last executing test programs: 10.757116223s ago: executing program 2 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/33, 0x21}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="b5e392d73a") write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf9c, 0x71}}}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "a3f8b8d763de9683b5062302cc16"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c8c0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='reiserfs\x00', 0x0, &(0x7f0000000400)='usrquota') r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000500)={0x94, 0x0, 0x1}) 6.481560354s ago: executing program 3 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000c501"]) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 6.481384477s ago: executing program 0 (id=284): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) 6.394941312s ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r2=>0x0}) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getpeername(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003\x00'], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.246285426s ago: executing program 4 (id=288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x29, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 6.19378813s ago: executing program 3 (id=289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="030000"], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) r3 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x3709}) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000400)=0x2, 0x4) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) r5 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000180)=0x5) mq_timedreceive(r4, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000c40)="9d", 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000090601caf5a265141a4d65e47fd50200178429a1c321a495e9c3c3f867228163"], 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"f5c297a5950776a4235cb78e8a48dbfa0c3f2799d904bde64250934f0ebeea38"}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f0000000340)=0x9e0) 6.129444872s ago: executing program 2 (id=290): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1000000276, 0x410000) ioctl$FIBMAP(r0, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '.\x00'}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(r3, r3, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x10800) write$sndseq(r4, &(0x7f0000000280)=[{0x2, 0x2, 0x1, 0x0, @time={0x3}, {0x0, 0x4}, {0xd, 0x4b}, @queue={0x2, {0xffffffff, 0x4}}}, {0x4, 0x6b, 0x0, 0x7f, @time={0xd, 0xfffffff8}, {0x9, 0x14}, {0x2, 0x3}, @raw32={[0x3, 0x0, 0xb3]}}, {0x6, 0x9, 0x7, 0x1, @tick=0xf0a, {0x0, 0x92}, {0x7, 0x2}, @control={0x9, 0x6, 0x1}}, {0x6, 0xe, 0xb, 0x5, @tick=0x4, {0x8, 0x9}, {0x7f, 0x5d}, @queue={0xff, {0x401, 0x1ff}}}, {0x3, 0xf3, 0x7, 0x8, @tick=0x5, {0x9, 0x87}, {0x8, 0x8}, @connect={{0x2, 0xc}, {0x3, 0x88}}}, {0x6, 0x5, 0x8, 0xa, @tick=0xd, {0x4, 0x1}, {0x6, 0x3}, @raw32={[0x4, 0xf2, 0x7]}}, {0xb6, 0x0, 0xaa, 0x8d, @time={0xcb3, 0x1a9}, {0x2, 0x4}, {0x3}, @quote={{0x7, 0x6}, 0x4, &(0x7f0000000240)={0x2, 0x3, 0x9, 0x7, @time={0x80000000, 0x7}, {0x0, 0x6}, {0x7, 0x8}, @time=@time={0x7f, 0x7}}}}, {0x5, 0x6, 0xf, 0x8, @tick=0x5, {0xdb, 0x7f}, {0x2, 0x6}, @result={0x1, 0xbc}}, {0xff, 0x4f, 0x8, 0x50, @tick=0x3, {0xd, 0x80}, {0x5, 0x3}, @time=@tick=0x6}, {0x1, 0x0, 0x81, 0x65, @tick=0x6c8, {0x2, 0x1}, {0x5, 0x7}, @control={0x0, 0xb, 0x101}}], 0x118) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x2, 0x69, 0x8, 0x1, r1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 5.964275328s ago: executing program 2 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000500020001000000050006"], 0x3c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f000000e600)={{0x2, 0x4e21, @empty}, {0x2, @random="0e02685b8586"}, 0x4, {0x2, 0x4e22, @loopback}, 'lo\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x11c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280890900010073797a300000000009000200010000000000000000000000000a000000000000000000"], 0x84}}, 0x0) 5.31498727s ago: executing program 2 (id=292): fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffe) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x1c6) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) keyctl$session_to_parent(0x12) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x500000bce) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102385, 0x18ff1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0) ioperm(0x7f, 0x5, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7020016c708db7200"}) r4 = syz_open_pts(0xffffffffffffffff, 0x1c1642) clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0}) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x77359400}, {r5, r6+10000000}}, &(0x7f0000000300)) dup3(r4, r3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x9}) rseq(0x0, 0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 5.209621287s ago: executing program 4 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 5.080471346s ago: executing program 4 (id=294): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800009, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4) (fail_nth: 3) 5.057919098s ago: executing program 2 (id=295): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'lo\x00', @broadcast}) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.748146563s ago: executing program 1 (id=296): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000280)='\x00', 0x1) (fail_nth: 1) 4.589489781s ago: executing program 1 (id=297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) (async, rerun: 32) r2 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r2, 0x2, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x5, 0x8, 0x0, 0x1, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.559766057s ago: executing program 4 (id=298): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup2(r5, r4) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x55, &(0x7f00000001c0)=""/85, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x9, 0x983, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r6], &(0x7f0000000300)=[{0x1, 0x2, 0x2, 0x1}], 0x10, 0xc4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='percpu_destroy_chunk\x00', r8, 0x0, 0xffffffff}, 0x18) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000440)={0x6, 0x401, {0xffffffffffffffff}, {}, 0xffff, 0x9}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000500)={<r9=>0x0, 0xfffffff8}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000580)={r9, 0xe}, 0x8) bind$bt_hci(r7, &(0x7f0000000700)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000480)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20feff001200010a00000000000000000a000000c38c25fd7547ee80b12ca8293dea217632586cd250"], 0x26}}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f0000000280)='\x00', 0x1) 4.45163337s ago: executing program 4 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$packet(0x11, 0x3, 0x300) gettid() r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x5}) syz_open_dev$usbfs(&(0x7f0000000240), 0x2, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000280)="f5", 0x1}], 0x1) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r10=>0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090000000000000000000a00000008000300", @ANYRES32=r10, @ANYBLOB="14005080050009000200000005000200000000000a0006"], 0x3c}}, 0x0) 4.321589777s ago: executing program 1 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfcc2bb8dafb2b72d}) 4.010315059s ago: executing program 1 (id=301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800009, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4) 3.347531784s ago: executing program 0 (id=302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000480)={'wlan0\x00'}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @isdn={0x22, 0x66, 0x80, 0x4, 0x1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @sco, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='caif0\x00', 0x7, 0x4, 0x8}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xff, 0xb, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000fffe80000000000000101000007f0c08fcffffff68fad91451273fa7b49301641184a907c5"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.344760192s ago: executing program 1 (id=303): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='net/sockstat\x00') read$FUSE(r4, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000140)={0x30002, 0x0, [0x2, 0x1, 0x23d8, 0x9, 0x1, 0x100000001, 0x7, 0x6]}) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000002c0)={r8, 0x8, 0x4, 0x5e2, 0x1, [], [0x1, 0xffff, 0xffff, 0x3557c996], [0x8, 0x81, 0x1, 0x8], [0x8, 0x2, 0x10001, 0x949]}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x26, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x810) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000100)) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="feffffffffffffff000100000000894a5b3c4664f3181b4a000004000000030000000200000000000000050000000000000009000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000017ffad3b000000000010000000000000030000000000000000000000000000000000000000000000881100"/154]) 2.785544899s ago: executing program 0 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2.744555978s ago: executing program 3 (id=305): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x154}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}, 0x40000000}], 0x196, 0x2, 0x0) 2.742912137s ago: executing program 4 (id=306): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x2b8, 0x0, 0x0, 0x6000000, 0x240, 0x3a8, 0x3a8, 0x240, 0x3a8, 0x3, 0x0, {[{{@ipv6={@loopback={0x3000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xff000000], [0xff, 0xff000000, 0x0, 0xffffff00], 'tunl0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x4, 0x8, 0x0, 0x40}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x10538, 0xffffffff, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 2.703469432s ago: executing program 0 (id=307): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), 0x0) getresgid(0x0, &(0x7f0000000400), 0xffffffffffffffff) unshare(0x46060480) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x1400, @private0, 0x3ff}, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x0, {[0x2, 0x3, 0x99, 0x6, 0x500, 0x7, 0x9, 0x7fff]}}, 0x5c) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 2.356985957s ago: executing program 3 (id=308): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "f1"}], 0x18, 0xe000}, 0x5}], 0x1, 0x42094) 1.444710132s ago: executing program 0 (id=309): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) unshare(0x8000000) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x104eb4, 0x0, 0x0, 0x0, 0x0) close(r4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) 1.409912286s ago: executing program 3 (id=310): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r5=>0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@can_delroute={0x44, 0x19, 0x100, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "17a40bcf33e183e1"}, 0x1}}, @CGW_LIM_HOPS={0x5, 0xd, 0x5}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x4, 0x3, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}]}}]}, 0x6c}}, 0x0) 527.937422ms ago: executing program 3 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x20000}], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r8, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x241) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100feffffff000000000c000000040003800c00018008000100", @ANYRES32=r13, @ANYBLOB="7a7f932b92a746cf0ff4d831aeb3750fee1e2684e99f5d83a16d26fdf161183a2ffd572d3b0b04e05f87b8e16ac8ea0079f38d13f8d640a3fb35b40d98cfcf5b"], 0x24}}, 0x0) pwritev(r7, &(0x7f0000000640)=[{&(0x7f0000000480)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r14=>0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf251900000008000300", @ANYRES32=r14, @ANYBLOB="0500a300010000006b76131b7530da351e2a126939bb562c6fbee17de646494716e8a794a778a8d0f1eadd4258416da95624401f0c2cb0f3e4fb0ff228ddc4064936f4e3af7f"], 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x40810) 409.539548ms ago: executing program 0 (id=312): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000002c0)={{0x80000000400}, {}, 0x0, 0x4}) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_RENAMEAT={0x23, 0x22, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x10000001}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x49e540) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="310100004776b8087909700217a8010203010902120001000000000904000000ac23fef1cbe87a2609b62a00"], 0x0) 0s ago: executing program 1 (id=313): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100025408b4200000000000000000030109021200010404b0020904530700715a9102"], 0x0) r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x101480, 0x100) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x9, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x50850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0xe1, 0x1, 0x2, 0x7, 0x2, 0x7fffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts. [ 44.841619][ T29] audit: type=1400 audit(1732209833.522:88): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 44.844631][ T5816] cgroup: Unknown subsys name 'net' [ 44.864388][ T29] audit: type=1400 audit(1732209833.522:89): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.892009][ T29] audit: type=1400 audit(1732209833.552:90): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.062268][ T5816] cgroup: Unknown subsys name 'cpuset' [ 45.069190][ T5816] cgroup: Unknown subsys name 'rlimit' [ 45.231394][ T29] audit: type=1400 audit(1732209833.912:91): avc: denied { setattr } for pid=5816 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.260859][ T29] audit: type=1400 audit(1732209833.912:92): avc: denied { create } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.281398][ T29] audit: type=1400 audit(1732209833.912:93): avc: denied { write } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.313312][ T29] audit: type=1400 audit(1732209833.912:94): avc: denied { read } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.323800][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 45.333651][ T29] audit: type=1400 audit(1732209833.912:95): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 45.367150][ T29] audit: type=1400 audit(1732209833.912:96): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 45.390598][ T29] audit: type=1400 audit(1732209833.982:97): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.177391][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.344334][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.347815][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.354334][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.363403][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.374901][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.376250][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.390301][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.394072][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.400633][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.405119][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.413444][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.418834][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.426521][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.439723][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.440231][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.447808][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.461653][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.461792][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.468883][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.476539][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.483628][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.497613][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.497675][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.505342][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.511741][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.519184][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.526067][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.532581][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.540284][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 48.555939][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.871750][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 48.923963][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 48.935539][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 48.972319][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 48.994536][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 49.035570][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.042803][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.051013][ T5836] bridge_slave_0: entered allmulticast mode [ 49.057418][ T5836] bridge_slave_0: entered promiscuous mode [ 49.098766][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.105917][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.113132][ T5836] bridge_slave_1: entered allmulticast mode [ 49.119473][ T5836] bridge_slave_1: entered promiscuous mode [ 49.167642][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.175374][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.183218][ T5828] bridge_slave_0: entered allmulticast mode [ 49.189631][ T5828] bridge_slave_0: entered promiscuous mode [ 49.206528][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.213622][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.220879][ T5826] bridge_slave_0: entered allmulticast mode [ 49.227208][ T5826] bridge_slave_0: entered promiscuous mode [ 49.246442][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.253793][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.260923][ T5828] bridge_slave_1: entered allmulticast mode [ 49.267397][ T5828] bridge_slave_1: entered promiscuous mode [ 49.275732][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.286688][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.295953][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.303071][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.310196][ T5827] bridge_slave_0: entered allmulticast mode [ 49.316540][ T5827] bridge_slave_0: entered promiscuous mode [ 49.323783][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.330910][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.337973][ T5826] bridge_slave_1: entered allmulticast mode [ 49.344548][ T5826] bridge_slave_1: entered promiscuous mode [ 49.369029][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.376199][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.383802][ T5827] bridge_slave_1: entered allmulticast mode [ 49.390647][ T5827] bridge_slave_1: entered promiscuous mode [ 49.409079][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.429645][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.449656][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.466530][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.484900][ T5836] team0: Port device team_slave_0 added [ 49.492002][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.507592][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.515050][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.522429][ T5839] bridge_slave_0: entered allmulticast mode [ 49.528811][ T5839] bridge_slave_0: entered promiscuous mode [ 49.542219][ T5828] team0: Port device team_slave_0 added [ 49.548745][ T5836] team0: Port device team_slave_1 added [ 49.555593][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.571164][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.578382][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.585911][ T5839] bridge_slave_1: entered allmulticast mode [ 49.592830][ T5839] bridge_slave_1: entered promiscuous mode [ 49.605246][ T5828] team0: Port device team_slave_1 added [ 49.621318][ T5826] team0: Port device team_slave_0 added [ 49.645428][ T5826] team0: Port device team_slave_1 added [ 49.655782][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.666931][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.682469][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.689462][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.715711][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.728861][ T5827] team0: Port device team_slave_0 added [ 49.745307][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.752465][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.778811][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.791154][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.798093][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.824063][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.835376][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.842453][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.868387][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.883577][ T5827] team0: Port device team_slave_1 added [ 49.890819][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.897753][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.924268][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.970901][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.977850][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.003994][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.017051][ T5839] team0: Port device team_slave_0 added [ 50.024582][ T5839] team0: Port device team_slave_1 added [ 50.033002][ T5836] hsr_slave_0: entered promiscuous mode [ 50.039112][ T5836] hsr_slave_1: entered promiscuous mode [ 50.052278][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.059214][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.085190][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.106989][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.114035][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.140266][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.159101][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.166083][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.192132][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.219318][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.226335][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.252329][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.273480][ T5828] hsr_slave_0: entered promiscuous mode [ 50.279712][ T5828] hsr_slave_1: entered promiscuous mode [ 50.285897][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.293774][ T5828] Cannot create hsr debugfs directory [ 50.310033][ T5826] hsr_slave_0: entered promiscuous mode [ 50.316423][ T5826] hsr_slave_1: entered promiscuous mode [ 50.322748][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.330600][ T5826] Cannot create hsr debugfs directory [ 50.371684][ T5827] hsr_slave_0: entered promiscuous mode [ 50.377716][ T5827] hsr_slave_1: entered promiscuous mode [ 50.383957][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.392158][ T5827] Cannot create hsr debugfs directory [ 50.436270][ T5839] hsr_slave_0: entered promiscuous mode [ 50.443279][ T5839] hsr_slave_1: entered promiscuous mode [ 50.449243][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.456858][ T5839] Cannot create hsr debugfs directory [ 50.580536][ T5842] Bluetooth: hci3: command tx timeout [ 50.582159][ T5146] Bluetooth: hci2: command tx timeout [ 50.591730][ T5842] Bluetooth: hci4: command tx timeout [ 50.591864][ T5842] Bluetooth: hci0: command tx timeout [ 50.591935][ T54] Bluetooth: hci1: command tx timeout [ 50.639673][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.648963][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.664530][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.676451][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.698678][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.714066][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.732050][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.741358][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.769329][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.782107][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.790844][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.823326][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.847615][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.865561][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.874091][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.897008][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.932710][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.958460][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.967154][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.988170][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.995481][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.016041][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.045974][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.053158][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.067058][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.087783][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.094906][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.127775][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.146541][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.165483][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.172584][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.193146][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.204338][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.223985][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.231069][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.257305][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.264434][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.270210][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 51.270220][ T29] audit: type=1400 audit(1732209839.942:111): avc: denied { sys_module } for pid=5826 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.306245][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.313341][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.326437][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.338626][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.345720][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.375232][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.382929][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.405099][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.446767][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.486419][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.527236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.534385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.558383][ T5826] veth0_vlan: entered promiscuous mode [ 51.575371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.582543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.624971][ T5826] veth1_vlan: entered promiscuous mode [ 51.692099][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.749522][ T5826] veth0_macvtap: entered promiscuous mode [ 51.768126][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.778168][ T5826] veth1_macvtap: entered promiscuous mode [ 51.807177][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.842994][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.891523][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.913385][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.924086][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.932869][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.943009][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.964947][ T5836] veth0_vlan: entered promiscuous mode [ 51.974938][ T5836] veth1_vlan: entered promiscuous mode [ 51.989554][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.020914][ T5827] veth0_vlan: entered promiscuous mode [ 52.057409][ T5827] veth1_vlan: entered promiscuous mode [ 52.081554][ T5839] veth0_vlan: entered promiscuous mode [ 52.113046][ T5839] veth1_vlan: entered promiscuous mode [ 52.127109][ T5827] veth0_macvtap: entered promiscuous mode [ 52.133223][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.142258][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.157563][ T5827] veth1_macvtap: entered promiscuous mode [ 52.167159][ T5836] veth0_macvtap: entered promiscuous mode [ 52.181925][ T5836] veth1_macvtap: entered promiscuous mode [ 52.195302][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.199294][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.214069][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.224335][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.235201][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.252883][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.266543][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.277498][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.289043][ T5828] veth0_vlan: entered promiscuous mode [ 52.297235][ T29] audit: type=1400 audit(1732209840.972:112): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.s9aVvI/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 52.299195][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.332772][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.334498][ T29] audit: type=1400 audit(1732209841.002:113): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.342151][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.376320][ T29] audit: type=1400 audit(1732209841.002:114): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.s9aVvI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.377797][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.401976][ T29] audit: type=1400 audit(1732209841.002:115): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.433969][ T29] audit: type=1400 audit(1732209841.002:116): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.s9aVvI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.446678][ T5839] veth0_macvtap: entered promiscuous mode [ 52.471626][ T29] audit: type=1400 audit(1732209841.002:117): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.s9aVvI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 52.507801][ T5828] veth1_vlan: entered promiscuous mode [ 52.513516][ T29] audit: type=1400 audit(1732209841.002:118): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.538927][ T29] audit: type=1400 audit(1732209841.112:119): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 52.551049][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.565708][ T29] audit: type=1400 audit(1732209841.112:120): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.590930][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.611967][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.623004][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.633514][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.644522][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.655559][ T5839] veth1_macvtap: entered promiscuous mode [ 52.661631][ T5146] Bluetooth: hci4: command tx timeout [ 52.661646][ T5842] Bluetooth: hci3: command tx timeout [ 52.667205][ T5146] Bluetooth: hci1: command tx timeout [ 52.673849][ T5835] Bluetooth: hci2: command tx timeout [ 52.678609][ T54] Bluetooth: hci0: command tx timeout [ 52.695322][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.713408][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.726663][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.741585][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.753430][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.765522][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.774304][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.783967][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.792807][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.809097][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.828392][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.845712][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.858257][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.872688][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.884999][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.899351][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.098627][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.154851][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.219310][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.269748][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.342651][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.379484][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.398844][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.408726][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.418469][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.427276][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.436187][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.484263][ T5828] veth0_macvtap: entered promiscuous mode [ 53.506848][ T5828] veth1_macvtap: entered promiscuous mode [ 53.532582][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.541462][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.562597][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.571330][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.589211][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.601336][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.611483][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.622265][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.639408][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.654634][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.677833][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.688816][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.701982][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.721425][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.733524][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.749938][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.764419][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.775180][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.786973][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.797000][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.808469][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.819616][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.833295][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.842362][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.851400][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.860980][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.873177][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.881186][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.945294][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.958609][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.033171][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 54.044977][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.062379][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.091492][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.099751][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.116523][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.153200][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.213157][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.388703][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 54.646907][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.661809][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.675062][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.684893][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 54.697882][ T8] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 54.707042][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.724232][ T8] usb 2-1: config 0 descriptor?? [ 54.742154][ T54] Bluetooth: hci0: command tx timeout [ 54.748061][ T54] Bluetooth: hci1: command tx timeout [ 54.754165][ T5146] Bluetooth: hci2: command tx timeout [ 54.760107][ T54] Bluetooth: hci3: command tx timeout [ 54.765825][ T5146] Bluetooth: hci4: command tx timeout [ 54.869446][ T5935] ======================================================= [ 54.869446][ T5935] WARNING: The mand mount option has been deprecated and [ 54.869446][ T5935] and is ignored by this kernel. Remove the mand [ 54.869446][ T5935] option from the mount to silence this warning. [ 54.869446][ T5935] ======================================================= [ 54.940060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.096448][ T5939] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9'. [ 55.119948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.128991][ T5939] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 55.171798][ T8] nintendo 0003:057E:201E.0001: item fetching failed at offset 3/5 [ 55.181599][ T8] nintendo 0003:057E:201E.0001: HID parse failed [ 55.188928][ T8] nintendo 0003:057E:201E.0001: probe - fail = -22 [ 55.195974][ T8] nintendo 0003:057E:201E.0001: probe with driver nintendo failed with error -22 [ 55.710263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.167756][ T8] usb 2-1: USB disconnect, device number 2 [ 56.220091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.338844][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 56.338855][ T29] audit: type=1400 audit(1732209845.012:164): avc: denied { read write } for pid=5949 comm="syz.2.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.401439][ T29] audit: type=1400 audit(1732209845.052:165): avc: denied { open } for pid=5949 comm="syz.2.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.439683][ T29] audit: type=1400 audit(1732209845.052:166): avc: denied { ioctl } for pid=5949 comm="syz.2.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.470058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.580229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.617873][ T29] audit: type=1400 audit(1732209845.292:167): avc: denied { create } for pid=5956 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.651013][ T29] audit: type=1400 audit(1732209845.322:168): avc: denied { create } for pid=5956 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.820236][ T5835] Bluetooth: hci4: command tx timeout [ 56.820792][ T5146] Bluetooth: hci3: command tx timeout [ 56.831067][ T54] Bluetooth: hci2: command tx timeout [ 56.831120][ T5835] Bluetooth: hci1: command tx timeout [ 56.836520][ T54] Bluetooth: hci0: command tx timeout [ 56.910957][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 56.981691][ T29] audit: type=1400 audit(1732209845.652:169): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.036292][ T29] audit: type=1400 audit(1732209845.712:170): avc: denied { ioctl } for pid=5962 comm="syz.4.15" path="uts:[4026532818]" dev="nsfs" ino=4026532818 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.070002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.102314][ T29] audit: type=1400 audit(1732209845.782:171): avc: denied { create } for pid=5962 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.141964][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 57.156712][ T29] audit: type=1400 audit(1732209845.782:172): avc: denied { setopt } for pid=5962 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.179875][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.204337][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.219959][ T29] audit: type=1400 audit(1732209845.852:173): avc: denied { unlink } for pid=5966 comm="syz.3.16" name="#1" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.248497][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 57.261928][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 57.287406][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 57.301844][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.323864][ T9] usb 3-1: config 0 descriptor?? [ 57.454005][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 57.607493][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 57.777149][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.798407][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 57.807651][ T5913] usb 2-1: Product: syz [ 57.822291][ T9] nintendo 0003:057E:201E.0002: item fetching failed at offset 3/5 [ 57.833247][ T5913] usb 2-1: Manufacturer: syz [ 57.840155][ T9] nintendo 0003:057E:201E.0002: HID parse failed [ 57.847147][ T5913] usb 2-1: SerialNumber: syz [ 57.859579][ T9] nintendo 0003:057E:201E.0002: probe - fail = -22 [ 57.870070][ T9] nintendo 0003:057E:201E.0002: probe with driver nintendo failed with error -22 [ 57.879735][ T5913] usb 2-1: config 0 descriptor?? [ 57.895240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.151342][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.260185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 58.449808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 58.566785][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.583200][ T5913] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 58.703387][ T5879] usb 3-1: USB disconnect, device number 2 [ 59.050670][ T5982] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 59.711647][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.548656][ T5879] usb 5-1: config 0 has too many interfaces: 138, using maximum allowed: 32 [ 60.589002][ T5879] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 138 [ 60.603319][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.608852][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=a9.c8 [ 60.616113][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.625001][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.646640][ T5879] usb 5-1: Product: syz [ 60.648906][ T5913] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 60.662943][ T5879] usb 5-1: Manufacturer: syz [ 60.667560][ T5879] usb 5-1: SerialNumber: syz [ 60.670123][ T5913] usb 2-1: USB disconnect, device number 3 [ 60.681800][ T5879] usb 5-1: config 0 descriptor?? [ 60.880253][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.140902][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 61.215665][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.237126][ T5879] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 61.250832][ T5879] usb 1-1: config 127 has no interface number 0 [ 61.266192][ T5879] usb 1-1: config 127 interface 25 has no altsetting 0 [ 61.285728][ T5879] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 61.297137][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.308398][ T5879] usb 1-1: Product: syz [ 61.313152][ T5879] usb 1-1: Manufacturer: syz [ 61.317821][ T5879] usb 1-1: SerialNumber: syz [ 61.342065][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 61.342080][ T29] audit: type=1400 audit(1732209850.022:200): avc: denied { create } for pid=5983 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.364676][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.378514][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.381767][ T29] audit: type=1400 audit(1732209850.022:201): avc: denied { bind } for pid=5983 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.412229][ T29] audit: type=1400 audit(1732209850.062:202): avc: denied { ioctl } for pid=5983 comm="syz.4.21" path="socket:[9264]" dev="sockfs" ino=9264 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.415051][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.450127][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.477070][ T5841] usb 5-1: USB disconnect, device number 2 [ 61.535537][ T5879] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 62.445251][ T5879] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 62.639436][ T6000] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 62.654544][ T29] audit: type=1400 audit(1732209851.312:203): avc: denied { read write } for pid=5999 comm="syz.0.25" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.850263][ T29] audit: type=1400 audit(1732209851.312:204): avc: denied { open } for pid=5999 comm="syz.0.25" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.873478][ T29] audit: type=1400 audit(1732209851.332:205): avc: denied { read } for pid=6015 comm="syz.1.30" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.890883][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.896480][ T29] audit: type=1400 audit(1732209851.332:206): avc: denied { open } for pid=6015 comm="syz.1.30" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.904156][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.927303][ T29] audit: type=1400 audit(1732209851.332:207): avc: denied { ioctl } for pid=6015 comm="syz.1.30" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.959966][ T29] audit: type=1400 audit(1732209851.332:208): avc: denied { set_context_mgr } for pid=6015 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.979935][ T29] audit: type=1400 audit(1732209851.352:209): avc: denied { create } for pid=6015 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.002030][ T6018] binder: BINDER_SET_CONTEXT_MGR already set [ 63.008144][ T6018] binder: 6015:6018 ioctl 4018620d 20004a80 returned -16 [ 63.040379][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.175420][ T6000] bridge0: entered allmulticast mode [ 63.179921][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.302308][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 63.312122][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 63.322657][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 63.332732][ T5146] Workqueue: hci2 hci_rx_work [ 63.337527][ T5146] Call Trace: [ 63.340975][ T5146] <TASK> [ 63.343906][ T5146] dump_stack_lvl+0x16c/0x1f0 [ 63.348593][ T5146] sysfs_warn_dup+0x7f/0xa0 [ 63.353122][ T5146] sysfs_create_dir_ns+0x24d/0x2b0 [ 63.358234][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 63.363895][ T5146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.369282][ T5146] ? kobject_add_internal+0x12d/0x990 [ 63.374686][ T5146] ? do_raw_spin_unlock+0x172/0x230 [ 63.379891][ T5146] kobject_add_internal+0x2c8/0x990 [ 63.385117][ T5146] kobject_add+0x16f/0x240 [ 63.389564][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 63.394535][ T5146] ? kobject_put+0xab/0x5a0 [ 63.399057][ T5146] device_add+0x289/0x1a70 [ 63.403487][ T5146] ? __pfx_dev_set_name+0x10/0x10 [ 63.408521][ T5146] ? __pfx_device_add+0x10/0x10 [ 63.413378][ T5146] ? mgmt_send_event_skb+0x2f2/0x460 [ 63.418678][ T5146] hci_conn_add_sysfs+0x17e/0x230 [ 63.423709][ T5146] le_conn_complete_evt+0x1078/0x1d80 [ 63.429092][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 63.434816][ T5146] ? irqentry_exit+0x3b/0x90 [ 63.439412][ T5146] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.444624][ T5146] hci_le_conn_complete_evt+0x23c/0x370 [ 63.450180][ T5146] hci_le_meta_evt+0x2e2/0x5d0 [ 63.454956][ T5146] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 63.461028][ T5146] hci_event_packet+0x666/0x1180 [ 63.465966][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 63.471263][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 63.476644][ T5146] ? kcov_remote_start+0x3df/0x6e0 [ 63.481763][ T5146] hci_rx_work+0x2c6/0x1610 [ 63.486289][ T5146] ? lock_acquire+0x2f/0xb0 [ 63.490796][ T5146] ? process_one_work+0x921/0x1ba0 [ 63.495913][ T5146] process_one_work+0x9c5/0x1ba0 [ 63.500859][ T5146] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 63.506493][ T5146] ? __pfx_process_one_work+0x10/0x10 [ 63.511889][ T5146] ? assign_work+0x1a0/0x250 [ 63.516515][ T5146] worker_thread+0x6c8/0xf00 [ 63.521139][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 63.526262][ T5146] kthread+0x2c1/0x3a0 [ 63.530351][ T5146] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.535562][ T5146] ? __pfx_kthread+0x10/0x10 [ 63.540154][ T5146] ret_from_fork+0x45/0x80 [ 63.544578][ T5146] ? __pfx_kthread+0x10/0x10 [ 63.549269][ T5146] ret_from_fork_asm+0x1a/0x30 [ 63.554036][ T5146] </TASK> [ 63.569624][ T5146] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 63.583855][ T5146] Bluetooth: hci2: failed to register connection device [ 63.656625][ T6031] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 64.318759][ T6043] evm: overlay not supported [ 65.012749][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.025191][ T5879] usb 1-1: device firmware changed [ 65.034608][ T5879] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 65.056114][ T5879] usb 1-1: USB disconnect, device number 2 [ 66.683316][ T6077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41'. [ 67.059437][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 67.059465][ T29] audit: type=1400 audit(1732209855.712:217): avc: denied { bind } for pid=6078 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.313509][ T6089] fuse: Unknown parameter 'defauD_permissions' [ 68.394249][ T29] audit: type=1400 audit(1732209857.072:218): avc: denied { accept } for pid=6100 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.469881][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.500060][ T29] audit: type=1400 audit(1732209857.142:219): avc: denied { create } for pid=6100 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.639852][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 68.646456][ T5880] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 68.656124][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.667035][ T5880] usb 5-1: config 0 descriptor?? [ 68.675987][ T5880] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 68.755653][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.988568][ T5841] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 69.017820][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.052279][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.075582][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 69.089002][ T5841] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 69.098181][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.109842][ T5841] usb 2-1: config 0 descriptor?? [ 69.168910][ T29] audit: type=1400 audit(1732209857.842:220): avc: denied { connect } for pid=6113 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.188922][ T29] audit: type=1400 audit(1732209857.842:221): avc: denied { read } for pid=6113 comm="syz.0.55" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.257123][ T29] audit: type=1400 audit(1732209857.842:222): avc: denied { open } for pid=6113 comm="syz.0.55" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.369697][ T29] audit: type=1400 audit(1732209857.862:223): avc: denied { ioctl } for pid=6113 comm="syz.0.55" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.538657][ T29] audit: type=1400 audit(1732209858.212:224): avc: denied { read } for pid=6119 comm="syz.2.57" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.662475][ T29] audit: type=1400 audit(1732209858.212:225): avc: denied { open } for pid=6119 comm="syz.2.57" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.706317][ T29] audit: type=1400 audit(1732209858.242:226): avc: denied { ioctl } for pid=6119 comm="syz.2.57" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.392958][ T5841] nintendo 0003:057E:201E.0003: item fetching failed at offset 3/5 [ 70.404182][ T5841] nintendo 0003:057E:201E.0003: HID parse failed [ 70.447121][ T5841] nintendo 0003:057E:201E.0003: probe - fail = -22 [ 70.453813][ T5841] nintendo 0003:057E:201E.0003: probe with driver nintendo failed with error -22 [ 70.965799][ T5880] usb 5-1: USB disconnect, device number 3 [ 70.997912][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.009947][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436747][ T6145] TCP: out of memory -- consider tuning tcp_mem [ 71.543825][ T5913] usb 2-1: USB disconnect, device number 4 [ 72.020911][ T6152] FAULT_INJECTION: forcing a failure. [ 72.020911][ T6152] name failslab, interval 1, probability 0, space 0, times 1 [ 72.092226][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.0.64 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 72.102421][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.112475][ T6152] Call Trace: [ 72.115750][ T6152] <TASK> [ 72.118677][ T6152] dump_stack_lvl+0x16c/0x1f0 [ 72.123367][ T6152] should_fail_ex+0x497/0x5b0 [ 72.128047][ T6152] ? fs_reclaim_acquire+0xae/0x150 [ 72.133167][ T6152] should_failslab+0xc2/0x120 [ 72.137849][ T6152] __kmalloc_noprof+0xcb/0x400 [ 72.142622][ T6152] fib_nl2rule.constprop.0.isra.0+0x35f/0x1e80 [ 72.148784][ T6152] ? __pfx_fib_nl2rule.constprop.0.isra.0+0x10/0x10 [ 72.155377][ T6152] ? __nla_parse+0x40/0x60 [ 72.159794][ T6152] fib_nl_newrule+0x2e8/0x1f20 [ 72.164570][ T6152] ? __pfx_fib_nl_newrule+0x10/0x10 [ 72.169765][ T6152] ? __pfx___mutex_trylock_common+0x10/0x10 [ 72.175744][ T6152] ? rtnetlink_rcv_msg+0x372/0xea0 [ 72.180860][ T6152] ? rcu_is_watching+0x12/0xc0 [ 72.185625][ T6152] ? trace_contention_end+0xea/0x140 [ 72.190931][ T6152] ? __pfx_fib_nl_newrule+0x10/0x10 [ 72.196127][ T6152] ? rtnetlink_rcv_msg+0x3c7/0xea0 [ 72.201239][ T6152] rtnetlink_rcv_msg+0x3c7/0xea0 [ 72.206182][ T6152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.211660][ T6152] netlink_rcv_skb+0x16b/0x440 [ 72.216425][ T6152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.221890][ T6152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.227201][ T6152] ? netlink_deliver_tap+0x1ae/0xd90 [ 72.232496][ T6152] netlink_unicast+0x53c/0x7f0 [ 72.237268][ T6152] ? __pfx_netlink_unicast+0x10/0x10 [ 72.242569][ T6152] netlink_sendmsg+0x8b8/0xd70 [ 72.247339][ T6152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.252640][ T6152] ____sys_sendmsg+0xaaf/0xc90 [ 72.257403][ T6152] ? copy_msghdr_from_user+0x10b/0x160 [ 72.262867][ T6152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.268165][ T6152] ___sys_sendmsg+0x135/0x1e0 [ 72.272849][ T6152] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.278063][ T6152] ? __pfx_lock_release+0x10/0x10 [ 72.283102][ T6152] ? trace_lock_acquire+0x14a/0x1d0 [ 72.288339][ T6152] ? __fget_files+0x206/0x3a0 [ 72.293038][ T6152] __sys_sendmsg+0x16e/0x220 [ 72.297639][ T6152] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.302778][ T6152] do_syscall_64+0xcd/0x250 [ 72.307286][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.313183][ T6152] RIP: 0033:0x7fa88ab7e819 [ 72.317599][ T6152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.337218][ T6152] RSP: 002b:00007fa88ba4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.345614][ T6152] RAX: ffffffffffffffda RBX: 00007fa88ad35fa0 RCX: 00007fa88ab7e819 [ 72.353560][ T6152] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 72.361505][ T6152] RBP: 00007fa88ba4d090 R08: 0000000000000000 R09: 0000000000000000 [ 72.369450][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.377399][ T6152] R13: 0000000000000000 R14: 00007fa88ad35fa0 R15: 00007ffecb9c1f68 [ 72.385352][ T6152] </TASK> [ 72.388443][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.469908][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.517157][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 72.517172][ T29] audit: type=1400 audit(1732209861.192:238): avc: denied { write } for pid=6155 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.624484][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.640012][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.675922][ T5841] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.728601][ T29] audit: type=1400 audit(1732209861.402:239): avc: denied { bind } for pid=6153 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.831193][ T29] audit: type=1400 audit(1732209861.492:240): avc: denied { listen } for pid=6153 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.208890][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.218576][ T5841] usb 4-1: config 0 descriptor?? [ 73.236678][ T29] audit: type=1400 audit(1732209861.652:241): avc: denied { getopt } for pid=6153 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.764985][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.779386][ T29] audit: type=1400 audit(1732209862.452:242): avc: denied { name_bind } for pid=6169 comm="syz.0.69" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.806461][ T29] audit: type=1400 audit(1732209862.482:243): avc: denied { read } for pid=6146 comm="syz.3.62" path="socket:[9759]" dev="sockfs" ino=9759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.854650][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 73.864043][ T6170] netlink: 6 bytes leftover after parsing attributes in process `syz.0.69'. [ 73.873623][ T5841] usbhid 4-1:0.0: can't add hid device: -32 [ 73.884548][ T5841] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 73.894533][ T29] audit: type=1400 audit(1732209862.482:244): avc: denied { write } for pid=6169 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.039852][ T29] audit: type=1400 audit(1732209863.412:245): avc: denied { read } for pid=6178 comm="syz.1.71" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.109962][ T29] audit: type=1400 audit(1732209863.412:246): avc: denied { open } for pid=6178 comm="syz.1.71" path="/dev/sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.211152][ T29] audit: type=1400 audit(1732209863.412:247): avc: denied { ioctl } for pid=6178 comm="syz.1.71" path="/dev/sg0" dev="devtmpfs" ino=723 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.272378][ T1196] usb 4-1: USB disconnect, device number 2 [ 76.069820][ T6210] vivid-000: ================= START STATUS ================= [ 76.077689][ T6210] vivid-000: Generate PTS: true [ 76.082800][ T6210] vivid-000: Generate SCR: true [ 76.087764][ T6210] tpg source WxH: 640x360 (R'G'B) [ 76.092886][ T6210] tpg field: 1 [ 76.096282][ T6210] tpg crop: 640x360@0x0 [ 76.100721][ T6210] tpg compose: 640x360@0x0 [ 76.105164][ T6210] tpg colorspace: 8 [ 76.109015][ T6210] tpg transfer function: 0/0 [ 76.113683][ T6210] tpg quantization: 0/0 [ 76.117867][ T6210] tpg RGB range: 0/2 [ 76.121866][ T6210] vivid-000: ================== END STATUS ================== [ 76.371345][ T966] cfg80211: failed to load regulatory.db [ 76.406587][ T6213] Bluetooth: MGMT ver 1.23 [ 76.725762][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 76.769650][ T6223] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 76.787785][ T6223] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 77.090182][ T6236] FAULT_INJECTION: forcing a failure. [ 77.090182][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 77.103335][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.0.89 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 77.113518][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.123588][ T6236] Call Trace: [ 77.126874][ T6236] <TASK> [ 77.129806][ T6236] dump_stack_lvl+0x16c/0x1f0 [ 77.134491][ T6236] should_fail_ex+0x497/0x5b0 [ 77.139174][ T6236] ? fs_reclaim_acquire+0xae/0x150 [ 77.144297][ T6236] should_failslab+0xc2/0x120 [ 77.148989][ T6236] __kmalloc_cache_noprof+0x6b/0x300 [ 77.154283][ T6236] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 77.160875][ T6236] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 77.167298][ T6236] snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 77.173721][ T6236] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 77.180576][ T6236] ? calc_src_frames.isra.0+0x187/0x1d0 [ 77.186126][ T6236] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 77.192749][ T6236] snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 77.199183][ T6236] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 77.205978][ T6236] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 77.211872][ T6236] snd_pcm_oss_write+0x4a3/0xa00 [ 77.216798][ T6236] ? security_file_permission+0x71/0x210 [ 77.222419][ T6236] ? rw_verify_area+0xd0/0x700 [ 77.227168][ T6236] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 77.232631][ T6236] vfs_write+0x24c/0x1150 [ 77.236956][ T6236] ? __fget_files+0x1fc/0x3a0 [ 77.241618][ T6236] ? __pfx_lock_release+0x10/0x10 [ 77.246632][ T6236] ? trace_lock_acquire+0x14a/0x1d0 [ 77.251820][ T6236] ? __pfx_vfs_write+0x10/0x10 [ 77.256594][ T6236] ? lock_acquire+0x2f/0xb0 [ 77.261081][ T6236] ? __fget_files+0x40/0x3a0 [ 77.265661][ T6236] ? __fget_files+0x206/0x3a0 [ 77.270327][ T6236] ksys_write+0x12b/0x250 [ 77.274640][ T6236] ? __pfx_ksys_write+0x10/0x10 [ 77.279480][ T6236] do_syscall_64+0xcd/0x250 [ 77.283974][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.289854][ T6236] RIP: 0033:0x7fa88ab7e819 [ 77.294251][ T6236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.313857][ T6236] RSP: 002b:00007fa88ba4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.322254][ T6236] RAX: ffffffffffffffda RBX: 00007fa88ad35fa0 RCX: 00007fa88ab7e819 [ 77.330215][ T6236] RDX: 0000000000088020 RSI: 0000000020002000 RDI: 0000000000000003 [ 77.338170][ T6236] RBP: 00007fa88ba4d090 R08: 0000000000000000 R09: 0000000000000000 [ 77.346127][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.354081][ T6236] R13: 0000000000000000 R14: 00007fa88ad35fa0 R15: 00007ffecb9c1f68 [ 77.362051][ T6236] </TASK> [ 77.388318][ T6239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.776601][ T51] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.032729][ T51] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 78.040944][ T51] usb 3-1: config 0 has no interface number 0 [ 78.049864][ T51] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 78.061004][ T51] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.095120][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 78.095134][ T29] audit: type=1400 audit(1732209866.772:259): avc: denied { create } for pid=6241 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.131654][ T51] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 78.141034][ T51] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 78.159257][ T29] audit: type=1400 audit(1732209866.812:260): avc: denied { listen } for pid=6241 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.946975][ T29] audit: type=1400 audit(1732209866.822:261): avc: denied { connect } for pid=6241 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.967056][ T29] audit: type=1400 audit(1732209866.822:262): avc: denied { name_connect } for pid=6241 comm="syz.0.90" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 78.988211][ T51] usb 3-1: Product: syz [ 78.992830][ T51] usb 3-1: Manufacturer: syz [ 78.997582][ T51] usb 3-1: SerialNumber: syz [ 79.007166][ T51] usb 3-1: config 0 descriptor?? [ 79.014315][ T29] audit: type=1400 audit(1732209866.822:263): avc: denied { accept } for pid=6241 comm="syz.0.90" lport=46965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.034817][ T29] audit: type=1400 audit(1732209866.992:264): avc: denied { create } for pid=6243 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 79.074849][ T6228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.090647][ T29] audit: type=1400 audit(1732209867.012:265): avc: denied { sys_admin } for pid=6243 comm="syz.3.91" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 79.110857][ T51] usb-storage 3-1:0.20: USB Mass Storage device detected [ 79.195620][ T51] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 79.325987][ T6228] netlink: 'syz.2.86': attribute type 9 has an invalid length. [ 79.337969][ T6228] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.86'. [ 79.565936][ T51] scsi host1: usb-storage 3-1:0.20 [ 79.605518][ T51] usb 3-1: USB disconnect, device number 3 [ 79.620031][ T29] audit: type=1400 audit(1732209868.122:266): avc: denied { create } for pid=6227 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 79.669128][ T29] audit: type=1400 audit(1732209868.272:267): avc: denied { setopt } for pid=6259 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.719467][ T29] audit: type=1400 audit(1732209868.392:268): avc: denied { connect } for pid=6257 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.743407][ T6261] syzkaller0: entered promiscuous mode [ 79.748972][ T6261] syzkaller0: entered allmulticast mode [ 79.765373][ T6263] vlan2: entered allmulticast mode [ 79.903348][ T6270] input: syz0 as /devices/virtual/input/input5 [ 80.277747][ T6269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.322614][ T6269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.404082][ T6274] tipc: Started in network mode [ 80.409150][ T6274] tipc: Node identity 7, cluster identity 4711 [ 80.417697][ T6274] tipc: Node number set to 7 [ 81.720346][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.782775][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 81.893321][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.902078][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.912001][ T5880] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.925141][ T5880] usb 5-1: config 1 interface 0 has no altsetting 1 [ 81.933437][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 81.942713][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.950822][ T5880] usb 5-1: Product: syz [ 81.955015][ T5880] usb 5-1: Manufacturer: syz [ 81.960046][ T5880] usb 5-1: SerialNumber: syz [ 81.975632][ T5880] smsusb:smsusb_probe: board id=8, interface number 0 [ 81.992129][ T5841] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.191023][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.201988][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.217012][ T5841] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.263323][ T5841] usb 4-1: config 1 interface 0 has no altsetting 1 [ 82.312828][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 82.324056][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.334176][ T5841] usb 4-1: Product: syz [ 82.339231][ T5841] usb 4-1: Manufacturer: syz [ 82.348709][ T5841] usb 4-1: SerialNumber: syz [ 82.567843][ T5841] smsusb:smsusb_probe: board id=8, interface number 0 [ 82.725968][ T5880] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 82.734651][ T5880] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 82.758068][ T5880] usb 5-1: USB disconnect, device number 4 [ 83.126534][ T5841] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 83.137130][ T5841] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 83.148932][ T5841] usb 4-1: USB disconnect, device number 3 [ 83.161561][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 83.864234][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 83.864249][ T29] audit: type=1400 audit(1732209872.542:309): avc: denied { create } for pid=6301 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 84.755427][ T6327] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 86.731971][ T29] audit: type=1400 audit(1732209874.582:310): avc: denied { connect } for pid=6336 comm="syz.0.115" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.853199][ T29] audit: type=1400 audit(1732209874.902:311): avc: denied { write } for pid=6336 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.044848][ T29] audit: type=1400 audit(1732209875.682:312): avc: denied { create } for pid=6342 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.050710][ T6345] SET target dimension over the limit! [ 87.318576][ T29] audit: type=1400 audit(1732209875.702:313): avc: denied { connect } for pid=6342 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.403069][ T29] audit: type=1400 audit(1732209875.702:314): avc: denied { name_connect } for pid=6342 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 87.840948][ T29] audit: type=1400 audit(1732209876.012:315): avc: denied { map } for pid=6341 comm="syz.0.116" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.868880][ T29] audit: type=1400 audit(1732209876.022:316): avc: denied { execute } for pid=6341 comm="syz.0.116" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.929898][ T29] audit: type=1400 audit(1732209876.032:317): avc: denied { read write } for pid=6341 comm="syz.0.116" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.974145][ T29] audit: type=1400 audit(1732209876.032:318): avc: denied { open } for pid=6341 comm="syz.0.116" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.045938][ T6356] Zero length message leads to an empty skb [ 88.059874][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.233020][ T5913] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 88.257454][ T5913] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 88.287623][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.324568][ T5913] usb 5-1: config 0 descriptor?? [ 88.332331][ T5913] usb 5-1: bad CDC descriptors [ 88.348452][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 88.358148][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.366846][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.378711][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.388102][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.586614][ T5880] usb 5-1: USB disconnect, device number 5 [ 88.925394][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 88.925410][ T29] audit: type=1400 audit(1732209877.602:326): avc: denied { bind } for pid=6382 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.049979][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.228371][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 89.249083][ T5913] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 89.270909][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.278942][ T5913] usb 1-1: Product: syz [ 89.307965][ T5913] usb 1-1: Manufacturer: syz [ 89.319805][ T5913] usb 1-1: SerialNumber: syz [ 89.336858][ T5913] usb 1-1: config 0 descriptor?? [ 89.384673][ T29] audit: type=1804 audit(1732209878.062:327): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.129" name="/newroot/32/file1/bus/file0" dev="overlay" ino=11 res=1 errno=0 [ 89.612899][ T6379] syz.0.125: attempt to access beyond end of device [ 89.612899][ T6379] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 89.625857][ T6379] syz.0.125: attempt to access beyond end of device [ 89.625857][ T6379] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 89.638506][ T6379] syz.0.125: attempt to access beyond end of device [ 89.638506][ T6379] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 89.652557][ T6379] syz.0.125: attempt to access beyond end of device [ 89.652557][ T6379] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 89.665343][ T6379] syz.0.125: attempt to access beyond end of device [ 89.665343][ T6379] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 89.678084][ T6379] syz.0.125: attempt to access beyond end of device [ 89.678084][ T6379] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 89.690809][ T6379] VFS: unable to find oldfs superblock on device nbd0 [ 89.711911][ T51] usb 1-1: USB disconnect, device number 3 [ 90.075162][ T6408] netlink: 128 bytes leftover after parsing attributes in process `syz.1.136'. [ 90.087341][ T29] audit: type=1400 audit(1732209878.752:328): avc: denied { write } for pid=6405 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.157277][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'. [ 90.308177][ T29] audit: type=1400 audit(1732209878.982:329): avc: denied { connect } for pid=6409 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.462167][ T6413] xt_hashlimit: max too large, truncated to 1048576 [ 90.698628][ T29] audit: type=1400 audit(1732209879.362:330): avc: denied { read } for pid=6418 comm="syz.0.139" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.731121][ T29] audit: type=1400 audit(1732209879.362:331): avc: denied { open } for pid=6418 comm="syz.0.139" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.754958][ T29] audit: type=1400 audit(1732209879.372:332): avc: denied { rename } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.779055][ T29] audit: type=1400 audit(1732209879.372:333): avc: denied { unlink } for pid=5186 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.801514][ T29] audit: type=1400 audit(1732209879.382:334): avc: denied { create } for pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.656861][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 91.676936][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 92.119608][ T29] audit: type=1400 audit(1732209880.792:335): avc: denied { bind } for pid=6432 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.191636][ T6460] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.153'. [ 94.211443][ T6460] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 94.239854][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 94.239884][ T29] audit: type=1400 audit(1732209882.902:341): avc: denied { execute } for pid=6459 comm="syz.1.153" path="/27/cpu.stat" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.269625][ T5146] Bluetooth: hci0: ISO packet for unknown connection handle 3645 [ 94.838834][ T29] audit: type=1400 audit(1732209882.992:342): avc: denied { nlmsg_write } for pid=6457 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.990095][ T29] audit: type=1400 audit(1732209883.002:343): avc: denied { ioctl } for pid=6457 comm="syz.0.151" path="socket:[9204]" dev="sockfs" ino=9204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.050304][ T29] audit: type=1400 audit(1732209883.732:344): avc: denied { bind } for pid=6468 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.311383][ T29] audit: type=1400 audit(1732209883.992:345): avc: denied { create } for pid=6475 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.333782][ T6479] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 95.514324][ T29] audit: type=1400 audit(1732209884.012:346): avc: denied { getopt } for pid=6478 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.561143][ T29] audit: type=1400 audit(1732209884.022:347): avc: denied { search } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.265976][ T29] audit: type=1400 audit(1732209884.942:348): avc: denied { create } for pid=6490 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.360299][ T6493] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 96.383207][ T5829] IPVS: starting estimator thread 0... [ 96.414904][ T29] audit: type=1400 audit(1732209884.982:349): avc: denied { write } for pid=6490 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.482862][ T29] audit: type=1400 audit(1732209884.982:350): avc: denied { nlmsg_read } for pid=6490 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.490208][ T6494] IPVS: using max 33 ests per chain, 79200 per kthread [ 96.677156][ T6506] FAULT_INJECTION: forcing a failure. [ 96.677156][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 96.701550][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.168 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 96.711829][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 96.721862][ T6506] Call Trace: [ 96.725133][ T6506] <TASK> [ 96.728040][ T6506] dump_stack_lvl+0x16c/0x1f0 [ 96.732698][ T6506] should_fail_ex+0x497/0x5b0 [ 96.737354][ T6506] should_failslab+0xc2/0x120 [ 96.742024][ T6506] __kmalloc_cache_noprof+0x6b/0x300 [ 96.747288][ T6506] ? lock_acquire+0x2f/0xb0 [ 96.751766][ T6506] ? sctp_add_bind_addr+0x9a/0x3d0 [ 96.756855][ T6506] sctp_add_bind_addr+0x9a/0x3d0 [ 96.761768][ T6506] sctp_do_bind+0x2d6/0x700 [ 96.766250][ T6506] sctp_connect_new_asoc+0x5ff/0x790 [ 96.771525][ T6506] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.777307][ T6506] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 96.782831][ T6506] sctp_sendmsg+0x1610/0x1eb0 [ 96.787495][ T6506] ? avc_has_perm+0x11b/0x1c0 [ 96.792153][ T6506] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.797158][ T6506] ? __pfx_sock_has_perm+0x10/0x10 [ 96.802683][ T6506] ? import_ubuf+0x1b6/0x220 [ 96.807257][ T6506] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.812266][ T6506] inet_sendmsg+0x119/0x140 [ 96.816746][ T6506] ____sys_sendmsg+0x98c/0xc90 [ 96.821485][ T6506] ? copy_msghdr_from_user+0x10b/0x160 [ 96.826918][ T6506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.832175][ T6506] ? __lock_acquire+0xcc5/0x3c40 [ 96.837089][ T6506] ___sys_sendmsg+0x135/0x1e0 [ 96.841753][ T6506] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.846942][ T6506] ? trace_lock_acquire+0x14a/0x1d0 [ 96.852127][ T6506] __sys_sendmmsg+0x201/0x420 [ 96.856868][ T6506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.862058][ T6506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.868018][ T6506] ? fput+0x67/0x440 [ 96.871891][ T6506] ? ksys_write+0x1ba/0x250 [ 96.876367][ T6506] ? __pfx_ksys_write+0x10/0x10 [ 96.881195][ T6506] __x64_sys_sendmmsg+0x9c/0x100 [ 96.886111][ T6506] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.891297][ T6506] do_syscall_64+0xcd/0x250 [ 96.895775][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.901643][ T6506] RIP: 0033:0x7fa88ab7e819 [ 96.906032][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.925633][ T6506] RSP: 002b:00007fa88ba4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.934022][ T6506] RAX: ffffffffffffffda RBX: 00007fa88ad35fa0 RCX: 00007fa88ab7e819 [ 96.941970][ T6506] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000004 [ 96.949917][ T6506] RBP: 00007fa88ba4d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.957861][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.965806][ T6506] R13: 0000000000000000 R14: 00007fa88ad35fa0 R15: 00007ffecb9c1f68 [ 96.973761][ T6506] </TASK> [ 97.269643][ T6516] netlink: 264 bytes leftover after parsing attributes in process `syz.0.171'. [ 100.055258][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'. [ 100.067747][ T6549] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.079468][ T6549] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.092413][ T6549] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.101610][ T6549] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.112907][ T6550] netlink: 'syz.3.180': attribute type 8 has an invalid length. [ 100.124997][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'. [ 100.135884][ T6551] netlink: 'syz.3.180': attribute type 8 has an invalid length. [ 100.654505][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 101.350019][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.511334][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 101.526946][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.549670][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.568875][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 101.586397][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.652003][ T5913] usb 1-1: config 0 descriptor?? [ 102.066640][ T5913] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 102.085813][ T5913] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 102.105627][ T5913] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 102.124159][ T5913] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 102.137103][ T5913] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 102.146535][ T5913] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 102.466623][ T5913] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 102.584687][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 102.584699][ T29] audit: type=1400 audit(1732209891.212:356): avc: denied { read } for pid=6573 comm="syz.4.189" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.630796][ T29] audit: type=1400 audit(1732209891.222:357): avc: denied { open } for pid=6573 comm="syz.4.189" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.737697][ T29] audit: type=1400 audit(1732209891.222:358): avc: denied { ioctl } for pid=6573 comm="syz.4.189" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.857619][ T29] audit: type=1400 audit(1732209891.492:359): avc: denied { read } for pid=6587 comm="syz.1.192" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.925169][ T29] audit: type=1400 audit(1732209891.492:360): avc: denied { open } for pid=6587 comm="syz.1.192" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.004452][ T29] audit: type=1400 audit(1732209891.492:361): avc: denied { bind } for pid=6587 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.073656][ T29] audit: type=1400 audit(1732209891.492:362): avc: denied { name_bind } for pid=6587 comm="syz.1.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 103.156751][ T29] audit: type=1400 audit(1732209891.492:363): avc: denied { node_bind } for pid=6587 comm="syz.1.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 103.251861][ T29] audit: type=1400 audit(1732209891.572:364): avc: denied { bind } for pid=6585 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.332782][ T29] audit: type=1400 audit(1732209891.582:365): avc: denied { write } for pid=6585 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.243870][ T6606] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 105.263393][ T6606] syzkaller1: entered promiscuous mode [ 105.279208][ T6606] syzkaller1: entered allmulticast mode [ 105.877756][ T5880] usb 1-1: USB disconnect, device number 4 [ 106.146144][ T6623] overlayfs: workdir and upperdir must reside under the same mount [ 106.405341][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 106.744584][ T6642] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.313838][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 108.108546][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 108.108563][ T29] audit: type=1400 audit(1732209896.672:419): avc: denied { setopt } for pid=6662 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.343642][ T6669] vivid-000: disconnect [ 109.591942][ T6662] vivid-000: reconnect [ 109.598588][ T29] audit: type=1400 audit(1732209898.082:420): avc: denied { ioctl } for pid=6662 comm="syz.1.213" path="socket:[10478]" dev="sockfs" ino=10478 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.746256][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.215'. [ 109.760781][ T29] audit: type=1400 audit(1732209898.432:421): avc: denied { write } for pid=6670 comm="syz.3.215" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.920892][ T29] audit: type=1804 audit(1732209898.602:422): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.217" name="/newroot/47/file1/bus/file0" dev="overlay" ino=10 res=1 errno=0 [ 110.862629][ T29] audit: type=1400 audit(1732209899.522:423): avc: denied { read } for pid=6691 comm="syz.0.221" path="socket:[11735]" dev="sockfs" ino=11735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.009884][ T29] audit: type=1400 audit(1732209900.682:424): avc: denied { watch } for pid=6701 comm="syz.2.224" path="/proc/153" dev="proc" ino=10528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.068396][ T29] audit: type=1400 audit(1732209900.682:425): avc: denied { watch_reads } for pid=6701 comm="syz.2.224" path="/proc/153" dev="proc" ino=10528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.160094][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 112.266836][ T29] audit: type=1804 audit(1732209900.942:426): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.228" name="/newroot/37/file1/bus/file0" dev="overlay" ino=10 res=1 errno=0 [ 112.297474][ T5841] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.471129][ T6724] input: syz0 as /devices/virtual/input/input6 [ 112.487426][ T5841] usb 3-1: device descriptor read/64, error -71 [ 112.919876][ T5841] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.979919][ T29] audit: type=1400 audit(1732209901.652:427): avc: denied { execute } for pid=6731 comm="syz.1.232" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 113.049947][ T5841] usb 3-1: device descriptor read/64, error -71 [ 113.162313][ T5841] usb usb3-port1: attempt power cycle [ 113.179011][ T29] audit: type=1400 audit(1732209901.852:428): avc: denied { listen } for pid=6735 comm="syz.3.234" lport=48516 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.229685][ T29] audit: type=1400 audit(1732209901.902:429): avc: denied { accept } for pid=6735 comm="syz.3.234" lport=48516 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.263191][ T29] audit: type=1400 audit(1732209901.942:430): avc: denied { write } for pid=6735 comm="syz.3.234" lport=48516 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 113.264333][ T6736] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 113.296373][ T29] audit: type=1400 audit(1732209901.942:431): avc: denied { setopt } for pid=6735 comm="syz.3.234" lport=48516 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 113.308511][ T6736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.234'. [ 113.368955][ T29] audit: type=1400 audit(1732209902.042:432): avc: denied { search } for pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.586543][ T29] audit: type=1400 audit(1732209902.042:433): avc: denied { read } for pid=5498 comm="dhcpcd" name="n100" dev="tmpfs" ino=2795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.610441][ T29] audit: type=1400 audit(1732209902.042:434): avc: denied { open } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.633671][ T29] audit: type=1400 audit(1732209902.042:435): avc: denied { getattr } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.666162][ T5841] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.700246][ T5841] usb 3-1: device descriptor read/8, error -71 [ 114.480223][ T29] audit: type=1400 audit(1732209903.122:436): avc: denied { ioctl } for pid=6758 comm="syz.1.239" path="socket:[11900]" dev="sockfs" ino=11900 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.547934][ T6761] FAULT_INJECTION: forcing a failure. [ 114.547934][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.570831][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.1.240 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 114.575983][ T6763] ip6gre1: entered promiscuous mode [ 114.581091][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.581107][ T6761] Call Trace: [ 114.581114][ T6761] <TASK> [ 114.581122][ T6761] dump_stack_lvl+0x16c/0x1f0 [ 114.581150][ T6761] should_fail_ex+0x497/0x5b0 [ 114.581174][ T6761] _copy_from_iter+0x2a1/0x1560 [ 114.581203][ T6761] ? __pfx__copy_from_iter+0x10/0x10 [ 114.581225][ T6761] ? find_held_lock+0x2d/0x110 [ 114.581257][ T6761] vhost_chr_write_iter+0xc5/0x1080 [ 114.581284][ T6761] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 114.581306][ T6761] ? avc_policy_seqno+0x9/0x20 [ 114.581331][ T6761] ? bpf_lsm_file_permission+0x9/0x10 [ 114.647734][ T6761] ? security_file_permission+0x71/0x210 [ 114.653354][ T6761] vfs_write+0x5ae/0x1150 [ 114.657663][ T6761] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 114.663919][ T6761] ? trace_lock_acquire+0x14a/0x1d0 [ 114.669096][ T6761] ? __pfx_vfs_write+0x10/0x10 [ 114.673849][ T6761] ? __fget_files+0x40/0x3a0 [ 114.678429][ T6761] ksys_write+0x12b/0x250 [ 114.682739][ T6761] ? __pfx_ksys_write+0x10/0x10 [ 114.687575][ T6761] do_syscall_64+0xcd/0x250 [ 114.692072][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.697956][ T6761] RIP: 0033:0x7f6b1c57e819 [ 114.702345][ T6761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.721929][ T6761] RSP: 002b:00007f6b1d39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.730336][ T6761] RAX: ffffffffffffffda RBX: 00007f6b1c735fa0 RCX: 00007f6b1c57e819 [ 114.738303][ T6761] RDX: 0000000000000048 RSI: 0000000020000c40 RDI: 0000000000000003 [ 114.746258][ T6761] RBP: 00007f6b1d39b090 R08: 0000000000000000 R09: 0000000000000000 [ 114.754218][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.762254][ T6761] R13: 0000000000000000 R14: 00007f6b1c735fa0 R15: 00007ffc4b2125e8 [ 114.770210][ T6761] </TASK> [ 114.798406][ T6763] ip6gre1: entered allmulticast mode [ 115.572667][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 115.631780][ T29] audit: type=1400 audit(1732209903.832:437): avc: denied { accept } for pid=6768 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 115.689905][ T5841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.710276][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 115.716888][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.729874][ T5841] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 115.739161][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.748715][ T5841] usb 3-1: Product: syz [ 115.754896][ T5841] usb 3-1: Manufacturer: syz [ 115.759527][ T5841] usb 3-1: SerialNumber: syz [ 115.788196][ T5841] usb 3-1: config 0 descriptor?? [ 115.817225][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.830574][ T5841] ttusb_dec_send_command: command bulk message failed: error -22 [ 115.869102][ T5841] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 115.986391][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.999250][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.023395][ T5880] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.047182][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 116.062220][ T5879] usb 3-1: USB disconnect, device number 7 [ 116.070339][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.078249][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.095274][ T5880] usb 4-1: config 1 interface 0 has no altsetting 1 [ 116.107979][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 116.117699][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.129590][ T5880] usb 4-1: Product: syz [ 116.137886][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.150000][ T5880] usb 4-1: Manufacturer: syz [ 116.150811][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.162850][ T5880] usb 4-1: SerialNumber: syz [ 116.190137][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.201595][ T5880] smsusb:smsusb_probe: board id=8, interface number 0 [ 116.352404][ T5878] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.361554][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.375099][ T5878] usb 1-1: config 0 descriptor?? [ 116.855952][ T5878] [drm] vendor descriptor length:e0 data:5f 0c df 08 08 b5 64 1d fd 16 ea [ 116.879878][ T5878] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 116.929927][ T5880] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 116.936907][ T5880] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 116.958980][ T5878] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 116.999933][ T5878] [drm] Initialized udl on minor 2 [ 117.045292][ T5880] usb 4-1: USB disconnect, device number 4 [ 117.068049][ T6786] pim6reg: entered allmulticast mode [ 117.081742][ T6786] pim6reg: left allmulticast mode [ 117.191965][ T5878] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.400117][ T5878] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 117.415114][ T5880] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.425191][ T5880] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.433804][ T5880] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 117.444837][ T5878] usb 1-1: USB disconnect, device number 5 [ 117.956958][ T6800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.299737][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 118.305921][ T29] audit: type=1400 audit(1732209906.972:441): avc: denied { ioctl } for pid=6796 comm="syz.2.251" path="socket:[11986]" dev="sockfs" ino=11986 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.344192][ T29] audit: type=1400 audit(1732209906.982:442): avc: denied { write } for pid=6796 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.359897][ T6801] tun0: tun_chr_ioctl cmd 1074025675 [ 118.370679][ T6801] tun0: persist enabled [ 118.468318][ T6804] tun0: tun_chr_ioctl cmd 1074025675 [ 118.474216][ T6804] tun0: persist disabled [ 118.485788][ T6801] tun0: tun_chr_ioctl cmd 2147767511 [ 119.272937][ T29] audit: type=1400 audit(1732209907.952:443): avc: denied { append } for pid=6807 comm="syz.1.254" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.097546][ T6824] netlink: 68 bytes leftover after parsing attributes in process `syz.4.256'. [ 120.164179][ T29] audit: type=1400 audit(1732209908.842:444): avc: denied { setopt } for pid=6823 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.630248][ T6844] netlink: 'syz.1.259': attribute type 12 has an invalid length. [ 120.638007][ T6844] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.259'. [ 121.965106][ T29] audit: type=1400 audit(1732209910.222:445): avc: denied { setcheckreqprot } for pid=6840 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.019874][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.099104][ T29] audit: type=1400 audit(1732209910.692:446): avc: denied { accept } for pid=6850 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.136276][ T29] audit: type=1400 audit(1732209910.772:447): avc: denied { read } for pid=6856 comm="syz.2.266" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.299653][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.479276][ T29] audit: type=1400 audit(1732209910.772:448): avc: denied { open } for pid=6856 comm="syz.2.266" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.519924][ T29] audit: type=1400 audit(1732209911.182:449): avc: denied { write } for pid=6860 comm="syz.4.267" path="socket:[10942]" dev="sockfs" ino=10942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.573853][ T6859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.589880][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 122.628294][ T5878] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 122.643417][ T29] audit: type=1400 audit(1732209911.322:450): avc: denied { listen } for pid=6866 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 122.666383][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=70, SerialNumber=3 [ 122.675220][ T5878] usb 4-1: Product: syz [ 122.687429][ T5878] usb 4-1: Manufacturer: syz [ 122.696210][ T5878] usb 4-1: SerialNumber: syz [ 122.702694][ T5878] usb 4-1: config 0 descriptor?? [ 122.759920][ T5880] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.923936][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 122.935748][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 122.948366][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 122.961066][ T5880] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 122.970301][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.978295][ T5880] usb 5-1: Product: syz [ 122.983213][ T5880] usb 5-1: Manufacturer: syz [ 122.987872][ T5880] usb 5-1: SerialNumber: syz [ 122.994412][ T5880] usb 5-1: config 0 descriptor?? [ 123.153556][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 123.218330][ T6862] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 123.246660][ T6862] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.267'. [ 123.276161][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 123.636801][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 124.039880][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 124.039896][ T29] audit: type=1400 audit(1732209912.712:452): avc: denied { read write } for pid=6884 comm="syz.2.274" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.044939][ T5878] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 124.046948][ T29] audit: type=1400 audit(1732209912.712:453): avc: denied { open } for pid=6884 comm="syz.2.274" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.070324][ T5878] usb 4-1: setting power ON [ 124.085654][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.215325][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 124.226808][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.236663][ T5878] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 124.245384][ T5878] usb 4-1: media controller created [ 124.287074][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.342103][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.350784][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.359180][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.384370][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.394935][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.903675][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.911371][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.918855][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.926049][ T5878] usb 4-1: selecting invalid altsetting 6 [ 124.926364][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.939660][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.940394][ T5878] usb 4-1: digital interface selection failed (-22) [ 124.947209][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.961248][ T5878] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 124.970477][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.978312][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.986948][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.994943][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 124.997079][ T5878] usb 4-1: setting power OFF [ 125.002438][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.019466][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.020194][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 125.027064][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.033965][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.040402][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.040425][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.040445][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.049773][ T5878] (NULL device *): no alternate interface [ 125.057091][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.091104][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.103328][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.104630][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.110786][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110811][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110830][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110850][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110868][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110887][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110906][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.110925][ T5913] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.113951][ T5841] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.165694][ T5878] usb 4-1: USB disconnect, device number 5 [ 125.265878][ T5913] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 125.299669][ T1196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.510215][ T1196] usb 1-1: Using ep0 maxpacket: 8 [ 125.526726][ T1196] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 125.575304][ T1196] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 125.615501][ T5841] usb 3-1: config 0 has no interfaces? [ 125.623261][ T5841] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 125.624281][ T1196] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 125.634885][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.666086][ T1196] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 125.678431][ T1196] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.695959][ T1196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 126.002180][ T5841] usb 3-1: config 0 descriptor?? [ 126.409213][ T6885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6885 comm=syz.2.274 [ 126.467061][ T1196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.478359][ T1196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 126.496297][ T1196] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 126.508125][ T6909] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 126.519308][ T1196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.528109][ T1196] usb 1-1: Product: syz [ 126.698961][ T1196] usb 1-1: Manufacturer: syz [ 126.723951][ T1196] usb 1-1: SerialNumber: syz [ 126.734565][ T1196] usb 1-1: config 0 descriptor?? [ 126.740484][ T6891] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.749317][ T1196] hub 1-1:0.0: bad descriptor, ignoring hub [ 126.757165][ T5829] usb 3-1: USB disconnect, device number 8 [ 126.768419][ T1196] hub 1-1:0.0: probe with driver hub failed with error -5 [ 127.784897][ T1196] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 127.839787][ T1196] usb 1-1: USB disconnect, device number 6 [ 127.839941][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 127.866085][ T29] audit: type=1804 audit(1732209916.542:454): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.282" name="/newroot/58/file1/bus/file0" dev="overlay" ino=11 res=1 errno=0 [ 128.024079][ T29] audit: type=1400 audit(1732209916.702:455): avc: denied { getopt } for pid=6928 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.088859][ T6932] syzkaller1: entered promiscuous mode [ 128.123010][ T6932] syzkaller1: entered allmulticast mode [ 128.359958][ T1196] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.809505][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 128.859970][ T1196] usb 1-1: device descriptor read/64, error -71 [ 128.874369][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 128.893095][ T29] audit: type=1400 audit(1732209917.572:456): avc: denied { create } for pid=6934 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.120276][ T1196] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.164213][ T6952] capability: warning: `syz.2.292' uses deprecated v2 capabilities in a way that may be insecure [ 129.293657][ T1196] usb 1-1: device descriptor read/64, error -71 [ 129.316593][ T29] audit: type=1400 audit(1732209917.992:457): avc: denied { ioctl } for pid=6934 comm="syz.3.289" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.355989][ T6956] lo speed is unknown, defaulting to 1000 [ 129.412349][ T1196] usb usb1-port1: attempt power cycle [ 129.509711][ T6954] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 129.533030][ T6954] audit: out of memory in audit_log_start [ 129.563249][ T6953] delete_channel: no stack [ 129.599860][ T29] audit: type=1400 audit(1732209918.272:458): avc: denied { setopt } for pid=6961 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.772905][ T1196] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.804467][ T1196] usb 1-1: device descriptor read/8, error -71 [ 129.827106][ T29] audit: type=1400 audit(1732209918.492:459): avc: denied { setopt } for pid=6966 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.037753][ T29] audit: type=1400 audit(1732209918.712:460): avc: denied { ioctl } for pid=6970 comm="syz.1.300" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.091647][ T1196] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.107469][ T6975] nvme_fabrics: unknown parameter or missing value '�' in ctrl creation request [ 130.111479][ T1196] usb 1-1: device descriptor read/8, error -71 [ 130.220766][ T1196] usb usb1-port1: unable to enumerate USB device [ 130.830692][ T6976] delete_channel: no stack [ 131.299990][ T1196] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.393939][ T6956] lo speed is unknown, defaulting to 1000 [ 131.394464][ T6980] warning: `syz.1.303' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.419130][ T6956] lo speed is unknown, defaulting to 1000 [ 131.445530][ T1196] usb 2-1: device descriptor read/64, error -71 [ 131.664055][ T5881] lo speed is unknown, defaulting to 1000 [ 131.670882][ T6956] infiniband sz1: set down [ 131.675628][ T6956] infiniband sz1: added lo [ 131.857701][ T6956] sz1: rxe_create_cq: returned err = -12 [ 131.864426][ T29] audit: type=1400 audit(1732209920.342:461): avc: denied { read } for pid=6989 comm="syz.3.305" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.940193][ T1196] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.160637][ T6996] lo speed is unknown, defaulting to 1000 [ 132.463223][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.469712][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.512928][ T6956] infiniband sz1: Couldn't create ib_mad CQ [ 132.531042][ T6956] infiniband sz1: Couldn't open port 1 [ 132.591292][ T7000] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.598470][ T7000] overlayfs: failed to set xattr on upper [ 132.604461][ T7000] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.640044][ T7000] overlayfs: ...falling back to index=off. [ 132.645891][ T7000] overlayfs: ...falling back to uuid=null. [ 132.654599][ T29] audit: type=1400 audit(1732209921.262:462): avc: denied { mount } for pid=6999 comm="syz.3.308" name="/" dev="ramfs" ino=11151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.724383][ T29] audit: type=1400 audit(1732209921.262:463): avc: denied { mounton } for pid=6999 comm="syz.3.308" path="/62/file0/bus" dev="ramfs" ino=11154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 132.783288][ T29] audit: type=1400 audit(1732209921.462:464): avc: denied { execute } for pid=6999 comm="syz.3.308" path="/62/file0/blkio.bfq.io_serviced_recursive" dev="ramfs" ino=12446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.090869][ T6956] RDS/IB: sz1: added [ 133.095193][ T6956] smc: adding ib device sz1 with port count 1 [ 133.108124][ T7006] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 133.117980][ T7006] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 133.125946][ T6956] smc: ib device sz1 port 1 has pnetid [ 133.184941][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.590965][ T966] lo speed is unknown, defaulting to 1000 [ 133.616242][ T6956] lo speed is unknown, defaulting to 1000 [ 133.849293][ T1196] usb 2-1: device descriptor read/64, error -71 [ 133.960057][ T1196] usb usb2-port1: attempt power cycle [ 134.219900][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.370015][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 134.378414][ T5879] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 134.388604][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.403618][ T5879] usb 1-1: Product: syz [ 134.417983][ T5879] usb 1-1: Manufacturer: syz [ 134.429809][ T5879] usb 1-1: SerialNumber: syz [ 134.451470][ T5879] usb 1-1: config 0 descriptor?? [ 134.673082][ T5879] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 134.712496][ T5879] usb 1-1: USB disconnect, device number 11 [ 134.789885][ T1196] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.840659][ T1196] usb 2-1: Using ep0 maxpacket: 32 [ 134.847403][ T1196] usb 2-1: config 4 has an invalid interface number: 83 but max is 0 [ 134.856354][ T1196] usb 2-1: config 4 has no interface number 0 [ 134.871486][ T1196] usb 2-1: config 4 interface 83 has no altsetting 0 [ 134.890054][ T1196] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 134.913594][ T1196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.934702][ T1196] usb 2-1: SerialNumber: syz [ 135.157995][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.168776][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.530528][ T1196] gspca_main: spca501-2.14.0 probing 0000:0000 [ 135.547035][ T1196] gspca_spca501: reg write: error -71 [ 135.553126][ T1196] spca501 2-1:4.83: Reg write failed for 0x02,0x0f,0x05 [ 135.560400][ T1196] spca501 2-1:4.83: probe with driver spca501 failed with error -22 [ 135.575916][ T1196] usb 2-1: USB disconnect, device number 7 [ 238.989718][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 238.996690][ C1] rcu: 0-...!: (1 GPs behind) idle=4054/1/0x4000000000000000 softirq=17761/17762 fqs=89 [ 239.007351][ C1] rcu: (detected by 1, t=10502 jiffies, g=12253, q=1645 ncpus=2) [ 239.015158][ C1] Sending NMI from CPU 1 to CPUs 0: [ 239.015181][ C0] NMI backtrace for cpu 0 [ 239.015191][ C0] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.295 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 239.015206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 239.015214][ C0] RIP: 0010:__lock_acquire+0x139d/0x3c40 [ 239.015235][ C0] Code: 00 00 00 85 f6 0f 84 63 f6 ff ff e9 4b f6 ff ff 31 d2 4c 89 fe 4c 89 ef e8 e0 da ff ff 85 c0 0f 85 14 ff ff ff e9 ea fb ff ff <49> 8d 7f d8 e8 8a 47 ff ff 48 8d 78 40 48 89 c5 48 b8 00 00 00 00 [ 239.015248][ C0] RSP: 0018:ffffc90000007ab0 EFLAGS: 00000006 [ 239.015260][ C0] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff816aae22 [ 239.015268][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000029849a6b [ 239.015276][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca198 [ 239.015284][ C0] R10: ffffffff96e50cc7 R11: 0000000000000006 R12: ffffed10058c1a6b [ 239.015292][ C0] R13: ffff88802c60c880 R14: 0000000000000002 R15: ffff88802c60d450 [ 239.015301][ C0] FS: 00007f93563536c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 239.015314][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.015324][ C0] CR2: 0000001b2ff0eff8 CR3: 0000000036a08000 CR4: 00000000003526f0 [ 239.015332][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.015340][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.015348][ C0] Call Trace: [ 239.015353][ C0] <NMI> [ 239.015359][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 239.015374][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 239.015394][ C0] ? nmi_handle+0x1a9/0x5c0 [ 239.015407][ C0] ? __lock_acquire+0x139d/0x3c40 [ 239.015420][ C0] ? default_do_nmi+0x6a/0x160 [ 239.015433][ C0] ? exc_nmi+0x170/0x1e0 [ 239.015444][ C0] ? end_repeat_nmi+0xf/0x53 [ 239.015463][ C0] ? __lock_acquire+0xf32/0x3c40 [ 239.015481][ C0] ? __lock_acquire+0x139d/0x3c40 [ 239.015494][ C0] ? __lock_acquire+0x139d/0x3c40 [ 239.015507][ C0] ? __lock_acquire+0x139d/0x3c40 [ 239.015520][ C0] </NMI> [ 239.015524][ C0] <IRQ> [ 239.015531][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 239.015547][ C0] lock_acquire.part.0+0x11b/0x380 [ 239.015560][ C0] ? debug_object_activate+0x149/0x4a0 [ 239.015576][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 239.015589][ C0] ? rcu_is_watching+0x12/0xc0 [ 239.015606][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 239.015623][ C0] ? debug_object_activate+0x149/0x4a0 [ 239.015636][ C0] ? lock_acquire+0x2f/0xb0 [ 239.015648][ C0] ? debug_object_activate+0x149/0x4a0 [ 239.015662][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 239.015676][ C0] ? debug_object_activate+0x149/0x4a0 [ 239.015689][ C0] debug_object_activate+0x149/0x4a0 [ 239.015702][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 239.015715][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 239.015731][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 239.015746][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.015761][ C0] ? __pfx_advance_sched+0x10/0x10 [ 239.015780][ C0] enqueue_hrtimer+0x25/0x3c0 [ 239.015795][ C0] __hrtimer_run_queues+0x903/0xae0 [ 239.015812][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 239.015826][ C0] ? read_tsc+0x9/0x20 [ 239.015844][ C0] hrtimer_interrupt+0x392/0x8e0 [ 239.015863][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 239.015879][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 239.015894][ C0] </IRQ> [ 239.015898][ C0] <TASK> [ 239.015903][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.015919][ C0] RIP: 0010:unwind_get_return_address+0x12/0xa0 [ 239.015935][ C0] Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 <48> c1 ea 03 53 48 89 fb 0f b6 04 02 84 c0 74 04 3c 03 7e 59 8b 03 [ 239.015947][ C0] RSP: 0018:ffffc9000359e6b8 EFLAGS: 00000202 [ 239.015958][ C0] RAX: dffffc0000000000 RBX: ffffc9000359e6c8 RCX: 0000000000000000 [ 239.015967][ C0] RDX: ffffc9000359e6c8 RSI: ffffc9000359edf0 RDI: ffffc9000359e6c8 [ 239.015975][ C0] RBP: ffffc9000359e758 R08: ffffc9000359e6fc R09: ffffffff91053006 [ 239.015984][ C0] R10: ffffc9000359e6c8 R11: 0000000000012e2a R12: ffffffff8179abf0 [ 239.015993][ C0] R13: ffffc9000359e788 R14: 0000000000000000 R15: ffff88802c60c880 [ 239.016002][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.016023][ C0] arch_stack_walk+0xa7/0x100 [ 239.016040][ C0] ? internal_create_groups+0x9d/0x150 [ 239.016055][ C0] stack_trace_save+0x95/0xd0 [ 239.016071][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 239.016087][ C0] ? hlock_class+0x4e/0x130 [ 239.016104][ C0] kasan_save_stack+0x33/0x60 [ 239.016121][ C0] ? kasan_save_stack+0x33/0x60 [ 239.016136][ C0] ? kasan_save_track+0x14/0x30 [ 239.016151][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 239.016165][ C0] ? __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 239.016184][ C0] ? kstrdup+0x3c/0x70 [ 239.016200][ C0] ? kstrdup_const+0x63/0x80 [ 239.016214][ C0] ? __kernfs_new_node+0x9c/0x890 [ 239.016227][ C0] ? kernfs_new_node+0x186/0x240 [ 239.016241][ C0] ? __kernfs_create_file+0x53/0x350 [ 239.016258][ C0] ? sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 239.016276][ C0] ? internal_create_group+0x565/0xe50 [ 239.016299][ C0] kasan_save_track+0x14/0x30 [ 239.016314][ C0] __kasan_kmalloc+0xaa/0xb0 [ 239.016330][ C0] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 239.016348][ C0] ? kstrdup_const+0x63/0x80 [ 239.016365][ C0] kstrdup+0x3c/0x70 [ 239.016379][ C0] kstrdup_const+0x63/0x80 [ 239.016394][ C0] __kernfs_new_node+0x9c/0x890 [ 239.016408][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 239.016421][ C0] ? __pfx_lock_release+0x10/0x10 [ 239.016433][ C0] ? kernfs_add_one+0x39d/0x520 [ 239.016450][ C0] ? up_write+0x1b2/0x520 [ 239.016465][ C0] kernfs_new_node+0x186/0x240 [ 239.016484][ C0] __kernfs_create_file+0x53/0x350 [ 239.016503][ C0] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 239.016523][ C0] internal_create_group+0x565/0xe50 [ 239.016537][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 239.016550][ C0] ? __pfx_kobject_add+0x10/0x10 [ 239.016571][ C0] internal_create_groups+0x9d/0x150 [ 239.016585][ C0] ib_setup_port_attrs+0x40b/0x5d0 [ 239.016600][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 239.016615][ C0] ? __init_waitqueue_head+0xca/0x150 [ 239.016633][ C0] add_one_compat_dev+0x4c5/0x720 [ 239.016648][ C0] enable_device_and_get+0x338/0x3f0 [ 239.016663][ C0] ? __pfx_enable_device_and_get+0x10/0x10 [ 239.016679][ C0] ? rdma_counter_init+0x1f8/0x3f0 [ 239.016696][ C0] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 239.016712][ C0] ib_register_device+0x880/0xdf0 [ 239.016727][ C0] ? __pfx_ib_register_device+0x10/0x10 [ 239.016741][ C0] ? crypto_create_tfm_node+0x148/0x320 [ 239.016761][ C0] ? crypto_alloc_tfm_node+0x126/0x260 [ 239.016779][ C0] rxe_register_device+0x2fc/0x3d0 [ 239.016795][ C0] rxe_net_add+0xb4/0x110 [ 239.016807][ C0] rxe_newlink+0x6f/0x190 [ 239.016825][ C0] nldev_newlink+0x38e/0x660 [ 239.016837][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 239.016868][ C0] ? cred_has_capability.isra.0+0x192/0x2f0 [ 239.016884][ C0] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 239.016899][ C0] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 239.016914][ C0] ? rdma_nl_rcv_msg+0x16a/0x6e0 [ 239.016926][ C0] ? rdma_nl_rcv_msg+0x16a/0x6e0 [ 239.016939][ C0] ? security_capable+0x7e/0x260 [ 239.016959][ C0] ? ns_capable+0xd7/0x110 [ 239.016973][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 239.016985][ C0] rdma_nl_rcv_msg+0x388/0x6e0 [ 239.016998][ C0] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 239.017010][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 239.017023][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 239.017035][ C0] ? hlock_class+0x4e/0x130 [ 239.017051][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 239.017065][ C0] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 239.017080][ C0] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 239.017098][ C0] ? netlink_deliver_tap+0x1ae/0xd90 [ 239.017115][ C0] netlink_unicast+0x53c/0x7f0 [ 239.017131][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 239.017148][ C0] netlink_sendmsg+0x8b8/0xd70 [ 239.017164][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.017183][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 239.017198][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 239.017215][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.017233][ C0] ___sys_sendmsg+0x135/0x1e0 [ 239.017251][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.017272][ C0] ? __pfx_lock_release+0x10/0x10 [ 239.017284][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 239.017304][ C0] ? __fget_files+0x206/0x3a0 [ 239.017321][ C0] __sys_sendmsg+0x16e/0x220 [ 239.017339][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.017356][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 239.017379][ C0] do_syscall_64+0xcd/0x250 [ 239.017395][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.017412][ C0] RIP: 0033:0x7f935557e819 [ 239.017423][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.017435][ C0] RSP: 002b:00007f9356353038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.017448][ C0] RAX: ffffffffffffffda RBX: 00007f9355735fa0 RCX: 00007f935557e819 [ 239.017456][ C0] RDX: 0000000000000810 RSI: 0000000020000240 RDI: 0000000000000003 [ 239.017465][ C0] RBP: 00007f93555f175e R08: 0000000000000000 R09: 0000000000000000 [ 239.017477][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.017484][ C0] R13: 0000000000000000 R14: 00007f9355735fa0 R15: 00007ffd60db09a8 [ 239.017497][ C0] </TASK> [ 239.018178][ C1] rcu: rcu_preempt kthread starved for 10321 jiffies! g12253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 239.962808][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 239.972769][ C1] rcu: RCU grace-period kthread stack dump: [ 239.978646][ C1] task:rcu_preempt state:R running task stack:28488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 239.990397][ C1] Call Trace: [ 239.993669][ C1] <TASK> [ 239.996601][ C1] __schedule+0xe5a/0x5ae0 [ 240.001020][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 240.006746][ C1] ? __pfx___schedule+0x10/0x10 [ 240.011593][ C1] ? schedule+0x298/0x350 [ 240.015917][ C1] ? __pfx_lock_release+0x10/0x10 [ 240.020935][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 240.026135][ C1] ? lock_acquire+0x2f/0xb0 [ 240.030633][ C1] ? schedule+0x1fd/0x350 [ 240.034962][ C1] schedule+0xe7/0x350 [ 240.039029][ C1] schedule_timeout+0x124/0x280 [ 240.043873][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 240.049239][ C1] ? __pfx_process_timeout+0x10/0x10 [ 240.054527][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.060330][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 240.065789][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 240.070554][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 240.075833][ C1] ? rcu_gp_init+0xc82/0x1630 [ 240.080506][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 240.085706][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.091511][ C1] rcu_gp_kthread+0x271/0x380 [ 240.096184][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.101385][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.106583][ C1] ? __kthread_parkme+0x148/0x220 [ 240.111609][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.116801][ C1] kthread+0x2c1/0x3a0 [ 240.120869][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.126063][ C1] ? __pfx_kthread+0x10/0x10 [ 240.130652][ C1] ret_from_fork+0x45/0x80 [ 240.135063][ C1] ? __pfx_kthread+0x10/0x10 [ 240.139664][ C1] ret_from_fork_asm+0x1a/0x30 [ 240.144443][ C1] </TASK> [ 240.147458][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 240.153769][ C1] CPU: 1 UID: 0 PID: 7026 Comm: syz.0.316 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 240.163998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 240.174044][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 240.180717][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7a 11 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 240.200317][ C1] RSP: 0018:ffffc90003f2f5b0 EFLAGS: 00000293 [ 240.206378][ C1] RAX: 0000000000000000 RBX: ffff8880b8646ca0 RCX: ffffffff8181cf8c [ 240.214346][ C1] RDX: ffff88805e3b2440 RSI: ffffffff8181cf66 RDI: 0000000000000005 [ 240.222308][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 240.230270][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170c8d95 [ 240.238234][ C1] R13: 0000000000000001 R14: ffff8880b8646ca8 R15: ffff8880b8740180 [ 240.246204][ C1] FS: 00007fa88ba2c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 240.255130][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.261711][ C1] CR2: 00007fa88ba2bf98 CR3: 0000000034a28000 CR4: 00000000003526f0 [ 240.269679][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.277642][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.285607][ C1] Call Trace: [ 240.288875][ C1] <IRQ> [ 240.291713][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 240.298041][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 240.303239][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 240.308707][ C1] ? timekeeping_advance+0x70a/0xa60 [ 240.313992][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 240.319627][ C1] ? __asan_memcpy+0x3c/0x60 [ 240.324220][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 240.329512][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.334288][ C1] ? update_process_times+0x178/0x2d0 [ 240.339656][ C1] ? __pfx_update_process_times+0x10/0x10 [ 240.345384][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 240.350851][ C1] ? update_wall_time+0x1c/0x40 [ 240.355714][ C1] ? tick_nohz_handler+0x376/0x530 [ 240.360834][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 240.366299][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 240.371680][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 240.377398][ C1] ? read_tsc+0x9/0x20 [ 240.381479][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 240.386602][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 240.392753][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 240.398557][ C1] </IRQ> [ 240.401486][ C1] <TASK> [ 240.404412][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.410570][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 240.416635][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 240.422698][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 240.428764][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 240.433791][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 240.438812][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 240.443924][ C1] text_poke_bp_batch+0x22b/0x760 [ 240.448949][ C1] ? __pfx_text_poke_loc_init+0x10/0x10 [ 240.454496][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 240.460052][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.464815][ C1] ? trace_contention_end+0xea/0x140 [ 240.470097][ C1] ? __SCT__tp_func_swiotlb_bounced+0x8/0x8 [ 240.475990][ C1] text_poke_bp+0xa3/0xd0 [ 240.480320][ C1] ? __pfx_text_poke_bp+0x10/0x10 [ 240.485344][ C1] ? arch_static_call_transform+0x28/0xb0 [ 240.491060][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 240.496089][ C1] ? __SCT__tp_func_swiotlb_bounced+0x8/0x8 [ 240.501990][ C1] __static_call_transform+0x34d/0x770 [ 240.507455][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 240.513438][ C1] ? __SCT__tp_func_swiotlb_bounced+0x8/0x8 [ 240.519330][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.525139][ C1] ? __SCT__tp_func_swiotlb_bounced+0x8/0x8 [ 240.531029][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.536831][ C1] arch_static_call_transform+0x5d/0xb0 [ 240.542380][ C1] ? __SCT__tp_func_swiotlb_bounced+0x8/0x8 [ 240.548270][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.554071][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.559871][ C1] __static_call_update+0xee/0x660 [ 240.564988][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.570793][ C1] ? __pfx___static_call_update+0x10/0x10 [ 240.576533][ C1] ? trace_kmalloc+0x2d/0xe0 [ 240.581126][ C1] ? __kmalloc_noprof+0x207/0x400 [ 240.586153][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.591955][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.597772][ C1] tracepoint_add_func+0xa14/0xe50 [ 240.602922][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.608823][ C1] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 240.615672][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 240.623124][ C1] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 240.629015][ C1] ? bpf_link_prime+0x8a/0x4d0 [ 240.633779][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 240.639065][ C1] bpf_probe_register+0x189/0x200 [ 240.644088][ C1] bpf_raw_tp_link_attach+0x245/0x540 [ 240.649457][ C1] ? __pfx_lock_release+0x10/0x10 [ 240.654477][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 240.660371][ C1] ? lock_acquire+0x2f/0xb0 [ 240.664869][ C1] ? __fget_files+0x40/0x3a0 [ 240.669484][ C1] ? fput+0x67/0x440 [ 240.673386][ C1] ? __bpf_prog_get+0xa0/0x290 [ 240.678145][ C1] __sys_bpf+0x3a4/0x49a0 [ 240.682473][ C1] ? __pfx_futex_wake+0x10/0x10 [ 240.687328][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 240.692092][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 240.697372][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 240.702741][ C1] ? do_futex+0x123/0x350 [ 240.707073][ C1] ? __pfx_do_futex+0x10/0x10 [ 240.711761][ C1] ? xfd_validate_state+0x5d/0x180 [ 240.716867][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.721635][ C1] __x64_sys_bpf+0x78/0xc0 [ 240.726048][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.731246][ C1] do_syscall_64+0xcd/0x250 [ 240.735837][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.741726][ C1] RIP: 0033:0x7fa88ab7e819 [ 240.746136][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.765738][ C1] RSP: 002b:00007fa88ba2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.774148][ C1] RAX: ffffffffffffffda RBX: 00007fa88ad36080 RCX: 00007fa88ab7e819 [ 240.782137][ C1] RDX: 0000000000000010 RSI: 00000000200007c0 RDI: 0000000000000011 [ 240.790102][ C1] RBP: 00007fa88abf175e R08: 0000000000000000 R09: 0000000000000000 [ 240.798064][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.806029][ C1] R13: 0000000000000000 R14: 00007fa88ad36080 R15: 00007ffecb9c1f68 [ 240.814008][ C1] </TASK>