last executing test programs: 29m56.345899516s ago: executing program 3 (id=447): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x106, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}}, 0x0) 29m53.864461678s ago: executing program 3 (id=449): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x113, 0x1430}}, 0x20}, 0x1, 0x0, 0x0, 0x24008004}, 0x404c010) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/199) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc038563c, &(0x7f0000000740)={0x0, 0x9, "119f04669489f733dcaa932034234eff3aba43d2103e2984dea6e200", 0x0, 0xfffffffffffffc04, 0x1000000032, 0x40000002, 0x0, 0x0, 0x3, 0x5, [0x0, 0x0, 0x0, 0xfffffffc]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000bfedfd49cc2d890d13f4861c16401adee38a33f0c9791992ccecc8d8f5208a9561f1495424e367918aa5dbfad1c8247fe528a783ea62863e4c57da030d3591a96cf7c7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000004000000100000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000200"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x1, 0x10, 0x4, 0x9, {{0x2a, 0x4, 0x0, 0x3f, 0xa8, 0x64, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@cipso={0x86, 0x34, 0x0, [{0x0, 0xb, "758663a83ca4757f30"}, {0x1, 0xe, "cda309bcc8b0951e607c4eaa"}, {0x5, 0xe, "c79e7e4acfa82d3bc07d1bed"}, {0x6, 0x4, "43c0"}, {0x1, 0x3, 'f'}]}, @lsrr={0x83, 0xf, 0x22, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xcf, [@dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x24}, @empty, @broadcast, @private=0xa010101, @rand_addr=0x64010102, @empty]}, @cipso={0x86, 0x31, 0x0, [{0x7, 0x11, "8f3e35d40eb01431ec4f431f95e585"}, {0x7, 0xb, "211484cc37b4d05eeb"}, {0x0, 0x3, '9'}, {0x0, 0xc, "b459ac897723f291ea4f"}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9f0000000000000060000000600000000a000000010000006376b4e8020000000200000004000004060000000f00000005000000060000000000000003000000010000000a0000000400000000000000020000000000000002000000050000000000000700000000002e0d002e5f002e2e00"], &(0x7f0000000840)=""/198, 0x82, 0xc6, 0x1, 0x7, 0x0, @void, @value}, 0x28) r10 = dup(r3) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) r13 = dup2(r11, r12) ioctl$BLKTRACESETUP(r13, 0xc0481273, 0x0) ioctl$BLKTRACESETUP(r13, 0x1275, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x11, 0x1, 0xfffffffa, 0xc15, 0x400, 0xffffffffffffffff, 0xb78d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x1229, 0xa0, 0x7, 0xa0b6, 0x1, 0x4, '\x00', 0x0, r1, 0x4, 0x1, 0x4, 0xe, @value, @void, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x35f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x21, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000b7902133ea79e5d9b7374257173208a3d28d8a", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000007200000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000c7b5060001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, @fallback=0x2d, r9, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x8, 0x2}, 0x10, 0x0, r3, 0x5, &(0x7f0000000bc0)=[r10, r13, r14, r15, r16, r17, r18], &(0x7f0000000c00)=[{0x1, 0x2, 0x5, 0x6}, {0x4, 0x4, 0x7, 0x9}, {0x0, 0x5, 0x7, 0x6}, {0x0, 0x4, 0xc, 0xc}, {0x4, 0x4, 0x7, 0x2}], 0x10, 0x5c, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 29m51.311161257s ago: executing program 3 (id=456): socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getrandom(&(0x7f0000000180)=""/14, 0xe, 0x2) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x0, 0x7ff, 0x6, 0xe, 0x14, 0x1b, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 29m48.276763952s ago: executing program 3 (id=460): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000000000000000000000001400010076657468305f746f5f687372"], 0xfc}}, 0x0) 29m47.912601436s ago: executing program 3 (id=463): unshare(0x68060200) r0 = semget$private(0x0, 0x207, 0x205) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 29m45.025889021s ago: executing program 3 (id=470): unshare(0x68060200) r0 = semget$private(0x0, 0x207, 0x205) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 29m29.475334741s ago: executing program 32 (id=470): unshare(0x68060200) r0 = semget$private(0x0, 0x207, 0x205) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 24m9.313192364s ago: executing program 5 (id=1420): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x24, 0x65, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x6}}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) mkdirat(r0, &(0x7f0000000040)='\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x24088854) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000400)=0x13) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e60, 0x9002, @local, 0xfffffff5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000010040)={0xa, 0x4004, 0x0, @private1, 0x80000000}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xf4, 0x6, "ccbe589c3b1b7395e7c7c3478624179cdec351c85738395523e55390f67277644a51c9a33e3a8408ff17bb8e1aa1172a031f7ae65f4fdfca6ce141f992d4656196326ecff46bb7ee27a998b057908226a21f88329260deab402ff1a253edae6193fc282d27ae682cd7e11b1ee6defb5b29809982ea83f51f1827a13cc3359abd23650d7e2dff7ebf490f297166b6466cff09657648d292509bd19ff51fa2524ec6a378402c05c4765cae32e78e3b1bc59d5015b4334897b24ab064a4b9cde426291e0b439eb52c57f6209fec3dd2fb7d23a962719d693210f3477cd487aa3c384e64038ec2b701e6b24725652b0059a3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x170}, 0x1, 0x0, 0x0, 0x48000}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180080001006c6f67001400028006000140000000ffffff7f00000000000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24m8.447020423s ago: executing program 5 (id=1424): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xf0, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xe37}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xf3}}]}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xfb, 0x1, 0x1, 0x8, 0x8f}, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x3, [{0xec, &(0x7f0000002240)=ANY=[@ANYBLOB="ec03bee4ddb2c50f303a856b895e2debcb7ce37b6bd76d982e2fc53e375c56fa80584d76db4783a2ae7beb372a2a0959b5f2de1e6cfea9a72bfb0dd71b42ef9a4aaf09001f1f98c358d4a30da02b9e85c418269282d3dac7ade45199e7948b6f867b716756e0115a6b5024d02569064081b0d496480e161d28c31b8ce92d3b1a072afd1c4f97586f146815de10ceca3cf29f2b8ceb18a960cf716f3c86e1bc4ab4e579e6bf9a1fb40d15c09f566cc17a752c4218303327da5d2ce6217fa4225ba4146d176f91ee1b4f3b9bc7dfe2065cb34a8a0a39983404b9a83226183e6fdaea7bc4ce28b963f9d83c7b90"]}, {0xea, &(0x7f0000002340)=@string={0xea, 0x3, "9cd42596fb0aa435ef1133f76175ec28fe324d08e9f55ad783bba5c0394c3876ebf889ea46ce7d73d83154a95c6fb1248abc326e4875e7472506fa09027685dc1de920ccccd288b6d0cb1264a48fd2f4d2baac8902cae96a8fedeece9b6ce10c8f3c74bcd834d7be9aa9291b8c9f04d0b7f0d9e502a421d4232d2fa701609c3fd419f1521d539c13f0a0d96fe9e82b9b34d6ca83bcd66d8f9c509dd3c6c9b87d5f52c5e71cb75d2af26250ac71b068a861d755b1593bf32755854a86d7193febb68128f505e4dae70379e215d4b91493a7ca5f42c000c3177a6ed9c3c4d04753530ceb00fc664c71"}}, {0xdb, &(0x7f0000000400)=ANY=[@ANYBLOB="db0317bb4da9a6a60133af8cd6153beb029e1dbfc92cb50aa698875e99cc524847beadfb6f919d56a5b6991db280c7337d20724a4b0701a1caa31b9de9e7745df649bf1aa5a416c26714c9154a67c1b066bf4720fd5c9f0275608ecfd4de9f0220c662885c502015b6f2f6e5b3a18cd2258ee556233e4da63487c8349086a2e325b6533490098de76026ce6e4021bb0e050f99b44d20526e9e4407f81f15b27aba8acf4c9b6c45bd703c4f03e96c6603585a1d972190cd99a1f54a8edbd80499f242e08e13f43681657d988aaa27b815b564032d6952e507b57ab5", @ANYRES16=r0, @ANYRES32=r0]}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/100, 0x64) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0x0) ustat(0x801, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r6 = dup2(r4, r4) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x3, 0x1, 0x1, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5", 0x44495658}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) 24m5.345393109s ago: executing program 5 (id=1435): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002801400"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 24m2.258940455s ago: executing program 5 (id=1440): socket$phonet(0x23, 0x2, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000880)) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0), 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="063563e42521"}) 23m58.840128453s ago: executing program 5 (id=1446): semop(0x0, &(0x7f00000002c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x6, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x21}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@bridge_setlink={0x24, 0x13, 0xa29, 0x3, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x40100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0xc5, r2, 0xfff}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cramfs\x00', 0x2008006, 0x0) 23m55.048471325s ago: executing program 5 (id=1453): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200100006e61) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x3b, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x801) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) fcntl$dupfd(r4, 0x0, r3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048a4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000004c0)=r6, 0x4) write$nci(r1, &(0x7f0000000840)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xfa, "b0b2973bf90d3102e468cae640c53ae426c761254e597bbbaad6a558654acc16e359b45c0f738798c0e6357d91a0ad21186c09a27324dec5a60f1a9685299d33b9249c7b9c5f9887d78ab08961127bfcf3ef8cb1911d28c35c6d4ec4269291f645a66bef7a6d01cf6b25e0b60b2c7c35def97ca882cbac7c918718b5801e76b645f3d2a65122df22bc95f2435cdd1723da6310528dd363e01586250e29df9235f3683e5b747778e763687495e7d3076babb1f3dfe414d9148948bf7793ec0a11e3de75f9fd96d011344ff60f6be69b2a15b014733c81cc4dc1b1c7bbcdf32f31703c92680d6f05630a2017784e7211744e716c12337c95ce1501240c470b3e55b4dba5251a09e05fd197fa8de8d8f2f8ee60a56f3c1d001a345a64aaadede0a7ee313d293048723535fbcdf1695eab1294b09af6f17064f366a660391c1dc388373aeaffec629864599ad0e309f8b7427e48d37867f1ca0b77b3a5407265c348f53320af602b0eef8371775779eea29f660d07f690202430dd77f6e644d1cc1d26d4635e1a57d1235c6540bf3765274906f9cefdf52bc32e2a9e58cbd08c169969ae70c237263093f465a2414e48ca1df8ee13c7bd4b99f7aa5301d2dc3fc281ce2f472a5ba57a6246b7c4f65944c1f689ada8d963a3385a947b69e59f48d83eb0a4242b53efb63fc38b683f552561614039a06081c2bc644e9fb8ed82481b14c34afe607dd1ed650f84f4949cc46321896f1eba7ad83c68bc81fba1bab82083d697fdb19f014953c1b7a2c01d177d8a1d22dd84e3ba10601200393903c13c94dfe1c0844eee164af6bd4cb75823861f978a0266717416d9349bdefb5f2c5e68f41584cd8698f3af744299e606ad4aea1056586f08dbe7b8c629c9dda1450586f81a6a176a18b8e51712f58786f1f2e48a2f77d782f81d783377fcc6e8d598e16da3746b5d8eb29bb9db28b9dd4c880988f56001df60e98c014329c9d4df3f0fc363de8d34bf1b041d8b090cff5875a07a4ad8caf508220ce95f6d4415cffb06ea5c54fafb43c5f4f087bfc5c3b76bb2a1c1f7b1feb7d0ccc6e999921fe75b54c97e9515d7f9a920ccc3359fc089b4c7c6b629e37556e677aecffc8881a6d546ffff681b504ae970b8b390668756e33634eb0a39336b4e0b04897270b34d48eec7af8aeaf4e91e1a802a7988ac15368b054bf4f300e4bc2b4b1ac993c397793afb3caf1c6f52d3e8712f29c7d352254dc89985c0eb87b32709d8ec47d4e754381b4d8088b87b111db4931b323b4d57993693115b88ce0b1f8b774b11a549792a1f742e633a1a5d7712035a06bea017162a411cdc5c28992a4e5f1b9b1fa1957e3ca9a5c12cee506dfd799aa2b7767fa61dcb5a6eae59f0f87c13714ddecb769b75dea8f222c72b7e722a1ea5a93c190100b8594a25be72ef9348529052d950d56011832fd72e4bc431682be8dbe9055343dd45536071f15473cd9511df820b82f60de18589f0b82c2f72c556cc429d5ff4a8d8ccbf88a47eec229830ae5f9494db58165e29eaab12976dc9c89515ae8927680f0bacb04d6cba3917fcd0c829f9d504ac71c5ed4acbb040af655826b802a919f629f5acba8f696cd0e480f3d6fce4c64b24c134da74dfac990a5e5271715af8d26342c9db231dedcd1ff477e1377bf617604a9f1802dcd82fa4342b6911b421da9fd750f49112f1feba321c090c2cae0fa2754fd70e6ce8452148698ba5d49518ae9c14a71696c6563ce8bcfc78c087e3c486663e070b719bf73ed1b000cbecb62beb403f5ef66ff0077a421e87a57524b7d8d85a2bcbbc0230dcdbe3d9cac112638fc1ba4d075a31ffc71af9c9b7216b7a127b760edf7cda946a552385cdcfd8d68dabfca28b9cb7da25c74987bb49a2d40f847d9405ace75ce81a123556d2091515f9b671fc31ffe8b0f16a7807bd7de70555d01a2fefd9d885858ff0b0ffe821c7ab65f89aadc8300c2d6db80212354674de1c7342fad2573a642a0ae7ef007f901040dffd521c4d57a7403820e5e3c64d60e35b4e967679342b02e7836fea174406cb641da56cf23bad66654d643d4af2aa3965c03cb9d20c5769d2a6b16efa292877e0e7592f19099da2a7f3541dd129ae315ba9b1f991894056330bd2e36b939285ca7f57834041b8fccf75f94ff04548b752625075afa8915848c8c15181df7202a88ae65721d171591f8370823f51df2eb7c6a2fde97547c11694119019d30374f32250cab960e0f0986476c2fb9eb92a6fcdaa4161173fc949401593c793817410dd583c3a3539ef7347d902e14361bde8da2719dad1b544ae564d11dd59f7a944e8c501b85b910785fe9184711280d7946a60039573a98d6161dbdef4cf185d0995db2b81b7cff80563fe4d29693b23d84cc71ab262053067a030f18f779acd9e94659247415e24d8eb2fe0af058ed27ca4cc0bc419f4b0107f448e32f6ac3aa2d2902039c6e2534e99f2d6302f049d578d80638e6b7a0efda0c5b8609a04d24e4976d1ee096b77d12922322d0bab9462a3affbb86babc9b1f0509927413adac944610ba7cbb29e85f6d864c6d0b6806e90d0089f8b5d172eb49c1e1f53f8f5c47e1cdfe5a572c0819e78d61680120b7f65bd48098a10e0bb851aa1ad3bde1820debeb2bca335c66ebe64cc6b9fedad3fcde08819161812ba345a3d91a2feaec5420c27e1f5cb7ffccfc1c82459cf0589c1c2596b0e7e16d455d668111d0e236331223b295cbc3048aa03afee794cad63b57d37139bc9054fd86c13632220ad1f094cafcba3cd7e38251d18f7e548b5fd8e6d3e18ccd04ed5d7d351a85a6b866d296dfd17f286adb322b58b021113207d9da4e85b9df0ed3b3d997167406fe39ba9a9ceba36abb22fe2838c05c17e5f20e5bfef05190c53fa40143a7733d60fb2070fa23766d11017152d9b8bd27a9f9b06fe3317ff3584443765d28def489767c7c0ea113c2d050a82d26d47cd85549f7678ae6825fba5cb5481e469a905dc8ad7e8fd8ac186df56b5d50ae7f6f2307a71536d5b4efc7d8f3010e5abdda295382624015a8b7038952ab69a8f71d0b6746840f59c28b6e1140e60db9b27cec328da8b7cba4bff177b4a17d206cb477ef00e728352682606715e3ecb426fee5d8abbf2b76d4c8b3c4d28da4e57c5e008884722268081e87bd48636fb71ee8f8c9dc28f2699a9d3564c665c45642832fff1cd2d0270c17fe80e8e00a95a1b6e1db559c8259f2b96f550398bc2dba363483062c45b30c06713535fd31303a08e1cf486780631633ee53e2a20c440050653b47e12d4bb2b16e18f5ca36091380d1d712c2637f9fa52841d360e9501928c9f24e82b4f568c4b2aa5d03b33084b9fd49d154767b8d49dcdcfee86aeef153e687f3ad3a068358b37cfa64ffc4c21d1bc75db7cfb390dec82746794d7b6625d1126082ec38db7a39eed3148d5ee886795359147269b0fe838808ce4765bad324e28e5239406ca2cba9c95ebc50de4e3685cafc12e27882f94c4d52aa96b2f1d2d2a6a430cce865f4571a7666cf15573a64b946e031b4b00e44b964e5a5541f4184d601cfb3417c0a8ab23cf6d62724b96311309565f2df2c893113dee23a6c8d1d23291dbc16930e5cdbd4defe5fb5083517c118ffffe3ea0397178caf84b558baa62c491d202b113bc127cc81eab8c737d217c2ac742d8ca0344e7a672a5588aba161482d5e9e78dc1b7a875d670752749ceb6e586023e7a0d295c40f486abc0b95c054d81c427980de328fde2c624f06f8fdc0a063a46a34dfd42dbcfc7c06cc2730f94fa6f9230b9d93922c6fffac5d8e7f24000babcad21c09f90a373dc060cad3fb04c97b5b48c01704e20618abd2511e2ad558daa837071a0d3bb00155edab01c1c7d2406bec4d4bbd6860dc455534e6c9d983ebef5702741f5ddc20be80e8c8a0b2cd22d14f2ab71ea8223041cf2d8dcd647332f3bf3c2f5d539aaf13ca4a3975bbf85336327d1dc7f5e1104538dc5eafe284ca67d0ea80ba4b4c604d9cb74a29210e77913276f6ce9b988d8f34e3a895d3ba658fd7a1857e0f151ab7e41aa23edeb472be65804ee42c2e0c20ee3833cb4ad6bdf37c74d7a831839b8a6890d2ae6a6ee1592dae13c5fe083a3a046326337b0bfa966c32ea76903e919d86f826498351d1cd6fff15ed313dce43298e9ab088e4df3b067c76f3ab4539f1ead033748cc4ce5627d5cf3a7db4247791c5415f784e96484a212b060635ec90af7f8b14be3e1c57a2abf6eecf48cbd8a3a57ab552a69a67a2658ac7239e41eeb5e8212f9553bddac27b8fd307d4557407955b2251b150aaea0d722cc98b4712d01156de3a174eeccd1df8702ba1c134deb65d2bfe4ee1af739527b48af7c3f2ebed0d2b985889217257414fcfa286c4f6e3977bedd10cbc5a976cac22bada126536a35be75fb4e04204a86ba533de7dc924a00821add10bff895f312e98bb29541755efd1edd51adf5143d607e69bd0a229b9c29e5e48e4e0352ab35ab360e4e020ac3353961d366783ff7c614905d97f9ecac2bdb0ee7201ae798d0796c669f48ad6b80f276dbb5670f3c45ab297be8ec63e9bd4b0bc6f38bd99de72d870201d622a196bcac827268cb109327884f3899d302b8862a8412776c9a3db4b4f980fe49eba6c4bc9a6054607a737233a9f7d351c213b411e9fe6cc649a0a35a4b64eeb905febcd0ca97b01125432d2371973ee4c3c3714bf75f3e72b24303cf7bedfd07824fe3eaaddfccf529025574d1937d2b6e6af7447d023f676af2be06107adbf845a4910b25be701a604ce530c993ff30417df2a53741c61620c06444798c802aa6c0084d403791d4155223edde3f5b2c748749c45b605500b9f2268242887ec52dad115ff8b5be703c64be84295d888c68fedb915f4e7fd020e918bf0e9e411dd9977206f4402409295ab13b7b4a22846218ecd2aea203e192547f64d005f6174a8fac609da1d4c8397e6ad12749333a595255661245a11034137c4061bfbbfd6b38d6a2008304d640ae1a98e69269a9527af3b86c0227c39b2fc6115156fb0a998e5f9a74665b5f6e24e3ebd468b904b18ae821556da9607189a1f72d688ff030a7a436c5221fac5ea6d0c05ab544a95dacb98a65d338796762e6745f30158f25c3a6d5f0a5bb3c97e83716478ad08d1e60b99bb9c59593e7f900575ecba96c13e2f1e17109214e19dadd779265f152e98bae224579890c1dc4ce631c9d102de5f90fdbdc80d56afdb31a92d2b0c2f6840bbddd24a12b883368125faa7dc7be4adefa2a968098068a7426ff9ba0e942a0f37482c6ecd6181b13e564d1bcc0818180f63d80a3b7404111be3c6ff3a092402f743aafa1f480fee5b4791f2a54f76f92b429cc8b8598d749a3d9d75bab67294646bec21b6b9ca6b91b80382f3fd52945f1ce6dd4116408475942fa3eb9e5c8e499268dff40f8479cabe6ecab8a5b9a6d366b93bd38baf49812f130c73c92a8b6d128493d8ebaea135bca4159fe304f226854eab933b3ecda95906b3381d8a3dad58fd35d6c04dd3b42837b3544d58cdb3084326ad7bbd6141d72ee9cb06d2f842de940af7bd3921caa5865906d74a2cd755b01126eb20e7238a0f699c97e98dd3d8dde1be73f5cbcb92b0dada9089a1517e29b95bc8cd51898dcf3a9ad093b3c83326c5d96b8c6efb9a08b1bcb9002a840b5ba57c1ec6b3f00c4a42ce93408cb45519dd5a47032689400c5edb8cd3f518e6cef6e1131e5bc69ddd6a7b6bdf54b2414784c5b"}, 0x1003) 23m39.175535906s ago: executing program 33 (id=1453): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200100006e61) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x3b, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x801) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) fcntl$dupfd(r4, 0x0, r3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048a4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000004c0)=r6, 0x4) write$nci(r1, &(0x7f0000000840)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0xfa, "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"}, 0x1003) 3m0.67283626s ago: executing program 6 (id=4672): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0x20000000) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m59.953963588s ago: executing program 6 (id=4673): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000013a54210178cde5a2d7cf596c791bff5f5efe99a54301b0ab61762dd1323cbd465618506e94f587bb9d7feaef335fee7f5b4743448df73bfecea"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]}, 0x7a) r4 = mq_open(0x0, 0x2, 0x1, 0x0) r5 = dup2(r4, r4) mq_notify(r5, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x10000000d000, 0xffff1000, 0x8, r8}) r9 = socket(0x40000000015, 0x3, 0x0) bind$inet(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001340), 0x0, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x14f) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='io_uring_register\x00', r0, 0x0, 0x40000000000000}, 0x18) r13 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000f40)={0x190, 0x0, &(0x7f0000000d00)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x29}, @fda={0x66646185, 0x4, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/193, 0xc1, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000940)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0xa, 0x2, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/149, 0x95, 0x1, 0x5}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x28, 0x40}}}, @request_death], 0x0, 0x0, &(0x7f0000000f00)}) 2m57.314490944s ago: executing program 6 (id=4680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x43, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "0400000000"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, 0x0, 0x0) gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{}, {}, @device_b, @device_a, @broadcast, {}, @device_b}, @a_msdu}}]}, 0x54}}, 0x0) 2m56.240309234s ago: executing program 6 (id=4683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e39dc4509df33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) 2m54.215552616s ago: executing program 6 (id=4690): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") 2m52.847833876s ago: executing program 6 (id=4696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 2m51.53750848s ago: executing program 34 (id=4696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 9.32597539s ago: executing program 2 (id=5153): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'wg0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) syz_usb_connect(0x0, 0xe4, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYBLOB="c51e"], 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000001dc0), 0x213, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x74}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a0b"], 0x26}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, 0x0, 0x80) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 8.783664298s ago: executing program 4 (id=5157): io_uring_setup(0x2f8f, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000240)={0x3, "c7f61ee229895a1604e274a4875e169bb4a12a8cbaf3e24c0000000000001c00", 0x7, 0x400, 0x9, 0x3, 0x4, 0x2, 0x7, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) fchdir(r2) unshare(0x68040200) 7.804444012s ago: executing program 0 (id=5158): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xda, 0x31, 0xf0, 0x20, 0x2040, 0x4901, 0xdbef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x4e, 0x13}}]}}]}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x200) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000005c0)={{r0}, "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"}) r4 = socket(0x1d, 0x2, 0x6) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x600) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) sendto$packet(r4, 0x0, 0x0, 0x24000000, 0x0, 0x0) r9 = dup(r2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mpol=interleave=relatZve,\x00']) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r9}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040120c3000000000000001090224000100007bc11dbb970000e90300000103100000092100000001220700090581031a9c012dee754bdb399bda07f4f6072c2353445de506b586523dbbe8d5bfc3a77bcd1c60f7a6784bd1226417afd866b4f7842b47fe1e1fe3191ac48d50938aa460a8b02b801acc6ca44d5087866668ca88"], 0x0) 7.610113729s ago: executing program 1 (id=5159): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x894c, &(0x7f00000006c0)={0x18, 0x0, {0x0, @broadcast, 'pim6reg\x00'}}) 7.4846814s ago: executing program 1 (id=5161): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept4(r5, 0x0, &(0x7f0000000100), 0x800) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xf5, 0x5a, 0x1, 0xb, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0xff58, 0x1, 0x805}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) 7.035134227s ago: executing program 7 (id=5162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000380)="6fa4bf90aa8a2fa38a8f6c8fa168f069adfc79fefab38d472b", 0x19, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getpgrp(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYBLOB="0400", @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 6.502811887s ago: executing program 1 (id=5163): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="f3000208"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000080)="000100000000") 6.379627771s ago: executing program 7 (id=5164): io_uring_setup(0x2f8f, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000240)={0x3, "c7f61ee229895a1604e274a4875e169bb4a12a8cbaf3e24c0000000000001c00", 0x7, 0x400, 0x9, 0x3, 0x4, 0x2, 0x7, 0x7}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) fchdir(r1) 6.378648962s ago: executing program 4 (id=5165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r4, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1d, 0x5, 0x9fd, 0xa83, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pipe(&(0x7f0000000100)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0xe0, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_AF_SPEC={0x88, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x6}, {0x8, 0xe, 0x0, 0x0, 0x2}, {0x8, 0x1a, 0x0, 0x0, 0x200}, {0x8, 0x1e, 0x0, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x0, 0x7}, {0x8, 0xe, 0x0, 0x0, 0x400}, {0x8, 0x4, 0x0, 0x0, 0xfffffffa}, {0x8, 0x4, 0x0, 0x0, 0x5}, {0x8, 0x0, 0x0, 0x0, 0x9}, {0x8, 0x1a, 0x0, 0x0, 0x4}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0xe0}}, 0x0) 5.792624313s ago: executing program 4 (id=5166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000013a54210178cde5a2d7cf596c791bff5f5efe99a54301b0ab61762dd1323cbd465618506e94f587bb9d7feaef335fee7f5b4743448df73bfecea"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]}, 0x7a) r4 = mq_open(0x0, 0x2, 0x1, 0x0) r5 = dup2(r4, r4) mq_notify(r5, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x10000000d000, 0xffff1000, 0x8, r8}) r9 = socket(0x40000000015, 0x3, 0x0) bind$inet(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001340), 0x0, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x14f) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='io_uring_register\x00', r0, 0x0, 0x40000000000000}, 0x18) r13 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000f40)={0x180, 0x0, &(0x7f0000000d00)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x29}, @fda={0x66646185, 0x4, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/193, 0xc1, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000940)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0xa, 0x2, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/149, 0x95, 0x1, 0x5}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r11}}, 0x0}}], 0x0, 0x0, &(0x7f0000000f00)}) 5.731707849s ago: executing program 2 (id=5167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xffffff4e, 0xfffffffd}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000945170d800000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4080) 5.649322412s ago: executing program 7 (id=5168): openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x541, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/24], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.470390345s ago: executing program 0 (id=5169): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x6, 0x2, 0x0, 0x0, "000000ff00070000000900", '\x00', "05030400", "e859ad33", ['\x00', "00000008000906000000da00", "0c000004dd372a9000"]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000814) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x191800, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x41, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic="1da4"]}]}, 0x1c}}, 0x0) socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x5609, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000040)=ANY=[]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) 4.188134549s ago: executing program 4 (id=5170): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xf5, 0x5a, 0x1, 0xb, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0xff58, 0x1, 0x805}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) 4.131910225s ago: executing program 0 (id=5171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (fail_nth: 2) 4.084469671s ago: executing program 7 (id=5172): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/9, 0x211000, 0x1000}, 0x20) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000003500)={0x0, 0xf9, '\x00', [@generic={0x0, 0x7c9, "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"}]}, 0x7d8) r4 = getpid() sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lseek(r5, 0x40, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=0x0) ptrace$peek(0x1, r7, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000fd7f03040000", @ANYRES32=0x0, @ANYBLOB="0000000040800000240012800b00010062726964676500001400028005002b000300000005002a0001000000"], 0x44}, 0x1, 0xffffffea}, 0x0) 4.027785051s ago: executing program 2 (id=5173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) read$msr(r1, 0x0, 0xfffffdf1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001e40)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)="711a4730e9add4f33b343c91b5a0868be4193acff45422f8c450913a83bd8a2bef1b9bc8", 0x24}, {&(0x7f00000003c0)="cfaf071a661806f7dc8126d4ec3c9707", 0x10}], 0x2, 0x0, 0x0, 0x400}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="e93d2b", 0x3}, {&(0x7f0000000480)="019f6b4bce39fd4dd43ca1d7208bb261045729d6815b3e519be09d0f4214c18048e78127dd1fcb0b4ca929ad26b50eaacb392e59c86a8c8dd1a32a2b043ab71d2619643635391ca6bc16dadd1ec6bf6296841a44a169a31551de773bd96071ceb85df7746bfe6e98ac549f84fbb3144dde3d08374288f92e11ccc1b77f0dc8c4d0dd59dbc04d908130f4fb7c4227191cea330a93b8ff65789da8154afa4ccdb3428dcc7f99b5c93d343e822afb94a3139abd1cced8cdf877746f58eea3c9d7ab91", 0xc1}, {&(0x7f0000000580)="879abf5f259654ef57a8da343478b4b25cb22dc07ff2e93481430902b718a3c9b9745fa973e705423316bd6ef81162d4e5ed74378f6c4bc812a7c4b11206db3c19c427da9545ee224da87939b15474fc38b1bc2d372b5a7abb644b0beedfba92cd770bdbe72e057df045e12c20125785f5b596b85d6b73e1de710a2a1a866e97e2196ea8175f2a59c55bcf862a1365aaf0f23efc184a5ea7c8cbb0c6c3c4459c8bd08cefc2def726e6a475ca4bc89ce21cc65d15a62da17e5dea97ca641f381de878b610d9d1587278773bcf10a67913b4fc32861eea7c", 0xd7}, {&(0x7f0000000680)="84467da4adb6167e315129757420d074544f7118f703582bd4f4edf541ced35b9db1dcdb7a5ba16b1233c51a5719be98e7665372c28cff4520febfa4c9148c4ed345a71525eef85ce89bb67249a6069a019782ac225594d3f09f953ead903397facb700be7977501aedf2030a6712ec29b213f818f00ad330b57c44219e25e82e50bef51daffe151eb8c228b4e533f0bf6868eab69e681e912d3f8963fd52df75f4844270934071b8a82f4", 0xab}], 0x4, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r7, 0xffffffffffffffff, r7, r3]}}], 0x28, 0x4000800}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000840)="6f55ebf12fd571758d55a5c1159ecf75da05860c0497ace27112db7bd18e17ffefad52d4f3f941bec6e2524a60807f367240f218c1ade0c39fcc1fff18c92337dbbd6b309fd8e2f9d10b61cdd4712a339dc9fc8757088959b4929624b55856189444609ac91dd5fc48507d059cd16d025c4abbbe191922a472b0662e113157ae901c831dd138ec50befe25fe5a04370d094aa4100faca384", 0x98}, {&(0x7f0000000900)}, {&(0x7f0000000940)="dc875e22871e82c9c9998914d71930d296bed42190dd293dbfc4340a09d9c1e4398f4274b94c9fbf8920dc5b805c833d092698f42b8c7d4133e0d19b1aaf53dc3ace1c7fbe1fc6f52bb737d364353183fd60003f88416078776e2fe69f9b86aee74321040c5997a743e8ed56b45a897eb5d4bbf9be0c4ed7be84fa20fbb9c0aad2e24ec6acc2259b67244585568ca21f", 0x90}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x20040004}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001040)="7f04c28b42c6b211c0a6de59dd861a46663cb8245e80cd315809687949143f9c798db96bb760e874fea12b2d9c9e9cf4b350de640c1182c3575f", 0x3a}, {&(0x7f0000001080)="41e7925d8089b21cf61bb805092d7972664f546d", 0x14}, {&(0x7f00000010c0)="f82587c5bbb9540099ce0064885d509921707f15870210103d262b64e375a1ec18", 0x21}, {&(0x7f0000001100)="b795d032b375f468dd8f43e2e4ace86352f0def16b2520299b24aacb79b29a42a0521408d640952103f418982da55859df1ab5b44b8875bcc0a519af3836f90bf4d3", 0x42}, {&(0x7f0000001180)="05c5b4bd968bf51c3c8a3307b7163f840b6c581e290642a94f33ef761b4c7941052f7ff7434241024eeef8114a793a4ec415458541462eca07ea8e2f7f4218df94bdec4c2d3be959a8d5f67fb60f28c4ee6b8a7895d0e446c0904c28a3a73e0a343966e8500099b82ff882bcb8800134cd922bd4926342af638f757b611263834a3d4cbcfafee8f0905db5fd64", 0x8d}, {&(0x7f0000001240)="eeeb6b08900f90eaa5be404d0d15d8f7d99085dc22317122f8aadf6b189faebb92344a325acd836273ae5e5a88a81ddd93f696d9f422eabd7f5910475ee568c6e4579b309e1bb8a9c33c3dc245a48830ad6e3e59a71cf26c9671c58911e4ac29bba0e08623e5f43beeb6c09025948e4aadb1da6819f1a376c3456bee8ab02513466dd8034e36e65aab782ff0fa0882eb5ca307fe231a90e099bdc9874e4c4c41d66ad38eae87c29eb38df24fa725cd10e6cafc902a7a3bf1", 0xb8}], 0x6, &(0x7f0000001580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r7, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x128, 0x448c0}}, {{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001740)="f462b97028a95f77c4b2be18c53e1e38b40af8f6463df907a4bf60554feb9d3d5089d634fa3bd08676a16847cd8d85e519c6", 0x32}, {&(0x7f0000001780)="bbde75d819eaa4fb1aaa893f40165971e18ff6dbb7a238fa08bfa59fcc2a6f53a9b07d31d7fbbaf102db15b6aac514286e030da53e936f4241cac7ddd5f875616c5533cb0d633e5ef9cd417b80204c733e63cdec56916c00e63e3914f27de7528b78897e5d9bcd4821e41ea3fbbbcf06b324cc8a", 0x74}, {&(0x7f0000001800)="318f8ff260241a846de1edad015fe4a2d3779d6e32000ab8d9e36962941e3d50fe1564103c97fc6636c43e82fe514ea7e1b48b7e115534239d3ba727ffe13e03a70d5f5bafe93b7cce0c6cf6937497e027a0590ed082b6ae82a85dd5fb1ce9ce01155b2826cd9ef00800b539eb1dabf797681b", 0x73}, {&(0x7f0000001880)="2d1901854e6690261e32f4873de0281250f17bdc25d9c4330e2f2ffd344a88bf863fb9adefb6c6fc7d01cc25a8c64e303926349e8b78599bba4d570896545f39fc0c846b0fa09709754314b54eefcfa607748e7a8242cf2f91f949345ded081f4a7cb940ff3e7adfbb5dd6e1151e2d7a72371f576eda3a26b86a19e39c76f968caa07120e862b14bf5aeec5bced8f1a56e8a5744e61f7ed0608ef63413b748b668b5d3612f29f326ca9b", 0xaa}, {&(0x7f0000001940)="69f3cce07b78ed322014a06f8e55fa5916dc97fab872daa5d5e1c88e0f783c2e35d5cf200437021284616d8625c588d244e4589c1b07bb0fd27cf6a1cf", 0x3d}], 0x5, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78, 0x4890}}, {{&(0x7f0000001a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="412bca212894fb3757642895cd68b8e9141854badcba1e77a50c707594336e08597f4d44eb6424337c96d7315c5ad231909e27b85ccf9c039fe1b8b4547a3368ffdc0afcf468113160987446dc767a42281f239758b99e086ea3660744576e132acab5d706208c5c3db4ed7f00db16ba8ac2207b87d2f5d177f8250b32c229fbd03298c4e6", 0x85}, {&(0x7f0000001bc0)="d0d194f2c4011c1744e68b80dde97e6bc7f8a96285cd016dd6104ce8a7d2fdf48c7131c898e403da7e2a534c6d931bb1c99755ded538c42cf267a65cbc19a2363a8bb36c274e7cd5d56650dd2047b985996a0782a526a7e54d2ab6bb082de8753f305c8959c23624aef01a9cfeb73f2a8a2c48117b9d21bbf00b88d72dae0410d8bee50a21670fdaf3b43b0aaaec96325c4b37ac28b7f4452f0f2653110a2dd7d2f9f16e2d4d166f292a8232ff354c789f1bf56c9f7c4d6c632ed7edc80cc3e9d1b5af6c2c1e5c38fcfc989b83456a4723a39810ca79cd3f77fc", 0xda}], 0x2, &(0x7f0000001400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0092070000000000d095dbae884d032e84e4450ec30060aa4ffb7c5a6bb1dfd6a175c0d80a4e800100010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8}}], 0x6, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x1c, 0xc}, @val={0x1, 0x0, 0xb, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x34, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @generic={0x0, 0x6, "d5883806"}]}}, {"103eeaa85a5fa70d814cded8efe3b61740fa14b1362d17aac08bb1c0f82d074cd59cb9d93ce4f59db988ef42685d2d60ba79ac83c631ebb0d7cc0a86790882bdd56a37d9911e2aafc0034ba95f080dc841bc3ed293443b4ea6e7c0d0f51e8ea8e1066828bd853e5f7e33c09cf72b6b72e0ac3945ff356df6"}}}}}, 0xba) 3.524664567s ago: executing program 0 (id=5174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000380)="6fa4bf90aa8a2fa38a8f6c8fa168f069adfc79fefab38d472b", 0x19, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getpgrp(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYBLOB="0400", @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 2.75279384s ago: executing program 1 (id=5175): io_uring_setup(0x2f8f, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000240)={0x3, "c7f61ee229895a1604e274a4875e169bb4a12a8cbaf3e24c0000000000001c00", 0x7, 0x400, 0x9, 0x3, 0x4, 0x2, 0x7, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) fchdir(r2) unshare(0x68040200) 2.610751682s ago: executing program 4 (id=5176): socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000679000/0x3000)=nil, &(0x7f0000cbc000/0x4000)=nil, 0x3000, 0x2}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x91642, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) 2.040407495s ago: executing program 0 (id=5177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000013a54210178cde5a2d7cf596c791bff5f5efe99a54301b0ab61762dd1323cbd465618506e94f587bb9d7feaef335fee7f5b4743448df73bfecea"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]}, 0x7a) r4 = mq_open(0x0, 0x2, 0x1, 0x0) r5 = dup2(r4, r4) mq_notify(r5, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x10000000d000, 0xffff1000, 0x8, r8}) r9 = socket(0x40000000015, 0x3, 0x0) bind$inet(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001340), 0x0, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x14f) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='io_uring_register\x00', r0, 0x0, 0x40000000000000}, 0x18) r13 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000f40)={0x180, 0x0, &(0x7f0000000d00)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x29}, @fda={0x66646185, 0x4, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/193, 0xc1, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000940)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0xa, 0x2, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/149, 0x95, 0x1, 0x5}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r11}}, 0x0}}], 0x0, 0x0, &(0x7f0000000f00)}) 1.896587346s ago: executing program 7 (id=5178): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32=r3, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc004ae0a, &(0x7f0000000080)=""/1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000000c0)) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) 1.837033542s ago: executing program 2 (id=5179): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x800) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0x40000022) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) execve(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x6185, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) 693.12553ms ago: executing program 2 (id=5180): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x2010, r0, 0xec290000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef02841d2c5100b331b07f91efab2", 0x0, r1, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x4006, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x8ffffffffffffffe, 0x2, 0x4, 0x2, 0x5]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES8=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000c4000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0x4, 0x6813, r7, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f040001ed04"], 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 580.534148ms ago: executing program 1 (id=5181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000009d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000009e00)={0x0, 0x0, &(0x7f0000009dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1800c700080335eb"], 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 288.629074ms ago: executing program 1 (id=5182): openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x541, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/24], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 211.605968ms ago: executing program 0 (id=5183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xffffff4e, 0xfffffffd}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000945170d800000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4080) 202.876101ms ago: executing program 2 (id=5184): keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206a05c4000000000000010902240001000000bb000904000301030002000921000000012202000905810300002000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="f300000000000000000000000000000009000000662200ed970c3db35cac820029771e1518e8438dd61ab781c3ceda99405c4c14e2", 0x35}], 0x1, 0xfffffffe, 0x0) 36.565717ms ago: executing program 7 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "040000"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create(0x1) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{}, {}, @device_b, @device_a, @broadcast, {}, @device_b}, @a_msdu}}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=5186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x2800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x412081) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1f, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) fsetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)='syzkaller1\x00', 0xb, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r6) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() mount$binder(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='max=00000000000000000002,max=00000000000000000000,stats=global,stats=global,stats=global,max=00000000000000000003,subj_user=,silent,dont_measure,euid<', @ANYRESDEC=r7, @ANYBLOB=',subj_role=ramfs\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d611d6b667364659684747465642e6f76de45742084f0098320c65765726c61792e6f726967696e002c6170707261259d881290c2148d144774abe25869ffffff7f00000000000000000000ff0369643eaa6956ce562d1a8be935e18a061562f324e1681a2a14781ca126b17332b66851561ad906b21582acca6c8fcf1d67b8cb95dbf5fbb6567406c241f5de0ecd5bae91026dc73368e6eb3b4f089d24825938a49950ef712b3ba801a8306aea513ab1818fc95de2b2f9c9f775998a0b02e7cf535d59a0c3f795718e581a5b686e1b4abc3fd31d2d20ce6f5c04eefd1be6337073e263fe0e13a3c0297e23897366324a1f3c4fad00"/262, @ANYRESDEC=r8, @ANYBLOB=',obj_user=*-(}-,\x00']) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) setresuid(0x0, 0xee00, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) kernel console output (not intermixed with test programs): ype=1400 audit(1732143269.892:54414): avc: denied { bpf } for pid=25388 comm="syz.0.4816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1897.262889][ T29] audit: type=1400 audit(1732143269.920:54415): avc: denied { create } for pid=25388 comm="syz.0.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1897.319443][ T29] audit: type=1400 audit(1732143269.920:54416): avc: denied { read } for pid=25388 comm="syz.0.4816" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1897.363621][ T29] audit: type=1400 audit(1732143269.920:54417): avc: denied { open } for pid=25388 comm="syz.0.4816" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1897.387346][ T29] audit: type=1400 audit(1732143269.920:54418): avc: denied { ioctl } for pid=25388 comm="syz.0.4816" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1897.412458][ T29] audit: type=1400 audit(1732143269.929:54419): avc: denied { read } for pid=25388 comm="syz.0.4816" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1897.434090][ T29] audit: type=1400 audit(1732143269.929:54420): avc: denied { open } for pid=25388 comm="syz.0.4816" path="net:[4026532958]" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1898.215601][T25410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1898.225177][T25410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1898.240974][T25410] gretap0: entered promiscuous mode [ 1898.265183][T25410] erspan0: entered promiscuous mode [ 1898.640792][T25420] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1899.228639][T25401] delete_channel: no stack [ 1900.699518][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4824'. [ 1900.750928][T25438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4828'. [ 1902.331891][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 1902.331908][ T29] audit: type=1400 audit(1732143274.952:54681): avc: denied { read } for pid=25448 comm="syz.0.4832" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1902.393840][ T29] audit: type=1400 audit(1732143274.952:54682): avc: denied { open } for pid=25448 comm="syz.0.4832" path="net:[4026532958]" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1902.459443][ T29] audit: type=1400 audit(1732143274.952:54683): avc: denied { create } for pid=25448 comm="syz.0.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1902.470810][T25459] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1902.748373][ T29] audit: type=1400 audit(1732143274.961:54684): avc: denied { read write } for pid=17851 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1902.763357][T25457] loop7: detected capacity change from 0 to 7 [ 1902.999975][T25457] buffer_io_error: 24 callbacks suppressed [ 1902.999995][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.021723][ T29] audit: type=1400 audit(1732143274.961:54685): avc: denied { open } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1903.026532][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.053330][ T29] audit: type=1400 audit(1732143274.961:54686): avc: denied { ioctl } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1903.079861][ T29] audit: type=1400 audit(1732143275.008:54687): avc: denied { write } for pid=25448 comm="syz.0.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1903.100592][ T29] audit: type=1400 audit(1732143275.008:54688): avc: denied { prog_load } for pid=25456 comm="syz.7.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1903.120628][ T29] audit: type=1400 audit(1732143275.008:54689): avc: denied { bpf } for pid=25456 comm="syz.7.4833" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1903.162532][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.181480][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.189772][ T29] audit: type=1400 audit(1732143275.008:54690): avc: denied { perfmon } for pid=25456 comm="syz.7.4833" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1903.235880][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.245407][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.253928][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.261860][T25457] ldm_validate_partition_table(): Disk read failed. [ 1903.268502][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.280183][T22655] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1903.321200][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1903.954796][T22655] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1903.996363][T25457] Buffer I/O error on dev loop7, logical block 0, async page read [ 1904.005853][T22655] usb 5-1: config 0 has no interface number 0 [ 1904.021906][T25457] Dev loop7: unable to read RDB block 0 [ 1904.038154][T25457] loop7: unable to read partition table [ 1904.045744][T25457] loop7: partition table beyond EOD, truncated [ 1904.052033][T22655] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1904.052070][T22655] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1904.052153][T22655] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 1904.055735][T22655] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1904.063262][T25457] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1904.063262][T25457] ) failed (rc=-5) [ 1904.315128][T25478] delete_channel: no stack [ 1904.328240][T25478] delete_channel: no stack [ 1904.380712][T22655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.397562][T22655] usb 5-1: Product: syz [ 1904.401737][T22655] usb 5-1: Manufacturer: syz [ 1904.406960][T22655] usb 5-1: SerialNumber: syz [ 1904.413966][T22655] usb 5-1: config 0 descriptor?? [ 1904.419891][T25465] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1904.427307][T25465] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1904.439106][T22655] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1905.331489][T22655] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1905.600190][ T5882] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1905.798370][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.845783][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.863531][ T5882] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1905.884238][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.913998][T16338] usb 5-1: USB disconnect, device number 19 [ 1905.996310][T16338] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1906.008713][ T5882] usb 2-1: config 0 descriptor?? [ 1906.031597][T16338] cyberjack 5-1:0.69: device disconnected [ 1906.662854][ T5882] hid (null): bogus close delimiter [ 1906.815006][T25512] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4848'. [ 1907.197610][ T5882] usb 2-1: language id specifier not provided by device, defaulting to English [ 1907.303248][T25508] lo speed is unknown, defaulting to 1000 [ 1907.639215][ T5882] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input112 [ 1907.749124][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 1907.749140][ T29] audit: type=1400 audit(1732143280.031:54969): avc: denied { ioctl } for pid=5190 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4278 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1907.783360][ T5882] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input113 [ 1907.814774][ T29] audit: type=1400 audit(1732143280.069:54970): avc: denied { read write } for pid=17376 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1907.845143][ T29] audit: type=1400 audit(1732143280.069:54971): avc: denied { read write open } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1907.877043][T25478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.885908][T25478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.929262][ T29] audit: type=1400 audit(1732143280.069:54972): avc: denied { ioctl } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1907.963950][ T5882] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input114 [ 1907.967363][ T29] audit: type=1400 audit(1732143280.069:54973): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1908.004414][ T29] audit: type=1400 audit(1732143280.069:54974): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.030597][ T29] audit: type=1400 audit(1732143280.069:54975): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1908.056771][ T29] audit: type=1400 audit(1732143280.069:54976): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1908.140691][ T5882] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input115 [ 1908.158931][ T5882] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1908.172216][ T29] audit: type=1400 audit(1732143280.069:54977): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1908.221708][ T5882] usb 2-1: USB disconnect, device number 37 [ 1908.230035][ T29] audit: type=1400 audit(1732143280.078:54978): avc: denied { read } for pid=5190 comm="acpid" name="mouse1" dev="devtmpfs" ino=4278 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1908.614711][T24886] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1908.720122][T25532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1908.800278][T24886] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 1908.827772][T24886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.855028][T24886] usb 3-1: Product: syz [ 1908.865773][T24886] usb 3-1: Manufacturer: syz [ 1908.876264][T24886] usb 3-1: SerialNumber: syz [ 1908.885170][T24886] usb 3-1: config 0 descriptor?? [ 1909.804932][T24886] usb 3-1: USB disconnect, device number 21 [ 1910.795706][ T7092] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1911.073704][T22655] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1911.178730][T25556] lo speed is unknown, defaulting to 1000 [ 1911.199597][ T7092] usb 2-1: Using ep0 maxpacket: 8 [ 1911.229017][ T7092] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1911.264284][ T7092] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1911.286981][ T7092] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1911.305142][ T7092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.321970][ T7092] usb 2-1: Product: syz [ 1911.326159][ T7092] usb 2-1: Manufacturer: syz [ 1911.331480][T22655] usb 3-1: Using ep0 maxpacket: 16 [ 1911.340400][ T7092] usb 2-1: SerialNumber: syz [ 1911.349256][T22655] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1911.358902][T22655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.367915][T22655] usb 3-1: Product: syz [ 1911.372144][T22655] usb 3-1: Manufacturer: syz [ 1911.377927][ T7092] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1911.389287][T22655] usb 3-1: SerialNumber: syz [ 1911.395002][ T7092] dvb-usb: bulk message failed: -22 (3/0) [ 1912.000967][T22655] usb 3-1: config 0 descriptor?? [ 1912.030062][ T7092] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1912.039850][ T7092] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1912.051730][ T7092] usb 2-1: media controller created [ 1912.064634][ T7092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1912.078892][ T7092] dvb-usb: bulk message failed: -22 (6/0) [ 1912.084665][ T7092] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1912.098201][ T7092] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input116 [ 1912.114302][ T7092] dvb-usb: schedule remote query interval to 150 msecs. [ 1912.121373][ T7092] dvb-usb: bulk message failed: -22 (3/0) [ 1912.142655][ T7092] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1912.157292][ T7092] usb 2-1: USB disconnect, device number 38 [ 1912.179036][ T7092] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1912.268720][T22655] usb 3-1: USB disconnect, device number 22 [ 1913.183556][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 1913.183571][ T29] audit: type=1400 audit(1732143285.120:55209): avc: denied { read write } for pid=18191 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1913.309861][ T29] audit: type=1400 audit(1732143285.148:55210): avc: denied { read write open } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1913.355379][ T29] audit: type=1400 audit(1732143285.148:55211): avc: denied { ioctl } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1913.382088][ T29] audit: type=1400 audit(1732143285.157:55212): avc: denied { create } for pid=25545 comm="syz.1.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1913.402821][ T29] audit: type=1400 audit(1732143285.157:55213): avc: denied { read write } for pid=24916 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1913.435281][ T29] audit: type=1400 audit(1732143285.157:55214): avc: denied { open } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1913.586966][ T29] audit: type=1400 audit(1732143285.157:55215): avc: denied { ioctl } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1913.612913][ T29] audit: type=1400 audit(1732143285.167:55216): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1913.671530][ T29] audit: type=1400 audit(1732143285.167:55217): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1913.742763][T25590] netlink: 'syz.2.4869': attribute type 4 has an invalid length. [ 1913.761999][ T29] audit: type=1400 audit(1732143285.167:55218): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1914.087987][T25593] netlink: 'syz.2.4869': attribute type 4 has an invalid length. [ 1914.522374][T25594] process '/newroot/387/file0' started with executable stack [ 1914.650365][T25602] syzkaller0: entered promiscuous mode [ 1914.656080][T25602] syzkaller0: entered allmulticast mode [ 1915.891174][T25604] nfs4: Bad value for 'source' [ 1918.539655][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 1918.539671][ T29] audit: type=1400 audit(1732143290.124:55429): avc: denied { read } for pid=25655 comm="syz.7.4884" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1918.589613][ T29] audit: type=1400 audit(1732143290.124:55430): avc: denied { open } for pid=25655 comm="syz.7.4884" path="net:[4026533039]" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1918.721989][ T29] audit: type=1400 audit(1732143290.124:55431): avc: denied { create } for pid=25655 comm="syz.7.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1918.760230][ T29] audit: type=1400 audit(1732143290.171:55432): avc: denied { create } for pid=25655 comm="syz.7.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1919.057322][ T29] audit: type=1400 audit(1732143290.171:55433): avc: denied { map_create } for pid=25655 comm="syz.7.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1919.121413][ T29] audit: type=1400 audit(1732143290.171:55434): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1919.143778][ T29] audit: type=1400 audit(1732143290.171:55435): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.165723][ T29] audit: type=1400 audit(1732143290.171:55436): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1919.223000][ T29] audit: type=1400 audit(1732143290.171:55437): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1919.235478][T25662] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4885'. [ 1919.268202][ T29] audit: type=1400 audit(1732143290.180:55438): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1920.012668][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.021090][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.538283][T25628] lo speed is unknown, defaulting to 1000 [ 1921.567260][T25621] lo speed is unknown, defaulting to 1000 [ 1921.591586][T25653] lo speed is unknown, defaulting to 1000 [ 1921.716903][T25669] netlink: 'syz.2.4887': attribute type 1 has an invalid length. [ 1921.724665][T25669] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4887'. [ 1922.152861][T25674] FAULT_INJECTION: forcing a failure. [ 1922.152861][T25674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1922.166028][T25674] CPU: 0 UID: 0 PID: 25674 Comm: syz.1.4889 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1922.176460][T25674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1922.186524][T25674] Call Trace: [ 1922.189806][T25674] [ 1922.192746][T25674] dump_stack_lvl+0x16c/0x1f0 [ 1922.197447][T25674] should_fail_ex+0x497/0x5b0 [ 1922.202148][T25674] _copy_from_user+0x2e/0xd0 [ 1922.206756][T25674] __sys_bpf+0x21c/0x49a0 [ 1922.211097][T25674] ? __pfx_lock_release+0x10/0x10 [ 1922.216108][T25674] ? __pfx___sys_bpf+0x10/0x10 [ 1922.220854][T25674] ? vfs_write+0x306/0x1150 [ 1922.225351][T25674] ? __mutex_unlock_slowpath+0x164/0x690 [ 1922.231007][T25674] ? fput+0x67/0x440 [ 1922.234989][T25674] ? ksys_write+0x1ba/0x250 [ 1922.239487][T25674] ? __pfx_ksys_write+0x10/0x10 [ 1922.244331][T25674] __x64_sys_bpf+0x78/0xc0 [ 1922.248743][T25674] ? lockdep_hardirqs_on+0x7c/0x110 [ 1922.253939][T25674] do_syscall_64+0xcd/0x250 [ 1922.258433][T25674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.264325][T25674] RIP: 0033:0x7ff90cb7e819 [ 1922.268733][T25674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1922.288336][T25674] RSP: 002b:00007ff90d8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.296744][T25674] RAX: ffffffffffffffda RBX: 00007ff90cd35fa0 RCX: 00007ff90cb7e819 [ 1922.304708][T25674] RDX: 0000000000000028 RSI: 0000000020000440 RDI: 000000000000000a [ 1922.312670][T25674] RBP: 00007ff90d8ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.320630][T25674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1922.328592][T25674] R13: 0000000000000000 R14: 00007ff90cd35fa0 R15: 00007ffd1939f9b8 [ 1922.336568][T25674] [ 1922.480435][ T964] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1922.854880][ T964] usb 5-1: device descriptor read/64, error -71 [ 1923.784655][ T964] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1924.219817][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 1924.317561][ T29] audit: type=1400 audit(1732143294.755:55591): avc: denied { create } for pid=25686 comm="syz.1.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1924.426951][T25687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1924.484988][ T29] audit: type=1400 audit(1732143294.923:55592): avc: denied { write } for pid=25681 comm="syz.0.4892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1924.562005][ T29] audit: type=1400 audit(1732143294.923:55593): avc: denied { write } for pid=25681 comm="syz.0.4892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1924.619910][ T29] audit: type=1400 audit(1732143295.278:55594): avc: denied { prog_load } for pid=25685 comm="syz.2.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1924.619951][ T29] audit: type=1400 audit(1732143295.278:55595): avc: denied { bpf } for pid=25685 comm="syz.2.4894" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1924.619981][ T29] audit: type=1400 audit(1732143295.278:55596): avc: denied { perfmon } for pid=25685 comm="syz.2.4894" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1924.620012][ T29] audit: type=1400 audit(1732143295.278:55597): avc: denied { bpf } for pid=25685 comm="syz.2.4894" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1924.620042][ T29] audit: type=1400 audit(1732143295.278:55598): avc: denied { prog_run } for pid=25685 comm="syz.2.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1924.620073][ T29] audit: type=1400 audit(1732143295.288:55599): avc: denied { read write } for pid=25685 comm="syz.2.4894" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1924.620107][ T29] audit: type=1400 audit(1732143295.288:55600): avc: denied { open } for pid=25685 comm="syz.2.4894" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1924.698398][T25693] : entered promiscuous mode [ 1924.788147][ T964] usb 5-1: device descriptor read/64, error -71 [ 1925.031731][ T964] usb usb5-port1: attempt power cycle [ 1925.965548][ T964] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1926.039241][ T964] usb 5-1: device descriptor read/8, error -71 [ 1928.178673][T25713] nfs4: Bad value for 'source' [ 1929.902972][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 1929.902982][ T29] audit: type=1400 audit(1732143300.760:55768): avc: denied { read write } for pid=17376 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1930.017144][ T29] audit: type=1400 audit(1732143300.788:55769): avc: denied { read write open } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1930.086029][ T29] audit: type=1400 audit(1732143300.788:55770): avc: denied { ioctl } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1930.135004][ T29] audit: type=1400 audit(1732143300.797:55771): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1930.445802][ T29] audit: type=1400 audit(1732143300.797:55772): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1930.783178][ T29] audit: type=1400 audit(1732143300.797:55773): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1930.828717][ T29] audit: type=1400 audit(1732143300.797:55774): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1930.884467][T25753] ALSA: seq fatal error: cannot create timer (-22) [ 1930.935561][ T29] audit: type=1400 audit(1732143300.797:55775): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1930.966424][ T29] audit: type=1400 audit(1732143300.900:55776): avc: denied { read write } for pid=18478 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1931.266980][ T29] audit: type=1400 audit(1732143300.900:55777): avc: denied { open } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1933.777246][T25769] lo speed is unknown, defaulting to 1000 [ 1935.321424][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 1935.321440][ T29] audit: type=1400 audit(1732143305.830:55971): avc: denied { read write } for pid=25802 comm="syz.7.4918" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1935.431573][ T29] audit: type=1400 audit(1732143305.830:55972): avc: denied { module_request } for pid=25796 comm="syz.4.4916" kmod="crypto-echainiv(authencesn(cmac(aes),cbc(aes)))-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1935.515204][ T29] audit: type=1400 audit(1732143305.830:55973): avc: denied { read write open } for pid=25802 comm="syz.7.4918" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1935.611634][ T29] audit: type=1400 audit(1732143305.858:55974): avc: denied { read write } for pid=25802 comm="syz.7.4918" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1935.699927][ T29] audit: type=1400 audit(1732143305.858:55975): avc: denied { open } for pid=25802 comm="syz.7.4918" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1935.810594][ T29] audit: type=1400 audit(1732143305.858:55976): avc: denied { ioctl } for pid=25802 comm="syz.7.4918" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1936.046954][ T29] audit: type=1400 audit(1732143305.858:55977): avc: denied { ioctl } for pid=25802 comm="syz.7.4918" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1936.329151][ T29] audit: type=1400 audit(1732143305.886:55978): avc: denied { module_request } for pid=25796 comm="syz.4.4916" kmod="cryptomgr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1936.394281][ T29] audit: type=1400 audit(1732143305.970:55979): avc: denied { read write } for pid=17376 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1936.451910][ T29] audit: type=1400 audit(1732143305.970:55980): avc: denied { open } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1936.598904][T25823] FAULT_INJECTION: forcing a failure. [ 1936.598904][T25823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.612413][T25823] CPU: 1 UID: 0 PID: 25823 Comm: syz.0.4922 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1936.622867][T25823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1936.632940][T25823] Call Trace: [ 1936.636234][T25823] [ 1936.639180][T25823] dump_stack_lvl+0x16c/0x1f0 [ 1936.643879][T25823] should_fail_ex+0x497/0x5b0 [ 1936.648577][T25823] _copy_to_user+0x32/0xd0 [ 1936.653016][T25823] simple_read_from_buffer+0xd0/0x160 [ 1936.658418][T25823] proc_fail_nth_read+0x198/0x270 [ 1936.663470][T25823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1936.669046][T25823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1936.674598][T25823] vfs_read+0x1df/0xbe0 [ 1936.678737][T25823] ? __fget_files+0x1fc/0x3a0 [ 1936.683405][T25823] ? __pfx___mutex_lock+0x10/0x10 [ 1936.688426][T25823] ? __pfx_vfs_read+0x10/0x10 [ 1936.693097][T25823] ? __fget_files+0x206/0x3a0 [ 1936.697757][T25823] ksys_read+0x12b/0x250 [ 1936.701982][T25823] ? __pfx_ksys_read+0x10/0x10 [ 1936.706733][T25823] do_syscall_64+0xcd/0x250 [ 1936.711227][T25823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.717110][T25823] RIP: 0033:0x7fd6bfd7d25c [ 1936.721517][T25823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1936.741122][T25823] RSP: 002b:00007fd6c0b52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1936.749520][T25823] RAX: ffffffffffffffda RBX: 00007fd6bff35fa0 RCX: 00007fd6bfd7d25c [ 1936.757490][T25823] RDX: 000000000000000f RSI: 00007fd6c0b520a0 RDI: 0000000000000003 [ 1936.765443][T25823] RBP: 00007fd6c0b52090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.773401][T25823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.781368][T25823] R13: 0000000000000001 R14: 00007fd6bff35fa0 R15: 00007ffdcbd3a6c8 [ 1936.789353][T25823] [ 1938.399110][T24886] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1938.816167][T24886] usb 5-1: Using ep0 maxpacket: 32 [ 1938.874975][T24886] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 1938.904876][T24886] usb 5-1: config 0 has no interface number 0 [ 1938.916156][T24886] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1938.967990][T24886] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1939.004616][T24886] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1939.032670][T24886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.050882][T24886] usb 5-1: Product: syz [ 1939.062184][T24886] usb 5-1: Manufacturer: syz [ 1939.067545][T24886] usb 5-1: SerialNumber: syz [ 1939.090391][T24886] usb 5-1: config 0 descriptor?? [ 1939.139836][T25844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1939.397873][T25868] netlink: 'syz.0.4931': attribute type 1 has an invalid length. [ 1939.406088][T25868] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4931'. [ 1939.858263][T25874] netlink: 'syz.7.4933': attribute type 1 has an invalid length. [ 1939.866479][T25874] netlink: 512 bytes leftover after parsing attributes in process `syz.7.4933'. [ 1940.047275][T24886] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 1940.057176][T24886] usb 5-1: USB disconnect, device number 24 [ 1940.345199][T25876] netlink: 'syz.2.4932': attribute type 1 has an invalid length. [ 1940.345220][T25876] netlink: 636 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1940.967457][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 1940.967469][ T29] audit: type=1400 audit(1732143311.105:56198): avc: denied { ioctl } for pid=25870 comm="syz.7.4933" path="socket:[96708]" dev="sockfs" ino=96708 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1940.974039][ T29] audit: type=1400 audit(1732143311.105:56199): avc: denied { read } for pid=25870 comm="syz.7.4933" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1940.974065][ T29] audit: type=1400 audit(1732143311.105:56200): avc: denied { open } for pid=25870 comm="syz.7.4933" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1940.989356][ T29] audit: type=1400 audit(1732143311.124:56201): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1940.989382][ T29] audit: type=1400 audit(1732143311.124:56202): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.989401][ T29] audit: type=1400 audit(1732143311.124:56203): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1940.989420][ T29] audit: type=1400 audit(1732143311.124:56204): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1940.989440][ T29] audit: type=1400 audit(1732143311.124:56205): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1941.132841][ T29] audit: type=1400 audit(1732143311.255:56206): avc: denied { read write } for pid=18191 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1941.139035][ T29] audit: type=1400 audit(1732143311.264:56207): avc: denied { read write open } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1942.542572][T25897] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1942.610841][T25895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1944.056278][T25924] fuse: Unknown parameter 'group_i00000000000000000000' [ 1944.343321][T24886] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1944.513742][T24886] usb 3-1: device descriptor read/64, error -71 [ 1945.382641][T24886] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1945.529434][T24886] usb 3-1: device descriptor read/64, error -71 [ 1945.647402][T24886] usb usb3-port1: attempt power cycle [ 1945.694326][T25939] FAULT_INJECTION: forcing a failure. [ 1945.694326][T25939] name failslab, interval 1, probability 0, space 0, times 0 [ 1945.708928][T25939] CPU: 1 UID: 0 PID: 25939 Comm: syz.7.4948 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1945.719365][T25939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1945.729425][T25939] Call Trace: [ 1945.732714][T25939] [ 1945.735651][T25939] dump_stack_lvl+0x16c/0x1f0 [ 1945.740354][T25939] should_fail_ex+0x497/0x5b0 [ 1945.745050][T25939] ? fs_reclaim_acquire+0xae/0x150 [ 1945.750174][T25939] should_failslab+0xc2/0x120 [ 1945.754855][T25939] __kmalloc_noprof+0xcb/0x400 [ 1945.759621][T25939] ? d_absolute_path+0x137/0x1b0 [ 1945.764570][T25939] tomoyo_encode2+0x100/0x3e0 [ 1945.769246][T25939] tomoyo_encode+0x29/0x50 [ 1945.773657][T25939] tomoyo_realpath_from_path+0x19d/0x720 [ 1945.779289][T25939] ? tomoyo_fill_path_info+0x233/0x420 [ 1945.784837][T25939] tomoyo_path2_perm+0x36f/0x710 [ 1945.789773][T25939] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1945.795238][T25939] ? hlock_class+0x4e/0x130 [ 1945.799752][T25939] ? current_check_refer_path+0x2be/0x710 [ 1945.805477][T25939] ? __pfx_current_check_refer_path+0x10/0x10 [ 1945.811551][T25939] tomoyo_path_rename+0x102/0x1b0 [ 1945.816574][T25939] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1945.822478][T25939] ? __d_lookup+0x266/0x4a0 [ 1945.827004][T25939] ? d_lookup+0xe9/0x180 [ 1945.831252][T25939] security_path_rename+0x18e/0x3c0 [ 1945.836476][T25939] do_renameat2+0x7a0/0xdd0 [ 1945.840994][T25939] ? __pfx_do_renameat2+0x10/0x10 [ 1945.846023][T25939] ? trace_lock_acquire+0x14a/0x1d0 [ 1945.851226][T25939] ? lock_acquire+0x2f/0xb0 [ 1945.855728][T25939] ? __might_fault+0xe3/0x190 [ 1945.860401][T25939] ? __might_fault+0xe3/0x190 [ 1945.865082][T25939] ? getname_flags.part.0+0x1c5/0x550 [ 1945.870474][T25939] __x64_sys_renameat2+0xe7/0x130 [ 1945.875500][T25939] do_syscall_64+0xcd/0x250 [ 1945.880000][T25939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.885894][T25939] RIP: 0033:0x7f3d1697e819 [ 1945.890303][T25939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1945.909904][T25939] RSP: 002b:00007f3d17764038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1945.918309][T25939] RAX: ffffffffffffffda RBX: 00007f3d16b35fa0 RCX: 00007f3d1697e819 [ 1945.926276][T25939] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000004 [ 1945.934236][T25939] RBP: 00007f3d17764090 R08: 0000000000000000 R09: 0000000000000000 [ 1945.942199][T25939] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1945.950177][T25939] R13: 0000000000000000 R14: 00007f3d16b35fa0 R15: 00007fff7f3814f8 [ 1945.958171][T25939] [ 1945.995266][T25939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1946.020797][T25943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1946.257219][T24886] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1946.390369][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 1946.390395][ T29] audit: type=1400 audit(1732143316.175:56445): avc: denied { create } for pid=25947 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1946.545267][ T29] audit: type=1400 audit(1732143316.231:56447): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1946.546589][T24886] usb 3-1: device descriptor read/8, error -71 [ 1946.823437][ T29] audit: type=1400 audit(1732143316.231:56448): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1946.929852][ T29] audit: type=1400 audit(1732143316.231:56449): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1946.984346][T25946] fuse: Bad value for 'fd' [ 1946.984766][T24886] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1947.009096][ T29] audit: type=1400 audit(1732143316.231:56450): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1947.012529][T25946] delete_channel: no stack [ 1947.072285][T24886] usb 3-1: device descriptor read/8, error -71 [ 1947.120092][ T29] audit: type=1400 audit(1732143316.231:56451): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1947.187541][T24886] usb usb3-port1: unable to enumerate USB device [ 1947.332437][T25960] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4954'. [ 1947.352011][ T29] audit: type=1400 audit(1732143316.175:56446): avc: denied { write } for pid=25947 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1947.489075][ T29] audit: type=1400 audit(1732143316.297:56452): avc: denied { read } for pid=25947 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1947.621872][ T29] audit: type=1400 audit(1732143316.306:56453): avc: denied { read } for pid=25947 comm="syz.1.4952" dev="nsfs" ino=4026533230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1947.649897][T25963] FAULT_INJECTION: forcing a failure. [ 1947.649897][T25963] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.736460][T25963] CPU: 0 UID: 0 PID: 25963 Comm: syz.2.4955 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1947.746917][T25963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1947.756963][T25963] Call Trace: [ 1947.760229][T25963] [ 1947.763150][T25963] dump_stack_lvl+0x16c/0x1f0 [ 1947.767920][T25963] should_fail_ex+0x497/0x5b0 [ 1947.772583][T25963] ? fs_reclaim_acquire+0xae/0x150 [ 1947.777684][T25963] should_failslab+0xc2/0x120 [ 1947.782349][T25963] __kmalloc_noprof+0xcb/0x400 [ 1947.787110][T25963] ? tomoyo_encode2+0x92/0x3e0 [ 1947.789326][ T29] audit: type=1400 audit(1732143316.306:56454): avc: denied { open } for pid=25947 comm="syz.1.4952" path="net:[4026533230]" dev="nsfs" ino=4026533230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1947.791875][T25963] tomoyo_encode2+0x100/0x3e0 [ 1947.819953][T25963] tomoyo_encode+0x29/0x50 [ 1947.824358][T25963] tomoyo_realpath_from_path+0x19d/0x720 [ 1947.829978][T25963] tomoyo_path_number_perm+0x248/0x590 [ 1947.835421][T25963] ? tomoyo_path_number_perm+0x235/0x590 [ 1947.841038][T25963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1947.847289][T25963] ? __pfx_lock_release+0x10/0x10 [ 1947.852314][T25963] ? trace_lock_acquire+0x14a/0x1d0 [ 1947.857564][T25963] ? lock_acquire+0x2f/0xb0 [ 1947.862068][T25963] ? __fget_files+0x40/0x3a0 [ 1947.866648][T25963] ? __fget_files+0x206/0x3a0 [ 1947.871332][T25963] security_file_ioctl+0x9b/0x240 [ 1947.876353][T25963] __x64_sys_ioctl+0xb7/0x200 [ 1947.881030][T25963] do_syscall_64+0xcd/0x250 [ 1947.885529][T25963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.891417][T25963] RIP: 0033:0x7fe03b77e819 [ 1947.895829][T25963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1947.915441][T25963] RSP: 002b:00007fe03c652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1947.923841][T25963] RAX: ffffffffffffffda RBX: 00007fe03b935fa0 RCX: 00007fe03b77e819 [ 1947.931807][T25963] RDX: 0000000020000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 1947.939768][T25963] RBP: 00007fe03c652090 R08: 0000000000000000 R09: 0000000000000000 [ 1947.947725][T25963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1947.955684][T25963] R13: 0000000000000000 R14: 00007fe03b935fa0 R15: 00007ffc0ccc6608 [ 1947.963652][T25963] [ 1947.992284][T25963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1948.501631][T25977] netlink: 'syz.0.4959': attribute type 1 has an invalid length. [ 1948.515905][T25977] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1948.980619][T25985] FAULT_INJECTION: forcing a failure. [ 1948.980619][T25985] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.999175][T25985] CPU: 1 UID: 0 PID: 25985 Comm: syz.7.4961 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1949.009627][T25985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1949.019693][T25985] Call Trace: [ 1949.022979][T25985] [ 1949.025994][T25985] dump_stack_lvl+0x16c/0x1f0 [ 1949.030671][T25985] should_fail_ex+0x497/0x5b0 [ 1949.035340][T25985] ? fs_reclaim_acquire+0xae/0x150 [ 1949.040443][T25985] should_failslab+0xc2/0x120 [ 1949.045116][T25985] __kmalloc_node_noprof+0xd1/0x430 [ 1949.050325][T25985] ? qdisc_alloc+0xbb/0xc50 [ 1949.055169][T25985] qdisc_alloc+0xbb/0xc50 [ 1949.059509][T25985] ? _raw_read_unlock+0x28/0x50 [ 1949.064393][T25985] qdisc_create+0xcf/0x1100 [ 1949.068922][T25985] ? __pfx_qdisc_create+0x10/0x10 [ 1949.073969][T25985] tc_modify_qdisc+0x4d8/0x1c40 [ 1949.078833][T25985] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1949.084115][T25985] ? rtnetlink_rcv_msg+0x372/0xea0 [ 1949.089236][T25985] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1949.094521][T25985] rtnetlink_rcv_msg+0x3c7/0xea0 [ 1949.099461][T25985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1949.104945][T25985] netlink_rcv_skb+0x16b/0x440 [ 1949.109732][T25985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1949.115196][T25985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1949.120511][T25985] ? netlink_deliver_tap+0x1ae/0xd90 [ 1949.125799][T25985] netlink_unicast+0x53c/0x7f0 [ 1949.130587][T25985] ? __pfx_netlink_unicast+0x10/0x10 [ 1949.135871][T25985] netlink_sendmsg+0x8b8/0xd70 [ 1949.140628][T25985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1949.145920][T25985] ____sys_sendmsg+0xaaf/0xc90 [ 1949.150680][T25985] ? copy_msghdr_from_user+0x10b/0x160 [ 1949.156163][T25985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1949.161487][T25985] ___sys_sendmsg+0x135/0x1e0 [ 1949.166192][T25985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1949.171408][T25985] ? __pfx_lock_release+0x10/0x10 [ 1949.176422][T25985] ? trace_lock_acquire+0x14a/0x1d0 [ 1949.181634][T25985] ? __fget_files+0x206/0x3a0 [ 1949.186326][T25985] __sys_sendmsg+0x16e/0x220 [ 1949.190917][T25985] ? __pfx___sys_sendmsg+0x10/0x10 [ 1949.196028][T25985] do_syscall_64+0xcd/0x250 [ 1949.200519][T25985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.206444][T25985] RIP: 0033:0x7f3d1697e819 [ 1949.210845][T25985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1949.230461][T25985] RSP: 002b:00007f3d17743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.238982][T25985] RAX: ffffffffffffffda RBX: 00007f3d16b36080 RCX: 00007f3d1697e819 [ 1949.246956][T25985] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 1949.254948][T25985] RBP: 00007f3d17743090 R08: 0000000000000000 R09: 0000000000000000 [ 1949.262929][T25985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.270910][T25985] R13: 0000000000000000 R14: 00007f3d16b36080 R15: 00007fff7f3814f8 [ 1949.278880][T25985] [ 1950.031235][T25998] fuse: Bad value for 'fd' [ 1950.037061][T25998] delete_channel: no stack [ 1950.999967][T26005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26005 comm=syz.7.4966 [ 1951.278536][T26022] fuse: Unknown parameter 'group_i00000000000000000000' [ 1951.286549][T26005] vlan0: entered promiscuous mode [ 1951.334954][T22655] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1951.344818][T26005] team0: Port device vlan0 added [ 1951.663943][T22655] usb 5-1: Using ep0 maxpacket: 8 [ 1951.791808][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 1951.791826][ T29] audit: type=1400 audit(1732143321.105:56720): avc: denied { create } for pid=26025 comm="syz.2.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1951.822306][ T29] audit: type=1400 audit(1732143321.170:56721): avc: denied { write } for pid=26025 comm="syz.2.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1951.844990][ T29] audit: type=1400 audit(1732143321.236:56722): avc: denied { ioctl } for pid=26010 comm="syz.4.4968" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1951.871339][T22655] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1951.881775][T22655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.027114][T22655] usb 5-1: Product: syz [ 1952.050253][T22655] usb 5-1: Manufacturer: syz [ 1952.057085][ T29] audit: type=1400 audit(1732143321.245:56723): avc: denied { map_create } for pid=26027 comm="syz.7.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1952.060689][T22655] usb 5-1: SerialNumber: syz [ 1952.108719][T22655] usb 5-1: config 0 descriptor?? [ 1952.137571][T22655] gspca_main: se401-2.14.0 probing 047d:5003 [ 1952.200776][ T29] audit: type=1400 audit(1732143321.254:56724): avc: denied { bpf } for pid=26027 comm="syz.7.4972" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1952.230899][T26034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1952.241085][ T29] audit: type=1400 audit(1732143321.254:56725): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1952.316260][ T29] audit: type=1400 audit(1732143321.254:56726): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1952.383284][ T29] audit: type=1400 audit(1732143321.254:56727): avc: denied { ioctl } for pid=26010 comm="syz.4.4968" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1952.483975][ T29] audit: type=1400 audit(1732143321.254:56728): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1952.553626][ T29] audit: type=1400 audit(1732143321.254:56729): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1952.600700][T26039] FAULT_INJECTION: forcing a failure. [ 1952.600700][T26039] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.615433][T26039] CPU: 1 UID: 0 PID: 26039 Comm: syz.7.4975 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1952.625865][T26039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1952.635925][T26039] Call Trace: [ 1952.639199][T26039] [ 1952.642124][T26039] dump_stack_lvl+0x16c/0x1f0 [ 1952.646793][T26039] should_fail_ex+0x497/0x5b0 [ 1952.651456][T26039] ? fs_reclaim_acquire+0xae/0x150 [ 1952.656549][T26039] should_failslab+0xc2/0x120 [ 1952.661211][T26039] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1952.667001][T26039] ? __alloc_skb+0x2b1/0x380 [ 1952.671577][T26039] __alloc_skb+0x2b1/0x380 [ 1952.675973][T26039] ? __pfx___alloc_skb+0x10/0x10 [ 1952.680886][T26039] ? __mutex_trylock_common+0x10/0x250 [ 1952.686330][T26039] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1952.692201][T26039] ? __netlink_dump_start+0x154/0x970 [ 1952.697559][T26039] netlink_dump+0x6af/0xcc0 [ 1952.702046][T26039] ? __mutex_lock+0x1cc/0xa60 [ 1952.706710][T26039] ? __pfx_netlink_dump+0x10/0x10 [ 1952.711738][T26039] ? __netlink_dump_start+0x154/0x970 [ 1952.717106][T26039] ? netlink_lookup+0x259/0x520 [ 1952.721937][T26039] ? __pfx_netlink_lookup+0x10/0x10 [ 1952.727124][T26039] __netlink_dump_start+0x6ca/0x970 [ 1952.732310][T26039] ? __pfx_tc_dump_chain+0x10/0x10 [ 1952.737418][T26039] rtnetlink_rcv_msg+0xb44/0xea0 [ 1952.742344][T26039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1952.747781][T26039] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1952.752701][T26039] ? __pfx_tc_dump_chain+0x10/0x10 [ 1952.757800][T26039] netlink_rcv_skb+0x16b/0x440 [ 1952.762550][T26039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1952.767992][T26039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1952.773295][T26039] ? netlink_deliver_tap+0x1ae/0xd90 [ 1952.778584][T26039] netlink_unicast+0x53c/0x7f0 [ 1952.783434][T26039] ? __pfx_netlink_unicast+0x10/0x10 [ 1952.788733][T26039] netlink_sendmsg+0x8b8/0xd70 [ 1952.793502][T26039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1952.798790][T26039] ____sys_sendmsg+0xaaf/0xc90 [ 1952.803569][T26039] ? copy_msghdr_from_user+0x10b/0x160 [ 1952.809019][T26039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1952.814317][T26039] ___sys_sendmsg+0x135/0x1e0 [ 1952.818982][T26039] ? __pfx____sys_sendmsg+0x10/0x10 [ 1952.824179][T26039] ? __pfx_lock_release+0x10/0x10 [ 1952.829199][T26039] ? trace_lock_acquire+0x14a/0x1d0 [ 1952.834391][T26039] ? __fget_files+0x206/0x3a0 [ 1952.839075][T26039] __sys_sendmsg+0x16e/0x220 [ 1952.843650][T26039] ? __pfx___sys_sendmsg+0x10/0x10 [ 1952.848749][T26039] do_syscall_64+0xcd/0x250 [ 1952.853242][T26039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.859121][T26039] RIP: 0033:0x7f3d1697e819 [ 1952.863515][T26039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1952.883103][T26039] RSP: 002b:00007f3d17764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1952.891496][T26039] RAX: ffffffffffffffda RBX: 00007f3d16b35fa0 RCX: 00007f3d1697e819 [ 1952.899448][T26039] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1952.907405][T26039] RBP: 00007f3d17764090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.915358][T26039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.923309][T26039] R13: 0000000000000000 R14: 00007f3d16b35fa0 R15: 00007fff7f3814f8 [ 1952.931280][T26039] [ 1952.993560][T24886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1953.181325][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.215108][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.233806][T26048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1953.246567][T24886] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1953.286207][T24886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.307445][T24886] usb 2-1: config 0 descriptor?? [ 1953.584106][T26056] netlink: 'syz.2.4980': attribute type 1 has an invalid length. [ 1953.592401][T26056] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1953.977128][T22655] gspca_se401: read req failed req 0x06 error -19 [ 1954.048806][T22655] usb 5-1: USB disconnect, device number 25 [ 1954.493050][T22655] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1954.574601][T24886] usb 2-1: string descriptor 0 read error: -71 [ 1954.589261][T26064] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1954.604468][T26064] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1954.615325][T24886] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 1954.654577][T24886] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 1954.682277][T24886] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 1954.690540][T24886] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 1954.706242][T24886] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 1954.909613][T24886] usb 2-1: USB disconnect, device number 39 [ 1954.979608][T22655] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.101378][T22655] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1955.156836][T22655] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1955.176204][T22655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.235637][T22655] usb 5-1: config 0 descriptor?? [ 1955.252496][T22655] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1955.274863][T22655] dvb-usb: bulk message failed: -22 (3/0) [ 1955.313125][T22655] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1955.331179][T22655] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1955.339139][T22655] usb 5-1: media controller created [ 1955.539559][T22655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1955.649033][T26084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1955.715690][T22655] dvb-usb: bulk message failed: -22 (6/0) [ 1955.726531][T26057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.735039][T22655] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1955.756604][T26057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.767511][T22655] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input117 [ 1955.806004][T22655] dvb-usb: schedule remote query interval to 150 msecs. [ 1955.914062][T22655] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1955.971133][ T5882] usb 5-1: USB disconnect, device number 26 [ 1955.985103][ T7092] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1955.990653][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1956.155948][ T7092] usb 3-1: device descriptor read/64, error -71 [ 1956.255383][T26092] qrtr: Invalid version 203 [ 1956.444462][ T7092] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1956.594197][ T7092] usb 3-1: device descriptor read/64, error -71 [ 1957.056132][T26096] futex_wake_op: syz.4.4991 tries to shift op by -1; fix this program [ 1957.091049][T26096] netlink: zone id is out of range [ 1957.098467][T26096] netlink: zone id is out of range [ 1957.117237][T26096] netlink: zone id is out of range [ 1957.138844][T26096] netlink: set zone limit has 4 unknown bytes [ 1957.148639][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 1957.171988][ T29] audit: type=1400 audit(1732143326.147:57031): avc: denied { prog_load } for pid=26093 comm="syz.4.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1957.192815][ T7092] usb usb3-port1: attempt power cycle [ 1957.303708][ T29] audit: type=1400 audit(1732143326.147:57032): avc: denied { bpf } for pid=26093 comm="syz.4.4991" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1957.377477][ T29] audit: type=1400 audit(1732143326.147:57033): avc: denied { perfmon } for pid=26093 comm="syz.4.4991" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1957.414472][ T29] audit: type=1400 audit(1732143326.147:57034): avc: denied { prog_run } for pid=26093 comm="syz.4.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1957.448872][ T29] audit: type=1400 audit(1732143326.175:57035): avc: denied { create } for pid=26093 comm="syz.4.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.480664][ T29] audit: type=1400 audit(1732143326.184:57036): avc: denied { write } for pid=26093 comm="syz.4.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.631352][ T7092] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1957.654193][ T7092] usb 3-1: device descriptor read/8, error -71 [ 1957.702065][T24886] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1957.708355][ T29] audit: type=1400 audit(1732143326.249:57037): avc: denied { create } for pid=26093 comm="syz.4.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.735747][ T29] audit: type=1400 audit(1732143326.352:57038): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1957.758694][ T29] audit: type=1400 audit(1732143326.362:57039): avc: denied { ioctl } for pid=26081 comm="syz.2.4988" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1957.865143][ T29] audit: type=1400 audit(1732143326.390:57040): avc: denied { ioctl } for pid=26081 comm="syz.2.4988" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1957.951989][ T7092] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1958.012024][ T7092] usb 3-1: device descriptor read/8, error -71 [ 1958.023923][T24886] usb 1-1: Using ep0 maxpacket: 16 [ 1958.111123][T24886] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1958.124203][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.132326][T24886] usb 1-1: Product: syz [ 1958.136769][T24886] usb 1-1: Manufacturer: syz [ 1958.141495][T24886] usb 1-1: SerialNumber: syz [ 1958.150932][T24886] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1958.159648][ T7092] usb usb3-port1: unable to enumerate USB device [ 1958.161702][T24886] r8152-cfgselector 1-1: config 0 descriptor?? [ 1959.891532][ T5882] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1960.216484][T26101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1960.284977][T26125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1960.289006][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.323354][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1960.339413][ T5882] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1960.359435][T26131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.375302][T26119] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4997'. [ 1960.393129][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.421753][T26131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.444344][ T5882] usb 2-1: config 0 descriptor?? [ 1960.452674][ T5882] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1960.472872][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 1960.482750][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1960.493118][ T5882] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1960.502056][ T5882] usb 2-1: media controller created [ 1960.512825][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1960.594387][T24886] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1960.746303][ T7092] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 1960.757460][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 1960.768930][ T5882] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1960.933028][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input118 [ 1960.951400][T26121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.961949][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 1961.012503][T24886] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1961.027739][T26121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.035618][T24886] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1961.069232][T24886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1961.080367][ T5882] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1961.119484][T24886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1961.146781][T24886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1961.184467][T24886] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1961.218539][T24886] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1961.229670][T24886] usb 3-1: Product: syz [ 1961.240028][T24886] usb 3-1: Manufacturer: syz [ 1961.245257][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 1961.252261][ T5882] dvb-usb: error while querying for an remote control event. [ 1961.273836][T24886] cdc_wdm 3-1:1.0: skipping garbage [ 1961.287098][T24886] cdc_wdm 3-1:1.0: skipping garbage [ 1961.297817][T24886] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1961.313467][ T5882] usb 2-1: USB disconnect, device number 40 [ 1961.352456][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1961.367245][T24886] cdc_wdm 3-1:1.0: Unknown control protocol [ 1961.887062][T26152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.117801][T26157] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 1962.125980][T26157] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5006'. [ 1962.498531][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 1962.498542][ T29] audit: type=1400 audit(1732143331.244:57337): avc: denied { create } for pid=26162 comm="syz.1.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1963.213138][ T29] audit: type=1400 audit(1732143331.273:57338): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1963.237478][ T29] audit: type=1400 audit(1732143331.273:57339): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1963.259660][ T29] audit: type=1400 audit(1732143331.273:57340): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1963.282638][ T29] audit: type=1400 audit(1732143331.273:57341): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1963.305425][ T29] audit: type=1400 audit(1732143331.273:57342): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1963.328372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1963.335033][ T29] audit: type=1400 audit(1732143331.338:57343): avc: denied { map_create } for pid=26158 comm="syz.7.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1963.355650][ T29] audit: type=1400 audit(1732143331.338:57344): avc: denied { read write } for pid=26158 comm="syz.7.5007" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1963.390323][ T29] audit: type=1400 audit(1732143331.347:57345): avc: denied { read write open } for pid=26158 comm="syz.7.5007" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1963.460203][T26163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.489351][ T29] audit: type=1400 audit(1732143331.357:57346): avc: denied { prog_load } for pid=26158 comm="syz.7.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1963.558387][ T5882] usb 3-1: USB disconnect, device number 31 [ 1963.776827][T26173] netlink: 'syz.4.5010': attribute type 1 has an invalid length. [ 1963.785053][T26173] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1963.795178][T16338] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1963.900193][T26177] netlink: 'syz.0.5012': attribute type 1 has an invalid length. [ 1963.936979][T26177] netlink: 512 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1964.040931][T16338] usb 2-1: Using ep0 maxpacket: 16 [ 1964.057055][T16338] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1964.066141][T16338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.078110][T16338] usb 2-1: Product: syz [ 1964.082312][T16338] usb 2-1: Manufacturer: syz [ 1964.086922][T16338] usb 2-1: SerialNumber: syz [ 1964.358788][T16338] usb 2-1: config 0 descriptor?? [ 1964.549624][T16338] usb 2-1: Found UVC 0.00 device syz (046d:0721) [ 1964.556073][T16338] usb 2-1: No valid video chain found. [ 1964.576633][T26181] lo speed is unknown, defaulting to 1000 [ 1964.797115][T16338] usb 2-1: USB disconnect, device number 41 [ 1965.641409][T26202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5019'. [ 1965.804873][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'. [ 1965.834533][T26212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1967.478270][T26236] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1967.931914][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 1967.931932][ T29] audit: type=1400 audit(1732143336.324:57585): avc: denied { create } for pid=26240 comm="syz.1.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1967.982687][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1967.996597][ T29] audit: type=1400 audit(1732143336.380:57586): avc: denied { ioctl } for pid=26240 comm="syz.1.5028" path="socket:[98546]" dev="sockfs" ino=98546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1968.027396][ T29] audit: type=1400 audit(1732143336.380:57587): avc: denied { create } for pid=26240 comm="syz.1.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1968.056654][ T29] audit: type=1400 audit(1732143336.380:57588): avc: denied { write } for pid=26240 comm="syz.1.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1968.197401][ T29] audit: type=1400 audit(1732143336.389:57589): avc: denied { read write } for pid=17376 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1968.311712][ T29] audit: type=1400 audit(1732143336.389:57590): avc: denied { open } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1968.386021][ T29] audit: type=1400 audit(1732143336.389:57591): avc: denied { ioctl } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1968.411802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.799664][ T29] audit: type=1400 audit(1732143336.445:57592): avc: denied { read write } for pid=24916 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1968.927367][ T29] audit: type=1400 audit(1732143336.445:57593): avc: denied { open } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1968.951878][ T29] audit: type=1400 audit(1732143336.445:57594): avc: denied { ioctl } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1971.133597][T16338] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1971.695309][T16338] usb 2-1: unable to read config index 0 descriptor/all [ 1971.719392][T16338] usb 2-1: can't read configurations, error -71 [ 1971.841065][T26287] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1973.317775][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 1973.317796][ T29] audit: type=1400 audit(1732143341.347:57783): avc: denied { read write } for pid=17851 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.353113][ T29] audit: type=1400 audit(1732143341.347:57784): avc: denied { open } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.378267][ T29] audit: type=1400 audit(1732143341.347:57785): avc: denied { ioctl } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.443001][ T29] audit: type=1400 audit(1732143341.356:57786): avc: denied { create } for pid=26290 comm="syz.0.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1973.717605][T26317] lo speed is unknown, defaulting to 1000 [ 1973.860337][ T29] audit: type=1400 audit(1732143341.366:57787): avc: denied { read write } for pid=18478 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.911925][ T29] audit: type=1400 audit(1732143341.366:57788): avc: denied { open } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.941622][ T29] audit: type=1400 audit(1732143341.366:57789): avc: denied { ioctl } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1973.977376][ T29] audit: type=1400 audit(1732143341.459:57790): avc: denied { read } for pid=26305 comm="syz.4.5044" dev="nsfs" ino=4026535057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1974.000543][ T29] audit: type=1400 audit(1732143341.459:57791): avc: denied { open } for pid=26305 comm="syz.4.5044" path="net:[4026535057]" dev="nsfs" ino=4026535057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1974.024287][ T29] audit: type=1400 audit(1732143341.459:57792): avc: denied { create } for pid=26305 comm="syz.4.5044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1974.331580][T26326] øÿÿÿ: renamed from bond_slave_0 (while UP) [ 1975.353542][T26347] tmpfs: Bad value for 'mpol' [ 1975.406516][T26347] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1975.841110][T26356] netlink: 'syz.4.5053': attribute type 1 has an invalid length. [ 1975.925049][T26356] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5053'. [ 1977.430704][T22655] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1978.692015][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 1978.692031][ T29] audit: type=1400 audit(1732143346.398:58027): avc: denied { ioctl } for pid=26353 comm="syz.1.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1978.841799][T26383] FAULT_INJECTION: forcing a failure. [ 1978.841799][T26383] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.854713][T26383] CPU: 1 UID: 0 PID: 26383 Comm: syz.7.5062 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1978.865141][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1978.875206][T26383] Call Trace: [ 1978.878488][T26383] [ 1978.881417][T26383] dump_stack_lvl+0x16c/0x1f0 [ 1978.886115][T26383] should_fail_ex+0x497/0x5b0 [ 1978.890826][T26383] should_failslab+0xc2/0x120 [ 1978.895522][T26383] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1978.900904][T26383] ? skb_clone+0x190/0x3f0 [ 1978.905332][T26383] skb_clone+0x190/0x3f0 [ 1978.909576][T26383] netlink_deliver_tap+0xab3/0xd90 [ 1978.914704][T26383] netlink_unicast+0x5e1/0x7f0 [ 1978.919481][T26383] ? __pfx_netlink_unicast+0x10/0x10 [ 1978.924786][T26383] netlink_sendmsg+0x8b8/0xd70 [ 1978.929573][T26383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1978.934881][T26383] ____sys_sendmsg+0xaaf/0xc90 [ 1978.939659][T26383] ? copy_msghdr_from_user+0x10b/0x160 [ 1978.945123][T26383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1978.950437][T26383] ___sys_sendmsg+0x135/0x1e0 [ 1978.955120][T26383] ? __pfx____sys_sendmsg+0x10/0x10 [ 1978.960342][T26383] ? irqentry_exit+0x3b/0x90 [ 1978.964944][T26383] ? lockdep_hardirqs_on+0x7c/0x110 [ 1978.970178][T26383] ? ___sys_sendmsg+0x24/0x1e0 [ 1978.974962][T26383] __sys_sendmmsg+0x201/0x420 [ 1978.979655][T26383] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1978.984893][T26383] ? fput+0x67/0x440 [ 1978.988818][T26383] ? ksys_write+0x1ba/0x250 [ 1978.993353][T26383] __x64_sys_sendmmsg+0x9c/0x100 [ 1978.998304][T26383] ? lockdep_hardirqs_on+0x7c/0x110 [ 1979.003525][T26383] do_syscall_64+0xcd/0x250 [ 1979.008040][T26383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.013949][T26383] RIP: 0033:0x7f3d1697e819 [ 1979.018378][T26383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1979.038091][T26383] RSP: 002b:00007f3d17722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1979.046518][T26383] RAX: ffffffffffffffda RBX: 00007f3d16b36160 RCX: 00007f3d1697e819 [ 1979.054496][T26383] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000b [ 1979.062488][T26383] RBP: 00007f3d17722090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.070439][T26383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.078393][T26383] R13: 0000000000000000 R14: 00007f3d16b36160 R15: 00007fff7f3814f8 [ 1979.086351][T26383] [ 1979.158705][ T29] audit: type=1400 audit(1732143346.463:58029): avc: denied { map_create } for pid=26377 comm="syz.0.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1979.331276][ T29] audit: type=1400 audit(1732143346.473:58030): avc: denied { map_read map_write } for pid=26377 comm="syz.0.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1979.414353][ T29] audit: type=1400 audit(1732143346.510:58031): avc: denied { create } for pid=26379 comm="syz.7.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1979.460056][ T29] audit: type=1400 audit(1732143346.510:58032): avc: denied { create } for pid=26379 comm="syz.7.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1979.647763][ T29] audit: type=1400 audit(1732143346.520:58033): avc: denied { create } for pid=26379 comm="syz.7.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1979.738756][ T29] audit: type=1400 audit(1732143346.520:58034): avc: denied { write } for pid=26379 comm="syz.7.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1979.825576][ T29] audit: type=1400 audit(1732143346.426:58028): avc: denied { ioctl } for pid=26353 comm="syz.1.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1979.908220][ T29] audit: type=1400 audit(1732143346.772:58035): avc: denied { prog_load } for pid=26377 comm="syz.0.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1979.982592][ T29] audit: type=1400 audit(1732143346.772:58036): avc: denied { bpf } for pid=26377 comm="syz.0.5061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1980.009134][T26395] delete_channel: no stack [ 1980.377211][T22655] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1980.410329][T22655] usb 2-1: can't read configurations, error -71 [ 1980.884190][ T5919] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1981.182671][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1981.211615][ T5919] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1981.424922][ T5919] usb 1-1: config 1 has no interface number 0 [ 1981.435220][ T5919] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1981.445779][ T5919] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1981.469919][ T5919] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1981.482135][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.556352][ T5919] usb 1-1: Product: syz [ 1981.581498][ T5919] usb 1-1: Manufacturer: syz [ 1981.586382][ T5919] usb 1-1: SerialNumber: syz [ 1981.849033][T22655] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1981.973744][T26398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1981.984612][ T5919] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 1982.155552][T22655] usb 2-1: Using ep0 maxpacket: 8 [ 1982.406197][T22655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1982.431781][ T5882] usb 1-1: USB disconnect, device number 31 [ 1982.512161][T22655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1982.554465][T22655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1982.569270][T22655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1982.582252][T22655] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1982.594868][T22655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.635242][T22655] usb 2-1: config 0 descriptor?? [ 1982.647834][T26414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1982.761614][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5075'. [ 1984.099033][T26448] cgroup: none used incorrectly [ 1984.171230][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 1984.171246][ T29] audit: type=1400 audit(1732143351.449:58272): avc: denied { mounton } for pid=26436 comm="syz.0.5076" path="/428" dev="tmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1984.326261][ T29] audit: type=1400 audit(1732143351.458:58273): avc: denied { create } for pid=26436 comm="syz.0.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1984.376425][ T29] audit: type=1400 audit(1732143351.458:58274): avc: denied { write } for pid=26436 comm="syz.0.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1984.511290][ T29] audit: type=1400 audit(1732143351.458:58275): avc: denied { read } for pid=26436 comm="syz.0.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1984.532264][ T29] audit: type=1400 audit(1732143351.468:58276): avc: denied { create } for pid=26440 comm="syz.2.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1984.572143][ T29] audit: type=1400 audit(1732143351.468:58277): avc: denied { connect } for pid=26440 comm="syz.2.5077" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1984.579173][T14332] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1984.636905][T16338] usb 2-1: USB disconnect, device number 45 [ 1984.654670][ T29] audit: type=1400 audit(1732143351.468:58278): avc: denied { create } for pid=26440 comm="syz.2.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1984.711244][ T29] audit: type=1400 audit(1732143351.468:58279): avc: denied { setopt } for pid=26440 comm="syz.2.5077" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1984.732381][ T29] audit: type=1400 audit(1732143351.477:58280): avc: denied { module_request } for pid=26440 comm="syz.2.5077" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1984.831995][ T29] audit: type=1400 audit(1732143351.477:58281): avc: denied { setopt } for pid=26413 comm="syz.1.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1985.707413][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.713964][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.207498][T26470] FAULT_INJECTION: forcing a failure. [ 1986.207498][T26470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.231461][T26470] CPU: 0 UID: 0 PID: 26470 Comm: syz.2.5084 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1986.241914][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1986.251955][T26470] Call Trace: [ 1986.255217][T26470] [ 1986.258129][T26470] dump_stack_lvl+0x16c/0x1f0 [ 1986.262798][T26470] should_fail_ex+0x497/0x5b0 [ 1986.267465][T26470] _copy_from_user+0x2e/0xd0 [ 1986.272042][T26470] eventfd_write+0xdc/0x5f0 [ 1986.276529][T26470] ? import_ubuf+0x1b6/0x220 [ 1986.281103][T26470] ? __pfx_eventfd_write+0x10/0x10 [ 1986.286198][T26470] ? selinux_file_permission+0x11f/0x580 [ 1986.291817][T26470] ? bpf_lsm_file_permission+0x9/0x10 [ 1986.297181][T26470] ? security_file_permission+0x71/0x210 [ 1986.302823][T26470] ? __pfx_eventfd_write+0x10/0x10 [ 1986.307935][T26470] vfs_writev+0x6da/0xdd0 [ 1986.312276][T26470] ? fpu__restore_sig+0x158/0x190 [ 1986.317330][T26470] ? __pfx_vfs_writev+0x10/0x10 [ 1986.322171][T26470] ? find_held_lock+0x2d/0x110 [ 1986.326941][T26470] ? __pfx_lock_release+0x10/0x10 [ 1986.331957][T26470] ? trace_lock_acquire+0x14a/0x1d0 [ 1986.337166][T26470] ? __fget_files+0x206/0x3a0 [ 1986.341847][T26470] ? do_writev+0x133/0x340 [ 1986.346255][T26470] do_writev+0x133/0x340 [ 1986.350491][T26470] ? __pfx_do_writev+0x10/0x10 [ 1986.355256][T26470] do_syscall_64+0xcd/0x250 [ 1986.359760][T26470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.365653][T26470] RIP: 0033:0x7fe03b77e819 [ 1986.370065][T26470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.389664][T26470] RSP: 002b:00007fe03c652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1986.398074][T26470] RAX: ffffffffffffffda RBX: 00007fe03b935fa0 RCX: 00007fe03b77e819 [ 1986.406038][T26470] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 [ 1986.414003][T26470] RBP: 00007fe03c652090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.421965][T26470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.429930][T26470] R13: 0000000000000000 R14: 00007fe03b935fa0 R15: 00007ffc0ccc6608 [ 1986.437905][T26470] [ 1987.963058][T26431] Bluetooth: hci4: command 0x0406 tx timeout [ 1989.402123][T26508] netlink: 'syz.4.5091': attribute type 12 has an invalid length. [ 1989.524140][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 1989.524157][ T29] audit: type=1400 audit(1732143356.528:58475): avc: denied { mounton } for pid=26501 comm="syz.7.5090" path="/76/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1989.554736][T26510] fuse: Bad value for 'fd' [ 1989.605004][T26510] delete_channel: no stack [ 1989.632003][ T29] audit: type=1400 audit(1732143356.584:58476): avc: denied { create } for pid=26474 comm="syz.1.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1989.686701][ T29] audit: type=1400 audit(1732143356.584:58477): avc: denied { connect } for pid=26474 comm="syz.1.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1989.794032][ T29] audit: type=1400 audit(1732143356.584:58478): avc: denied { write } for pid=26474 comm="syz.1.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1989.863101][ T29] audit: type=1400 audit(1732143356.594:58479): avc: denied { create } for pid=26501 comm="syz.7.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1989.884200][ T29] audit: type=1400 audit(1732143356.809:58480): avc: denied { read write } for pid=18478 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1989.910680][ T29] audit: type=1400 audit(1732143356.809:58481): avc: denied { read write open } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1989.944874][ T29] audit: type=1400 audit(1732143356.809:58482): avc: denied { ioctl } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1989.978000][ T29] audit: type=1400 audit(1732143356.818:58483): avc: denied { read write } for pid=17376 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1990.009067][ T29] audit: type=1400 audit(1732143356.818:58484): avc: denied { open } for pid=17376 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1990.159794][T26519] fuse: Bad value for 'fd' [ 1990.167592][T26519] delete_channel: no stack [ 1991.170495][T26496] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1991.170567][T14332] Bluetooth: hci4: command 0x0406 tx timeout [ 1991.980684][T26496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1991.991115][T26498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1992.497591][T24886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1992.523915][T26532] netlink: 'syz.4.5097': attribute type 1 has an invalid length. [ 1992.675538][T26532] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1992.969054][T24886] usb 2-1: Using ep0 maxpacket: 32 [ 1992.979566][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.037661][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.236181][T24886] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1993.449809][T14332] Bluetooth: hci4: command 0x0406 tx timeout [ 1994.012982][T24886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.027134][T24886] usb 2-1: config 0 descriptor?? [ 1994.033046][T24886] usb 2-1: can't set config #0, error -71 [ 1994.129846][T24886] usb 2-1: USB disconnect, device number 46 [ 1994.199749][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1994.487766][T26552] FAULT_INJECTION: forcing a failure. [ 1994.487766][T26552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.501073][T26552] CPU: 1 UID: 0 PID: 26552 Comm: syz.7.5099 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 1994.511502][T26552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1994.521559][T26552] Call Trace: [ 1994.524841][T26552] [ 1994.527779][T26552] dump_stack_lvl+0x16c/0x1f0 [ 1994.532472][T26552] should_fail_ex+0x497/0x5b0 [ 1994.537164][T26552] _copy_from_user+0x2e/0xd0 [ 1994.541765][T26552] copy_msghdr_from_user+0x99/0x160 [ 1994.546977][T26552] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1994.552805][T26552] ___sys_sendmsg+0xff/0x1e0 [ 1994.557410][T26552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1994.562625][T26552] ? __pfx_lock_release+0x10/0x10 [ 1994.567659][T26552] ? trace_lock_acquire+0x14a/0x1d0 [ 1994.572885][T26552] ? __fget_files+0x206/0x3a0 [ 1994.577580][T26552] __sys_sendmsg+0x16e/0x220 [ 1994.582178][T26552] ? __pfx___sys_sendmsg+0x10/0x10 [ 1994.587315][T26552] do_syscall_64+0xcd/0x250 [ 1994.591852][T26552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.597771][T26552] RIP: 0033:0x7f3d1697e819 [ 1994.602190][T26552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1994.621807][T26552] RSP: 002b:00007f3d17722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.630235][T26552] RAX: ffffffffffffffda RBX: 00007f3d16b36160 RCX: 00007f3d1697e819 [ 1994.638209][T26552] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1994.646184][T26552] RBP: 00007f3d17722090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.654161][T26552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.662132][T26552] R13: 0000000000000000 R14: 00007f3d16b36160 R15: 00007fff7f3814f8 [ 1994.670121][T26552] [ 1994.776853][ T5919] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1994.882608][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 1994.882625][ T29] audit: type=1400 audit(1732143361.533:58629): avc: denied { execmem } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1995.033250][ T29] audit: type=1400 audit(1732143361.645:58630): avc: denied { ioctl } for pid=26544 comm="syz.2.5101" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1995.901210][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.922843][ T29] audit: type=1400 audit(1732143361.673:58631): avc: denied { prog_load } for pid=26556 comm="syz.4.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1996.277623][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1996.282571][ T29] audit: type=1400 audit(1732143361.673:58632): avc: denied { bpf } for pid=26556 comm="syz.4.5103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1996.338243][ T5919] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1996.714181][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.729792][ T29] audit: type=1400 audit(1732143361.757:58633): avc: denied { open } for pid=26553 comm="syz.1.5102" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1996.801790][ T5919] usb 3-1: config 0 descriptor?? [ 1996.829421][ T5919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1996.852347][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1996.858522][ T29] audit: type=1400 audit(1732143361.776:58634): avc: denied { create } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1996.906414][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1997.020488][ T29] audit: type=1400 audit(1732143361.785:58635): avc: denied { create } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1997.054891][ T29] audit: type=1400 audit(1732143361.795:58636): avc: denied { create } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1997.088981][ T29] audit: type=1400 audit(1732143361.795:58637): avc: denied { connect } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1997.089399][ T5919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1997.120604][ T29] audit: type=1400 audit(1732143361.795:58638): avc: denied { write } for pid=26553 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1997.220589][T26545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.232852][T26545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.412136][ T5919] usb 3-1: media controller created [ 1997.497064][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1997.548901][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 1997.581463][ T5919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1997.596259][T26573] netlink: 'syz.7.5107': attribute type 4 has an invalid length. [ 1997.598853][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input119 [ 1997.628994][ T5919] dvb-usb: schedule remote query interval to 150 msecs. [ 1997.630147][T26573] netlink: 'syz.7.5107': attribute type 17 has an invalid length. [ 1997.673910][ T5919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1998.121427][ T964] dvb-usb: bulk message failed: -22 (1/0) [ 1998.146950][ T5919] usb 3-1: USB disconnect, device number 32 [ 1998.457010][ T964] dvb-usb: error while querying for an remote control event. [ 1998.571580][ T5919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1998.639047][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 1998.909327][ T964] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1999.297728][ T964] usb 1-1: Using ep0 maxpacket: 32 [ 1999.319011][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.348671][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.369100][ T964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1999.388694][ T5919] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1999.427324][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.457938][ T964] usb 1-1: config 0 descriptor?? [ 1999.472745][ T964] hub 1-1:0.0: USB hub found [ 1999.572112][ T5919] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 1999.607832][ T5919] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1999.638011][ T5919] usb 5-1: can't read configurations, error -61 [ 1999.697204][ T964] hub 1-1:0.0: 1 port detected [ 2000.412544][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 2000.412562][ T29] audit: type=1400 audit(1732143366.705:58862): avc: denied { ioctl } for pid=26587 comm="syz.4.5113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2000.479199][ T5919] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2000.529871][ T29] audit: type=1400 audit(1732143366.705:58863): avc: denied { read write } for pid=24916 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2000.573152][ T29] audit: type=1400 audit(1732143366.705:58864): avc: denied { read write open } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2000.637004][ T29] audit: type=1400 audit(1732143366.705:58865): avc: denied { ioctl } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2000.690421][ T29] audit: type=1400 audit(1732143366.743:58866): avc: denied { ioctl } for pid=26582 comm="syz.0.5110" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2000.724830][ T29] audit: type=1400 audit(1732143366.799:58867): avc: denied { ioctl } for pid=26587 comm="syz.4.5113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2001.527296][ T29] audit: type=1400 audit(1732143366.808:58868): avc: denied { execmem } for pid=26611 comm="syz.7.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2001.601695][ T964] hub 1-1:0.0: activate --> -90 [ 2001.611836][ T29] audit: type=1400 audit(1732143366.846:58869): avc: denied { read write } for pid=18478 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.636507][ T29] audit: type=1400 audit(1732143366.846:58870): avc: denied { open } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.660656][T26618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5119'. [ 2001.670617][ T5919] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 2001.719034][ T5919] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2001.753209][ T5919] usb 5-1: can't read configurations, error -61 [ 2001.760516][ T29] audit: type=1400 audit(1732143366.846:58871): avc: denied { ioctl } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.791457][ T5919] usb usb5-port1: attempt power cycle [ 2001.909238][ T7092] usb 1-1: USB disconnect, device number 32 [ 2001.915553][ T964] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2002.122471][T26620] sg_write: process 274 (syz.7.5120) changed security contexts after opening file descriptor, this is not allowed. [ 2002.221708][ T5919] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2002.463216][ T5919] usb 5-1: device not accepting address 29, error -71 [ 2002.596244][T24886] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 2002.907437][T24886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.935079][T24886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2002.945682][T24886] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2002.956198][T24886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.106042][T26635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5123'. [ 2003.107283][T24886] usb 2-1: config 0 descriptor?? [ 2003.242383][T24886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2003.269509][T24886] dvb-usb: bulk message failed: -22 (3/0) [ 2003.299545][T24886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2003.309979][T24886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2003.318383][T24886] usb 2-1: media controller created [ 2003.325262][T24886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2003.339887][T24886] dvb-usb: bulk message failed: -22 (6/0) [ 2003.346889][T24886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2003.358947][T24886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input120 [ 2003.376583][T24886] dvb-usb: schedule remote query interval to 150 msecs. [ 2003.385929][T24886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2003.458050][T26643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2003.471750][T26623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.481848][T26623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.492193][T26643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2003.511952][T26643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5126'. [ 2003.534492][ T7092] usb 2-1: USB disconnect, device number 47 [ 2003.546080][ T7092] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2003.754391][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5127'. [ 2006.214074][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 2006.214107][ T29] audit: type=1400 audit(1732143372.075:59076): avc: denied { create } for pid=26652 comm="syz.4.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2007.112458][ T29] audit: type=1400 audit(1732143372.496:59077): avc: denied { create } for pid=26652 comm="syz.4.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2007.132346][ T29] audit: type=1400 audit(1732143372.589:59078): avc: denied { read } for pid=26652 comm="syz.4.5130" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2007.156290][ T29] audit: type=1400 audit(1732143372.589:59079): avc: denied { open } for pid=26652 comm="syz.4.5130" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2007.180698][ T29] audit: type=1400 audit(1732143372.589:59080): avc: denied { ioctl } for pid=26652 comm="syz.4.5130" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2007.214653][ T29] audit: type=1400 audit(1732143372.627:59081): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2007.289062][ T29] audit: type=1400 audit(1732143372.627:59082): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2007.375188][T16338] libceph: connect (1)[c::]:6789 error -101 [ 2007.382146][T16338] libceph: mon0 (1)[c::]:6789 connect error [ 2007.385433][ T29] audit: type=1400 audit(1732143372.664:59083): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2007.421693][T16338] libceph: connect (1)[c::]:6789 error -101 [ 2007.471886][T16338] libceph: mon0 (1)[c::]:6789 connect error [ 2007.600025][T26660] ceph: No mds server is up or the cluster is laggy [ 2008.150088][T16338] libceph: connect (1)[c::]:6789 error -101 [ 2008.157301][ T29] audit: type=1400 audit(1732143372.664:59084): avc: denied { append open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2008.181095][T16338] libceph: mon0 (1)[c::]:6789 connect error [ 2008.251599][ T29] audit: type=1400 audit(1732143372.664:59085): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=19 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2009.898308][T26687] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2010.119698][T26698] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5140'. [ 2010.149466][T26699] delete_channel: no stack [ 2011.848051][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 2011.848069][ T29] audit: type=1400 audit(1732143377.406:59309): avc: denied { mount } for pid=26716 comm="syz.4.5146" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2011.924558][ T29] audit: type=1400 audit(1732143377.444:59310): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2011.947032][ T29] audit: type=1400 audit(1732143377.444:59311): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.969622][ T29] audit: type=1400 audit(1732143377.444:59312): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2011.993356][ T29] audit: type=1400 audit(1732143377.444:59313): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2012.016159][ T29] audit: type=1400 audit(1732143377.444:59314): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2012.459927][T26717] nfs4: Bad value for 'source' [ 2012.482166][ T29] audit: type=1400 audit(1732143377.453:59315): avc: denied { connect } for pid=26711 comm="syz.2.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2012.803254][ T29] audit: type=1400 audit(1732143377.453:59316): avc: denied { name_connect } for pid=26711 comm="syz.2.5145" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 2012.870589][ T29] audit: type=1400 audit(1732143377.463:59317): avc: denied { write } for pid=26711 comm="syz.2.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2012.933431][ T29] audit: type=1400 audit(1732143377.547:59318): avc: denied { read } for pid=26716 comm="syz.4.5146" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2014.157577][T24886] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2014.949700][T26763] delete_channel: no stack [ 2015.038914][T26757] lo speed is unknown, defaulting to 1000 [ 2015.053753][T24886] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 2015.088420][T24886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.143869][T24886] usb 3-1: config 0 has no interface number 0 [ 2015.161383][T24886] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2015.182544][T24886] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2015.196382][T24886] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2015.207034][T24886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.221200][T24886] usb 3-1: config 0 descriptor?? [ 2015.279042][T24886] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2015.787349][ T964] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2016.012783][ T964] usb 1-1: Using ep0 maxpacket: 32 [ 2016.374097][ T964] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=db.ef [ 2016.389264][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.402194][ T964] usb 1-1: Product: syz [ 2016.414732][ T964] usb 1-1: Manufacturer: syz [ 2016.418883][T12013] usb 3-1: Failed to submit usb control message: -110 [ 2016.424261][ T964] usb 1-1: SerialNumber: syz [ 2016.439356][ T964] usb 1-1: config 0 descriptor?? [ 2016.446828][T12013] usb 3-1: unable to send the bmi data to the device: -110 [ 2016.468863][ T964] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 2016.505475][T12013] usb 3-1: unable to get target info from device [ 2016.511850][T12013] usb 3-1: could not get target info (-110) [ 2016.518617][ T964] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 2016.541064][ T7092] usb 3-1: USB disconnect, device number 33 [ 2016.549432][T12013] usb 3-1: could not probe fw (-110) [ 2016.719591][T26767] tmpfs: Bad value for 'mpol' [ 2016.726830][T26767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2016.735648][T26767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.745695][ T964] usb 1-1: USB disconnect, device number 33 [ 2016.761596][T24886] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2016.937259][T24886] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2016.945975][T24886] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2016.956643][T24886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2016.965697][T24886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2016.976724][T24886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2016.992513][T24886] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2017.002554][T24886] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2017.010635][T24886] usb 2-1: Product: syz [ 2017.014808][T24886] usb 2-1: Manufacturer: syz [ 2017.028968][T24886] cdc_wdm 2-1:1.0: skipping garbage [ 2017.034235][T24886] cdc_wdm 2-1:1.0: skipping garbage [ 2017.041594][T24886] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2017.047614][T24886] cdc_wdm 2-1:1.0: Unknown control protocol [ 2017.199325][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 2017.199342][ T29] audit: type=1400 audit(1732143382.392:59636): avc: denied { ioctl } for pid=26792 comm="syz.4.5166" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2017.347629][ T29] audit: type=1400 audit(1732143382.402:59637): avc: denied { read write } for pid=24916 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.437810][ T29] audit: type=1400 audit(1732143382.402:59638): avc: denied { read write open } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.547122][ T29] audit: type=1400 audit(1732143382.402:59639): avc: denied { ioctl } for pid=24916 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.684093][ T29] audit: type=1400 audit(1732143382.495:59640): avc: denied { create } for pid=26792 comm="syz.4.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2018.664541][ T29] audit: type=1400 audit(1732143382.514:59641): avc: denied { create } for pid=26783 comm="syz.1.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2018.713056][ T29] audit: type=1400 audit(1732143382.514:59642): avc: denied { ioctl } for pid=26783 comm="syz.1.5163" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2018.786089][ T29] audit: type=1400 audit(1732143382.514:59643): avc: denied { read write } for pid=18191 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2018.827231][T26813] FAULT_INJECTION: forcing a failure. [ 2018.827231][T26813] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.872997][T26813] CPU: 0 UID: 0 PID: 26813 Comm: syz.0.5171 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 2018.883462][T26813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2018.893529][T26813] Call Trace: [ 2018.896818][T26813] [ 2018.899761][T26813] dump_stack_lvl+0x16c/0x1f0 [ 2018.904463][T26813] should_fail_ex+0x497/0x5b0 [ 2018.909159][T26813] ? fs_reclaim_acquire+0xae/0x150 [ 2018.914289][T26813] should_failslab+0xc2/0x120 [ 2018.918987][T26813] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2018.924386][T26813] ? getname_flags.part.0+0x4c/0x550 [ 2018.929702][T26813] getname_flags.part.0+0x4c/0x550 [ 2018.934840][T26813] getname+0x8d/0xe0 [ 2018.938755][T26813] path_setxattrat+0x261/0x290 [ 2018.943541][T26813] ? __pfx_path_setxattrat+0x10/0x10 [ 2018.948867][T26813] ? fput+0x67/0x440 [ 2018.952781][T26813] ? ksys_write+0x1ba/0x250 [ 2018.957294][T26813] ? __pfx_ksys_write+0x10/0x10 [ 2018.962163][T26813] __x64_sys_lsetxattr+0xc9/0x140 [ 2018.967208][T26813] ? do_syscall_64+0x91/0x250 [ 2018.971899][T26813] ? lockdep_hardirqs_on+0x7c/0x110 [ 2018.974147][ T29] audit: type=1400 audit(1732143382.514:59644): avc: denied { read write open } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2018.977114][T26813] do_syscall_64+0xcd/0x250 [ 2018.977139][T26813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.001526][ C1] vkms_vblank_simulate: vblank timer overrun [ 2019.005997][T26813] RIP: 0033:0x7fd6bfd7e819 [ 2019.022302][T26813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2019.041926][T26813] RSP: 002b:00007fd6c0b52038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2019.050338][T26813] RAX: ffffffffffffffda RBX: 00007fd6bff35fa0 RCX: 00007fd6bfd7e819 [ 2019.058300][T26813] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 2019.066264][T26813] RBP: 00007fd6c0b52090 R08: 0000000000000000 R09: 0000000000000000 [ 2019.074228][T26813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2019.082188][T26813] R13: 0000000000000000 R14: 00007fd6bff35fa0 R15: 00007ffdcbd3a6c8 [ 2019.090163][T26813] [ 2019.140971][T26818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2020.243659][ T964] usb 2-1: USB disconnect, device number 48 [ 2020.250540][T26827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32765 sclass=netlink_route_socket pid=26827 comm=syz.7.5172 [ 2020.778256][T26829] lo speed is unknown, defaulting to 1000 [ 2021.149430][T26842] netlink: 'syz.7.5178': attribute type 1 has an invalid length. [ 2021.171489][T26836] netlink: 'syz.4.5176': attribute type 1 has an invalid length. [ 2021.196920][T26836] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5176'. [ 2022.247906][T26845] netlink: 'syz.7.5178': attribute type 2 has an invalid length. [ 2022.268144][T26845] netlink: 'syz.7.5178': attribute type 8 has an invalid length. [ 2022.321546][T26845] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5178'. [ 2022.565858][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 2022.565874][ T29] audit: type=1400 audit(1732143387.425:59840): avc: denied { read write } for pid=18478 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2022.596466][ C1] vkms_vblank_simulate: vblank timer overrun [ 2022.781388][ T29] audit: type=1400 audit(1732143387.425:59841): avc: denied { open } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2022.854709][ T29] audit: type=1400 audit(1732143387.425:59842): avc: denied { ioctl } for pid=18478 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2022.880491][ C1] vkms_vblank_simulate: vblank timer overrun [ 2022.925639][ T29] audit: type=1400 audit(1732143387.471:59843): avc: denied { read write } for pid=18191 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2023.002871][ T29] audit: type=1400 audit(1732143387.471:59844): avc: denied { open } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2023.025641][ T5882] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2023.026288][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.113186][ T29] audit: type=1400 audit(1732143387.471:59845): avc: denied { ioctl } for pid=18191 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4252 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2023.175638][ T29] audit: type=1400 audit(1732143387.509:59846): avc: denied { read write } for pid=17851 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2023.199998][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.218262][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 2023.223218][T26867] [ 2023.225766][T26867] ====================================================== [ 2023.232784][T26867] WARNING: possible circular locking dependency detected [ 2023.239798][T26867] 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Not tainted [ 2023.246544][T26867] ------------------------------------------------------ [ 2023.253541][T26867] syz.4.5186/26867 is trying to acquire lock: [ 2023.259588][T26867] ffff88802626f170 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.269959][T26867] [ 2023.269959][T26867] but task is already holding lock: [ 2023.277315][T26867] ffff88802626ec40 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 2023.288717][T26867] [ 2023.288717][T26867] which lock already depends on the new lock. [ 2023.288717][T26867] [ 2023.299109][T26867] [ 2023.299109][T26867] the existing dependency chain (in reverse order) is: [ 2023.308109][T26867] [ 2023.308109][T26867] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 2023.316712][T26867] blk_mq_submit_bio+0x1fc4/0x24c0 [ 2023.322341][T26867] __submit_bio+0x384/0x540 [ 2023.327367][T26867] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 2023.333523][T26867] submit_bio_noacct+0x93a/0x1e10 [ 2023.339081][T26867] block_read_full_folio+0x812/0xa50 [ 2023.344897][T26867] filemap_read_folio+0xc6/0x2a0 [ 2023.350347][T26867] filemap_get_pages+0x1560/0x1be0 [ 2023.355976][T26867] filemap_read+0x3ca/0xd70 [ 2023.360995][T26867] blkdev_read_iter+0x187/0x480 [ 2023.366361][T26867] vfs_read+0x87f/0xbe0 [ 2023.371029][T26867] ksys_read+0x12b/0x250 [ 2023.375785][T26867] do_syscall_64+0xcd/0x250 [ 2023.380798][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.387210][T26867] [ 2023.387210][T26867] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 2023.395720][T26867] down_read+0x9a/0x330 [ 2023.400388][T26867] filemap_fault+0x2e2/0x2820 [ 2023.405585][T26867] __do_fault+0x10a/0x490 [ 2023.410423][T26867] do_pte_missing+0x1a8/0x3e70 [ 2023.415709][T26867] __handle_mm_fault+0x100a/0x2a10 [ 2023.421508][T26867] handle_mm_fault+0x3fa/0xaa0 [ 2023.426785][T26867] __get_user_pages+0x8d9/0x3b50 [ 2023.432236][T26867] faultin_page_range+0x24a/0x980 [ 2023.437777][T26867] do_madvise+0x4db/0x760 [ 2023.442612][T26867] __x64_sys_madvise+0xa9/0x110 [ 2023.447986][T26867] do_syscall_64+0xcd/0x250 [ 2023.453015][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.459444][T26867] [ 2023.459444][T26867] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 2023.466996][T26867] __might_fault+0x11b/0x190 [ 2023.472098][T26867] _copy_from_user+0x29/0xd0 [ 2023.477205][T26867] __blk_trace_setup+0xa8/0x180 [ 2023.482566][T26867] blk_trace_ioctl+0x163/0x290 [ 2023.487841][T26867] blkdev_ioctl+0x109/0x6d0 [ 2023.492858][T26867] __x64_sys_ioctl+0x190/0x200 [ 2023.498139][T26867] do_syscall_64+0xcd/0x250 [ 2023.503152][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.509567][T26867] [ 2023.509567][T26867] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 2023.517399][T26867] __mutex_lock+0x19b/0xa60 [ 2023.522428][T26867] blk_register_queue+0x13c/0x550 [ 2023.527964][T26867] add_disk_fwnode+0x785/0x1300 [ 2023.533349][T26867] brd_alloc.isra.0+0x5a2/0x840 [ 2023.538715][T26867] brd_init+0x12b/0x1d0 [ 2023.543383][T26867] do_one_initcall+0x128/0x700 [ 2023.548750][T26867] kernel_init_freeable+0x5c7/0x900 [ 2023.554476][T26867] kernel_init+0x1c/0x2b0 [ 2023.559322][T26867] ret_from_fork+0x45/0x80 [ 2023.564249][T26867] ret_from_fork_asm+0x1a/0x30 [ 2023.569532][T26867] [ 2023.569532][T26867] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 2023.577170][T26867] __lock_acquire+0x249e/0x3c40 [ 2023.582532][T26867] lock_acquire.part.0+0x11b/0x380 [ 2023.588155][T26867] __mutex_lock+0x19b/0xa60 [ 2023.593172][T26867] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.599666][T26867] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 2023.605723][T26867] nbd_start_device+0x15b/0xd70 [ 2023.611084][T26867] nbd_ioctl+0x21a/0xfd0 [ 2023.615831][T26867] blkdev_ioctl+0x276/0x6d0 [ 2023.620848][T26867] __x64_sys_ioctl+0x190/0x200 [ 2023.626128][T26867] do_syscall_64+0xcd/0x250 [ 2023.631138][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.637547][T26867] [ 2023.637547][T26867] other info that might help us debug this: [ 2023.637547][T26867] [ 2023.647762][T26867] Chain exists of: [ 2023.647762][T26867] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53 [ 2023.647762][T26867] [ 2023.662541][T26867] Possible unsafe locking scenario: [ 2023.662541][T26867] [ 2023.669972][T26867] CPU0 CPU1 [ 2023.675318][T26867] ---- ---- [ 2023.680664][T26867] lock(&q->q_usage_counter(io)#53); [ 2023.686028][T26867] lock(mapping.invalidate_lock#2); [ 2023.693825][T26867] lock(&q->q_usage_counter(io)#53); [ 2023.701705][T26867] lock(&q->sysfs_lock); [ 2023.706019][T26867] [ 2023.706019][T26867] *** DEADLOCK *** [ 2023.706019][T26867] [ 2023.714141][T26867] 4 locks held by syz.4.5186/26867: [ 2023.719317][T26867] #0: ffff8880268b4198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 2023.728622][T26867] #1: ffff8880268b40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 2023.739401][T26867] #2: ffff88802626ec40 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 2023.751237][T26867] #3: ffff88802626ec78 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 2023.763498][T26867] [ 2023.763498][T26867] stack backtrace: [ 2023.769382][T26867] CPU: 1 UID: 0 PID: 26867 Comm: syz.4.5186 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 2023.779808][T26867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2023.789856][T26867] Call Trace: [ 2023.793125][T26867] [ 2023.796051][T26867] dump_stack_lvl+0x116/0x1f0 [ 2023.800734][T26867] print_circular_bug+0x419/0x5d0 [ 2023.805754][T26867] check_noncircular+0x31a/0x400 [ 2023.810684][T26867] ? __pfx_check_noncircular+0x10/0x10 [ 2023.816139][T26867] ? add_lock_to_list+0x17d/0x390 [ 2023.821164][T26867] __lock_acquire+0x249e/0x3c40 [ 2023.826010][T26867] ? __pfx___lock_acquire+0x10/0x10 [ 2023.831214][T26867] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2023.837024][T26867] ? stack_depot_save_flags+0x31b/0x8f0 [ 2023.842579][T26867] lock_acquire.part.0+0x11b/0x380 [ 2023.847692][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.853842][T26867] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2023.859466][T26867] ? rcu_is_watching+0x12/0xc0 [ 2023.864225][T26867] ? trace_lock_acquire+0x14a/0x1d0 [ 2023.869416][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.875649][T26867] ? lock_acquire+0x2f/0xb0 [ 2023.880142][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.886290][T26867] __mutex_lock+0x19b/0xa60 [ 2023.890793][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.896939][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.903084][T26867] ? __pfx___mutex_lock+0x10/0x10 [ 2023.908110][T26867] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.914251][T26867] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 2023.920224][T26867] ? __mutex_trylock_common+0xea/0x250 [ 2023.925676][T26867] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2023.931560][T26867] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 2023.937268][T26867] ? rcu_is_watching+0x12/0xc0 [ 2023.942022][T26867] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 2023.948426][T26867] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2023.954308][T26867] ? nbd_ioctl+0x151/0xfd0 [ 2023.958727][T26867] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 2023.964447][T26867] ? __pfx___mutex_lock+0x10/0x10 [ 2023.969475][T26867] ? trace_contention_end+0xea/0x140 [ 2023.974759][T26867] ? __mutex_lock+0x1cc/0xa60 [ 2023.979440][T26867] ? nbd_ioctl+0x151/0xfd0 [ 2023.983848][T26867] ? __pfx___mutex_lock+0x10/0x10 [ 2023.988870][T26867] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 2023.994407][T26867] nbd_start_device+0x15b/0xd70 [ 2023.999272][T26867] ? bpf_lsm_capable+0x9/0x10 [ 2024.003953][T26867] nbd_ioctl+0x21a/0xfd0 [ 2024.008191][T26867] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 2024.014694][T26867] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 2024.021210][T26867] ? __pfx_nbd_ioctl+0x10/0x10 [ 2024.026327][T26867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2024.033185][T26867] ? __pfx_lock_release+0x10/0x10 [ 2024.038207][T26867] ? trace_lock_acquire+0x14a/0x1d0 [ 2024.043405][T26867] ? __pfx_nbd_ioctl+0x10/0x10 [ 2024.048165][T26867] blkdev_ioctl+0x276/0x6d0 [ 2024.052667][T26867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2024.057686][T26867] ? selinux_file_ioctl+0x180/0x270 [ 2024.062890][T26867] ? selinux_file_ioctl+0xb4/0x270 [ 2024.067997][T26867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2024.073025][T26867] __x64_sys_ioctl+0x190/0x200 [ 2024.077789][T26867] do_syscall_64+0xcd/0x250 [ 2024.082283][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.088172][T26867] RIP: 0033:0x7f67eed7e819 [ 2024.092576][T26867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2024.112180][T26867] RSP: 002b:00007f67efb2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2024.120587][T26867] RAX: ffffffffffffffda RBX: 00007f67eef35fa0 RCX: 00007f67eed7e819 [ 2024.128549][T26867] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 2024.136506][T26867] RBP: 00007f67eedf175e R08: 0000000000000000 R09: 0000000000000000 [ 2024.144462][T26867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2024.152418][T26867] R13: 0000000000000000 R14: 00007f67eef35fa0 R15: 00007fff9ec9a568 [ 2024.160383][T26867] [ 2024.163509][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.170543][ T29] audit: type=1400 audit(1732143387.509:59847): avc: denied { open } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2024.195634][ T29] audit: type=1400 audit(1732143387.509:59848): avc: denied { ioctl } for pid=17851 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2024.221615][ T29] audit: type=1400 audit(1732143387.556:59849): avc: denied { create } for pid=26859 comm="syz.0.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2024.555327][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.606306][ T5882] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2024.640238][ T5882] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 2024.647736][T14332] block nbd4: Receive control failed (result -32) [ 2024.649623][T26431] block nbd4: Receive control failed (result -32) [ 2024.672425][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.683042][ T5882] usb 3-1: config 0 descriptor?? [ 2024.695736][T26870] block nbd4: shutting down sockets [ 2025.663159][ T5882] usb 3-1: USB disconnect, device number 34 [ 2029.550046][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 2029.550062][ T29] audit: type=1400 audit(1732143393.963:59930): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2029.578519][ T29] audit: type=1400 audit(1732143393.963:59931): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2029.600280][ T29] audit: type=1400 audit(1732143393.963:59932): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2029.623053][ T29] audit: type=1400 audit(1732143393.963:59933): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2029.646707][ T29] audit: type=1400 audit(1732143393.963:59934): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2029.670644][ T29] audit: type=1400 audit(1732143394.019:59935): avc: denied { read } for pid=5187 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2029.693828][ T29] audit: type=1400 audit(1732143394.019:59936): avc: denied { search } for pid=5187 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2029.716412][ T29] audit: type=1400 audit(1732143394.019:59937): avc: denied { append } for pid=5187 comm="syslogd" name="messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2029.741402][ T29] audit: type=1400 audit(1732143394.019:59938): avc: denied { open } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2029.765698][ T29] audit: type=1400 audit(1732143394.019:59939): avc: denied { getattr } for pid=5187 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=20 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1