last executing test programs: 9.681906077s ago: executing program 2 (id=367): syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9.216176351s ago: executing program 3 (id=369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000c000000070001d4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5d, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x5d, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0xe, 0x1, 0xff, 0x6}, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f56000514100aab61b6d8f185f48db52f325a324c037f280710050059ae070a100302010009011b0014100409277734d502e919f09d0220c2c2b0beed18100af0030800000f788100d7000000000000000f000000"], 0x5, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x40, &(0x7f00000002c0)=@string={0x40, 0x3, "8b98dffc1749a7d457f5f7d9ced643066413ef2428130284b6b185995ae264712cf3a45cf678b6badbe99c529b397e589a2a5da8c06017db6bdd1ddb11e0"}}, {0x62, &(0x7f0000000300)=@string={0x62, 0x3, "5b05209065a0b2a5c2609498d7a7702e1e4d5c4303b18e3aa0a8fb31e08abf1fba7785921d0095c0acc9c5a56d484d5391a8e556a7c0b329820d558e14398ff2b1c816dc58f232f598e2a3029980fc959d1ecbb906951f93970e0f667b806a5a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x12, &(0x7f00000003c0)=@string={0x12, 0x3, "dfa1c987e0144ee2f59bd48c772ad8d5"}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0xe210}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0xfdbe, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, '-}#{]+\'\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000540)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)="d1658649ae91", 0x6}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000680)="bef26cced28048aa330d7ca2b39da1c5e2946a49a3c3b0695449c6353285945056bbb8f51894ee611763f81f7831fd40754f47c34733d007f2ddf7cdd66eb2484782587eb9a4ca32e5b4e0a9473ca9e47eca84ca2d3d2c98d0cf6560e4fe72edaf6dc2db514f9bb8bc722153a0239478621290ce473c885dfe11fbbe2cc5a5254e9bb86d56f98dbca9500290700303beb54c9bbf3d80320c18073021056bff3bd522d108da067e3ac5a6", 0xaa}, {&(0x7f00000005c0)="c9ac6d6d14864aa2764e4b623c98c5f724b9bf740c3adea3450ca390b8ea4a970fade41ab8a7c3c5ae7bbcfebab5df521f0ef833bbee356bb379241a109daac4", 0x40}, {&(0x7f0000000740)="9dee8944ebabdfe003e369c139d87b877298e52826d6853050a4f854c7172b284d3d66e1c6d1c802853941807ac57651708e86f700576f4f29ee05e7840a03c1899732f9465551b67c48bd95fee5daf508c049327fcc", 0x56}, {&(0x7f0000000600)="b3952aacfb1a4f6259d8e1122b340e1dbd98faed1167cfe09f5970bda6b5dfdba3ba367e7b18101129ee62517aa3998c1bc8f8e97674", 0x36}, {&(0x7f00000007c0)="635647ebc8e05c9b26345ce1c347c60d326a39c4cba14df884753e2efd8146666d9283fbf5bc7a1ec9f00459c3a75913253baeda4fcb0c6131b453f49f0b357e977353121657d6d4e36b73990e3b7891472384f74d12e63b1df083f30a7b0cb272a6cb78fff70b647b1a4c70c4f43b95354c706be300b33c7b9b792baad0d5f2271ad0957712d28f088e60", 0x8b}, {&(0x7f0000000880)="ed8b194d95e1e69ddb6a6714d26ab7303c99d924eeae9cf386b78c92908f149ae2d244f40bfd1098f1669294d2b447a02e96", 0x32}, {&(0x7f0000002380)="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", 0x1000}], 0x9, &(0x7f0000000980)=[{0xa0, 0x114, 0x5, "93b3bac858597e585b240509b5d22a2159dc54f02bc15ef36b4d84f228b9384515987ed5c6f5e0f11c3c54c792eda2b08b36f2cf77cebf2d1ac15532e520618475ba237377e4d83e91e0a9693e3d3cafaf1e3d7c8d9c0bbaef7efd71b045a720743f5c7328ee1bb1502fb5bb98f46e76cd722786c4a87cb8d9b5551b9f5cc1a1ce73c0be21e47f2199052f"}], 0xa0}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1, 0x2059e367f3a4a8e4}, 0xe) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001240)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}) 9.215659691s ago: executing program 2 (id=370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000c000000070001d4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5d, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x5d, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0xe, 0x1, 0xff, 0x6}, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f56000514100aab61b6d8f185f48db52f325a324c037f280710050059ae070a100302010009011b0014100409277734d502e919f09d0220c2c2b0beed18100af0030800000f788100d7000000000000000f000000"], 0x5, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x40, &(0x7f00000002c0)=@string={0x40, 0x3, "8b98dffc1749a7d457f5f7d9ced643066413ef2428130284b6b185995ae264712cf3a45cf678b6badbe99c529b397e589a2a5da8c06017db6bdd1ddb11e0"}}, {0x62, &(0x7f0000000300)=@string={0x62, 0x3, "5b05209065a0b2a5c2609498d7a7702e1e4d5c4303b18e3aa0a8fb31e08abf1fba7785921d0095c0acc9c5a56d484d5391a8e556a7c0b329820d558e14398ff2b1c816dc58f232f598e2a3029980fc959d1ecbb906951f93970e0f667b806a5a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x12, &(0x7f00000003c0)=@string={0x12, 0x3, "dfa1c987e0144ee2f59bd48c772ad8d5"}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0xe210}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0xfdbe, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, '-}#{]+\'\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000540)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)="d1658649ae91", 0x6}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000680)="bef26cced28048aa330d7ca2b39da1c5e2946a49a3c3b0695449c6353285945056bbb8f51894ee611763f81f7831fd40754f47c34733d007f2ddf7cdd66eb2484782587eb9a4ca32e5b4e0a9473ca9e47eca84ca2d3d2c98d0cf6560e4fe72edaf6dc2db514f9bb8bc722153a0239478621290ce473c885dfe11fbbe2cc5a5254e9bb86d56f98dbca9500290700303beb54c9bbf3d80320c18073021056bff3bd522d108da067e3ac5a6", 0xaa}, {&(0x7f00000005c0)="c9ac6d6d14864aa2764e4b623c98c5f724b9bf740c3adea3450ca390b8ea4a970fade41ab8a7c3c5ae7bbcfebab5df521f0ef833bbee356bb379241a109daac4", 0x40}, {&(0x7f0000000740)="9dee8944ebabdfe003e369c139d87b877298e52826d6853050a4f854c7172b284d3d66e1c6d1c802853941807ac57651708e86f700576f4f29ee05e7840a03c1899732f9465551b67c48bd95fee5daf508c049327fcc", 0x56}, {&(0x7f0000000600)="b3952aacfb1a4f6259d8e1122b340e1dbd98faed1167cfe09f5970bda6b5dfdba3ba367e7b18101129ee62517aa3998c1bc8f8e97674", 0x36}, {&(0x7f00000007c0)="635647ebc8e05c9b26345ce1c347c60d326a39c4cba14df884753e2efd8146666d9283fbf5bc7a1ec9f00459c3a75913253baeda4fcb0c6131b453f49f0b357e977353121657d6d4e36b73990e3b7891472384f74d12e63b1df083f30a7b0cb272a6cb78fff70b647b1a4c70c4f43b95354c706be300b33c7b9b792baad0d5f2271ad0957712d28f088e60", 0x8b}, {&(0x7f0000000880)="ed8b194d95e1e69ddb6a6714d26ab7303c99d924eeae9cf386b78c92908f149ae2d244f40bfd1098f1669294d2b447a02e96", 0x32}, {&(0x7f0000002380)="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", 0x1000}], 0x9, &(0x7f0000000980)=[{0xa0, 0x114, 0x5, "93b3bac858597e585b240509b5d22a2159dc54f02bc15ef36b4d84f228b9384515987ed5c6f5e0f11c3c54c792eda2b08b36f2cf77cebf2d1ac15532e520618475ba237377e4d83e91e0a9693e3d3cafaf1e3d7c8d9c0bbaef7efd71b045a720743f5c7328ee1bb1502fb5bb98f46e76cd722786c4a87cb8d9b5551b9f5cc1a1ce73c0be21e47f2199052f"}], 0xa0}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1, 0x2059e367f3a4a8e4}, 0xe) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001240)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}) 6.392051858s ago: executing program 1 (id=381): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r4 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.695175643s ago: executing program 1 (id=384): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (fail_nth: 9) 4.628468597s ago: executing program 3 (id=386): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 4.155568108s ago: executing program 0 (id=387): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019240)=""/102400, 0x19000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write(r1, &(0x7f0000000000)="2e000300010003", 0x7) 4.155267749s ago: executing program 3 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="08002bbd700001dcdf251000000008000300", @ANYRES32=r4, @ANYBLOB="8ad382027200804f5860e58e9011381d67ce3a19e0b1b419a7dad735c05aada0d77ce1993c64fe85d60dadafab09693671b1056ec9d82e"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x2405, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x1104, 0x1c8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 4.099112707s ago: executing program 1 (id=390): unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16=r4, @ANYRESDEC=r5, @ANYRES32=r5, @ANYRES8=r1], 0x24}}, 0x20000005) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='u', 0x1, 0x4000800, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000011000001ffffffffffff5050505050500000"], 0x18) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340), 0x62) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x2de, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) bind$inet(r0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='#', 0x22, 0x0, &(0x7f00000003c0)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) r8 = syz_usbip_server_init(0x5) write$usbip_server(r8, &(0x7f0000002680)=ANY=[@ANYBLOB="00000001"], 0x30) 4.008331076s ago: executing program 2 (id=392): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x111001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000180)={0x80000001, 0xb}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x37, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, r3}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800010043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bba", 0x71}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'veth0_to_hsr\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0xfffffffe]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f00000003c0)='@', 0xa, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 3.956576417s ago: executing program 0 (id=393): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325}, 0x14}}, 0x0) 2.674770643s ago: executing program 3 (id=395): landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x3}, 0x18, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x24000004) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, 0x0, 0x69) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13b9, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x128}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfff, 0xe, 0x0, 'queue0\x00', 0x6}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000680)='./file1\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000700)='={:\\\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='k\x00', &(0x7f0000000380)='}.\x00', &(0x7f0000000500)='.\x00', &(0x7f0000000580)='={:\\\x00']}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x7c}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x9}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4000000000000000, 0x1, 0x3, 0x500040003, 0x7, 0x10}) 2.668192044s ago: executing program 2 (id=396): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0xea, 0x1e, 0x1ff]}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f000066b000/0x3000)=nil, 0x3000, 0x2000008, 0x50, 0xffffffffffffffff, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000840)={0x1, 0x1c, {0xffffffffffffffff}, {0xee01}, 0x4, 0xeb7}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r10, 0x0, r13) r15 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r16 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r17 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r17, 0x8903, &(0x7f0000002b40)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmmsg$unix(r3, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="7004eecafe3ffa6a339a0a766f6899f21834e3eafbfd717c1919c2d80d9cad620bfc90937a2ea62fc574cadab9c54d36cf362e7a3a727c57b932bdcd03970816c03fd9f42d64bb9082b11e4221c697dfdecaad4e68fcbfaf7aa44f3abfe17a394925f35ce060bf644018b165e2cf2361bf5641bd13fadba6ac18a50a7f14d41aea6cd1bac6c4d6c221b7cc98f88a72fdab924a6b5e329d2cc2744a4ddcb6559cdd8d9891eebc58279f912b6479ab2e91f98e26142ec110c4531b64857835e724001e09f1a18767236ee9a1ca1ad73e399f1eb9816f74fd36d719ec569272aa35e84160a011ed", 0xe6}, {&(0x7f0000000400)="69b84eaea0d7f61dc892859d702b87a5a1ccd2c368f2afcd5e2ce01eb1de887b8ed604307a6bc09027e26c075b23caa7c286789b63a301892fafa5791702fba098965211f62ab45c9983caef0971e3c0893e80145777f2498411779f611c64a1dfdae02dfe12f93d9c84e0c61d874cf8721cf018f091f7abec51a1cbe4b7e86e836017949401c92406fdb2f9f6f1c824618f811930dc", 0x96}, {&(0x7f00000000c0)="006d268beafdd179a76070423f101946a2a444", 0x13}, {&(0x7f00000004c0)="4856ac661e9b0af9f079a2db4d779c9ef176966ff0aa6c06fde7467d21604312f6dd4727965ca8190b2539cdd647d1a0ce46d74f98ec49cb7263910bab07c296a29a493ea3b6a4d6684e5880da3c211a1ec67510e06571fb07dc1203c629d39faf7b0966e5cc99", 0x67}], 0x4, 0x0, 0x0, 0x6}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="8078d8157f34e53b2d979d167ba2f97c9b3522066fa635aa1829d4ccbf1325b384aa2431497fb80c706b3731b7c5b15306e6274164", 0x35}, {&(0x7f0000000600)="ff760d19a0d70068a906e583fd2c678220c187bae602e98c59b2e3a92b8ed74c9f3d61d101315b6eb341f70dc5b49978e19f25b63def3b49476766", 0x3b}, {&(0x7f0000000640)="8d3adf", 0x3}, {&(0x7f0000000680)="308f46abf77859ff4ff33ad009ff7885186699cd2db67ae8c39dc80ad70c26174341b056506be3b52bf04426dee1c5832ba84229f7babd67704ce34dc7b2ed7db8735057646c073438441d58d081c9e34d6e3341c815b44f68b3b9b6b27769e38e681451c735014f899f6e01c01f507230dbe08211135e9371ef2a11adc2156a785a33cb9ea8506ff048e2426091882260609eca0cbfb2783338b654af2ace752f67f88c", 0xa4}], 0x4, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r13}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r15, r16, r3]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000024c0)="3227e750d7c3cd532052aa30bd5ff6ad7e498e646ed84dc56cb1ce188e0f4c29d5cac2fe012c34850d1109cce759af559014e750b38f48ca5038f69dd50d284d8b4be3b1927e448edc9c830ab9736afe4b7c51cfc09d7e05bb987ee1e8ed2f2ae1116154a6aea7e367cef3051831185a63e442ed0eb98116ed6e1afe814022ea7a08c513780f312e371f3c23dbd0782ecee4665342675e3814aa842c26d6b10bc7e7664019b6f542f520f9edf907c77895f827d64ce8b27098e5d0264c3eaa806b4f9eeaba9d59758ed8683ea487178a4e32c6fcda416de666a7f99f66893a07ce27ab2a3822fde7c98eadc2d2ce910245ff6649", 0xf4}, {&(0x7f00000025c0)="8d17", 0x2}, {&(0x7f0000002600)="df1ff5c02084192e2c0362a5d6c52df6c99ea67af65f122872a22c92c65d1c8f7c521b2316ac6d3793dea4354a3995cd76443672bc76fb635fb7d62c6f8f175d63f93bbe03cc99280ef0973f9dbb4f8a47f37f41bec5c0c3ab47c70bee4a16d1a09074769f1f22f1a9f9d8", 0x6b}, {&(0x7f0000002680)="3088241a3de34a0d03f53f16880f8060d08cb83b94e58e55c7020e5ac2eb775a813a36f4", 0x24}, {&(0x7f00000026c0)="841a79d649f0f3697f7444d29462f723dd89a1d3215a824fd4488e71fcfefe714b4430d691", 0x25}, {&(0x7f0000002700)="1ec814b05c5983453472c68a3e9af8ae259658e3c6f00d53a86c6975e4c6db4e20dfdbe40d229807666c51a66b3e02bf847779e2f1cf0e05806b273341d55dd89b75181dabe1845438495167fc48e99a8f6d39cc962c571dba38a13be291e74e9cf267c35e6d715353f8ab590f5d3addbdf315b873cd858d", 0x78}, {&(0x7f0000002780)="2b524a195db76f4fa20f9dd3b5382eac1adf56f7475c92b1d2855cf6a1bfb2a0b41140c4221c6a85186de7b268a6159886789be75d987ad430963ef2bf2e8391caf7bf44f19a3cbf97704412ae0c0b0522739b95218a2cb8e5689025f976a67a92562513236ef757475f41b7c40936adf71bd8cd90ec8a2db83c93ad7475ac493f5127151bceb5317ba027e0", 0x8c}, {&(0x7f0000002840)="eade7e743ef16b24e046c9b7bd67882281800b548766c824189806b16a1519bbe478a612fdfb8b44baab5d3bf17d6ebaafb805a452ad44b09e4f94fc97f66cc184dd2984ca7ed1896e1fe424777c7c0e96391a6de1ce6ab6b977761697a7bba5f23f955820c0b6da97eedbe8bca4194fd2ecc6f5c3e1d65c599ef37a9bad39dd78af293914a70b79421e3311e3d31c823a121d6d6d09eec872d1c7467c7bbb", 0x9f}, {&(0x7f0000002900)="16b7178950133424bfe8dd117bcf883ab30b61457a28f6264cb9549f2c66176f6f2d097e8767b303cde30088aa6f6bbcf8a00a2538e78fb1212694f1929eb56a2996c2ce72f93e4ac7a1007c85cde2f4bf26c617a7be2abe2cb232cc966756421892f2394c56d94bb98471ed13c8df00678ef59fc2f7dd1cdbaf45122e8a30db42f6cce1e7025b0cc47fd7ef3092912e699a7b7d70cf164f0e555fce06108dd01288f326", 0xa4}, {&(0x7f00000029c0)="9b4e926de23b9c9716b44cfce946e63acb79686aacef4298d5d3121b0765c39a80", 0x21}], 0xa, &(0x7f0000002ac0)=[@rights={{0x30, 0x1, 0x1, [r1, r2, r10, r11, r10, r1, r17, r4]}}], 0x30, 0x800}}, {{0x0, 0x0, &(0x7f0000002b00), 0x0, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r7, r12}}}, @rights={{0x20, 0x1, 0x1, [r4, r11, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r5}}}, @cred={{0x1c, 0x1, 0x2, {r8, r5}}}], 0xa0, 0x440}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002e80)="1c7723c2b6ee59132a9d049200cead8791e5eceb9bcb373d9ca29c54290e6648daeaad8759b00d47d2844b1e2fa6c462aa7818e76701cd9ace9f0b8e5469435c56aae2d80c1cb4eae9a29631fd406ff32b22665691f44c2d5922f248ca49ae47e8dbb0cc08419be526d161660a58af5ecdca59cbcfc09047ff81", 0x7a}, {&(0x7f0000002f00)="bb49e9895f29b087d0a8591b4fc85e96e7276c9505ca8e4afc8f1594ee", 0x1d}, {&(0x7f0000002f40)="6efb815c09c7acde89d1d3436f78da368c25260a529c0d833c7de38b448b785e7ac150d3868d76d98adef098d0f179a7c04a7f60ee185f09fe3c11f6181be2d9d8327c28ab9d1ae6edcd34d3f9c4d35485a43cbea0f051e80194aad2016b366ffcf6a45377f2127367dce29e13bb6dd7a9ff4d2c3bcaa3e694799b89d6c15f7c91ad33379ebc340c23fdcae8781ad2d06e5a228b09a68ff1317e6ebd0536c3c35c3b8c50d822f208", 0xa8}, {&(0x7f0000003000)="d0a616b752e57f56183a81a145a4602cd7461a7824217cbb624d0651ab13522be3db45cfeb20dcbcb09fdeebdd75236fd19de8e1f1c30a416ccc47e9773b315efcc96068eaa37121d499b611a8f08ee5897cef2f2083d40ddcf91156ed3184b2b6b984c6297b099bec4c41faacbcc66d9c6a80825fbd89d0b7d8c7df33f7a460e76b6496c7717c2a8d788996e6ee0094b3fccce4595832e0d05b93b542aaf9cbfcd39d9a3bed47e3fff5d80324a1ea0999f10aee83c7346d825735396ef8c1181976fed25e8f2e00e064f58667c56595067869b51ea905495b887babbb8ef04f86b71df9c759a83ad4", 0xe9}, {&(0x7f0000003100)="95bad9da2a8b13d88fbf11e86b2eca1963fd07e27a2fc2a0247ec4535b84a6feee3aab1851387560b90a5f9bcd3cfd388f9fb88ac9dbd91b46d2a90ea04f39a21de250efce802f6fde5169b6a75d27389cea", 0x52}, {&(0x7f0000003180)="1cbb1888b526b5ba84b4afeb44d500fe0857b4d12dffc8ccb772c32d5ddb77871faeed6f8f77002f4250a34b3a5fded4a8024f0fd7c2f2769d19493c48a1ec3ffdd08ada0e1c579b10a397a0c43fa4e25fa68151115a058ab62910668e471be47c5a63cc81c4c7e59beaddb1d1bf8eba21044609366ea3ecc7a1b78df6752e7811cc407aa9ed3fbf1e64b975ebdc4d5da4ee5c4c20e001866edacf1145b5fd66f7f210756829663873e884a9f8a0e668a19af6d1fad5d1e6717f9e4062eeadd3ee5e675d34fbd0885c80b21bf8a8dae4e666319c1a2318cb4d971a66ca1d4a2c0da64d0ab9588cd698dfe3cc093b41618a3b56", 0xf3}, {&(0x7f0000003280)="e0ac5d8445c5", 0x6}], 0x7, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r15, r16]}}, @rights={{0x28, 0x1, 0x1, [r17, 0xffffffffffffffff, 0xffffffffffffffff, r10, r15, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r17, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r17, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r11, r16, r2, r15, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x4000004}}, {{&(0x7f0000003540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f00000035c0)="301668644c1fec4c0ca26bb2f30d6ac7a7f1e8b984f42af5b4162187fceb51593017da7ee6c41ec5e63d45bc718ed9f13e502301bf1748448d17e35f6ba338d97ed4bab9455a49657443d6f05e82c4d05cf00063e37899be43ebabee91e7fbcf8cc9618edefd218863e0bf9aa4ac299fb1b1f53c32", 0x75}, {&(0x7f0000003640)="82fb85bf0f6d4fd3f091f63ff024aeaf8ddb084ed9e7f6bf3ff91f2ae49d78ddeb6c097a5c40bf9135da99d8d3470d4bdb66eb46468f77", 0x37}], 0x2, 0x0, 0x0, 0x10}}], 0x6, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r20 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r21, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r21, r22, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}) io_uring_enter(r20, 0x5cc7, 0x0, 0x5, 0x0, 0x0) 2.548046093s ago: executing program 4 (id=397): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) 2.249411482s ago: executing program 4 (id=398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xe, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x67, &(0x7f0000000680)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x5, 0x0, 0x9}, 0x10, 0x1b27, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x43, @void, @value}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) eventfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x72, 0x3, 0x7, 0x22088, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0x6, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.086286941s ago: executing program 0 (id=399): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.029912142s ago: executing program 0 (id=400): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x1, 0x8, 0x3ff, 0x0, 0x4, "b94749fb7c8eb721659e28438b12714b423f59"}) 2.011169046s ago: executing program 3 (id=401): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xe, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x67, &(0x7f0000000680)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x5, 0x0, 0x9}, 0x10, 0x1b27, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x43, @void, @value}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) eventfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x72, 0x3, 0x7, 0x22088, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0x6, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8]}) (fail_nth: 1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.68855774s ago: executing program 1 (id=402): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 1.6499067s ago: executing program 0 (id=403): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019240)=""/102400, 0x19000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write(r1, &(0x7f0000000000)="2e000300010003", 0x7) 1.287383368s ago: executing program 2 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) iopl(0x3) statx(0xffffffffffffffff, 0x0, 0x6000, 0x20, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000a58000480540001800a0001006c696d69740000004400028008000340000000000c00024000000000000007ac0c00024000000000000001330c0001400000000000000007080003400000000f0c00024000000000000000090900010073797a30000000000900020073797a32"], 0xac}}, 0x0) 1.280136125s ago: executing program 4 (id=405): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x600, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 1.254042249s ago: executing program 4 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001d00)=ANY=[@ANYBLOB="18020000fde2ffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.242252025s ago: executing program 1 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'caif0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000240)="bf3164993ea0836dfbd012ae2211e898a5f1f58bc28a7118309a60b3ba6ab94dc60e468416f1b717fe74625fb7f587c64cf761b664b8a38ae15cdbf4d52c67d18656cf82664be85a5f335bccb550c67496df1d5c3a1143f99224c8bda82e796cfe25b0be54115c4cdb35255392f99bfb65f3af0818dab28aa2d11d633b5643b3cda89ed75bcb95c800b2fb6dd695f89e08f9ab33870a69882b8969f4b7bdbcf908b630b4ae802c395f9ac0519840aac4273c15830a4386973bf139752634b506cd377dabf2bbf83860a26e23d44b91d954fab13e48", 0xd5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="1f3a367985b557f4449a2b46a870f0538eef3c9830864530d2dfe3cbae3b45b6e46229368c302a24616422eede8d4d758abe6b93768a85717a0e7021a78b347ca83f68ae69d3c4285fbf1986017e84975c658d1b2a06f3d52c8a3a7e3ab571a795045083bf7f5b6a4f2f42e159f258533ad0e0456c30b5138ec33445ad86680b9e331d6eb38bb3d35d8df8f0a1a0f1ee4a551203c9e238abacf4", 0x9a) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x4000880) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000002c0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2080010}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="eb7c0c7cc0112003d00f531cc47b5f", @ANYBLOB="080028bd7000fbdbdf252500000006000600ffff0000", @ANYRES8=r1, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x10) io_uring_setup(0x5f32, &(0x7f0000001a00)={0x0, 0x21b5, 0x400, 0x10000, 0x245}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000003c0)={0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000200)=[{{0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x8) bind$can_raw(r9, &(0x7f0000000240), 0x10) 308.323821ms ago: executing program 3 (id=408): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x101) open$dir(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file1\x00') ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x13}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="94120000180029"], 0x1294}}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 251.262662ms ago: executing program 4 (id=409): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1d4) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x8000, 0x7fff, 0x76, 0x7ff}, 0x4d, [0x65, 0xa, 0xf2e, 0xffff, 0x9, 0x7e3, 0x40, 0x2, 0x10, 0x6, 0x500f3c29, 0x3, 0xb64, 0x5a506ead, 0x3, 0xe3, 0x3, 0x8, 0x7f, 0x1, 0x3a8, 0x5, 0x8ec7, 0xf, 0x6, 0xa0, 0x8, 0x5, 0x5, 0x8229, 0xadd, 0x5, 0x5, 0x8, 0x6, 0x6, 0x800, 0x7, 0x325, 0x8, 0x6, 0x9, 0xd3, 0x5b0c, 0xffffffab, 0xe, 0x9, 0x0, 0x6, 0x7, 0x8001, 0x9, 0x6, 0x6, 0x4960, 0x7e91, 0x9, 0xff, 0x101, 0x1, 0xfffffffd, 0x8, 0x45f, 0xfffffffc], [0xfff, 0xe57, 0x3, 0xffffffde, 0x6, 0x1, 0x9, 0xb, 0x69800000, 0x2, 0x6, 0x8001, 0x81, 0xb, 0xe77, 0x0, 0xe3, 0x7, 0x2, 0x7, 0xff, 0x3, 0x6, 0x8, 0x1, 0x0, 0x3, 0x10001, 0x8001, 0xfffffff1, 0x8001, 0x3, 0x400, 0x5, 0x1, 0x3, 0x2, 0x80000001, 0x7, 0x5, 0xffff, 0x40, 0x3, 0x5, 0xbc, 0x9, 0x5, 0x3ff, 0x8000, 0x7, 0x0, 0x3, 0x100, 0x1, 0x9, 0x8, 0x3ff, 0x5, 0x8, 0x7, 0x3, 0x431f544, 0x4, 0x4], [0x6, 0x80, 0x3, 0x3, 0x10001, 0x9, 0x8001, 0x7, 0xfff, 0x0, 0x100, 0x7, 0x1f, 0x8, 0x3, 0x5, 0x4, 0x6, 0x3ed3, 0x516, 0xb5f9, 0x8001, 0x8, 0x804, 0x7fff, 0xe46a, 0x3, 0x0, 0xffff21e5, 0x8001, 0x3ff, 0x0, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x101, 0x7, 0x5b8, 0xff, 0x3ff, 0x4, 0x7fffffff, 0x1, 0xfffffffd, 0x5, 0xa9f, 0x3, 0xb9, 0xe, 0x4b, 0xee2, 0x6, 0x1, 0x1, 0x2, 0x4, 0x8, 0x6, 0x1], [0x7, 0x7, 0x2, 0x638, 0xfffffffe, 0x3bf, 0x3, 0x81, 0x8, 0x9, 0xfffffeff, 0x5, 0x0, 0x3, 0x5, 0x101, 0x8, 0x4, 0x1, 0x3ff, 0x3, 0x6, 0x1, 0xfffffff8, 0x4cb27753, 0x81, 0x30, 0x0, 0x5, 0x7, 0xfffffffa, 0xc, 0xffffff0b, 0xc, 0x8, 0x80000000, 0x2, 0x6, 0x5d2, 0x0, 0x3, 0x0, 0x3, 0xfffffffa, 0xb, 0x2, 0x1, 0xc8, 0x7fff, 0x7, 0x5, 0x1ff, 0x1, 0x6e9, 0x5, 0xc2, 0xd48, 0x200, 0x1ff, 0x10, 0x7fb, 0x80000001, 0xa6, 0x7f]}, 0x45c) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 119.842469ms ago: executing program 0 (id=410): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 268.938µs ago: executing program 4 (id=411): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r5, 0x0) (async) listen(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="007a7700edfc2a09", @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000005001800000000000800100000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f0000000080)={0x0, 0x0, "00fa00"}) r9 = accept(r5, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)=""/54}, {&(0x7f0000000780)=""/111}], 0x0, &(0x7f0000000280)=""/173, 0xbb}}, {{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000840)=""/150, 0xfffffd8c}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x6, &(0x7f0000000680)=""/127, 0x7f}}], 0x2, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)=""/54}, {&(0x7f0000000780)=""/111}], 0x0, &(0x7f0000000280)=""/173, 0xbb}}, {{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000840)=""/150, 0xfffffd8c}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x6, &(0x7f0000000680)=""/127, 0x7f}}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000e9fe2831b2", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) getpeername(r4, &(0x7f0000000340)=@qipcrtr, 0x0) (async) getpeername(r4, &(0x7f0000000340)=@qipcrtr, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) 0s ago: executing program 2 (id=412): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x103800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0xc0505405, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0xbb1e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405eafffeffffff71103a00000000f2ffffff000000000000000200000013d0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100), 0x10) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000200)=0x4) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x0, 0x9}, {0x2b92, 0x66b}, 0xd3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) sendmmsg$inet6(r5, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044051) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x0, &(0x7f00000001c0)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2200c014, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda46", 0xc4, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="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", 0x0) kernel console output (not intermixed with test programs): terface 0, class 0) [ 62.196004][ T5908] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 62.362444][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 62.371520][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.380344][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.404953][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.414349][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.949146][ T5908] em28xx 3-1:0.0: chip ID is em2874 [ 63.253721][ T6004] block nbd4: shutting down sockets [ 63.296959][ T5908] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.305479][ T5908] em28xx 3-1:0.0: board has no eeprom [ 63.394289][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 63.394306][ T29] audit: type=1400 audit(1731189701.796:195): avc: denied { ioctl } for pid=6010 comm="syz.1.23" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.462246][ T5908] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 63.472220][ T5908] em28xx 3-1:0.0: dvb set to bulk mode. [ 63.492859][ T5880] em28xx 3-1:0.0: Binding DVB extension [ 63.602513][ T5908] usb 3-1: USB disconnect, device number 2 [ 63.609153][ T5908] em28xx 3-1:0.0: Disconnecting em28xx [ 63.765370][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 63.953127][ T5880] em28xx 3-1:0.0: Registering input extension [ 64.014446][ T5877] usb 4-1: USB disconnect, device number 2 [ 64.133720][ T29] audit: type=1400 audit(1731189702.556:196): avc: denied { read write } for pid=6032 comm="syz.3.29" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.216014][ T29] audit: type=1400 audit(1731189702.606:197): avc: denied { open } for pid=6032 comm="syz.3.29" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.242684][ T5880] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 64.249824][ T5880] Registered IR keymap rc-empty [ 64.261061][ T5880] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 64.274528][ T5880] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 64.413791][ T6037] netlink: 112 bytes leftover after parsing attributes in process `syz.0.26'. [ 64.854150][ T29] audit: type=1400 audit(1731189702.606:198): avc: denied { map } for pid=6032 comm="syz.3.29" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.911667][ T5880] em28xx 3-1:0.0: Input extension successfully initialized [ 64.926541][ T5908] em28xx 3-1:0.0: Closing input extension [ 64.936788][ T6033] Bluetooth: MGMT ver 1.23 [ 64.962233][ T29] audit: type=1400 audit(1731189702.606:199): avc: denied { execute } for pid=6032 comm="syz.3.29" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.992156][ T29] audit: type=1400 audit(1731189703.326:200): avc: denied { read } for pid=5186 comm="acpid" name="event4" dev="devtmpfs" ino=2741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.015463][ T29] audit: type=1400 audit(1731189703.326:201): avc: denied { open } for pid=5186 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.072738][ T5908] em28xx 3-1:0.0: Freeing device [ 65.112303][ T29] audit: type=1400 audit(1731189703.326:202): avc: denied { ioctl } for pid=5186 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2741 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.191917][ T29] audit: type=1400 audit(1731189703.356:203): avc: denied { bind } for pid=6032 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.305182][ T29] audit: type=1400 audit(1731189703.356:204): avc: denied { write } for pid=6032 comm="syz.3.29" path="socket:[7777]" dev="sockfs" ino=7777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.482414][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.578113][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 66.587334][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 66.720154][ T5908] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 66.946969][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.955284][ T5908] usb 3-1: Product: syz [ 66.959724][ T5908] usb 3-1: Manufacturer: syz [ 66.964701][ T5908] usb 3-1: SerialNumber: syz [ 66.972429][ T5831] Bluetooth: hci0: command tx timeout [ 66.973550][ T5908] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 67.580603][ T5880] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.622271][ T5908] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 67.690718][ T6073] openvswitch: netlink: Actions may not be safe on all matching packets [ 67.762338][ T5908] usb 2-1: device descriptor read/64, error -71 [ 68.282586][ T5908] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 68.413550][ T5908] usb 2-1: device descriptor read/64, error -71 [ 68.532360][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.683011][ T5908] usb usb2-port1: attempt power cycle [ 68.691065][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 68.691077][ T29] audit: type=1400 audit(1731189707.106:219): avc: denied { read } for pid=6086 comm="syz.0.42" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.703040][ T5880] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 68.721317][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 68.732757][ T45] usb 3-1: USB disconnect, device number 3 [ 68.748207][ T5880] ath9k_htc: Failed to initialize the device [ 68.755490][ T45] usb 3-1: ath9k_htc: USB layer deinitialized [ 68.755587][ T5877] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 68.773565][ T29] audit: type=1400 audit(1731189707.106:220): avc: denied { open } for pid=6086 comm="syz.0.42" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.786348][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.797109][ T29] audit: type=1400 audit(1731189707.166:221): avc: denied { ioctl } for pid=6086 comm="syz.0.42" path="socket:[8775]" dev="sockfs" ino=8775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.830662][ T29] audit: type=1400 audit(1731189707.166:222): avc: denied { bind } for pid=6086 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.917303][ T5877] usb 5-1: config 0 descriptor?? [ 68.949990][ T5877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 69.112335][ T5908] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 69.136000][ T5908] usb 2-1: device descriptor read/8, error -71 [ 69.385694][ T6092] xt_cgroup: xt_cgroup: no path or classid specified [ 69.610773][ T6092] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 69.864888][ T29] audit: type=1400 audit(1731189708.276:223): avc: denied { write } for pid=6091 comm="syz.2.43" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.922645][ T5908] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 69.999766][ T5908] usb 2-1: device descriptor read/8, error -71 [ 70.007095][ T6095] ubi0: attaching mtd0 [ 70.013727][ T6095] ubi0: scanning is finished [ 70.041542][ T6095] ubi0: empty MTD device detected [ 70.269353][ T5908] usb usb2-port1: unable to enumerate USB device [ 70.392504][ T5877] gspca_sunplus: reg_r err -110 [ 70.397420][ T5877] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 70.531139][ T6094] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.43'. [ 70.708651][ T29] audit: type=1400 audit(1731189709.046:224): avc: denied { read write } for pid=6096 comm="syz.1.44" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.813270][ T29] audit: type=1400 audit(1731189709.046:225): avc: denied { open } for pid=6096 comm="syz.1.44" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.898586][ T29] audit: type=1400 audit(1731189709.216:226): avc: denied { name_bind } for pid=6108 comm="syz.3.46" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.230962][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237512][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.247106][ T29] audit: type=1400 audit(1731189709.216:227): avc: denied { node_bind } for pid=6108 comm="syz.3.46" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.463806][ T5877] usb 5-1: USB disconnect, device number 2 [ 71.655115][ T6095] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 71.665479][ T29] audit: type=1400 audit(1731189709.736:228): avc: denied { ioctl } for pid=6108 comm="syz.3.46" path="socket:[8800]" dev="sockfs" ino=8800 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.007254][ T6118] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 72.036459][ T6118] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.211174][ T6116] capability: warning: `syz.4.47' uses deprecated v2 capabilities in a way that may be insecure [ 74.102375][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.212394][ T6138] fuse: Unknown parameter '^d' [ 74.275943][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.286306][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 74.286319][ T29] audit: type=1400 audit(1731189712.696:231): avc: denied { mount } for pid=6119 comm="syz.3.49" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 74.316645][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.351370][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.402655][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.438947][ T29] audit: type=1400 audit(1731189712.706:232): avc: denied { mount } for pid=6119 comm="syz.3.49" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.466837][ T5879] usb 3-1: SerialNumber: syz [ 74.657737][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 74.700054][ T29] audit: type=1400 audit(1731189713.096:233): avc: denied { execute } for pid=6133 comm="syz.2.53" path="/7/cpu.stat" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.731424][ T5879] usb 3-1: 0:2 : does not exist [ 74.808424][ T6152] TCP: TCP_TX_DELAY enabled [ 75.243482][ T29] audit: type=1400 audit(1731189713.156:234): avc: denied { create } for pid=6147 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.291259][ T5879] usb 3-1: USB disconnect, device number 4 [ 75.300376][ T29] audit: type=1400 audit(1731189713.166:235): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.476698][ T29] audit: type=1400 audit(1731189713.236:236): avc: denied { create } for pid=6147 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.510451][ T8] cfg80211: failed to load regulatory.db [ 76.517018][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.640615][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 76.649361][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.656815][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.680762][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.688240][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.713861][ T29] audit: type=1400 audit(1731189715.126:237): avc: denied { map } for pid=6169 comm="syz.1.64" path="socket:[8897]" dev="sockfs" ino=8897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.767789][ T29] audit: type=1400 audit(1731189715.126:238): avc: denied { read } for pid=6169 comm="syz.1.64" path="socket:[8897]" dev="sockfs" ino=8897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.792009][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.818718][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 76.841673][ T6180] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 76.868921][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.922756][ T29] audit: type=1400 audit(1731189715.186:239): avc: denied { setopt } for pid=6177 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.990491][ T5908] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.013307][ T29] audit: type=1400 audit(1731189715.186:240): avc: denied { bind } for pid=6177 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.034658][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.916150][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 78.217085][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 78.276504][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.284621][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 78.285081][ T5908] usb 5-1: Product: syz [ 78.304483][ T5908] usb 5-1: Manufacturer: syz [ 78.309136][ T5908] usb 5-1: SerialNumber: syz [ 78.414875][ T5908] usb 5-1: config 0 descriptor?? [ 78.427856][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 78.483812][ T6209] netlink: 156 bytes leftover after parsing attributes in process `syz.2.73'. [ 78.834779][ T6218] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.843639][ T6218] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 78.851888][ T6218] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 79.495773][ T6218] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.505324][ T5908] gspca_sonixj: reg_w1 err -110 [ 79.518018][ T5908] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 79.963546][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 79.963559][ T29] audit: type=1400 audit(1731189718.386:259): avc: denied { create } for pid=6226 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.965104][ T6233] befs: Unrecognized mount option "K–¼"Ðç­" or missing value [ 79.969664][ T29] audit: type=1400 audit(1731189718.386:260): avc: denied { mounton } for pid=6226 comm="syz.1.78" path="/17/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.063284][ T6233] befs: (nullb0): cannot parse mount options [ 80.111320][ T29] audit: type=1326 audit(1731189718.526:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.1.80" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9da797e719 code=0x0 [ 80.133830][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.683451][ T29] audit: type=1400 audit(1731189719.096:262): avc: denied { write } for pid=6240 comm="syz.1.80" name="ip6_mr_cache" dev="proc" ino=4026533090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.707636][ T6245] FAULT_INJECTION: forcing a failure. [ 80.707636][ T6245] name failslab, interval 1, probability 0, space 0, times 1 [ 80.735211][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.1.80 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 80.745742][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.755805][ T6245] Call Trace: [ 80.759088][ T6245] [ 80.762020][ T6245] dump_stack_lvl+0x16c/0x1f0 [ 80.766703][ T6245] should_fail_ex+0x497/0x5b0 [ 80.771385][ T6245] ? fs_reclaim_acquire+0xae/0x150 [ 80.776503][ T6245] should_failslab+0xc2/0x120 [ 80.777872][ T25] usb 5-1: USB disconnect, device number 3 [ 80.781171][ T6245] __kmalloc_node_noprof+0xd1/0x430 [ 80.781210][ T6245] ? alloc_slab_obj_exts+0x41/0xa0 [ 80.797272][ T6245] alloc_slab_obj_exts+0x41/0xa0 [ 80.802211][ T6245] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 80.808120][ T6245] __kmalloc_node_noprof+0x3b0/0x430 [ 80.813415][ T6245] ? seq_read_iter+0x21/0x12b0 [ 80.813977][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.818172][ T6245] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 80.818200][ T6245] __kvmalloc_node_noprof+0xad/0x1a0 [ 80.818220][ T6245] traverse.part.0.constprop.0+0x392/0x640 [ 80.818243][ T6245] ? __pfx___lock_acquire+0x10/0x10 [ 80.818259][ T6245] ? __pfx_mark_lock+0x10/0x10 [ 80.818278][ T6245] seq_read_iter+0x934/0x12b0 [ 80.818303][ T6245] ? hlock_class+0x4e/0x130 [ 80.818331][ T6245] seq_read+0x39f/0x4e0 [ 80.818354][ T6245] ? __pfx_seq_read+0x10/0x10 [ 80.818379][ T6245] ? find_held_lock+0x2d/0x110 [ 80.818399][ T6245] ? import_ubuf+0x1b6/0x220 [ 80.818425][ T6245] ? avc_policy_seqno+0x9/0x20 [ 80.818452][ T6245] ? __pfx_seq_read+0x10/0x10 [ 80.842947][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.847526][ T6245] proc_reg_read+0x23d/0x330 [ 80.847559][ T6245] ? __pfx_proc_reg_read+0x10/0x10 [ 80.847582][ T6245] vfs_readv+0x6bf/0x890 [ 80.847604][ T6245] ? find_held_lock+0x2d/0x110 [ 80.847637][ T6245] ? __pfx_vfs_readv+0x10/0x10 [ 80.847661][ T6245] ? find_held_lock+0x2d/0x110 [ 80.847688][ T6245] ? __pfx_lock_release+0x10/0x10 [ 80.929673][ T6245] ? trace_lock_acquire+0x14a/0x1d0 [ 80.934873][ T6245] ? __fget_files+0x244/0x3f0 [ 80.939540][ T6245] ? __x64_sys_preadv+0x22d/0x310 [ 80.944545][ T6245] __x64_sys_preadv+0x22d/0x310 [ 80.949375][ T6245] ? __pfx___x64_sys_preadv+0x10/0x10 [ 80.954734][ T6245] do_syscall_64+0xcd/0x250 [ 80.959220][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.965105][ T6245] RIP: 0033:0x7f9da797e719 [ 80.969505][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.989095][ T6245] RSP: 002b:00007f9da871e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 80.997500][ T6245] RAX: ffffffffffffffda RBX: 00007f9da7b36058 RCX: 00007f9da797e719 [ 81.005454][ T6245] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 81.013412][ T6245] RBP: 00007f9da871e090 R08: 0000000000000000 R09: 0000000000000000 [ 81.021368][ T6245] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 81.029322][ T6245] R13: 0000000000000000 R14: 00007f9da7b36058 R15: 00007fff411a3e18 [ 81.037287][ T6245] [ 81.111623][ T29] audit: type=1400 audit(1731189719.526:263): avc: denied { ioctl } for pid=6248 comm="syz.2.82" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.225874][ T45] usb 4-1: device descriptor read/64, error -71 [ 81.235053][ T29] audit: type=1400 audit(1731189719.646:264): avc: denied { write } for pid=6248 comm="syz.2.82" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.252254][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 81.265259][ T5908] usb 1-1: too many configurations: 136, using maximum allowed: 8 [ 81.274725][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 81.282552][ T5908] usb 1-1: can't read configurations, error -61 [ 81.820988][ T29] audit: type=1400 audit(1731189720.236:265): avc: denied { create } for pid=6258 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.847951][ T29] audit: type=1400 audit(1731189720.236:266): avc: denied { bind } for pid=6258 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.870752][ T29] audit: type=1400 audit(1731189720.236:267): avc: denied { node_bind } for pid=6258 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 81.903093][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.910672][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.928769][ T29] audit: type=1400 audit(1731189720.346:268): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.032290][ T6267] FAULT_INJECTION: forcing a failure. [ 82.032290][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 82.050124][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.0.85 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 82.056924][ T45] usb 4-1: device descriptor read/64, error -71 [ 82.060633][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.060648][ T6267] Call Trace: [ 82.060654][ T6267] [ 82.060663][ T6267] dump_stack_lvl+0x16c/0x1f0 [ 82.087784][ T6267] should_fail_ex+0x497/0x5b0 [ 82.092477][ T6267] ? fs_reclaim_acquire+0xae/0x150 [ 82.097600][ T6267] should_failslab+0xc2/0x120 [ 82.102291][ T6267] __kmalloc_cache_noprof+0x6b/0x300 [ 82.107578][ T6267] ? tcf_ctinfo_init+0x45e/0xdb0 [ 82.112527][ T6267] tcf_ctinfo_init+0x45e/0xdb0 [ 82.117315][ T6267] ? __pfx_tcf_ctinfo_init+0x10/0x10 [ 82.122622][ T6267] ? __asan_memcpy+0x3c/0x60 [ 82.127217][ T6267] tcf_action_init_1+0x45f/0x6c0 [ 82.132151][ T6267] ? __pfx_tcf_action_init_1+0x10/0x10 [ 82.137616][ T6267] ? __nla_parse+0x40/0x60 [ 82.142024][ T6267] tcf_action_init+0x42e/0x9c0 [ 82.146883][ T6267] ? __pfx_tcf_action_init+0x10/0x10 [ 82.152168][ T6267] ? lock_acquire.part.0+0x11b/0x380 [ 82.157446][ T6267] ? find_held_lock+0x2d/0x110 [ 82.162199][ T6267] ? hlock_class+0x4e/0x130 [ 82.166701][ T6267] ? __pfx___lock_acquire+0x10/0x10 [ 82.171882][ T6267] ? hlock_class+0x4e/0x130 [ 82.176384][ T6267] ? __lock_acquire+0xbdd/0x3ce0 [ 82.181318][ T6267] tcf_action_add+0xfd/0x5d0 [ 82.185898][ T6267] ? __pfx_tcf_action_add+0x10/0x10 [ 82.191082][ T6267] ? __pfx_lock_release+0x10/0x10 [ 82.196131][ T6267] ? __nla_parse+0x40/0x60 [ 82.200540][ T6267] tc_ctl_action+0x35d/0x470 [ 82.205117][ T6267] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.210222][ T6267] ? __pfx_tc_ctl_action+0x10/0x10 [ 82.215321][ T6267] rtnetlink_rcv_msg+0x3c7/0xea0 [ 82.220247][ T6267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.225698][ T6267] netlink_rcv_skb+0x16b/0x440 [ 82.230457][ T6267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.235901][ T6267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.241179][ T6267] ? netlink_deliver_tap+0x1ae/0xd90 [ 82.246468][ T6267] netlink_unicast+0x53c/0x7f0 [ 82.251219][ T6267] ? __pfx_netlink_unicast+0x10/0x10 [ 82.256499][ T6267] netlink_sendmsg+0x8b8/0xd70 [ 82.261248][ T6267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.266523][ T6267] ____sys_sendmsg+0xaaf/0xc90 [ 82.271275][ T6267] ? copy_msghdr_from_user+0x10b/0x160 [ 82.276721][ T6267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.281999][ T6267] ? __pfx___lock_acquire+0x10/0x10 [ 82.287227][ T6267] ___sys_sendmsg+0x135/0x1e0 [ 82.291902][ T6267] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.297094][ T6267] ? lock_acquire+0x2f/0xb0 [ 82.301578][ T6267] ? __fget_files+0x40/0x3f0 [ 82.306166][ T6267] ? fdget+0x176/0x210 [ 82.310228][ T6267] __sys_sendmmsg+0x1a1/0x450 [ 82.314906][ T6267] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.320111][ T6267] ? vfs_write+0x306/0x1150 [ 82.324628][ T6267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.330598][ T6267] ? fput+0x30/0x390 [ 82.334485][ T6267] ? ksys_write+0x1ad/0x260 [ 82.338990][ T6267] ? __pfx_ksys_write+0x10/0x10 [ 82.343842][ T6267] __x64_sys_sendmmsg+0x9c/0x100 [ 82.348774][ T6267] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.353974][ T6267] do_syscall_64+0xcd/0x250 [ 82.358503][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.364389][ T6267] RIP: 0033:0x7f5aef57e719 [ 82.368790][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.388394][ T6267] RSP: 002b:00007f5af0428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.396811][ T6267] RAX: ffffffffffffffda RBX: 00007f5aef735f80 RCX: 00007f5aef57e719 [ 82.404773][ T6267] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 82.412728][ T6267] RBP: 00007f5af0428090 R08: 0000000000000000 R09: 0000000000000000 [ 82.420681][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.428652][ T6267] R13: 0000000000000000 R14: 00007f5aef735f80 R15: 00007ffc485ed138 [ 82.436616][ T6267] [ 82.440241][ T45] usb usb4-port1: attempt power cycle [ 82.473611][ T6267] Zero length message leads to an empty skb [ 83.132594][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.161416][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.91'. [ 83.195737][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'. [ 83.362458][ T45] usb 4-1: device not accepting address 5, error -71 [ 83.863183][ T6300] ext3: Unknown parameter '&@' [ 84.342301][ T6257] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.654669][ T6257] usb 2-1: Using ep0 maxpacket: 32 [ 84.671692][ T6257] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 84.830150][ T6257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.020634][ T6257] usb 2-1: config 0 descriptor?? [ 85.031624][ T6257] gspca_main: sunplus-2.14.0 probing 041e:400b [ 85.182254][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 85.182273][ T29] audit: type=1800 audit(1731189723.566:391): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.96" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 85.486836][ T29] audit: type=1400 audit(1731189723.656:392): avc: denied { setopt } for pid=6310 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.716797][ T6257] gspca_sunplus: reg_w_riv err -110 [ 85.722638][ T6257] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 86.543416][ T6320] xt_cgroup: xt_cgroup: no path or classid specified [ 87.048702][ T6319] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 87.238515][ T29] audit: type=1326 audit(1731189725.656:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6326 comm="syz.4.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55c57e719 code=0x0 [ 87.280146][ T29] audit: type=1400 audit(1731189725.686:394): avc: denied { create } for pid=6322 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.762407][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.914183][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 87.920717][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.935981][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.958297][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.984226][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.344422][ T6345] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 88.351960][ T6345] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 88.359370][ T6345] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 88.373459][ T6345] Error parsing options; rc = [-22] [ 88.697367][ T5879] usb 1-1: config 0 descriptor?? [ 88.705563][ T5879] hub 1-1:0.0: USB hub found [ 88.761134][ T5908] usb 2-1: USB disconnect, device number 7 [ 88.913206][ T29] audit: type=1400 audit(1731189727.316:395): avc: denied { write } for pid=6351 comm="syz.1.106" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.935800][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.958266][ T5879] hub 1-1:0.0: 1 port detected [ 88.977884][ T29] audit: type=1400 audit(1731189727.376:396): avc: denied { connect } for pid=6353 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.998019][ T29] audit: type=1400 audit(1731189727.386:397): avc: denied { read } for pid=6353 comm="syz.2.107" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.020865][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.027650][ T29] audit: type=1400 audit(1731189727.386:398): avc: denied { open } for pid=6353 comm="syz.2.107" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.051228][ T29] audit: type=1400 audit(1731189727.386:399): avc: denied { ioctl } for pid=6353 comm="syz.2.107" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.075982][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.262493][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.086457][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 90.091295][ T29] audit: type=1400 audit(1731189728.486:400): avc: denied { name_bind } for pid=6328 comm="syz.0.101" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.392012][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 90.424081][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.444965][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.826987][ T5881] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 90.858458][ T6329] netlink: 88 bytes leftover after parsing attributes in process `syz.0.101'. [ 90.868179][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 90.882255][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.890407][ T6329] netlink: 88 bytes leftover after parsing attributes in process `syz.0.101'. [ 90.942397][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 90.942422][ T29] audit: type=1400 audit(1731189729.276:402): avc: denied { shutdown } for pid=6328 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.979801][ T8] usb 4-1: config 0 descriptor?? [ 91.011060][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 91.031092][ T6384] input: syz0 as /devices/virtual/input/input7 [ 91.031688][ T29] audit: type=1400 audit(1731189729.276:403): avc: denied { read } for pid=6328 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.393523][ T29] audit: type=1400 audit(1731189729.806:404): avc: denied { create } for pid=6328 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.601613][ T6390] xt_cgroup: xt_cgroup: no path or classid specified [ 92.172404][ T6390] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 92.295164][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 92.304201][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 92.421324][ T29] audit: type=1400 audit(1731189729.806:405): avc: denied { write } for pid=6328 comm="syz.0.101" path="socket:[10462]" dev="sockfs" ino=10462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.468650][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 92.591669][ T29] audit: type=1400 audit(1731189729.806:406): avc: denied { nlmsg_read } for pid=6328 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.892530][ T8] gspca_sunplus: reg_r err -110 [ 92.898426][ T8] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 92.995256][ T5908] usb 1-1: USB disconnect, device number 4 [ 93.272249][ T6404] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 93.279693][ T6404] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 93.287096][ T6404] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 93.300283][ T6404] Error parsing options; rc = [-22] [ 93.648604][ T29] audit: type=1326 audit(1731189732.066:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.2.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b477e719 code=0x0 [ 93.672263][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.835892][ T5841] usb 4-1: USB disconnect, device number 7 [ 94.390923][ T6420] syz.3.122 uses obsolete (PF_INET,SOCK_PACKET) [ 94.733414][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.912656][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 94.953161][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 94.962075][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.969986][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.005038][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.146340][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.162030][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.358523][ T29] audit: type=1400 audit(1731189733.776:408): avc: denied { ioctl } for pid=6427 comm="syz.4.127" path="socket:[10531]" dev="sockfs" ino=10531 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.384364][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.710151][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.741611][ T29] audit: type=1400 audit(1731189734.156:409): avc: denied { read } for pid=6422 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.761457][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.795273][ T5878] usb 3-1: config 0 descriptor?? [ 95.804860][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 95.814448][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.822735][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.836775][ T5878] hub 3-1:0.0: USB hub found [ 96.060703][ T5878] hub 3-1:0.0: 1 port detected [ 96.642615][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 96.664974][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.701765][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.983895][ T29] audit: type=1400 audit(1731189735.406:410): avc: denied { ioctl } for pid=6454 comm="syz.4.133" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.013808][ T6455] binder: BINDER_SET_CONTEXT_MGR already set [ 97.019952][ T6455] binder: 6454:6455 ioctl 4018620d 20000040 returned -16 [ 97.031827][ T29] audit: type=1400 audit(1731189735.426:411): avc: denied { set_context_mgr } for pid=6454 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.062622][ T6415] netlink: 88 bytes leftover after parsing attributes in process `syz.2.123'. [ 97.071494][ T6415] netlink: 88 bytes leftover after parsing attributes in process `syz.2.123'. [ 97.082274][ T5879] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.085653][ T29] audit: type=1400 audit(1731189735.436:412): avc: denied { map } for pid=6454 comm="syz.4.133" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.113384][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.233585][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.244343][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.261241][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.290298][ T5879] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.307195][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.325596][ T5879] usb 4-1: SerialNumber: syz [ 97.416768][ T5878] hub 3-1:0.0: activate --> -90 [ 97.427921][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 97.437502][ T5877] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 97.448934][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.459973][ T5877] usb 2-1: config 0 descriptor?? [ 97.473787][ T5877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 97.562513][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.571561][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 98.147599][ T29] audit: type=1400 audit(1731189736.556:413): avc: denied { bind } for pid=6450 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.662534][ T6472] xt_cgroup: xt_cgroup: no path or classid specified [ 98.812433][ T29] audit: type=1400 audit(1731189736.896:414): avc: denied { rename } for pid=5183 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.839597][ T5908] usb 3-1: USB disconnect, device number 5 [ 98.840479][ T5879] usb 4-1: 0:2 : does not exist [ 98.852808][ T5879] usb 4-1: unit 5 not found! [ 98.898982][ T29] audit: type=1400 audit(1731189736.906:415): avc: denied { unlink } for pid=5183 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.902068][ T5879] usb 4-1: USB disconnect, device number 8 [ 98.945975][ T6471] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 98.971056][ T29] audit: type=1400 audit(1731189736.906:416): avc: denied { create } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.116093][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.147546][ T29] audit: type=1400 audit(1731189737.566:417): avc: denied { map } for pid=6482 comm="syz.2.139" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.276003][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'. [ 99.285982][ T29] audit: type=1400 audit(1731189737.706:418): avc: denied { read } for pid=6485 comm="syz.0.140" name="media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.363616][ T29] audit: type=1400 audit(1731189737.706:419): avc: denied { open } for pid=6485 comm="syz.0.140" path="/dev/media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.556915][ T5877] gspca_sunplus: reg_r err -110 [ 99.561869][ T5877] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 100.474613][ T5877] usb 2-1: USB disconnect, device number 8 [ 101.183331][ T5831] Bluetooth: hci3: command tx timeout [ 101.735100][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 101.758387][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 102.985183][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 102.985197][ T29] audit: type=1400 audit(1731189741.406:436): avc: denied { ioctl } for pid=6522 comm="syz.1.150" path="socket:[10655]" dev="sockfs" ino=10655 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.272829][ T29] audit: type=1400 audit(1731189741.656:437): avc: denied { create } for pid=6522 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.292545][ T29] audit: type=1400 audit(1731189741.686:438): avc: denied { write } for pid=6522 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.311818][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.351591][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 103.595161][ T6523] ubi0: attaching mtd0 [ 103.604361][ T6523] ubi0: scanning is finished [ 103.974282][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.243601][ T6542] FAULT_INJECTION: forcing a failure. [ 104.243601][ T6542] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.277212][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.3.155 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 104.287807][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 104.297848][ T6542] Call Trace: [ 104.301105][ T6542] [ 104.304012][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 104.308671][ T6542] should_fail_ex+0x497/0x5b0 [ 104.313341][ T6542] _copy_from_user+0x2e/0xd0 [ 104.317909][ T6542] copy_msghdr_from_user+0x99/0x160 [ 104.323095][ T6542] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.328877][ T6542] ? __pfx___lock_acquire+0x10/0x10 [ 104.334051][ T6542] ___sys_sendmsg+0xff/0x1e0 [ 104.338616][ T6542] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.343794][ T6542] ? lock_acquire+0x2f/0xb0 [ 104.348281][ T6542] ? __fget_files+0x40/0x3f0 [ 104.352865][ T6542] ? fdget+0x176/0x210 [ 104.356911][ T6542] __sys_sendmmsg+0x1a1/0x450 [ 104.361571][ T6542] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.366747][ T6542] ? vfs_write+0x306/0x1150 [ 104.371234][ T6542] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.377191][ T6542] ? fput+0x30/0x390 [ 104.381062][ T6542] ? ksys_write+0x1ad/0x260 [ 104.385542][ T6542] ? __pfx_ksys_write+0x10/0x10 [ 104.390383][ T6542] __x64_sys_sendmmsg+0x9c/0x100 [ 104.395296][ T6542] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.400473][ T6542] do_syscall_64+0xcd/0x250 [ 104.404962][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.410831][ T6542] RIP: 0033:0x7fd03757e719 [ 104.415221][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.434802][ T6542] RSP: 002b:00007fd0382ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.443191][ T6542] RAX: ffffffffffffffda RBX: 00007fd037735f80 RCX: 00007fd03757e719 [ 104.451145][ T6542] RDX: 0000000000000001 RSI: 0000000020000cc0 RDI: 0000000000000003 [ 104.459089][ T6542] RBP: 00007fd0382ec090 R08: 0000000000000000 R09: 0000000000000000 [ 104.467034][ T6542] R10: 0000000020000804 R11: 0000000000000246 R12: 0000000000000001 [ 104.474990][ T6542] R13: 0000000000000000 R14: 00007fd037735f80 R15: 00007ffc9d0f4438 [ 104.482954][ T6542] [ 104.485959][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.550852][ T6523] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 104.574306][ T5878] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.574343][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.575846][ T5878] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.575871][ T5878] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.575892][ T5878] usb 3-1: Manufacturer: syz [ 104.577233][ T5878] usb 3-1: config 0 descriptor?? [ 104.706299][ T5878] rc_core: IR keymap rc-hauppauge not found [ 104.729875][ T5878] Registered IR keymap rc-empty [ 104.736409][ T5878] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 104.770986][ T5878] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 104.870477][ T5878] usb 3-1: USB disconnect, device number 6 [ 104.890125][ T29] audit: type=1400 audit(1731189743.306:439): avc: denied { shutdown } for pid=6552 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.913755][ T29] audit: type=1400 audit(1731189743.336:440): avc: denied { name_connect } for pid=6552 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 105.840183][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 105.849505][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 105.939690][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.989355][ T29] audit: type=1400 audit(1731189744.406:441): avc: denied { connect } for pid=6563 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.032316][ T29] audit: type=1400 audit(1731189744.406:442): avc: denied { write } for pid=6563 comm="syz.0.161" path="socket:[9964]" dev="sockfs" ino=9964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.061661][ T6562] random: crng reseeded on system resumption [ 106.235391][ T29] audit: type=1400 audit(1731189744.476:443): avc: denied { append } for pid=6548 comm="syz.3.158" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.265331][ T29] audit: type=1400 audit(1731189744.476:444): avc: denied { open } for pid=6548 comm="syz.3.158" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.288895][ T29] audit: type=1400 audit(1731189744.636:445): avc: denied { ioctl } for pid=6548 comm="syz.3.158" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.313585][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.339909][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 106.398521][ T5877] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 106.408113][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.420605][ T5877] usb 5-1: Product: syz [ 106.470403][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'. [ 106.906277][ T5877] usb 5-1: Manufacturer: syz [ 106.913818][ T5877] usb 5-1: SerialNumber: syz [ 106.952285][ T5877] usb 5-1: config 0 descriptor?? [ 106.974684][ T5877] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 107.140115][ T6576] 9pnet: Unknown protocol version 9p2000.u¬cachetag=GPL [ 107.729810][ T5877] gspca_ov534_9: reg_w failed -110 [ 107.735564][ T6576] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 108.471451][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'. [ 108.596021][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.733160][ T6595] overlayfs: unescaped trailing colons in lowerdir mount option. [ 108.762399][ T5877] gspca_ov534_9: Unknown sensor 0000 [ 108.762663][ T5877] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 108.982651][ T5877] usb 5-1: USB disconnect, device number 4 [ 110.433908][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.582440][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 111.133479][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 111.168294][ T5877] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 111.178521][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.196990][ T5877] usb 5-1: config 0 descriptor?? [ 111.225065][ T5877] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 111.390466][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 111.399506][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 111.849335][ T5877] gspca_sonixj: reg_w1 err -71 [ 111.860453][ T5877] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 111.873581][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 111.873778][ T29] audit: type=1400 audit(1731189750.296:447): avc: denied { ioctl } for pid=6631 comm="syz.2.178" path="socket:[10054]" dev="sockfs" ino=10054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.913257][ T5877] usb 5-1: USB disconnect, device number 5 [ 112.792153][ T29] audit: type=1400 audit(1731189751.206:448): avc: denied { getopt } for pid=6641 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 112.972698][ T6639] kvm: emulating exchange as write [ 113.009202][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.637236][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 115.298262][ T5841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.636161][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 115.643002][ T5841] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 115.651065][ T5841] usb 3-1: config 0 has no interface number 0 [ 115.660100][ T5841] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.669288][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.713940][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.784884][ T29] audit: type=1400 audit(1731189754.206:449): avc: denied { read } for pid=6694 comm="syz.3.194" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 115.808530][ T6695] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 115.818238][ T6695] audit: out of memory in audit_log_start [ 115.866700][ T29] audit: type=1400 audit(1731189754.236:450): avc: denied { open } for pid=6694 comm="syz.3.194" path="/32/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 115.947629][ T5879] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 115.964226][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.981925][ T5841] usb 3-1: Product: syz [ 115.986201][ T5841] usb 3-1: Manufacturer: syz [ 115.990802][ T5841] usb 3-1: SerialNumber: syz [ 115.993673][ T29] audit: type=1400 audit(1731189754.396:451): avc: denied { listen } for pid=6671 comm="syz.4.188" lport=38164 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.020600][ T5841] usb 3-1: config 0 descriptor?? [ 116.029340][ T5841] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.038614][ T29] audit: type=1400 audit(1731189754.456:452): avc: denied { accept } for pid=6671 comm="syz.4.188" lport=38164 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.213647][ T5879] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.223033][ T5879] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 116.231835][ T5879] usb 1-1: Manufacturer: syz [ 116.251008][ T5879] usb 1-1: config 0 descriptor?? [ 116.256928][ T5841] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.547567][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.711130][ T5841] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.712609][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.786205][ T5879] rc_core: IR keymap rc-hauppauge not found [ 116.807199][ T5879] Registered IR keymap rc-empty [ 116.822942][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 116.835884][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 116.872489][ T5879] usb 1-1: USB disconnect, device number 5 [ 116.886449][ T29] audit: type=1400 audit(1731189755.306:453): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.968769][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 116.969801][ T5878] usb 3-1: USB disconnect, device number 7 [ 117.043258][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 117.127027][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 117.144083][ T5878] quatech2 3-1:0.51: device disconnected [ 117.262418][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 117.271711][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 118.684216][ T6740] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 118.697573][ T6740] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.205'. [ 119.042347][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.069090][ T6747] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.204'. [ 119.078527][ T6747] netlink: 133 bytes leftover after parsing attributes in process `syz.0.204'. [ 119.102773][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 119.131811][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 119.640057][ T5879] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 119.651861][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.675028][ T5879] usb 2-1: config 0 descriptor?? [ 119.853306][ T29] audit: type=1400 audit(1731189758.236:454): avc: denied { setopt } for pid=6754 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.873098][ T29] audit: type=1400 audit(1731189758.246:455): avc: denied { append } for pid=6754 comm="syz.0.207" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.115506][ T5879] gs_usb 2-1:0.0: Configuring for 67 interfaces [ 120.143266][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 120.146835][ T5879] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 120.160118][ T5879] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 120.182394][ T6717] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.297324][ T6770] fuse: Unknown parameter 'Q»ˆ0x0000000000000004' [ 120.359380][ T29] audit: type=1400 audit(1731189758.776:456): avc: denied { remount } for pid=6769 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.398596][ T6717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.580613][ T6717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.590671][ T6717] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 120.601041][ T6717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.302851][ T6717] usb 4-1: config 0 descriptor?? [ 121.326632][ T6775] FAULT_INJECTION: forcing a failure. [ 121.326632][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.344528][ T8] usb 2-1: USB disconnect, device number 9 [ 121.376481][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.4.213 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 121.387112][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.397171][ T6775] Call Trace: [ 121.400459][ T6775] [ 121.403387][ T6775] dump_stack_lvl+0x16c/0x1f0 [ 121.408072][ T6775] should_fail_ex+0x497/0x5b0 [ 121.412754][ T6775] _copy_to_user+0x32/0xd0 [ 121.417178][ T6775] simple_read_from_buffer+0xd0/0x160 [ 121.422569][ T6775] proc_fail_nth_read+0x198/0x270 [ 121.427604][ T6775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.433159][ T6775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.438706][ T6775] vfs_read+0x1df/0xbe0 [ 121.442855][ T6775] ? __fget_files+0x23a/0x3f0 [ 121.447560][ T6775] ? fdget_pos+0x24c/0x360 [ 121.451976][ T6775] ? __pfx_lock_release+0x10/0x10 [ 121.457004][ T6775] ? trace_lock_acquire+0x14a/0x1d0 [ 121.462216][ T6775] ? __pfx_vfs_read+0x10/0x10 [ 121.466905][ T6775] ? __pfx___mutex_lock+0x10/0x10 [ 121.471939][ T6775] ? __fget_files+0x244/0x3f0 [ 121.476632][ T6775] ksys_read+0x12f/0x260 [ 121.480892][ T6775] ? __pfx_ksys_read+0x10/0x10 [ 121.485673][ T6775] do_syscall_64+0xcd/0x250 [ 121.490184][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.496093][ T6775] RIP: 0033:0x7fc55c57d15c [ 121.500514][ T6775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 121.520137][ T6775] RSP: 002b:00007fc55d2cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.528563][ T6775] RAX: ffffffffffffffda RBX: 00007fc55c735f80 RCX: 00007fc55c57d15c [ 121.536580][ T6775] RDX: 000000000000000f RSI: 00007fc55d2cb0a0 RDI: 0000000000000004 [ 121.544563][ T6775] RBP: 00007fc55d2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.552541][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.560520][ T6775] R13: 0000000000000000 R14: 00007fc55c735f80 R15: 00007ffd152d0518 [ 121.568511][ T6775] [ 121.602862][ T29] audit: type=1400 audit(1731189760.016:457): avc: denied { listen } for pid=6780 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.609758][ T6779] macsec0: entered promiscuous mode [ 121.637814][ T29] audit: type=1400 audit(1731189760.026:458): avc: denied { nlmsg_write } for pid=6777 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 121.831060][ T6787] ubi0: attaching mtd0 [ 121.840750][ T6787] ubi0: scanning is finished [ 122.400858][ T6717] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 122.422361][ T5841] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.441301][ T6717] usb 4-1: USB disconnect, device number 9 [ 122.592556][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 122.635631][ T6792] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.217'. [ 122.864172][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.880232][ T5841] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 122.891175][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 122.914569][ T6787] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 122.940191][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.949668][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.960033][ T6779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.969590][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 122.970469][ T5841] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 123.061599][ T29] audit: type=1400 audit(1731189761.476:459): avc: denied { read } for pid=6800 comm="syz.0.221" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.085509][ T29] audit: type=1400 audit(1731189761.476:460): avc: denied { open } for pid=6800 comm="syz.0.221" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.129404][ T29] audit: type=1400 audit(1731189761.476:461): avc: denied { ioctl } for pid=6800 comm="syz.0.221" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.253676][ T5841] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 123.393761][ T5841] usb 3-1: USB disconnect, device number 8 [ 123.438812][ T29] audit: type=1400 audit(1731189761.546:462): avc: denied { setopt } for pid=6799 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.438996][ T6777] macsec0: left promiscuous mode [ 124.226187][ T29] audit: type=1400 audit(1731189762.646:463): avc: denied { connect } for pid=6820 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.402249][ T29] audit: type=1400 audit(1731189762.816:464): avc: denied { read } for pid=6816 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.502519][ T29] audit: type=1400 audit(1731189762.876:465): avc: denied { write } for pid=6816 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.783896][ T29] audit: type=1400 audit(1731189763.196:466): avc: denied { getopt } for pid=6837 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.328680][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 126.388706][ T6862] sch_fq: defrate 0 ignored. [ 126.486737][ T6866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=6866 comm=syz.2.233 [ 126.545181][ T29] audit: type=1400 audit(1731189764.966:467): avc: denied { create } for pid=6870 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.585041][ T29] audit: type=1400 audit(1731189764.996:468): avc: denied { getopt } for pid=6870 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.700322][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.843358][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.240'. [ 126.852400][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.240'. [ 127.272383][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 127.280522][ T5878] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 127.290754][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.356881][ T5878] usb 4-1: Product: syz [ 127.370816][ T5878] usb 4-1: Manufacturer: syz [ 127.387935][ T5878] usb 4-1: SerialNumber: syz [ 127.476206][ T5878] usb 4-1: config 0 descriptor?? [ 128.222369][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.347977][ T5878] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 128.507106][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 128.724362][ T5878] usb 4-1: USB disconnect, device number 10 [ 128.754640][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.790140][ T8] usb 1-1: config 0 has no interface number 0 [ 128.831054][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.841462][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.850036][ T8] usb 1-1: Product: syz [ 128.854283][ T8] usb 1-1: Manufacturer: syz [ 128.858960][ T8] usb 1-1: SerialNumber: syz [ 129.015644][ T8] usb 1-1: config 0 descriptor?? [ 129.067639][ T8] smsc95xx v2.0.0 [ 129.562415][ T6901] syz.4.246: attempt to access beyond end of device [ 129.562415][ T6901] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 129.575862][ T6901] gfs2: error -5 reading superblock [ 130.294385][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 130.305307][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.743538][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 131.743573][ T29] audit: type=1400 audit(1731189770.166:470): avc: denied { write } for pid=6913 comm="syz.3.250" path="socket:[12628]" dev="sockfs" ino=12628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.955611][ T29] audit: type=1400 audit(1731189770.376:471): avc: denied { read } for pid=6913 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.437022][ T29] audit: type=1400 audit(1731189770.696:472): avc: denied { create } for pid=6887 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.503299][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.509673][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.835917][ T6923] vivid-003: disconnect [ 133.031666][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.252'. [ 133.080076][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 133.091902][ T8] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 133.109906][ T8] usb 1-1: USB disconnect, device number 6 [ 133.124194][ T6907] vivid-003: reconnect [ 133.175861][ T6928] capability: warning: `syz.3.253' uses 32-bit capabilities (legacy support in use) [ 133.222132][ T29] audit: type=1400 audit(1731189771.636:473): avc: denied { write } for pid=6927 comm="syz.3.253" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.503741][ T29] audit: type=1400 audit(1731189771.636:474): avc: denied { open } for pid=6927 comm="syz.3.253" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.528514][ T29] audit: type=1400 audit(1731189771.666:475): avc: denied { write } for pid=6927 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.549659][ T29] audit: type=1400 audit(1731189771.666:476): avc: denied { nlmsg_write } for pid=6927 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.697580][ T29] audit: type=1400 audit(1731189772.626:477): avc: denied { write } for pid=6938 comm="syz.3.256" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.769800][ T6949] overlayfs: unescaped trailing colons in lowerdir mount option. [ 135.509048][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.732401][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 135.745717][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 135.758246][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.427433][ T8] usb 5-1: config 0 descriptor?? [ 136.434924][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 136.594622][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 137.013774][ T8] gspca_sonixj: reg_w1 err -110 [ 137.021595][ T8] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 137.104268][ T29] audit: type=1400 audit(1731189775.526:478): avc: denied { search } for pid=6978 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.157291][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 137.194058][ T29] audit: type=1400 audit(1731189775.596:479): avc: denied { read } for pid=6979 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.292452][ T29] audit: type=1400 audit(1731189775.596:480): avc: denied { open } for pid=6979 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.318908][ T29] audit: type=1400 audit(1731189775.596:481): avc: denied { getattr } for pid=6979 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.344560][ T29] audit: type=1400 audit(1731189775.596:482): avc: denied { getattr } for pid=6979 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.371177][ T29] audit: type=1400 audit(1731189775.706:483): avc: denied { read } for pid=6981 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.393738][ T29] audit: type=1400 audit(1731189775.706:484): avc: denied { open } for pid=6981 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.604418][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 137.755843][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 138.389792][ T7003] loop2: detected capacity change from 0 to 7 [ 138.652340][ T7003] Dev loop2: unable to read RDB block 7 [ 138.652406][ T7003] loop2: unable to read partition table [ 138.652525][ T7003] loop2: partition table beyond EOD, truncated [ 138.652543][ T7003] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.712302][ T29] audit: type=1400 audit(1731189777.106:485): avc: denied { write } for pid=6978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.712348][ T29] audit: type=1400 audit(1731189777.106:486): avc: denied { add_name } for pid=6978 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.712377][ T29] audit: type=1400 audit(1731189777.106:487): avc: denied { create } for pid=6978 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.865789][ T6717] usb 5-1: USB disconnect, device number 6 [ 138.998704][ T7001] tty tty24: ldisc open failed (-12), clearing slot 23 [ 139.808489][ T7009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 139.851923][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.272'. [ 139.941985][ T7021] lo speed is unknown, defaulting to 1000 [ 140.200010][ T7021] lo speed is unknown, defaulting to 1000 [ 140.590938][ T7021] lo speed is unknown, defaulting to 1000 [ 140.662103][ T7021] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.693200][ T7021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.830088][ T7021] lo speed is unknown, defaulting to 1000 [ 140.853772][ T7021] lo speed is unknown, defaulting to 1000 [ 140.868124][ T7021] lo speed is unknown, defaulting to 1000 [ 140.877492][ T7021] lo speed is unknown, defaulting to 1000 [ 140.884171][ T7021] lo speed is unknown, defaulting to 1000 [ 140.902311][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.928588][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 141.073214][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 141.083244][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.115806][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.140697][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 141.153592][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.174488][ T8] usb 5-1: config 0 descriptor?? [ 141.343196][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'. [ 141.352355][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'. [ 141.859153][ T7071] lo speed is unknown, defaulting to 1000 [ 141.989425][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 142.008202][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 142.041863][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 142.062141][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 142.072096][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 142.098734][ T8] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 142.252378][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.413812][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 142.536237][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.548303][ T5881] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 142.561609][ T7103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.592397][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.733269][ T5881] usb 4-1: config 0 descriptor?? [ 143.498515][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 143.498529][ T29] audit: type=1400 audit(1731189781.916:498): avc: denied { listen } for pid=7070 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.570306][ T29] audit: type=1400 audit(1731189781.946:499): avc: denied { connect } for pid=7070 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.586972][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.606654][ T29] audit: type=1400 audit(1731189781.956:500): avc: denied { accept } for pid=7070 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.607210][ T7109] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20002 [ 143.626605][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.751415][ T8] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 143.823030][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.871395][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.883081][ T8] usb 5-1: USB disconnect, device number 7 [ 144.116395][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 144.744478][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 144.900486][ T7142] FAULT_INJECTION: forcing a failure. [ 144.900486][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 144.913289][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.2.293 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 144.923885][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.933946][ T7142] Call Trace: [ 144.937222][ T7142] [ 144.940152][ T7142] dump_stack_lvl+0x16c/0x1f0 [ 144.944834][ T7142] should_fail_ex+0x497/0x5b0 [ 144.949520][ T7142] should_failslab+0xc2/0x120 [ 144.954203][ T7142] kmem_cache_alloc_node_noprof+0x71/0x310 [ 144.960013][ T7142] ? __alloc_skb+0x2b1/0x380 [ 144.964610][ T7142] __alloc_skb+0x2b1/0x380 [ 144.969030][ T7142] ? __pfx___alloc_skb+0x10/0x10 [ 144.973974][ T7142] ? debug_object_activate+0x199/0x540 [ 144.979444][ T7142] ? do_raw_spin_unlock+0x172/0x230 [ 144.984652][ T7142] tcp_make_synack+0xf5/0x19a0 [ 144.989424][ T7142] ? __mod_timer+0x8f6/0xdc0 [ 144.994023][ T7142] ? __pfx_lock_release+0x10/0x10 [ 144.994929][ T29] audit: type=1400 audit(1731189783.316:501): avc: denied { mount } for pid=7141 comm="syz.2.293" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.999037][ T7142] ? __pfx_tcp_make_synack+0x10/0x10 [ 145.026267][ T7142] ? _raw_spin_lock_irqsave+0x42/0x60 [ 145.031641][ T7142] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.037447][ T7142] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.042646][ T7142] ? __pfx___mod_timer+0x10/0x10 [ 145.047578][ T7142] ? do_raw_spin_unlock+0x172/0x230 [ 145.052780][ T7142] tcp_v6_send_synack+0xcc/0xf30 [ 145.057704][ T7142] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 145.063265][ T7142] ? inet_csk_reqsk_queue_hash_add+0x9d/0x1e0 [ 145.069342][ T7142] ? __pfx_inet_csk_reqsk_queue_hash_add+0x10/0x10 [ 145.075837][ T7142] ? tcp_v6_route_req+0x2a6/0x5c0 [ 145.080869][ T7142] tcp_conn_request+0x237f/0x3e00 [ 145.085910][ T7142] ? __pfx_tcp_conn_request+0x10/0x10 [ 145.091295][ T7142] ? __pfx___lock_acquire+0x10/0x10 [ 145.096495][ T7142] ? rcu_is_watching+0x12/0xc0 [ 145.101256][ T7142] ? trace_lock_acquire+0x14a/0x1d0 [ 145.106471][ T7142] ? tcp_v6_conn_request+0x1eb/0x470 [ 145.111755][ T7142] tcp_v6_conn_request+0x1eb/0x470 [ 145.116860][ T7142] tcp_rcv_state_process+0x2363/0x4f30 [ 145.122320][ T7142] ? sk_filter_trim_cap+0x516/0xac0 [ 145.127506][ T7142] ? __pfx_lock_release+0x10/0x10 [ 145.132530][ T7142] ? trace_lock_acquire+0x14a/0x1d0 [ 145.137743][ T7142] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 145.143549][ T7142] ? sk_filter_trim_cap+0xec/0xac0 [ 145.148661][ T7142] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 145.154037][ T7142] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 145.159586][ T7142] ? tcp_v6_do_rcv+0x435/0x16e0 [ 145.164432][ T7142] tcp_v6_do_rcv+0x435/0x16e0 [ 145.169097][ T7142] tcp_v6_rcv+0x3902/0x3fd0 [ 145.173595][ T7142] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 145.178421][ T7142] ? __pfx___lock_acquire+0x10/0x10 [ 145.183605][ T7142] ? __pfx_lock_release+0x10/0x10 [ 145.188627][ T7142] ? __pfx_raw6_local_deliver+0x10/0x10 [ 145.194177][ T7142] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 145.199028][ T7142] ip6_protocol_deliver_rcu+0x180/0x1510 [ 145.204661][ T7142] ip6_input_finish+0x14f/0x2f0 [ 145.209507][ T7142] ip6_input+0xa1/0xd0 [ 145.213553][ T7142] ? __pfx_ip6_input+0x10/0x10 [ 145.218301][ T7142] ipv6_rcv+0x265/0x680 [ 145.222443][ T7142] ? __pfx_ipv6_rcv+0x10/0x10 [ 145.227116][ T7142] __netif_receive_skb_one_core+0x12e/0x1e0 [ 145.232995][ T7142] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 145.239390][ T7142] ? trace_lock_acquire+0x14a/0x1d0 [ 145.244572][ T7142] ? netif_receive_skb+0x109/0x7b0 [ 145.249675][ T7142] __netif_receive_skb+0x1d/0x160 [ 145.254685][ T7142] netif_receive_skb+0x13f/0x7b0 [ 145.259612][ T7142] ? __pfx_netif_receive_skb+0x10/0x10 [ 145.265088][ T7142] ? __pfx___lock_acquire+0x10/0x10 [ 145.270277][ T7142] tun_rx_batched+0x429/0x780 [ 145.274949][ T7142] ? __pfx_tun_rx_batched+0x10/0x10 [ 145.280143][ T7142] ? lock_acquire+0x2f/0xb0 [ 145.284641][ T7142] ? tun_get_user+0x13c9/0x3d80 [ 145.289491][ T7142] tun_get_user+0x2a4d/0x3d80 [ 145.294189][ T7142] ? find_held_lock+0x2d/0x110 [ 145.298944][ T7142] ? __pfx_tun_get_user+0x10/0x10 [ 145.303946][ T7142] ? find_held_lock+0x2d/0x110 [ 145.308702][ T7142] ? __pfx_lock_release+0x10/0x10 [ 145.313731][ T7142] tun_chr_write_iter+0xdc/0x210 [ 145.318661][ T7142] vfs_write+0x5ae/0x1150 [ 145.323024][ T7142] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 145.328588][ T7142] ? trace_lock_acquire+0x14a/0x1d0 [ 145.333792][ T7142] ? __pfx_vfs_write+0x10/0x10 [ 145.338562][ T7142] ? __fget_files+0x40/0x3f0 [ 145.343140][ T7142] ksys_write+0x12f/0x260 [ 145.347479][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 145.352347][ T7142] do_syscall_64+0xcd/0x250 [ 145.356842][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.362720][ T7142] RIP: 0033:0x7fc0b477d1ff [ 145.367117][ T7142] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 145.386722][ T7142] RSP: 002b:00007fc0b54dc000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 145.395128][ T7142] RAX: ffffffffffffffda RBX: 00007fc0b4935f80 RCX: 00007fc0b477d1ff [ 145.403119][ T7142] RDX: 000000000000004a RSI: 0000000020000000 RDI: 00000000000000c8 [ 145.411077][ T7142] RBP: 00007fc0b54dc090 R08: 0000000000000000 R09: 0000000000000000 [ 145.419040][ T7142] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 145.427007][ T7142] R13: 0000000000000000 R14: 00007fc0b4935f80 R15: 00007fff3b9b68d8 [ 145.434979][ T7142] [ 145.438024][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.472740][ T7144] FAULT_INJECTION: forcing a failure. [ 145.472740][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.486403][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.0.291 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 145.497086][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 145.507149][ T7144] Call Trace: [ 145.510431][ T7144] [ 145.513389][ T7144] dump_stack_lvl+0x16c/0x1f0 [ 145.518080][ T7144] should_fail_ex+0x497/0x5b0 [ 145.522793][ T7144] _copy_to_user+0x32/0xd0 [ 145.527218][ T7144] simple_read_from_buffer+0xd0/0x160 [ 145.532607][ T7144] proc_fail_nth_read+0x198/0x270 [ 145.537670][ T7144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.543232][ T7144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.548816][ T7144] vfs_read+0x1df/0xbe0 [ 145.552984][ T7144] ? __fget_files+0x23a/0x3f0 [ 145.557670][ T7144] ? fdget_pos+0x24c/0x360 [ 145.562090][ T7144] ? __pfx_lock_release+0x10/0x10 [ 145.567121][ T7144] ? trace_lock_acquire+0x14a/0x1d0 [ 145.572332][ T7144] ? __pfx_vfs_read+0x10/0x10 [ 145.577009][ T7144] ? __pfx___mutex_lock+0x10/0x10 [ 145.582017][ T7144] ? __fget_files+0x244/0x3f0 [ 145.586709][ T7144] ksys_read+0x12f/0x260 [ 145.590956][ T7144] ? __pfx_ksys_read+0x10/0x10 [ 145.595711][ T7144] do_syscall_64+0xcd/0x250 [ 145.600204][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.606076][ T7144] RIP: 0033:0x7f5aef57d15c [ 145.610496][ T7144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 145.630103][ T7144] RSP: 002b:00007f5af0428030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.638508][ T7144] RAX: ffffffffffffffda RBX: 00007f5aef735f80 RCX: 00007f5aef57d15c [ 145.646462][ T7144] RDX: 000000000000000f RSI: 00007f5af04280a0 RDI: 0000000000000004 [ 145.654414][ T7144] RBP: 00007f5af0428090 R08: 0000000000000000 R09: 0000000000000000 [ 145.662365][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.670314][ T7144] R13: 0000000000000000 R14: 00007f5aef735f80 R15: 00007ffc485ed138 [ 145.678280][ T7144] [ 145.681309][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.458099][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 146.464162][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.482343][ T5881] usb 4-1: USB disconnect, device number 11 [ 147.319787][ T6717] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.292338][ T29] audit: type=1400 audit(1731189785.916:502): avc: denied { connect } for pid=7176 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.319169][ T29] audit: type=1400 audit(1731189785.926:503): avc: denied { bind } for pid=7176 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.461566][ T7196] FAULT_INJECTION: forcing a failure. [ 148.461566][ T7196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.507944][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.1.302 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 148.518572][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.528641][ T7196] Call Trace: [ 148.531924][ T7196] [ 148.534862][ T7196] dump_stack_lvl+0x16c/0x1f0 [ 148.539666][ T7196] should_fail_ex+0x497/0x5b0 [ 148.544360][ T7196] _copy_to_user+0x32/0xd0 [ 148.548791][ T7196] simple_read_from_buffer+0xd0/0x160 [ 148.554176][ T7196] proc_fail_nth_read+0x198/0x270 [ 148.559210][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.564765][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.570434][ T7196] vfs_read+0x1df/0xbe0 [ 148.574606][ T7196] ? __fget_files+0x23a/0x3f0 [ 148.579298][ T7196] ? fdget_pos+0x24c/0x360 [ 148.583741][ T7196] ? __pfx_lock_release+0x10/0x10 [ 148.588770][ T7196] ? trace_lock_acquire+0x14a/0x1d0 [ 148.593980][ T7196] ? __pfx_vfs_read+0x10/0x10 [ 148.598682][ T7196] ? __pfx___mutex_lock+0x10/0x10 [ 148.603718][ T7196] ? __fget_files+0x244/0x3f0 [ 148.608413][ T7196] ksys_read+0x12f/0x260 [ 148.612671][ T7196] ? __pfx_ksys_read+0x10/0x10 [ 148.617461][ T7196] do_syscall_64+0xcd/0x250 [ 148.622000][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.627910][ T7196] RIP: 0033:0x7f9da797d15c [ 148.632330][ T7196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 148.651949][ T7196] RSP: 002b:00007f9da873f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.660370][ T7196] RAX: ffffffffffffffda RBX: 00007f9da7b35f80 RCX: 00007f9da797d15c [ 148.668343][ T7196] RDX: 000000000000000f RSI: 00007f9da873f0a0 RDI: 0000000000000004 [ 148.676306][ T7196] RBP: 00007f9da873f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.684262][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.692220][ T7196] R13: 0000000000000000 R14: 00007f9da7b35f80 R15: 00007fff411a3e18 [ 148.700205][ T7196] [ 148.712417][ T6717] usb 1-1: Using ep0 maxpacket: 32 [ 148.767839][ T6717] usb 1-1: config 128 interface 0 has no altsetting 0 [ 148.795149][ T6717] usb 1-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=6c.c7 [ 148.806264][ T6717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.832851][ T6717] usb 1-1: Product: syz [ 148.851858][ T6717] usb 1-1: Manufacturer: syz [ 148.864114][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.873419][ T6717] usb 1-1: SerialNumber: syz [ 149.023881][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 149.136552][ T7223] net veth1_virt_wifi virt_wifi0: invalid flags given to default FDB implementation [ 149.394542][ T6717] r8712u: register rtl8712_netdev_ops to netdev_ops [ 149.401316][ T6717] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 149.412473][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 149.431431][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 1024 [ 149.502292][ T5841] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.517913][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 149.549065][ T6717] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 149.557420][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.576592][ T6717] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 149.589657][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.663766][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 149.673388][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.687425][ T6717] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 149.696771][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.723691][ T5908] usb 3-1: string descriptor 0 read error: -71 [ 149.733979][ T6717] usb 1-1: USB disconnect, device number 7 [ 149.742693][ T5908] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 149.801119][ T5841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.827512][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.946594][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.957078][ T5908] usb 3-1: config 0 descriptor?? [ 149.964306][ T5841] usb 4-1: config 0 descriptor?? [ 149.969874][ T5908] usb 3-1: can't set config #0, error -71 [ 149.978727][ T5841] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 149.991134][ T5908] usb 3-1: USB disconnect, device number 9 [ 150.090852][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 150.572519][ T29] audit: type=1400 audit(1731189788.506:504): avc: denied { setopt } for pid=7236 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.919114][ T7256] fuse: Unknown parameter 'f‹0x0000000000000007' [ 151.085125][ T7268] FAULT_INJECTION: forcing a failure. [ 151.085125][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 151.099792][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.1.317 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 151.110430][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.120515][ T7268] Call Trace: [ 151.123795][ T7268] [ 151.126728][ T7268] dump_stack_lvl+0x16c/0x1f0 [ 151.131417][ T7268] should_fail_ex+0x497/0x5b0 [ 151.136110][ T7268] ? fs_reclaim_acquire+0xae/0x150 [ 151.141231][ T7268] should_failslab+0xc2/0x120 [ 151.145917][ T7268] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 151.151671][ T7268] ? fuse_alloc_inode+0x2c/0x350 [ 151.156620][ T7268] ? __pfx_fuse_inode_set+0x10/0x10 [ 151.161824][ T7268] fuse_alloc_inode+0x2c/0x350 [ 151.166594][ T7268] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 151.171975][ T7268] alloc_inode+0x5d/0x230 [ 151.176306][ T7268] iget5_locked+0x33b/0x3d0 [ 151.180813][ T7268] ? __pfx_fuse_inode_eq+0x10/0x10 [ 151.185932][ T7268] ? __pfx_fuse_inode_set+0x10/0x10 [ 151.191138][ T7268] ? __pfx_iget5_locked+0x10/0x10 [ 151.196171][ T7268] ? mark_held_locks+0x9f/0xe0 [ 151.200940][ T7268] ? kasan_quarantine_put+0x10a/0x240 [ 151.206321][ T7268] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.211558][ T7268] fuse_iget+0x162/0x8c0 [ 151.215816][ T7268] ? __pfx_fuse_iget+0x10/0x10 [ 151.220590][ T7268] ? __fuse_simple_request+0x462/0xcb0 [ 151.226061][ T7268] fuse_lookup_name+0x3e8/0x690 [ 151.230924][ T7268] ? __pfx_fuse_lookup_name+0x10/0x10 [ 151.236308][ T7268] ? __lock_acquire+0x2110/0x3ce0 [ 151.241337][ T7268] ? __pfx___mutex_lock+0x10/0x10 [ 151.246375][ T7268] ? __pfx___lock_acquire+0x10/0x10 [ 151.251581][ T7268] fuse_lookup+0x1b1/0x430 [ 151.256006][ T7268] ? lock_acquire.part.0+0x11b/0x380 [ 151.261293][ T7268] ? __pfx_fuse_lookup+0x10/0x10 [ 151.266242][ T7268] ? d_alloc+0x176/0x1e0 [ 151.270497][ T7268] ? do_raw_spin_unlock+0x172/0x230 [ 151.275698][ T7268] ? _raw_spin_unlock+0x28/0x50 [ 151.280559][ T7268] lookup_one_qstr_excl+0x11d/0x190 [ 151.285760][ T7268] ? mnt_want_write+0x161/0x450 [ 151.290626][ T7268] do_renameat2+0x532/0xdd0 [ 151.295138][ T7268] ? __pfx_do_renameat2+0x10/0x10 [ 151.300164][ T7268] ? trace_lock_acquire+0x14a/0x1d0 [ 151.305371][ T7268] ? lock_acquire+0x2f/0xb0 [ 151.309873][ T7268] ? __might_fault+0xe3/0x190 [ 151.314558][ T7268] ? __might_fault+0xe3/0x190 [ 151.319251][ T7268] ? getname_flags.part.0+0x1c5/0x550 [ 151.324636][ T7268] __x64_sys_rename+0x7d/0xa0 [ 151.329320][ T7268] do_syscall_64+0xcd/0x250 [ 151.333830][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.339733][ T7268] RIP: 0033:0x7f9da797e719 [ 151.344152][ T7268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.363786][ T7268] RSP: 002b:00007f9da86fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 151.372206][ T7268] RAX: ffffffffffffffda RBX: 00007f9da7b36130 RCX: 00007f9da797e719 [ 151.380178][ T7268] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 151.388155][ T7268] RBP: 00007f9da86fd090 R08: 0000000000000000 R09: 0000000000000000 [ 151.396128][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.404101][ T7268] R13: 0000000000000001 R14: 00007f9da7b36130 R15: 00007fff411a3e18 [ 151.412090][ T7268] [ 151.437171][ T29] audit: type=1400 audit(1731189789.856:505): avc: denied { read } for pid=7253 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.711661][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 151.774544][ T5909] usb 4-1: USB disconnect, device number 12 [ 152.235273][ T29] audit: type=1400 audit(1731189790.606:506): avc: denied { setattr } for pid=7278 comm="syz.3.320" name="RAWv6" dev="sockfs" ino=13257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.250476][ T7286] lo speed is unknown, defaulting to 1000 [ 152.284495][ T29] audit: type=1400 audit(1731189790.656:507): avc: denied { write } for pid=7285 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.457923][ T7290] FAULT_INJECTION: forcing a failure. [ 152.457923][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 152.470946][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.1.324 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 152.481547][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 152.491608][ T7290] Call Trace: [ 152.494888][ T7290] [ 152.497828][ T7290] dump_stack_lvl+0x16c/0x1f0 [ 152.502509][ T7290] should_fail_ex+0x497/0x5b0 [ 152.507170][ T7290] ? fs_reclaim_acquire+0xae/0x150 [ 152.512267][ T7290] should_failslab+0xc2/0x120 [ 152.516938][ T7290] kmem_cache_alloc_node_noprof+0x71/0x310 [ 152.522733][ T7290] ? __alloc_skb+0x2b1/0x380 [ 152.527314][ T7290] __alloc_skb+0x2b1/0x380 [ 152.531714][ T7290] ? __pfx___alloc_skb+0x10/0x10 [ 152.536642][ T7290] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 152.542790][ T7290] netlink_alloc_large_skb+0x69/0x130 [ 152.548154][ T7290] netlink_sendmsg+0x689/0xd70 [ 152.552904][ T7290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.558175][ T7290] ____sys_sendmsg+0xaaf/0xc90 [ 152.562931][ T7290] ? copy_msghdr_from_user+0x10b/0x160 [ 152.568377][ T7290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.573654][ T7290] ? __pfx___lock_acquire+0x10/0x10 [ 152.578835][ T7290] ___sys_sendmsg+0x135/0x1e0 [ 152.583495][ T7290] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.588681][ T7290] ? lock_acquire+0x2f/0xb0 [ 152.593163][ T7290] ? __fget_files+0x40/0x3f0 [ 152.597750][ T7290] ? fdget+0x176/0x210 [ 152.601814][ T7290] __sys_sendmsg+0x117/0x1f0 [ 152.606390][ T7290] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.611485][ T7290] ? __fget_files+0x244/0x3f0 [ 152.616161][ T7290] do_syscall_64+0xcd/0x250 [ 152.620649][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.626529][ T7290] RIP: 0033:0x7f9da797e719 [ 152.630931][ T7290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.650522][ T7290] RSP: 002b:00007f9da873f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.659006][ T7290] RAX: ffffffffffffffda RBX: 00007f9da7b35f80 RCX: 00007f9da797e719 [ 152.666959][ T7290] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006 [ 152.674912][ T7290] RBP: 00007f9da873f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.682862][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.690811][ T7290] R13: 0000000000000000 R14: 00007f9da7b35f80 R15: 00007fff411a3e18 [ 152.698774][ T7290] [ 152.708057][ T7289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.962744][ T7297] xt_l2tp: missing protocol rule (udp|l2tpip) [ 153.167608][ T29] audit: type=1400 audit(1731189791.586:508): avc: denied { map } for pid=7285 comm="syz.0.322" path="socket:[13289]" dev="sockfs" ino=13289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 153.191931][ T29] audit: type=1400 audit(1731189791.586:509): avc: denied { accept } for pid=7285 comm="syz.0.322" path="socket:[13289]" dev="sockfs" ino=13289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 153.291033][ T29] audit: type=1400 audit(1731189791.706:510): avc: denied { setopt } for pid=7294 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 153.312634][ T29] audit: type=1400 audit(1731189791.706:511): avc: denied { mount } for pid=7294 comm="syz.4.325" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 155.743660][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.907054][ T7334] input: syz1 as /devices/virtual/input/input10 [ 155.916928][ T29] audit: type=1400 audit(1731189794.326:512): avc: denied { write } for pid=7337 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.944641][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 155.972595][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 155.982402][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.992690][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 156.004192][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 156.015105][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 156.024962][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.249079][ T7348] xt_TCPMSS: Only works on TCP SYN packets [ 157.095711][ T5881] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 157.299091][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 157.309613][ T5881] usb 1-1: Product: syz [ 157.314083][ T5881] usb 1-1: Manufacturer: syz [ 157.319637][ T5881] usb 1-1: SerialNumber: syz [ 157.325861][ T5881] usb 1-1: config 0 descriptor?? [ 157.376074][ T5881] usb 1-1: can't set config #0, error -71 [ 157.391107][ T5881] usb 1-1: USB disconnect, device number 8 [ 157.759148][ T7367] program syz.0.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.380184][ T7371] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.341'. [ 158.389540][ T7371] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 160.248159][ T29] audit: type=1400 audit(1731189798.666:513): avc: denied { execute } for pid=7363 comm="syz.0.344" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 160.556799][ T7379] gfs2: path_lookup on c::: returned error -2 [ 161.103260][ T6717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.106687][ T29] audit: type=1400 audit(1731189799.276:514): avc: denied { watch } for pid=7380 comm="syz.3.347" path="/62" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.132850][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.139786][ T29] audit: type=1400 audit(1731189799.276:515): avc: denied { watch_sb watch_reads } for pid=7380 comm="syz.3.347" path="/62" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.162626][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.392482][ T6717] usb 2-1: Using ep0 maxpacket: 32 [ 161.406111][ T6717] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 161.414898][ T6717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.031263][ T7402] gfs2: path_lookup on c::: returned error -2 [ 162.072235][ T29] audit: type=1400 audit(1731189800.476:516): avc: denied { write } for pid=7397 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.075732][ T6717] usb 2-1: config 0 has no interface number 0 [ 162.100506][ T7404] overlayfs: unescaped trailing colons in lowerdir mount option. [ 162.102014][ T6717] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 47783, setting to 1024 [ 162.119533][ T6717] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 162.129942][ T6717] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.155458][ T6717] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.165040][ T6717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.307279][ T6717] usb 2-1: Product: syz [ 162.311559][ T6717] usb 2-1: Manufacturer: syz [ 162.316503][ T6717] usb 2-1: SerialNumber: syz [ 162.420298][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.421312][ T6717] usb 2-1: config 0 descriptor?? [ 162.436525][ T7376] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.462395][ T6717] smsc95xx v2.0.0 [ 162.466278][ T6717] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 162.593314][ T6717] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 162.632579][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 162.895094][ T5877] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 162.913844][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.933993][ T5877] usb 1-1: config 0 descriptor?? [ 163.847106][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 163.907402][ T5877] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 163.976642][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 163.985819][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.994319][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.120094][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.127860][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.305362][ T5908] usb 2-1: USB disconnect, device number 10 [ 164.462249][ T29] audit: type=1400 audit(1731189802.876:517): avc: denied { create } for pid=7426 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.182209][ T5877] gspca_sonixj: reg_w1 err -110 [ 165.187180][ T5877] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 165.198929][ T29] audit: type=1400 audit(1731189803.146:518): avc: denied { write } for pid=7426 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.371331][ T29] audit: type=1400 audit(1731189803.776:519): avc: denied { create } for pid=7440 comm="syz.4.363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.395994][ T29] audit: type=1400 audit(1731189803.776:520): avc: denied { mounton } for pid=7440 comm="syz.4.363" path="/78/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.492783][ T6717] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.583436][ T29] audit: type=1400 audit(1731189804.006:521): avc: denied { shutdown } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.602229][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.653465][ T6717] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.662638][ T6717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.671602][ T6717] usb 4-1: config 0 descriptor?? [ 165.762279][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 165.768761][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.779009][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 165.790522][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 165.800190][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.814419][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.823594][ T5908] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.831628][ T5908] usb 5-1: Manufacturer: syz [ 165.838263][ T5908] usb 5-1: config 0 descriptor?? [ 165.846873][ T5908] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 166.052181][ T29] audit: type=1400 audit(1731189804.466:522): avc: denied { write } for pid=7440 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.081641][ T6717] [drm] vendor descriptor length:6 data:06 5f 01 ff ff ff 76 83 14 93 05 [ 166.090294][ T6717] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 166.155678][ T5881] usb 5-1: USB disconnect, device number 8 [ 166.294211][ T6717] [drm:udl_init] *ERROR* Selecting channel failed [ 166.317846][ T6717] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 166.324765][ T6717] [drm] Initialized udl on minor 2 [ 166.331556][ T6717] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.340432][ T6717] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 166.356469][ T5841] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.366215][ T5841] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.374427][ T5841] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 166.381562][ T6717] usb 4-1: USB disconnect, device number 13 [ 166.418060][ T5881] usb 1-1: USB disconnect, device number 9 [ 166.969659][ T29] audit: type=1400 audit(1731189805.386:523): avc: denied { ioctl } for pid=7463 comm="syz.0.372" path="socket:[14791]" dev="sockfs" ino=14791 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.970241][ T29] audit: type=1400 audit(1731189805.386:524): avc: denied { write } for pid=7463 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 166.970441][ T29] audit: type=1400 audit(1731189805.386:525): avc: denied { read } for pid=7463 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 166.997745][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.090526][ T29] audit: type=1400 audit(1731189805.506:526): avc: denied { read } for pid=7463 comm="syz.0.372" path="socket:[14791]" dev="sockfs" ino=14791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.113475][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.143899][ T5908] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.156246][ T7468] fuse: Unknown parameter 'f‹0x0000000000000004' [ 167.172251][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 167.233761][ T29] audit: type=1400 audit(1731189805.656:527): avc: denied { read write } for pid=7473 comm="syz.4.376" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.260423][ T29] audit: type=1400 audit(1731189805.656:528): avc: denied { ioctl open } for pid=7473 comm="syz.4.376" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.342845][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 167.350652][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.367150][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.383588][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.407875][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.412239][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 167.424744][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.430293][ T5881] usb 4-1: config 0 descriptor?? [ 167.439384][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.444105][ T5881] hub 4-1:0.0: USB hub found [ 167.452845][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.829723][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.844506][ T5908] usb 3-1: config 0 descriptor?? [ 167.854633][ T5908] hub 3-1:0.0: USB hub found [ 167.862801][ T29] audit: type=1400 audit(1731189806.246:529): avc: denied { read } for pid=7473 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.459110][ T29] audit: type=1400 audit(1731189806.716:530): avc: denied { name_bind } for pid=7473 comm="syz.4.376" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 168.482096][ T5881] hub 4-1:0.0: 1 port detected [ 169.062407][ T5908] hub 3-1:0.0: 1 port detected [ 169.201145][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 169.211023][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.251042][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.320214][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.406099][ T7462] netlink: 88 bytes leftover after parsing attributes in process `syz.3.369'. [ 169.415560][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 169.440560][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.443111][ T7462] netlink: 88 bytes leftover after parsing attributes in process `syz.3.369'. [ 169.452564][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.569472][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 169.582567][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.609064][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.629619][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.638766][ T5909] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.646938][ T5909] usb 5-1: Manufacturer: syz [ 169.660495][ T5909] usb 5-1: config 0 descriptor?? [ 169.663683][ T7459] netlink: 88 bytes leftover after parsing attributes in process `syz.2.370'. [ 169.678908][ T7459] netlink: 88 bytes leftover after parsing attributes in process `syz.2.370'. [ 169.827209][ T5881] hub 4-1:0.0: activate --> -90 [ 170.007799][ T29] audit: type=1400 audit(1731189808.416:531): avc: denied { ioctl } for pid=7497 comm="syz.1.381" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.311361][ T5909] usb 4-1: USB disconnect, device number 14 [ 170.469930][ T5908] hub 3-1:0.0: activate --> -90 [ 170.722561][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'. [ 171.180911][ T5879] usb 5-1: USB disconnect, device number 9 [ 171.517941][ T5879] usb 3-1: USB disconnect, device number 10 [ 171.553485][ T7510] fuse: Unknown parameter 'f‹0x0000000000000004' [ 171.593485][ T7514] FAULT_INJECTION: forcing a failure. [ 171.593485][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 171.612190][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.1.384 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 171.622797][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.632854][ T7514] Call Trace: [ 171.636137][ T7514] [ 171.639058][ T7514] dump_stack_lvl+0x16c/0x1f0 [ 171.643728][ T7514] should_fail_ex+0x497/0x5b0 [ 171.648394][ T7514] should_failslab+0xc2/0x120 [ 171.653059][ T7514] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 171.658416][ T7514] ? skb_clone+0x190/0x3f0 [ 171.662831][ T7514] skb_clone+0x190/0x3f0 [ 171.667078][ T7514] netlink_deliver_tap+0xab3/0xd90 [ 171.672189][ T7514] netlink_dump+0xb2d/0xcc0 [ 171.676689][ T7514] ? __pfx_netlink_dump+0x10/0x10 [ 171.681700][ T7514] ? __pfx_lock_release+0x10/0x10 [ 171.686708][ T7514] ? __rhashtable_lookup.constprop.0+0x397/0x710 [ 171.693035][ T7514] ? netlink_lookup+0x259/0x520 [ 171.697875][ T7514] ? __pfx_netlink_lookup+0x10/0x10 [ 171.703064][ T7514] ? __dev_queue_xmit+0x872/0x4350 [ 171.708256][ T7514] __netlink_dump_start+0x6ca/0x970 [ 171.713448][ T7514] smc_diag_handler_dump+0x1fb/0x240 [ 171.718720][ T7514] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 171.724511][ T7514] ? trace_lock_acquire+0x14a/0x1d0 [ 171.729693][ T7514] ? __pfx_smc_diag_dump+0x10/0x10 [ 171.734804][ T7514] sock_diag_rcv_msg+0x437/0x790 [ 171.739748][ T7514] netlink_rcv_skb+0x16b/0x440 [ 171.744503][ T7514] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 171.749955][ T7514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.755242][ T7514] ? netlink_deliver_tap+0x1ae/0xd90 [ 171.760531][ T7514] netlink_unicast+0x53c/0x7f0 [ 171.765285][ T7514] ? __pfx_netlink_unicast+0x10/0x10 [ 171.770556][ T7514] ? const_folio_flags.constprop.0+0x56/0x150 [ 171.776617][ T7514] netlink_sendmsg+0x8b8/0xd70 [ 171.781375][ T7514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.786659][ T7514] ____sys_sendmsg+0xaaf/0xc90 [ 171.791428][ T7514] ? copy_msghdr_from_user+0x10b/0x160 [ 171.796870][ T7514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.802245][ T7514] ? __pfx___lock_acquire+0x10/0x10 [ 171.807435][ T7514] ___sys_sendmsg+0x135/0x1e0 [ 171.812105][ T7514] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.817308][ T7514] ? lock_acquire+0x2f/0xb0 [ 171.821803][ T7514] ? __fget_files+0x40/0x3f0 [ 171.826395][ T7514] ? fdget+0x176/0x210 [ 171.830458][ T7514] __sys_sendmsg+0x117/0x1f0 [ 171.835035][ T7514] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.840129][ T7514] ? __fget_files+0x244/0x3f0 [ 171.844808][ T7514] do_syscall_64+0xcd/0x250 [ 171.849296][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.855179][ T7514] RIP: 0033:0x7f9da797e719 [ 171.859576][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.879168][ T7514] RSP: 002b:00007f9da871e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.887562][ T7514] RAX: ffffffffffffffda RBX: 00007f9da7b36058 RCX: 00007f9da797e719 [ 171.895516][ T7514] RDX: 0000000000000600 RSI: 0000000020000540 RDI: 0000000000000003 [ 171.903468][ T7514] RBP: 00007f9da871e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.911432][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.919558][ T7514] R13: 0000000000000001 R14: 00007f9da7b36058 R15: 00007fff411a3e18 [ 171.927542][ T7514] [ 171.930632][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.985538][ T7520] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 171.993576][ T7520] audit: out of memory in audit_log_start [ 171.994867][ T29] audit: type=1400 audit(1731189810.406:532): avc: denied { create } for pid=7518 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.050221][ T29] audit: type=1400 audit(1731189810.466:533): avc: denied { write } for pid=7523 comm="syz.4.391" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.055722][ T7524] binder: BINDER_SET_CONTEXT_MGR already set [ 172.090773][ T7525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.101805][ T7524] binder: 7523:7524 ioctl 4018620d 20000040 returned -16 [ 172.125272][ T7519] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 172.139408][ T7519] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.388'. [ 172.980194][ T29] audit: type=1400 audit(1731189811.396:534): avc: denied { read } for pid=7521 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.291094][ T7548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.342850][ T29] audit: type=1400 audit(1731189811.766:535): avc: denied { getopt } for pid=7521 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.363662][ T7531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 173.370253][ T7531] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.385043][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 173.458157][ T7531] vhci_hcd vhci_hcd.0: Device attached [ 173.480272][ T7555] process 'syz.3.395' launched './file0' with NULL argv: empty string added [ 173.560661][ T7552] vhci_hcd: connection closed [ 173.562985][ T1103] vhci_hcd: stop threads [ 173.565058][ T29] audit: type=1400 audit(1731189811.986:536): avc: denied { execute_no_trans } for pid=7554 comm="syz.3.395" path="/70/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.571167][ T1103] vhci_hcd: release socket [ 173.743320][ T1103] vhci_hcd: disconnect device [ 173.750177][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 173.785019][ T5877] usb 36-1: SetAddress Request (2) to port 0 [ 173.791330][ T5877] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 173.832449][ T5877] usb 36-1: enqueue for inactive port 0 [ 173.876829][ T29] audit: type=1400 audit(1731189812.296:537): avc: denied { ioctl } for pid=7568 comm="syz.4.398" path="socket:[14972]" dev="sockfs" ino=14972 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.029822][ T53] Bluetooth: hci4: link tx timeout [ 174.035384][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.157371][ T29] audit: type=1400 audit(1731189812.576:538): avc: denied { read } for pid=7573 comm="syz.0.400" path="socket:[14982]" dev="sockfs" ino=14982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.180599][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.411319][ T5877] usb usb36-port1: attempt power cycle [ 174.455982][ T7580] FAULT_INJECTION: forcing a failure. [ 174.455982][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 174.470013][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.3.401 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 174.480613][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.490673][ T7580] Call Trace: [ 174.493953][ T7580] [ 174.496870][ T7580] dump_stack_lvl+0x16c/0x1f0 [ 174.501536][ T7580] should_fail_ex+0x497/0x5b0 [ 174.506199][ T7580] ? fs_reclaim_acquire+0xae/0x150 [ 174.511301][ T7580] should_failslab+0xc2/0x120 [ 174.515971][ T7580] __kmalloc_noprof+0xcb/0x400 [ 174.520732][ T7580] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 174.526355][ T7580] tomoyo_realpath_from_path+0xb9/0x720 [ 174.531890][ T7580] ? tomoyo_path_number_perm+0x232/0x590 [ 174.537505][ T7580] tomoyo_path_number_perm+0x245/0x590 [ 174.542948][ T7580] ? tomoyo_path_number_perm+0x232/0x590 [ 174.548567][ T7580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.554544][ T7580] ? trace_lock_acquire+0x14a/0x1d0 [ 174.559729][ T7580] ? lock_acquire+0x2f/0xb0 [ 174.564211][ T7580] ? __fget_files+0x40/0x3f0 [ 174.568792][ T7580] ? __fget_files+0x244/0x3f0 [ 174.573458][ T7580] security_file_ioctl+0x9b/0x240 [ 174.578554][ T7580] __x64_sys_ioctl+0xbb/0x220 [ 174.583219][ T7580] do_syscall_64+0xcd/0x250 [ 174.587708][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.593587][ T7580] RIP: 0033:0x7fd03757e719 [ 174.597983][ T7580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.617571][ T7580] RSP: 002b:00007fd0382cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.625968][ T7580] RAX: ffffffffffffffda RBX: 00007fd037736058 RCX: 00007fd03757e719 [ 174.633922][ T7580] RDX: 0000000020000740 RSI: 00000000c4c85513 RDI: 0000000000000008 [ 174.641875][ T7580] RBP: 00007fd0382cb090 R08: 0000000000000000 R09: 0000000000000000 [ 174.649825][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.657777][ T7580] R13: 0000000000000000 R14: 00007fd037736058 R15: 00007ffc9d0f4438 [ 174.665738][ T7580] [ 174.668783][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.674987][ T7580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.662798][ T5877] usb usb36-port1: unable to enumerate USB device [ 175.675779][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 175.682115][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 175.691834][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 175.698355][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 175.713608][ T7595] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 175.721451][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 176.125306][ T5832] Bluetooth: hci4: link tx timeout [ 176.130535][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.147537][ T5832] ================================================================== [ 176.155610][ T5832] BUG: KASAN: slab-use-after-free in hci_disconnect+0x207/0x220 [ 176.163238][ T5832] Read of size 8 at addr ffff8880637d8038 by task kworker/u9:3/5832 [ 176.171202][ T5832] [ 176.173513][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 176.184346][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.194389][ T5832] Workqueue: hci4 hci_tx_work [ 176.199066][ T5832] Call Trace: [ 176.202332][ T5832] [ 176.205254][ T5832] dump_stack_lvl+0x116/0x1f0 [ 176.209923][ T5832] print_report+0xc3/0x620 [ 176.214336][ T5832] ? __virt_addr_valid+0x5e/0x590 [ 176.219353][ T5832] ? __phys_addr+0xc6/0x150 [ 176.223849][ T5832] kasan_report+0xd9/0x110 [ 176.228259][ T5832] ? hci_disconnect+0x207/0x220 [ 176.233100][ T5832] ? hci_disconnect+0x207/0x220 [ 176.237941][ T5832] hci_disconnect+0x207/0x220 [ 176.242607][ T5832] ? __pfx_hci_disconnect+0x10/0x10 [ 176.247796][ T5832] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 176.253604][ T5832] ? __rcu_read_unlock+0x2b4/0x580 [ 176.258728][ T5832] __check_timeout+0x3ed/0x720 [ 176.263488][ T5832] ? __check_timeout+0x3ce/0x720 [ 176.268421][ T5832] ? __pfx___check_timeout+0x10/0x10 [ 176.273702][ T5832] hci_tx_work+0x6e3/0x1410 [ 176.278204][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.283829][ T5832] ? trace_lock_acquire+0x14a/0x1d0 [ 176.289022][ T5832] ? __pfx_hci_tx_work+0x10/0x10 [ 176.293958][ T5832] ? lock_acquire+0x2f/0xb0 [ 176.298450][ T5832] ? process_one_work+0x921/0x1ba0 [ 176.303551][ T5832] process_one_work+0x9c5/0x1ba0 [ 176.308488][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.314123][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 176.319487][ T5832] ? assign_work+0x1a0/0x250 [ 176.324058][ T5832] worker_thread+0x6c8/0xf00 [ 176.328619][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 176.333722][ T5832] kthread+0x2c1/0x3a0 [ 176.333748][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.333772][ T5832] ? __pfx_kthread+0x10/0x10 [ 176.333793][ T5832] ret_from_fork+0x45/0x80 [ 176.333809][ T5832] ? __pfx_kthread+0x10/0x10 [ 176.333830][ T5832] ret_from_fork_asm+0x1a/0x30 [ 176.333859][ T5832] [ 176.333866][ T5832] [ 176.333870][ T5832] Allocated by task 5844: [ 176.333879][ T5832] kasan_save_stack+0x33/0x60 [ 176.333896][ T5832] kasan_save_track+0x14/0x30 [ 176.333913][ T5832] __kasan_kmalloc+0xaa/0xb0 [ 176.333927][ T5832] __hci_conn_add+0x131/0x1a50 [ 176.333949][ T5832] hci_conn_add_unset+0x6d/0x100 [ 176.333971][ T5832] le_conn_complete_evt+0x790/0x1d80 [ 176.333991][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 176.334011][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 176.334032][ T5832] hci_event_packet+0x666/0x1180 [ 176.334051][ T5832] hci_rx_work+0x2c6/0x16c0 [ 176.334072][ T5832] process_one_work+0x9c5/0x1ba0 [ 176.334087][ T5832] worker_thread+0x6c8/0xf00 [ 176.334100][ T5832] kthread+0x2c1/0x3a0 [ 176.334118][ T5832] ret_from_fork+0x45/0x80 [ 176.334132][ T5832] ret_from_fork_asm+0x1a/0x30 [ 176.334153][ T5832] [ 176.334157][ T5832] Freed by task 5151: [ 176.334164][ T5832] kasan_save_stack+0x33/0x60 [ 176.334180][ T5832] kasan_save_track+0x14/0x30 [ 176.334195][ T5832] kasan_save_free_info+0x3b/0x60 [ 176.334218][ T5832] __kasan_slab_free+0x51/0x70 [ 176.334235][ T5832] kfree+0x14f/0x4b0 [ 176.334250][ T5832] device_release+0xa1/0x240 [ 176.334269][ T5832] kobject_put+0x1e4/0x5a0 [ 176.334286][ T5832] device_unregister+0x2f/0xc0 [ 176.334308][ T5832] hci_conn_del_sysfs+0xb4/0x180 [ 176.334331][ T5832] hci_conn_del+0x54e/0xdb0 [ 176.334354][ T5832] hci_abort_conn_sync+0x75a/0xb50 [ 176.334379][ T5832] abort_conn_sync+0x197/0x360 [ 176.334399][ T5832] hci_cmd_sync_work+0x1a4/0x410 [ 176.334423][ T5832] process_one_work+0x9c5/0x1ba0 [ 176.334437][ T5832] worker_thread+0x6c8/0xf00 [ 176.334451][ T5832] kthread+0x2c1/0x3a0 [ 176.334469][ T5832] ret_from_fork+0x45/0x80 [ 176.334483][ T5832] ret_from_fork_asm+0x1a/0x30 [ 176.334505][ T5832] [ 176.334509][ T5832] The buggy address belongs to the object at ffff8880637d8000 [ 176.334509][ T5832] which belongs to the cache kmalloc-8k of size 8192 [ 176.334523][ T5832] The buggy address is located 56 bytes inside of [ 176.334523][ T5832] freed 8192-byte region [ffff8880637d8000, ffff8880637da000) [ 176.334540][ T5832] [ 176.334544][ T5832] The buggy address belongs to the physical page: [ 176.334550][ T5832] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x637d8 [ 176.334565][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.334579][ T5832] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 176.334594][ T5832] page_type: f5(slab) [ 176.334609][ T5832] raw: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 176.334624][ T5832] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 176.334639][ T5832] head: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 176.334653][ T5832] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 176.334668][ T5832] head: 00fff00000000003 ffffea00018df601 ffffffffffffffff 0000000000000000 [ 176.334686][ T5832] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 176.334695][ T5832] page dumped because: kasan: bad access detected [ 176.334702][ T5832] page_owner tracks the page as allocated [ 176.334707][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (kworker/u9:8), ts 53119209995, free_ts 10980497560 [ 176.334735][ T5832] post_alloc_hook+0x2d1/0x350 [ 176.334752][ T5832] get_page_from_freelist+0xf7d/0x2d10 [ 176.334769][ T5832] __alloc_pages_noprof+0x223/0x25a0 [ 176.334785][ T5832] alloc_pages_mpol_noprof+0x2c9/0x610 [ 176.334805][ T5832] new_slab+0x2c9/0x410 [ 176.334817][ T5832] ___slab_alloc+0xdac/0x1880 [ 176.334830][ T5832] __slab_alloc.constprop.0+0x56/0xb0 [ 176.334845][ T5832] __kmalloc_cache_noprof+0x2b4/0x300 [ 176.334859][ T5832] __hci_conn_add+0x131/0x1a50 [ 176.334877][ T5832] hci_conn_add_unset+0x6d/0x100 [ 176.334897][ T5832] le_conn_complete_evt+0x790/0x1d80 [ 176.334915][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 176.334933][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 176.334953][ T5832] hci_event_packet+0x666/0x1180 [ 176.334970][ T5832] hci_rx_work+0x2c6/0x16c0 [ 176.334990][ T5832] process_one_work+0x9c5/0x1ba0 [ 176.335004][ T5832] page last free pid 1 tgid 1 stack trace: [ 176.335013][ T5832] free_unref_page+0x5f4/0xdc0 [ 176.335030][ T5832] free_contig_range+0x135/0x3f0 [ 176.335048][ T5832] destroy_args+0xa87/0xe60 [ 176.335063][ T5832] debug_vm_pgtable+0x168e/0x31a0 [ 176.335079][ T5832] do_one_initcall+0x128/0x700 [ 176.335098][ T5832] kernel_init_freeable+0x5c7/0x900 [ 176.335113][ T5832] kernel_init+0x1c/0x2b0 [ 176.335128][ T5832] ret_from_fork+0x45/0x80 [ 176.335140][ T5832] ret_from_fork_asm+0x1a/0x30 [ 176.335160][ T5832] [ 176.335164][ T5832] Memory state around the buggy address: [ 176.335172][ T5832] ffff8880637d7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.335183][ T5832] ffff8880637d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.335194][ T5832] >ffff8880637d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.335202][ T5832] ^ [ 176.335211][ T5832] ffff8880637d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.335221][ T5832] ffff8880637d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.335229][ T5832] ================================================================== [ 176.335274][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.340466][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.340478][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 176.340499][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.340509][ T5832] Workqueue: hci4 hci_tx_work [ 176.340535][ T5832] Call Trace: [ 176.340540][ T5832] [ 176.340547][ T5832] dump_stack_lvl+0x3d/0x1f0 [ 176.340565][ T5832] panic+0x71d/0x800 [ 176.340588][ T5832] ? __pfx_panic+0x10/0x10 [ 176.340610][ T5832] ? irqentry_exit+0x3b/0x90 [ 176.340635][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.340660][ T5832] ? preempt_schedule_thunk+0x1a/0x30 [ 176.340687][ T5832] ? preempt_schedule_common+0x44/0xc0 [ 176.340711][ T5832] ? check_panic_on_warn+0x1f/0xb0 [ 176.340737][ T5832] check_panic_on_warn+0xab/0xb0 [ 176.340761][ T5832] end_report+0x117/0x180 [ 176.340781][ T5832] kasan_report+0xe9/0x110 [ 176.340801][ T5832] ? hci_disconnect+0x207/0x220 [ 176.340818][ T5832] ? hci_disconnect+0x207/0x220 [ 176.340836][ T5832] hci_disconnect+0x207/0x220 [ 176.340853][ T5832] ? __pfx_hci_disconnect+0x10/0x10 [ 176.340869][ T5832] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 176.340894][ T5832] ? __rcu_read_unlock+0x2b4/0x580 [ 176.340921][ T5832] __check_timeout+0x3ed/0x720 [ 176.340943][ T5832] ? __check_timeout+0x3ce/0x720 [ 176.340966][ T5832] ? __pfx___check_timeout+0x10/0x10 [ 176.340990][ T5832] hci_tx_work+0x6e3/0x1410 [ 176.341014][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.341032][ T5832] ? trace_lock_acquire+0x14a/0x1d0 [ 176.341054][ T5832] ? __pfx_hci_tx_work+0x10/0x10 [ 176.341077][ T5832] ? lock_acquire+0x2f/0xb0 [ 176.341091][ T5832] ? process_one_work+0x921/0x1ba0 [ 176.341109][ T5832] process_one_work+0x9c5/0x1ba0 [ 176.341127][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.341144][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 176.341164][ T5832] ? assign_work+0x1a0/0x250 [ 176.341189][ T5832] worker_thread+0x6c8/0xf00 [ 176.341210][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 176.341226][ T5832] kthread+0x2c1/0x3a0 [ 176.341244][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.341267][ T5832] ? __pfx_kthread+0x10/0x10 [ 176.341288][ T5832] ret_from_fork+0x45/0x80 [ 176.341304][ T5832] ? __pfx_kthread+0x10/0x10 [ 176.341324][ T5832] ret_from_fork_asm+0x1a/0x30 [ 176.341352][ T5832] [ 176.341545][ T5832] Kernel Offset: disabled