109][T10668] ieee80211_alloc_hw_nm+0x495/0x2260 [ 539.960467][T10668] ? __local_bh_enable_ip+0xa4/0x120 [ 539.965760][T10668] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 539.971383][T10668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.977262][T10668] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 539.983339][T10668] hwsim_new_radio_nl+0xb42/0x12b0 [ 539.988446][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.993981][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 540.001339][T10668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 540.008699][T10668] genl_family_rcv_msg_doit+0x202/0x2f0 [ 540.014256][T10668] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 540.020871][T10668] ? bpf_lsm_capable+0x9/0x10 [ 540.025633][T10668] ? security_capable+0x7e/0x260 [ 540.030563][T10668] ? ns_capable+0xd7/0x110 [ 540.034971][T10668] genl_rcv_msg+0x565/0x800 [ 540.039482][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.044484][T10668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 540.050030][T10668] ? __pfx___lock_acquire+0x10/0x10 [ 540.055223][T10668] netlink_rcv_skb+0x16b/0x440 [ 540.059976][T10668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.064988][T10668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.070262][T10668] ? down_read+0xc9/0x330 [ 540.074580][T10668] ? __pfx_down_read+0x10/0x10 [ 540.079328][T10668] ? netlink_deliver_tap+0x1ae/0xd30 [ 540.084598][T10668] genl_rcv+0x28/0x40 [ 540.088577][T10668] netlink_unicast+0x53c/0x7f0 [ 540.093325][T10668] ? __pfx_netlink_unicast+0x10/0x10 [ 540.098599][T10668] netlink_sendmsg+0x8b8/0xd70 [ 540.103523][T10668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.108904][T10668] ____sys_sendmsg+0xaaf/0xc90 [ 540.113648][T10668] ? copy_msghdr_from_user+0x10b/0x160 [ 540.119090][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.124358][T10668] ___sys_sendmsg+0x135/0x1e0 [ 540.129031][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.134219][T10668] ? __pfx_lock_release+0x10/0x10 [ 540.139227][T10668] ? trace_lock_acquire+0x14e/0x1f0 [ 540.144410][T10668] ? __fget_files+0x206/0x3a0 [ 540.149067][T10668] __sys_sendmsg+0x16e/0x220 [ 540.153644][T10668] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.158757][T10668] do_syscall_64+0xcd/0x250 [ 540.163246][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.169124][T10668] RIP: 0033:0x7f428c78d169 [ 540.173517][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.193104][T10668] RSP: 002b:00007f428a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.201498][T10668] RAX: ffffffffffffffda RBX: 00007f428c9a5fa0 RCX: 00007f428c78d169 [ 540.209517][T10668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 540.217479][T10668] RBP: 00007f428a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.226004][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.233993][T10668] R13: 0000000000000000 R14: 00007f428c9a5fa0 R15: 00007ffc99218818 [ 540.241969][T10668] [ 540.245199][T10668] Kernel Offset: disabled [ 540.249507][T10668] Rebooting in 86400 seconds..