last executing test programs: 13.087180957s ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2880, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000640)={0x80000000, &(0x7f0000000580), &(0x7f00000005c0)=[{{0x80000000}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028300000000c0a01010000000000000000070000000900040073797a31000000000900010073797a3000000000040003"], 0x65d0}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000302db1535e0001800a0001006c696d69740000001c0002800c00014000000000000000040c00024000000000000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000000c0)={r5, &(0x7f000000a2c0)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x3, 0x0, &(0x7f0000000680)=[{}, {0x80000000}, {}], 0x7, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000d40)={{r2, r7, 0x2, [0x3c, 0x7]}, {r8, 0x0, 0x1, [0x10000, 0x9]}, 0x1, [0x101, 0xe]}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r10, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f0000000280)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendto$inet6(r10, &(0x7f0000000080)="17", 0xfffffffffffffed7, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_VM_TYPES(r9, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r13, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 11.437425495s ago: executing program 4 (id=204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20048084}, 0x4000040) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='mqueue\x00', 0x0, &(0x7f00000001c0)='\x01') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e00000000000000000008000300030000001400038010000380"], 0x48}}, 0x0) request_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000006c0)=@known='user.syz\x00') sigaltstack(&(0x7f0000000040)={0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000380)) fchown(r0, r6, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="20000000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="050006000000000008000100", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) 11.283274569s ago: executing program 2 (id=205): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/75, 0x4b, 0x3) sendfile(r1, r1, 0x0, 0x401) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0) r7 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r8, r7, 0x0, 0x5) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b9901020301090224000100000000090400"], 0x0) 9.076535861s ago: executing program 3 (id=208): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xb, 0x3, 0x1, 0xffffffffffffffea}, @printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@sr0, 0x0, &(0x7f0000000380)='./file0\x00') setregid(0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0xffffffffffffff9d}, 0x68) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaea0180c200000086dd6000400000140600fe88000000000000000001fe8000000000000000000000000000aa4e2400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 9.040943735s ago: executing program 1 (id=209): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x2007, &(0x7f0000000200)=0x0) r5 = eventfd2(0xe2f4, 0x80801) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000c00)={0x0, 0x400, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, {}, {0x20000}, {}, {0x0, 0x3, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}) 8.266260439s ago: executing program 4 (id=211): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) unlinkat(r2, &(0x7f0000000480)='./bus\x00', 0x200) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000400)={0x2, @sliced={0xff21, [0x5, 0x2, 0x7ff, 0x2, 0x7, 0x9, 0x3, 0x361, 0x8a81, 0x1618, 0x2, 0x7, 0x0, 0x866, 0x5, 0x6, 0xc, 0x4, 0x4, 0x2, 0x1, 0x8, 0x4, 0x3, 0x0, 0x7, 0x1ff, 0x2, 0xa190, 0x2, 0x8, 0x3, 0x8001, 0xe, 0xff, 0x81, 0x3ff, 0x4, 0x3ff, 0x8, 0xa, 0x5, 0xc2, 0x5, 0x2, 0x3, 0x80, 0xb], 0x5}}) r7 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x5aa7, 0x10100, 0x2, 0x1a4}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x20, 0x4007, @fd=r3, 0x4, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x5113, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x31, 0x0, 0x70bd29, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x4044880) r11 = getpid() r12 = getpgid(0xffffffffffffffff) sched_setscheduler(r12, 0x1, &(0x7f0000000200)=0x6) sched_getscheduler(r11) 8.207672483s ago: executing program 3 (id=212): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000055d0ecebfe86a35dcf7ee66a8ff01559f2b7b8cc02cf83548c54893cb49e04af5b76bf764573c9f7e83217f199db90c0e4b7fee1af9da3c4b1c1016566725dddd66234a1be"], 0x48) r2 = dup(0xffffffffffffffff) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) write$FUSE_BMAP(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000001afc1801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x2, 0x0) write$bt_hci(r6, &(0x7f0000000200)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x10, 0xf, 0x8001, 0xef8, 0x0, 0x6}, {0x0, 0x5, 0x4, 0x80000001, 0x3, 0x5}}}}, 0x25) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 7.738457153s ago: executing program 1 (id=213): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x13) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300000000000001000b000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4040}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x22) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000280)={0xc}) 7.593920631s ago: executing program 0 (id=214): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x2007, &(0x7f0000000200)=0x0) r5 = eventfd2(0xe2f4, 0x80801) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000c00)={0x0, 0x400, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, {}, {0x20000}, {}, {0x0, 0x3, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}) 7.411313581s ago: executing program 4 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="7ca7ed7a47f9c749d827891f6fdddea6fb43316c75cc689fe02860747cfb8dadb2b8f651f6d07a9a088fc100325854cf1bd638364d8d41761453a1ee7cf4f2cac5b62a75470423e0632d3baad77b22b9bff8c3280a6f730521bfa68f8be92a9337cee67d035f0b468744036438558c248a6880c97a22b3d6063281550c6b581f2aa41717a05c2c0a45269e5d5107bd875d04b2e857d95ffd5683fe02e730a76b6cf308f5b36e9e2d5bed502b484119d687", 0xb1}], 0x1, 0x0, 0x0, 0x6ca32db25b91d1da}, 0x4044010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000180)=@llc={0x1a, 0x10f, 0x7c, 0x4, 0x5, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="1bd0249a53f89a2234ffaff8c5021025264c175be553513cf72c058802a01b0ba45c49c1cfc0ab61115102adfb099add2f38ad796e15abfc60d46f5f28cf09ea41fad11735ed507a4856cc331f685cc42a4dda079bf26d1e4bb24d9e7c324257be48bc201ea0e668bf69965c23c110577cb76ba018cde4ae9b93680ece808a02812db9b808f4e1ce33f0abf3d6fdb275f1569ed10e669e8a40af21e33c042ec4a675b3349738420f", 0xa8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000e30000000000ac82b70000000000"], 0x18}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000000724d18590c4383ae6df494e6fb534ed432260f0f0ede681a7b0be893930c46e6a24d155f4533d3986dcf8a8ca32bbcab24c65b3dd6adb96e8297c2348b11117a6800f46d28b2297213b84965b48feb55f9195677134550b911ef74893be77ba31241f958c6c8a1d1b448c301a9b53efc4c5e8ba959acc7c90617b67b08390b17242349aa81a7c444f5f93eda8f55429109bbbd1afefdf350700f33551359af0d871bfcc32f43b8bcbd8de8a017267dc77f615cc42f1aef4a04be5df859e6ab465e917395442", @ANYRES32=0x0, @ANYBLOB="35d9ac88a8600000180012800e00010069703665727370616e000000040002800a0001000000000000000000"], 0x44}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.581894792s ago: executing program 1 (id=216): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) lremovexattr(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x69) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a20000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082dbd7000fddbdf25010000000900010073797a30000000000900030073797a32000000000500040002000000140002006970727370616e30000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 6.390268529s ago: executing program 3 (id=217): r0 = socket$kcm(0x21, 0x2, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000440)) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/140, 0x8c}, 0x140) 6.337695791s ago: executing program 2 (id=218): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x81, 0x5, 0x2, 0x400, 0x7, "8a21d276e62c5ecf"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) io_setup(0x3fe, &(0x7f0000000100)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000440)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/140, 0x8c}, 0x140) 6.187176492s ago: executing program 4 (id=219): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x93742000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) request_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000480)="c8677b1aec91c6f4657cce2994736f31bb2c7c5d23f33a1b3c73f1f379a6097521a1f754e349d1d0a0e3af23f263de714b0165c7e6f924936d1471510b13403b0531e9", 0x43, 0x20000845, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty, 0xea26c4a}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500)) statx(r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x11e0, 0x34, 0x406, 0x70bd25, 0x25dfdbff, {0x1e}, [@generic="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", @nested={0x1cb, 0x4a, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xa0, 0x0, 0x0, @uid=r4}, @generic="f48a6e968d8e225f5390f354989d4d4ca1e275b553c3678a2ed74b3867479e448aa0defccb7435c0d73232", @nested={0x4, 0xf3}, @generic="724fe78965f9011db7cfec1f6fe03ad052963809440e963421dafdca038b3bdd6b9497cf2045f2c7c16bc9b19abba4f011f0ee488e03da026724044a863746c09105fe7f639fd8205c40141ee883c10ec634741e2e30a4685e914295d2c0de4817550c4f694629f7314eb7ca67a68172ba78e5c10adcf9c54869af173690c95972c22f290115ef9ac899080070cb41ac0cfe3f2af102274b8ae5321b948f38e01d1b5d7b742d5db0", @generic="c8e8f79f107bbcd93f68b0fa2de8771cd14fe0de0b473293077e2409cb0346b384bc11888d04ac8854110574fac5e4eeaffd6cb89d4cbd2e5e95cbceed74be3a431850e275fd0d887cbca594a06d2f23db16d1797b7b12be452e01fbbfdc93862d9289b9b589ef8c4697104e0d0b2012ad24cd0f78a160d75e2f477defb89c9f4c2d774e03bd2ee395e0d3746e0b3752220e3098534ca263cd38b4d489a58bc7cd784335500a41d619ea00ddfc9f238f611156b2d50b6e663762ccb3870e7bdd14557a8f5eb270aae86517ee", @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private2}]}]}, 0x11e0}}, 0x20000000) shutdown(r3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x1, 0x0, 0x9, 0x5a1}, 0x9c) sendmmsg$inet6(r3, &(0x7f0000002c00)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x104, @empty, 0xa3}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000000200)='6', 0x1}], 0x1}}], 0x1, 0x20000000) 5.431348326s ago: executing program 1 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) getresuid(0x0, 0x0, &(0x7f0000000300)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x24048880) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = semget$private(0x0, 0x3, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_settime(0xa, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.178209639s ago: executing program 1 (id=221): setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x8001, 0x3e8}, 0x10) 4.155905112s ago: executing program 0 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000280)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x0, 0x4, 0x4, 0x1}}, 0x2e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x0, 0x110000}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x10100) pipe2(0x0, 0x0) r5 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r6, 0xfffffffffffffc01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r5, 0x8, &(0x7f0000000000)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) 4.087074628s ago: executing program 2 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x2007, &(0x7f0000000200)=0x0) r5 = eventfd2(0xe2f4, 0x80801) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000c00)={0x0, 0x400, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, {}, {0x20000}, {}, {0x0, 0x3, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}) 4.081716809s ago: executing program 4 (id=224): socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) syz_usb_connect(0x2, 0x44f, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1201000202c23610c50f2712131e0102030109023d0402078110030904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 4.0419721s ago: executing program 3 (id=225): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x2007, &(0x7f0000000200)=0x0) r5 = eventfd2(0xe2f4, 0x80801) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000c00)={0x0, 0x400, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, {}, {0x20000}, {}, {0x0, 0x3, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}) 2.806919199s ago: executing program 0 (id=226): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r4, 0x800000000010d, 0x8000000011, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) sync() sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000845) 2.556875857s ago: executing program 3 (id=227): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) lremovexattr(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x69) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a20000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082dbd7000fddbdf25010000000900010073797a30000000000900030073797a32000000000500040002000000140002006970727370616e30000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1.872604649s ago: executing program 2 (id=228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x18, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7, 0x0, 0x0, @void, @value}, 0x10) 1.785823512s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000018500000086000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0xff7ffbffdffffffc}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x1, &(0x7f0000000100)=0x304, 0x17) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c8021f6", @ANYRES16=r4, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32=r6, @ANYBLOB="20001d801c000080060005002c00000005000b000000000005000c0000000000"], 0x3c}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) r7 = socket$isdn_base(0x22, 0x3, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) 1.4912035s ago: executing program 1 (id=230): syz_usb_connect(0x3, 0x49, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xcd, 0xb4, 0x58, 0x40, 0x157e, 0x3006, 0xa5d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x40, 0x3, 0x20, 0x6, [{{0x9, 0x4, 0x4f, 0x2, 0x1, 0x5, 0xe3, 0xa7, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xc, 0xf1ef, 0x62}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x40, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x4, 0x3, 0xff, 0xfd}, 0xb6, &(0x7f00000003c0)={0x5, 0xf, 0xb6, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "9f1163265c6ad2dbb5fe8ecc1ea69719"}, @generic={0x9d, 0x10, 0xa, "e6cef2e73d51bd9b8d21b12d46bdd9e045c717a90fca1491ebf036894f6ea8781c771fe6d22f7edd1c7d9729ca3943276d2faa5fdeb8b984582a4eff6ae62e8cf40262759249707900ca7e14e36651ccf4f030821312e9ea88693cccbc2555196494f73878f915982b35be7399dee9f840b833b6b5099f809cde03713be491e00882077aea18dba8880be803243580ddb173975fa362476a7ef4"}]}, 0x6, [{0x8a, &(0x7f0000000480)=@string={0x8a, 0x3, "96fcb98c8fae31e1051b3edb55e8cb844e482e34055a20058a8e3d74bc0c76694f4f7ef06155132b00dec707a2624ca25c7233a64c899e29a7e849e78bed420e8dc957c8b9e9ef63b4a3160ae129054e2d1a203525ef93e55bc913355696b0aa08cb4d7285182f8e819979cada60783f09f1fb6326b08263a64718455d57d9227d169775a6d22fc2"}}, {0xbe, &(0x7f0000000540)=@string={0xbe, 0x3, "304c8579f9bf91d17e480f86ff0cafca7f76e5868a8b911927b828eecca9c25a9680f6dae07105f0fb54e078f603a2e35403f5dda6ebfd7ef8f0387d9e67ca5ce17729d1a9d4c9646aab794ae66831a0dabc072476a2b98f720e1d345697c82cfb2f573e596890af7bcdbd165962b8fb6e8aa9e66b767600ecf3c69625c977ae831e5de3405917783698d0f66c01a26ea3d891fefb6785ed4bd6b83fb85995e356363d39536541f6db25d423178d273f4f29136df09be0958fd4d926"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2009}}, {0x2b, &(0x7f0000000640)=@string={0x2b, 0x3, "0dcbebae985be902f2774d4502a759f7581b2f3f7fb5d876980ddeda5c92b65e8e045ac8203e662e23"}}, {0x3c, &(0x7f0000000680)=@string={0x3c, 0x3, "673f11e429e9d102db6c78cfcd9156aebe3ede7475312573c8bca29868637260bdcf952d19e820e926681a9c5b2ce41556aa37b1406b78a1e504"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x7c0b}}]}) r0 = semget(0x3, 0x4, 0x280) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000a00)=""/4096) openat$audio1(0xffffffffffffff9c, &(0x7f0000001a00), 0x200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x58, &(0x7f0000002000)}, 0x10) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000002100)={0x1}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000002140)={0x0, 0x203e, 0x4000, 0x0, 0x234}, 0x1) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000021c0), &(0x7f0000002200)=0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000023c0)=0x4) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000002440)={'\x00', 0x8, 0x3ff, 0xd, 0x0, 0x5, 0x8080000, 0x80a0000, '\x00', 0x7}) clock_gettime(0x0, &(0x7f0000002640)={0x0, 0x0}) semtimedop(r0, &(0x7f0000002600)=[{0x0, 0x2}, {0x1, 0x9b}], 0x2, &(0x7f0000002680)={r1, r2+10000000}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000026c0)={0x8001, 0x1, 0x7, 0x8da}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002700)=""/12, 0xc}], 0x1, &(0x7f0000002780)=""/73, 0x49}, 0x3}, {{&(0x7f0000002800)=@alg, 0x80, &(0x7f0000003880)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000038c0)=""/101, 0x65}, 0x3a}, {{&(0x7f0000003940), 0x80, &(0x7f0000003a80)=[{&(0x7f00000039c0)=""/105, 0x69}, {&(0x7f0000003a40)}], 0x2}, 0x1000}, {{&(0x7f0000003ac0)=@caif=@util, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003b40)=""/112, 0x70}, {&(0x7f0000003bc0)=""/206, 0xce}], 0x2, &(0x7f0000003d00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d80)=""/118, 0x76}, {&(0x7f0000004e00)=""/29, 0x1d}], 0x2}, 0x2}, {{&(0x7f0000004e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004f00)=""/59, 0x3b}], 0x1}, 0x101}, {{&(0x7f0000004f80)=@can, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005000)=""/230, 0xe6}, {&(0x7f0000005100)=""/135, 0x87}], 0x2, &(0x7f0000005200)=""/228, 0xe4}, 0x7}, {{&(0x7f0000005300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005380)=""/166, 0xa6}], 0x1}, 0x40}], 0x8, 0x40012002, &(0x7f00000056c0)) 897.543088ms ago: executing program 0 (id=231): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x81, 0x5, 0x2, 0x400, 0x7, "8a21d276e62c5ecf"}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000440)) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/140, 0x8c}, 0x140) 849.936232ms ago: executing program 3 (id=232): r0 = fanotify_init(0x4, 0x0) (async) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) (async) r2 = dup(r1) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0x42, 0x4, 0x290, 0xffffffff, 0x160, 0x0, 0x160, 0xffffffff, 0xffffffff, 0x1f8, 0x1f8, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@addrtype={{0x30}, {0x82, 0x1, 0x0, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) fanotify_mark(r0, 0x200, 0x8000029, r2, 0x0) (async) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) io_setup(0x9, &(0x7f0000000080)=0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) (async) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe}, &(0x7f00000000c0), &(0x7f0000000040)=0x0) (async) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}) (async) io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0) r9 = epoll_create1(0x0) setsockopt(r3, 0x7, 0x7, &(0x7f00000003c0)="1ba1c0d63deaa45c4af0f0cb2c48a7f25f3a384299c6aca17b4ec9eafa4512dd15e2696ea2984ecfec68ec11cd7feab83534f557437866b6b5edbe3d00cb66db002f8e49f71360691ce7ad1e136d0fa5ee015c5b6fcb3fd64375114eb4848fb2a8a72e4861462ebce6e0021bddeb806962a7850a892bda213e431d3c533fc0395d861484040034f791657d44e66b0fff7d5b112affc86cf31985159c7beb582ca615b5ae3d96ea36e24ba66e867010d58afdbf0d358f5d33115a822b258b5ed8c94e62bb66eb1558e92c1483703fe9fab120723e11f94d5c188d00f2efc7deb775b4ecc613181077", 0xe8) (async) r10 = eventfd2(0x8000, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000b80)={0xa0001011}) (async) io_submit(r5, 0x2, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) (async) io_submit(r5, 0x3, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0xbbe0, r1, &(0x7f0000000100)="46866f43fc0e20e3bb6272a6b826eaf40ea44295822fae0eed7091d6ce8e9b3270329d881b4b6fd1e7e8b55fe735fd8c7d7f9914ec453da880a5a71f19fbef909f7dd3fe7ff2063aacc6578a0996b8aa673965b347299e810b7ac74eb1c39eb9f54f01cef9cf5373f9f481ac2936a7e03ddfd8f55f13ec3099c292710c4a16fea105ad", 0x83, 0xabe8, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000200)="54cdc5d88cb29ede9eb8157e2d0e51fcb7d2d15dbbb41cd9e36a77f70d67a35b5d1652469694ffc7259d6669cf066e8abc9be20983360654f5be1f7f3fa20292ef7c6621dabb3f1d37b6e7523da8b9af97266130c9f4231b32c37e60645199118f99f81919993197201a2fe7d2aedca19d1d11414a60fe3cd9345d094515cf262de8d53d8530de51e3bf4bdf97b819811a2aad778fbac7b4f50834d3b12dcd625d4ad790", 0xa4, 0xd80b, 0x0, 0x3, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000300)="74a2e37cfd21319c5f3c94b65aa028951b995150ac8e62a5fe4f6c752044eb80eb0fb69d57f865942a", 0x29, 0x1, 0x0, 0x3}]) keyctl$read(0x2, r4, &(0x7f0000001940)=""/4077, 0xfed) 263.116567ms ago: executing program 2 (id=233): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = msgget(0x2, 0x28) msgctl$IPC_STAT(r0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000300)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop]}}, @timestamp}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @local}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7ff, 0x41d3ab440881817a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r4, &(0x7f0000003400)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) 106.099173ms ago: executing program 4 (id=234): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04030520", @ANYRES16], 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0x0, 0x0, 0x19, &(0x7f0000000980)=ANY=[@ANYBLOB="010f"], 0x1, [{0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000400), &(0x7f0000000440)=""/72}, 0x20) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = getpid() socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) r4 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0x8, 0x4) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x40008, 0x5, @name="75ac253c4c95132f15a45e1271b2f5f8f12bdff39f2396ab5b02e97d8fcd5b4a"}) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0xe) 0s ago: executing program 0 (id=235): r0 = socket$kcm(0x21, 0x2, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000440)) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/140, 0x8c}, 0x140) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 50.564033][ T29] audit: type=1400 audit(1737802558.230:88): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.567080][ T5803] cgroup: Unknown subsys name 'net' [ 50.586845][ T29] audit: type=1400 audit(1737802558.230:89): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.614450][ T29] audit: type=1400 audit(1737802558.260:90): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.732879][ T5803] cgroup: Unknown subsys name 'cpuset' [ 50.739978][ T5803] cgroup: Unknown subsys name 'rlimit' [ 50.843513][ T29] audit: type=1400 audit(1737802558.510:91): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.874239][ T29] audit: type=1400 audit(1737802558.510:92): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.895035][ T29] audit: type=1400 audit(1737802558.510:93): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.915484][ T29] audit: type=1400 audit(1737802558.510:94): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.935344][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.937176][ T29] audit: type=1400 audit(1737802558.510:95): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.969150][ T29] audit: type=1400 audit(1737802558.510:96): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.992381][ T29] audit: type=1400 audit(1737802558.570:97): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.781705][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.693076][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.701282][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.706309][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.716422][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.717888][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.731524][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.732221][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.743920][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.747110][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.752919][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.760123][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.769862][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.774435][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.780312][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.788272][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.802963][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.811607][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.815574][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.819390][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.825751][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.839585][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.841557][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.849645][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.867784][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.869345][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.882931][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.883278][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.897458][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.904902][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.913022][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.224514][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 54.239551][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 54.249039][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 54.261227][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 54.301769][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 54.421567][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.429126][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.436778][ T5813] bridge_slave_0: entered allmulticast mode [ 54.443575][ T5813] bridge_slave_0: entered promiscuous mode [ 54.454939][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.462030][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.469095][ T5813] bridge_slave_1: entered allmulticast mode [ 54.475729][ T5813] bridge_slave_1: entered promiscuous mode [ 54.484661][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.491927][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.499021][ T5827] bridge_slave_0: entered allmulticast mode [ 54.505475][ T5827] bridge_slave_0: entered promiscuous mode [ 54.517727][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.524996][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.532345][ T5816] bridge_slave_0: entered allmulticast mode [ 54.538660][ T5816] bridge_slave_0: entered promiscuous mode [ 54.556808][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.563892][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571060][ T5827] bridge_slave_1: entered allmulticast mode [ 54.577448][ T5827] bridge_slave_1: entered promiscuous mode [ 54.589149][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.596280][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.603520][ T5816] bridge_slave_1: entered allmulticast mode [ 54.609914][ T5816] bridge_slave_1: entered promiscuous mode [ 54.622875][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.629942][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.637135][ T5815] bridge_slave_0: entered allmulticast mode [ 54.644079][ T5815] bridge_slave_0: entered promiscuous mode [ 54.675103][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.682273][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.689417][ T5815] bridge_slave_1: entered allmulticast mode [ 54.696138][ T5815] bridge_slave_1: entered promiscuous mode [ 54.704458][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.714332][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.721497][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.728582][ T5814] bridge_slave_0: entered allmulticast mode [ 54.735312][ T5814] bridge_slave_0: entered promiscuous mode [ 54.743246][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.754519][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.769060][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.785801][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.800367][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.807655][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.815458][ T5814] bridge_slave_1: entered allmulticast mode [ 54.822241][ T5814] bridge_slave_1: entered promiscuous mode [ 54.834948][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.875313][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.886364][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.897997][ T5813] team0: Port device team_slave_0 added [ 54.909229][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.920993][ T5827] team0: Port device team_slave_0 added [ 54.928405][ T5816] team0: Port device team_slave_0 added [ 54.935632][ T5816] team0: Port device team_slave_1 added [ 54.953707][ T5813] team0: Port device team_slave_1 added [ 54.960349][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.971231][ T5827] team0: Port device team_slave_1 added [ 54.993147][ T5815] team0: Port device team_slave_0 added [ 54.999346][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.006963][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.033115][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.060674][ T5815] team0: Port device team_slave_1 added [ 55.066611][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.073827][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.100208][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.125359][ T5814] team0: Port device team_slave_0 added [ 55.134155][ T5814] team0: Port device team_slave_1 added [ 55.149615][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.156762][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.182702][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.195331][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.202338][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.228463][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.242462][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.249409][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.275370][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.287220][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.294255][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.320725][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.353659][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.361264][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.387435][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.419300][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.426282][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.452574][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.473801][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.481291][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.507420][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.526100][ T5815] hsr_slave_0: entered promiscuous mode [ 55.532445][ T5815] hsr_slave_1: entered promiscuous mode [ 55.548214][ T5813] hsr_slave_0: entered promiscuous mode [ 55.554299][ T5813] hsr_slave_1: entered promiscuous mode [ 55.560088][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.568259][ T5813] Cannot create hsr debugfs directory [ 55.575668][ T5816] hsr_slave_0: entered promiscuous mode [ 55.582089][ T5816] hsr_slave_1: entered promiscuous mode [ 55.587881][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.595470][ T5816] Cannot create hsr debugfs directory [ 55.607869][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.614917][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.640917][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.687626][ T5827] hsr_slave_0: entered promiscuous mode [ 55.693856][ T5827] hsr_slave_1: entered promiscuous mode [ 55.699605][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.707238][ T5827] Cannot create hsr debugfs directory [ 55.721911][ T5814] hsr_slave_0: entered promiscuous mode [ 55.728899][ T5814] hsr_slave_1: entered promiscuous mode [ 55.734860][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.742437][ T5814] Cannot create hsr debugfs directory [ 55.871356][ T5830] Bluetooth: hci3: command tx timeout [ 55.877224][ T5830] Bluetooth: hci0: command tx timeout [ 55.950766][ T5830] Bluetooth: hci2: command tx timeout [ 55.960747][ T5830] Bluetooth: hci4: command tx timeout [ 55.966452][ T5830] Bluetooth: hci1: command tx timeout [ 55.980336][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.992922][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.005082][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.014913][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.025717][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.033785][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.051378][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.059879][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.100825][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.111358][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.133770][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.146061][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.177934][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.202146][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.222419][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.233201][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.262499][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.290121][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.299001][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.307713][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.376897][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.387686][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.398310][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.422321][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.439055][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.448802][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.469273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.476433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.488030][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.495108][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.505672][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.526012][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.533090][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.546437][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.561691][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.568756][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.577389][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.584448][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.605281][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.612340][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.631680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.639163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.691209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.698259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.712392][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.743090][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.769695][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.769707][ T29] audit: type=1400 audit(1737802564.430:111): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.825976][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.854695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.861796][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.896159][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.903253][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.031128][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.086969][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.119554][ T5816] veth0_vlan: entered promiscuous mode [ 57.133191][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.153840][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.165831][ T5816] veth1_vlan: entered promiscuous mode [ 57.210242][ T5813] veth0_vlan: entered promiscuous mode [ 57.238406][ T5813] veth1_vlan: entered promiscuous mode [ 57.255071][ T5814] veth0_vlan: entered promiscuous mode [ 57.277182][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.295759][ T5816] veth0_macvtap: entered promiscuous mode [ 57.311338][ T5813] veth0_macvtap: entered promiscuous mode [ 57.325220][ T5814] veth1_vlan: entered promiscuous mode [ 57.334489][ T5816] veth1_macvtap: entered promiscuous mode [ 57.343158][ T5815] veth0_vlan: entered promiscuous mode [ 57.352373][ T5813] veth1_macvtap: entered promiscuous mode [ 57.384356][ T5815] veth1_vlan: entered promiscuous mode [ 57.401538][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.418189][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.429089][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.441281][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.456484][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.493786][ T5815] veth0_macvtap: entered promiscuous mode [ 57.500444][ T5814] veth0_macvtap: entered promiscuous mode [ 57.512724][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.523479][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.534535][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.545391][ T5815] veth1_macvtap: entered promiscuous mode [ 57.553556][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.563369][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.572429][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581377][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.596774][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.605620][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.614531][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.623349][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.634861][ T5814] veth1_macvtap: entered promiscuous mode [ 57.648057][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.659071][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.669236][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.680012][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.691007][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.700066][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.711832][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.721679][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.732389][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.743034][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.767180][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.779221][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.790037][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.801394][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.811258][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.821728][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.832462][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.845814][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.855301][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.864466][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.874730][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.888691][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.899408][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.909979][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.920487][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.930892][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.941456][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.951499][ T5830] Bluetooth: hci3: command tx timeout [ 57.957740][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.960993][ T5830] Bluetooth: hci0: command tx timeout [ 57.991009][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000215][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.009290][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.018379][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.031043][ T5830] Bluetooth: hci1: command tx timeout [ 58.031537][ T5826] Bluetooth: hci4: command tx timeout [ 58.036791][ T5830] Bluetooth: hci2: command tx timeout [ 58.074923][ T5827] veth0_vlan: entered promiscuous mode [ 58.090300][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.102751][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.128835][ T5827] veth1_vlan: entered promiscuous mode [ 58.140414][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.149434][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.186331][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.197157][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.216630][ T29] audit: type=1400 audit(1737802565.880:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.FimTWR/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.245072][ T29] audit: type=1400 audit(1737802565.910:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.278803][ T29] audit: type=1400 audit(1737802565.910:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.FimTWR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.311475][ T29] audit: type=1400 audit(1737802565.910:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.347569][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.349733][ T29] audit: type=1400 audit(1737802565.910:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.FimTWR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.373394][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.394015][ T29] audit: type=1400 audit(1737802565.910:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.FimTWR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.398406][ T5827] veth0_macvtap: entered promiscuous mode [ 58.434531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.438049][ T29] audit: type=1400 audit(1737802565.940:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.444944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.461618][ T29] audit: type=1400 audit(1737802565.950:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.494673][ T29] audit: type=1400 audit(1737802565.950:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=6982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.498891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.537790][ T5827] veth1_macvtap: entered promiscuous mode [ 58.546204][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.579614][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.622099][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.637685][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.648322][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.659908][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.671689][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.682216][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.692219][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.704515][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.715781][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.728470][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.737610][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.753950][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.767773][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.775915][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.791508][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.803769][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.814904][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.830123][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.844793][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.861947][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.979668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.981169][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.286884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.300687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.366189][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.579694][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.600741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.661977][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.672213][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.683401][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.914398][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.955113][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.030985][ T5830] Bluetooth: hci0: command tx timeout [ 60.037133][ T5830] Bluetooth: hci3: command tx timeout [ 60.110652][ T5830] Bluetooth: hci4: command tx timeout [ 60.116601][ T5830] Bluetooth: hci1: command tx timeout [ 60.122323][ T5826] Bluetooth: hci2: command tx timeout [ 60.175034][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.371769][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.865538][ T5936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5936 comm=syz.4.5 [ 60.897058][ T5930] 9pnet_fd: Insufficient options for proto=fd [ 60.953968][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13'. [ 61.791138][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 61.791174][ T29] audit: type=1400 audit(1737802569.180:178): avc: denied { bind } for pid=5941 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.044936][ T29] audit: type=1400 audit(1737802569.190:179): avc: denied { read write } for pid=5941 comm="syz.4.14" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.120719][ T5823] Bluetooth: hci3: command tx timeout [ 62.121824][ T5830] Bluetooth: hci0: command tx timeout [ 62.181735][ T29] audit: type=1400 audit(1737802569.190:180): avc: denied { open } for pid=5941 comm="syz.4.14" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.191085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.213935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.231187][ T5830] Bluetooth: hci1: command tx timeout [ 62.231987][ T5823] Bluetooth: hci2: command tx timeout [ 62.236624][ T5830] Bluetooth: hci4: command tx timeout [ 62.240576][ T29] audit: type=1400 audit(1737802569.610:181): avc: denied { create } for pid=5943 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.372057][ T29] audit: type=1400 audit(1737802570.000:182): avc: denied { read } for pid=5947 comm="syz.1.16" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.380768][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.429726][ T29] audit: type=1400 audit(1737802570.030:183): avc: denied { read write } for pid=5947 comm="syz.1.16" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.439384][ T5952] usb usb8: usbfs: process 5952 (syz.4.18) did not claim interface 0 before use [ 62.453000][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.593803][ T5956] 9pnet_fd: Insufficient options for proto=fd [ 62.613891][ T29] audit: type=1400 audit(1737802570.030:184): avc: denied { open } for pid=5947 comm="syz.1.16" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.637259][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.871000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.075771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.377079][ T29] audit: type=1400 audit(1737802570.090:185): avc: denied { write } for pid=5951 comm="syz.4.18" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.377149][ T29] audit: type=1400 audit(1737802570.200:186): avc: denied { write } for pid=5947 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.377207][ T29] audit: type=1400 audit(1737802570.200:187): avc: denied { create } for pid=5947 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.382978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.587771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.128983][ T5961] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 64.415809][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.619985][ T5969] mmap: syz.2.21 (5969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.949296][ T5972] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[5972] [ 64.968691][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 65.181311][ T971] libceph: connect (1)[c::]:6789 error -101 [ 65.189479][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 65.197781][ T5967] ceph: No mds server is up or the cluster is laggy [ 65.205070][ T971] libceph: connect (1)[c::]:6789 error -101 [ 65.211212][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 65.820275][ T5993] overlayfs: missing 'lowerdir' [ 66.703354][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.803046][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.890654][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 66.898400][ T9] usb 2-1: can't read configurations, error -71 [ 66.925237][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 66.925255][ T29] audit: type=1400 audit(1737802574.590:214): avc: denied { mount } for pid=5987 comm="syz.0.24" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.024676][ T29] audit: type=1400 audit(1737802574.620:215): avc: denied { getattr } for pid=5992 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.131221][ T29] audit: type=1400 audit(1737802574.620:216): avc: denied { remove_name } for pid=5992 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.154756][ T29] audit: type=1400 audit(1737802574.620:217): avc: denied { unlink } for pid=5992 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.218173][ T29] audit: type=1400 audit(1737802574.860:218): avc: denied { create } for pid=5998 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.778083][ T29] audit: type=1400 audit(1737802574.860:219): avc: denied { write } for pid=5998 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.805193][ T29] audit: type=1400 audit(1737802574.940:220): avc: denied { getopt } for pid=5996 comm="syz.4.26" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.937233][ T29] audit: type=1400 audit(1737802574.980:221): avc: denied { name_bind } for pid=5987 comm="syz.0.24" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.958083][ T6001] syz.0.24 (6001): drop_caches: 2 [ 67.964319][ T29] audit: type=1400 audit(1737802574.980:222): avc: denied { node_bind } for pid=5987 comm="syz.0.24" saddr=::ffff:0.0.0.0 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.986366][ T29] audit: type=1400 audit(1737802575.490:223): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.130943][ T6016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.27'. [ 69.196120][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 69.484398][ T6024] Illegal XDP return value 723641900 on prog (id 8) dev N/A, expect packet loss! [ 71.076763][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088058][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.591389][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 72.591399][ T29] audit: type=1400 audit(1737802580.260:252): avc: denied { create } for pid=6071 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.642426][ T6074] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 72.654212][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.661964][ T6074] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.687236][ T29] audit: type=1400 audit(1737802580.280:253): avc: denied { write } for pid=6071 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.725402][ T29] audit: type=1400 audit(1737802580.280:254): avc: denied { nlmsg_read } for pid=6071 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.741495][ T6082] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure [ 72.833622][ T29] audit: type=1400 audit(1737802580.410:255): avc: denied { name_bind } for pid=6080 comm="syz.2.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.902251][ T6082] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.923786][ T29] audit: type=1400 audit(1737802580.460:256): avc: denied { write } for pid=6086 comm="syz.3.44" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.977659][ T29] audit: type=1400 audit(1737802580.470:257): avc: denied { connect } for pid=6086 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.049916][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 73.090767][ T29] audit: type=1400 audit(1737802580.470:258): avc: denied { ioctl } for pid=6086 comm="syz.3.44" path="socket:[7956]" dev="sockfs" ino=7956 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.460437][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 73.473458][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 73.510587][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.692580][ T9] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 73.735511][ T6116] batman_adv: batadv0: Adding interface: ip6gretap1 [ 73.754393][ T9] usb 5-1: config 0 has no interface number 0 [ 73.763243][ T6116] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 73.772442][ T971] libceph: connect (1)[c::]:6789 error -101 [ 73.789634][ T9] usb 5-1: config 0 interface 100 altsetting 247 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 73.808152][ T6097] ceph: No mds server is up or the cluster is laggy [ 73.816867][ T29] audit: type=1400 audit(1737802581.470:259): avc: denied { create } for pid=6119 comm="syz.2.49" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.819860][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 73.843383][ T9] usb 5-1: config 0 interface 100 has no altsetting 0 [ 73.871483][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.b2 [ 73.880893][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.949303][ T6121] 9pnet_fd: Insufficient options for proto=fd [ 73.955964][ T29] audit: type=1400 audit(1737802581.610:260): avc: denied { mounton } for pid=6119 comm="syz.2.49" path="/11/file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.978951][ T29] audit: type=1400 audit(1737802581.620:261): avc: denied { write } for pid=6117 comm="syz.3.48" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.023747][ T9] usb 5-1: Product: syz [ 74.028167][ T9] usb 5-1: Manufacturer: syz [ 74.032872][ T9] usb 5-1: SerialNumber: syz [ 74.053252][ T9] usb 5-1: config 0 descriptor?? [ 74.130548][ T6116] batman_adv: batadv0: Interface activated: ip6gretap1 [ 75.558742][ T9] usbtest 5-1:0.100: couldn't get endpoints, -71 [ 75.606124][ T9] usbtest 5-1:0.100: probe with driver usbtest failed with error -71 [ 75.660735][ T9] usb 5-1: USB disconnect, device number 2 [ 76.346392][ T25] cfg80211: failed to load regulatory.db [ 76.972528][ T6149] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 77.074149][ T6168] netlink: 168 bytes leftover after parsing attributes in process `syz.4.58'. [ 77.217150][ T6177] FAULT_INJECTION: forcing a failure. [ 77.217150][ T6177] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.235838][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.0.60 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 77.235863][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.235872][ T6177] Call Trace: [ 77.235877][ T6177] [ 77.235887][ T6177] dump_stack_lvl+0x16c/0x1f0 [ 77.235917][ T6177] should_fail_ex+0x497/0x5b0 [ 77.235941][ T6177] _copy_to_user+0x32/0xd0 [ 77.235967][ T6177] simple_read_from_buffer+0xd0/0x160 [ 77.235994][ T6177] proc_fail_nth_read+0x198/0x270 [ 77.236016][ T6177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.236038][ T6177] ? rw_verify_area+0xcf/0x680 [ 77.236059][ T6177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.236084][ T6177] vfs_read+0x1df/0xbf0 [ 77.236107][ T6177] ? __fget_files+0x1fc/0x3a0 [ 77.236131][ T6177] ? __pfx___mutex_lock+0x10/0x10 [ 77.236155][ T6177] ? __pfx_vfs_read+0x10/0x10 [ 77.236189][ T6177] ? __fget_files+0x206/0x3a0 [ 77.236219][ T6177] ksys_read+0x12b/0x250 [ 77.236250][ T6177] ? __pfx_ksys_read+0x10/0x10 [ 77.236281][ T6177] do_syscall_64+0xcd/0x250 [ 77.236307][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.236329][ T6177] RIP: 0033:0x7f57c0b8b73c [ 77.236343][ T6177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.236357][ T6177] RSP: 002b:00007f57c1974030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.236373][ T6177] RAX: ffffffffffffffda RBX: 00007f57c0da5fa0 RCX: 00007f57c0b8b73c [ 77.236384][ T6177] RDX: 000000000000000f RSI: 00007f57c19740a0 RDI: 0000000000000006 [ 77.236393][ T6177] RBP: 00007f57c1974090 R08: 0000000000000000 R09: 0000000000000000 [ 77.236406][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.236415][ T6177] R13: 0000000000000000 R14: 00007f57c0da5fa0 R15: 00007ffee1818358 [ 77.236440][ T6177] [ 77.665387][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 77.665402][ T29] audit: type=1400 audit(1737802585.330:311): avc: denied { create } for pid=6189 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 77.737233][ T29] audit: type=1400 audit(1737802585.330:312): avc: denied { create } for pid=6189 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.784189][ T29] audit: type=1400 audit(1737802585.330:313): avc: denied { bind } for pid=6189 comm="syz.2.62" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.979986][ T29] audit: type=1400 audit(1737802585.330:314): avc: denied { name_bind } for pid=6189 comm="syz.2.62" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 78.007987][ T29] audit: type=1400 audit(1737802585.330:315): avc: denied { node_bind } for pid=6189 comm="syz.2.62" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 78.091404][ T29] audit: type=1400 audit(1737802585.330:316): avc: denied { write } for pid=6189 comm="syz.2.62" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.159679][ T29] audit: type=1400 audit(1737802585.330:317): avc: denied { execmem } for pid=6189 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.198638][ T29] audit: type=1400 audit(1737802585.390:318): avc: denied { create } for pid=6187 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.230908][ T29] audit: type=1400 audit(1737802585.430:319): avc: denied { write } for pid=6187 comm="syz.0.61" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.278985][ T29] audit: type=1400 audit(1737802585.710:320): avc: denied { read } for pid=6201 comm="syz.3.63" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.790589][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 80.330721][ T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.560644][ T51] usb 5-1: device descriptor read/64, error -71 [ 80.820933][ T51] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.010773][ T51] usb 5-1: device descriptor read/64, error -71 [ 81.143328][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 81.149318][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 81.155624][ T51] usb usb5-port1: attempt power cycle [ 81.181720][ T6242] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[6242] [ 81.329769][ T6254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.73'. [ 81.350763][ T6254] Zero length message leads to an empty skb [ 81.412894][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 81.425041][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 81.530673][ T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.539478][ T6243] ceph: No mds server is up or the cluster is laggy [ 81.652781][ T51] usb 5-1: device descriptor read/8, error -71 [ 81.991153][ T51] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.082113][ T51] usb 5-1: device descriptor read/8, error -71 [ 83.048646][ T51] usb usb5-port1: unable to enumerate USB device [ 83.098790][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 83.098805][ T29] audit: type=1326 audit(1737802590.760:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 83.455240][ T29] audit: type=1326 audit(1737802590.810:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 83.481769][ T29] audit: type=1326 audit(1737802590.870:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 83.504915][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.616567][ T29] audit: type=1326 audit(1737802590.870:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 83.639693][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.750599][ T29] audit: type=1326 audit(1737802590.870:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 83.773728][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.815148][ T6260] autofs: Unknown parameter ' ' [ 84.055778][ T29] audit: type=1326 audit(1737802590.870:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 84.090344][ T29] audit: type=1326 audit(1737802590.870:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 84.141516][ T29] audit: type=1326 audit(1737802590.870:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a658cd29 code=0x7ffc0000 [ 84.296411][ T29] audit: type=1326 audit(1737802590.870:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79a658ec47 code=0x7ffc0000 [ 84.319472][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.761264][ T29] audit: type=1326 audit(1737802590.880:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f79a658ebbc code=0x7ffc0000 [ 84.784291][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.809944][ T6294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.84'. [ 84.953961][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.510739][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.530655][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 85.585790][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 85.722073][ T6299] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 85.732988][ T6299] batman_adv: batadv0: Adding interface: team0 [ 85.739140][ T6299] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.764398][ T6299] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 85.883201][ T6303] vivid-000: disconnect [ 85.900636][ T51] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.090845][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 86.347139][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.363287][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 86.730979][ T9] usb 1-1: Product: syz [ 86.794040][ T9] usb 1-1: Manufacturer: syz [ 86.910898][ T8] libceph: connect (1)[c::]:6789 error -101 [ 86.979292][ T9] usb 1-1: SerialNumber: syz [ 86.998813][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 87.008458][ T9] usb 1-1: config 0 descriptor?? [ 87.016030][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.035216][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.060864][ T5919] usb 4-1: Product: syz [ 87.066210][ T5919] usb 4-1: Manufacturer: syz [ 87.139563][ T5919] usb 4-1: SerialNumber: syz [ 87.169628][ T6305] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[6305] [ 87.199074][ T9] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 87.206681][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 87.222626][ T9] usb 1-1: USB disconnect, device number 2 [ 87.271864][ T8] libceph: connect (1)[c::]:6789 error -101 [ 87.285127][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 87.521459][ T6307] ceph: No mds server is up or the cluster is laggy [ 87.921451][ T8] libceph: connect (1)[c::]:6789 error -101 [ 87.921539][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 87.929433][ T51] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.929946][ T6300] vivid-000: reconnect [ 87.931936][ T51] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 87.931976][ T51] usb 5-1: can't read configurations, error -71 [ 89.197727][ T5919] cdc_ncm 4-1:1.0: failed to get mac address [ 89.213052][ T5919] cdc_ncm 4-1:1.0: bind() failure [ 89.317947][ T6332] FAULT_INJECTION: forcing a failure. [ 89.317947][ T6332] name failslab, interval 1, probability 0, space 0, times 1 [ 89.330777][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.1.92 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 89.330798][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.330807][ T6332] Call Trace: [ 89.330812][ T6332] [ 89.330818][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 89.330847][ T6332] should_fail_ex+0x497/0x5b0 [ 89.330868][ T6332] ? fs_reclaim_acquire+0xae/0x150 [ 89.330893][ T6332] should_failslab+0xc2/0x120 [ 89.330910][ T6332] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 89.330938][ T6332] ? __d_alloc+0x31/0xaa0 [ 89.330958][ T6332] __d_alloc+0x31/0xaa0 [ 89.330976][ T6332] d_alloc_pseudo+0x1c/0xc0 [ 89.330994][ T6332] alloc_file_pseudo+0xdc/0x210 [ 89.331012][ T6332] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 89.331034][ T6332] ? __raw_spin_lock_init+0x3a/0x110 [ 89.331054][ T6332] create_pipe_files+0x364/0x850 [ 89.331073][ T6332] do_pipe2+0xb0/0x1d0 [ 89.331088][ T6332] ? __pfx_do_pipe2+0x10/0x10 [ 89.331103][ T6332] ? ksys_write+0x1ba/0x250 [ 89.331133][ T6332] __x64_sys_pipe2+0x54/0x80 [ 89.331149][ T6332] do_syscall_64+0xcd/0x250 [ 89.331175][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.331198][ T6332] RIP: 0033:0x7f79a658cd29 [ 89.331211][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.331226][ T6332] RSP: 002b:00007f79a747c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 89.331251][ T6332] RAX: ffffffffffffffda RBX: 00007f79a67a6160 RCX: 00007f79a658cd29 [ 89.331262][ T6332] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 89.331272][ T6332] RBP: 00007f79a747c090 R08: 0000000000000000 R09: 0000000000000000 [ 89.331282][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.331291][ T6332] R13: 0000000000000000 R14: 00007f79a67a6160 R15: 00007ffec4f3ae68 [ 89.331313][ T6332] [ 89.525338][ T5919] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 89.588457][ T5919] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 89.605000][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 89.605015][ T29] audit: type=1400 audit(1737802597.270:413): avc: denied { create } for pid=6335 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.630680][ T29] audit: type=1400 audit(1737802597.280:414): avc: denied { read } for pid=6336 comm="syz.0.95" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.655543][ T29] audit: type=1400 audit(1737802597.280:415): avc: denied { open } for pid=6336 comm="syz.0.95" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.679185][ T29] audit: type=1400 audit(1737802597.280:416): avc: denied { ioctl } for pid=6336 comm="syz.0.95" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.704317][ T29] audit: type=1400 audit(1737802597.290:417): avc: denied { read } for pid=6335 comm="syz.4.94" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 89.730524][ T29] audit: type=1400 audit(1737802597.290:418): avc: denied { open } for pid=6335 comm="syz.4.94" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 89.754765][ T29] audit: type=1400 audit(1737802597.290:419): avc: denied { ioctl } for pid=6335 comm="syz.4.94" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x5408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 89.794134][ T5919] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 89.911157][ T5919] usb 4-1: USB disconnect, device number 2 [ 90.259631][ T29] audit: type=1400 audit(1737802597.920:420): avc: denied { bind } for pid=6336 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.311599][ T29] audit: type=1400 audit(1737802597.920:421): avc: denied { write } for pid=6336 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.341909][ T29] audit: type=1400 audit(1737802597.950:422): avc: denied { setopt } for pid=6333 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.550957][ T5919] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 90.558596][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.208308][ T5919] usb 2-1: device descriptor read/64, error -71 [ 91.273761][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.284809][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.305619][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 91.332767][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.358967][ T8] usb 3-1: config 0 descriptor?? [ 91.479979][ T5919] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 92.300730][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 92.429750][ T8] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.442033][ T8] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 92.481659][ T5919] usb 2-1: device descriptor read/64, error -71 [ 92.866454][ T8] cp2112 0003:10C4:EA90.0001: Part Number: 0x6A Device Version: 0xAF [ 92.874737][ T5919] usb usb2-port1: attempt power cycle [ 93.321751][ T5919] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 93.464104][ T6387] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[6387] [ 93.571285][ T8] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 93.589568][ T8] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 93.614549][ T5919] usb 2-1: device descriptor read/8, error -71 [ 93.633804][ T8] usb 3-1: USB disconnect, device number 2 [ 93.843375][ T6393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.997917][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 94.997932][ T29] audit: type=1400 audit(1737802602.660:458): avc: denied { create } for pid=6408 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.054140][ T29] audit: type=1400 audit(1737802602.700:459): avc: denied { ioctl } for pid=6408 comm="syz.0.112" path="socket:[9645]" dev="sockfs" ino=9645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.616086][ T51] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.975815][ T51] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.004774][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.031047][ T51] usb 5-1: config 0 descriptor?? [ 96.061190][ T29] audit: type=1400 audit(1737802603.730:460): avc: denied { bind } for pid=6422 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.080240][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.180997][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.208280][ T29] audit: type=1400 audit(1737802603.870:461): avc: denied { mounton } for pid=6426 comm="syz.2.119" path="/proc/83/task" dev="proc" ino=10720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.222782][ T5866] kernel write not supported for file /snd/seq (pid: 5866 comm: kworker/1:5) [ 96.230650][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.267635][ T51] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 96.276453][ T29] audit: type=1400 audit(1737802603.870:462): avc: denied { mount } for pid=6426 comm="syz.2.119" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.297992][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.300543][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 96.446314][ T6436] netlink: 244 bytes leftover after parsing attributes in process `syz.0.121'. [ 96.455779][ T6436] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 96.533522][ T6429] hub 2-0:1.0: USB hub found [ 97.162163][ T6429] hub 2-0:1.0: 1 port detected [ 97.196393][ T29] audit: type=1400 audit(1737802604.860:463): avc: denied { write } for pid=6416 comm="syz.1.117" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.350350][ T51] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 97.378476][ T51] [drm] Initialized udl on minor 2 [ 97.383832][ T29] audit: type=1400 audit(1737802604.950:464): avc: denied { write } for pid=6431 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.564490][ T29] audit: type=1400 audit(1737802605.170:465): avc: denied { read } for pid=6431 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.754358][ T29] audit: type=1400 audit(1737802605.290:466): avc: denied { create } for pid=6442 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.905116][ T29] audit: type=1400 audit(1737802605.400:467): avc: denied { ioctl } for pid=6442 comm="syz.0.124" path="socket:[9677]" dev="sockfs" ino=9677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.929546][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.292469][ T51] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 98.378676][ T51] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 98.563168][ T5867] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.624771][ T51] usb 5-1: USB disconnect, device number 9 [ 98.645825][ T5867] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 99.161002][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.458950][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.003192][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.038466][ T8] usb 1-1: config 0 descriptor?? [ 100.248351][ T8] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 100.259118][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 100.259134][ T29] audit: type=1400 audit(1737802607.930:498): avc: denied { execute } for pid=6467 comm="syz.4.131" path="/24/bus" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.312820][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 100.351288][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 100.366697][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 100.445794][ T6471] FAULT_INJECTION: forcing a failure. [ 100.445794][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 100.458862][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.1.132 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 100.458886][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.458896][ T6471] Call Trace: [ 100.458901][ T6471] [ 100.458907][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 100.458934][ T6471] should_fail_ex+0x497/0x5b0 [ 100.458955][ T6471] ? fs_reclaim_acquire+0xae/0x150 [ 100.458979][ T6471] should_failslab+0xc2/0x120 [ 100.458995][ T6471] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 100.459021][ T6471] ? alloc_inode+0xbf/0x230 [ 100.459036][ T6471] ? alloc_inode+0xc/0x230 [ 100.459052][ T6471] alloc_inode+0xbf/0x230 [ 100.459068][ T6471] alloc_anon_inode+0x28/0x3e0 [ 100.459091][ T6471] dma_buf_export+0x2ea/0xb30 [ 100.459114][ T6471] drm_gem_prime_export+0x188/0x3c0 [ 100.459130][ T6471] ? __pfx_drm_gem_prime_export+0x10/0x10 [ 100.459156][ T6471] drm_gem_prime_handle_to_dmabuf+0x595/0x6e0 [ 100.459181][ T6471] drm_prime_handle_to_fd_ioctl+0x153/0x230 [ 100.459200][ T6471] drm_ioctl_kernel+0x1e6/0x3d0 [ 100.459220][ T6471] ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10 [ 100.459236][ T6471] ? __might_fault+0xe3/0x190 [ 100.459254][ T6471] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 100.459273][ T6471] ? __might_fault+0xe3/0x190 [ 100.459297][ T6471] drm_ioctl+0x5d6/0xc00 [ 100.459320][ T6471] ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10 [ 100.459338][ T6471] ? __pfx_drm_ioctl+0x10/0x10 [ 100.459356][ T6471] ? __pfx_lock_release+0x10/0x10 [ 100.459387][ T6471] ? selinux_file_ioctl+0x180/0x270 [ 100.459406][ T6471] ? selinux_file_ioctl+0xb4/0x270 [ 100.459426][ T6471] ? __pfx_drm_ioctl+0x10/0x10 [ 100.459447][ T6471] __x64_sys_ioctl+0x190/0x200 [ 100.459468][ T6471] do_syscall_64+0xcd/0x250 [ 100.459492][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.459513][ T6471] RIP: 0033:0x7f79a658cd29 [ 100.459525][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.459540][ T6471] RSP: 002b:00007f79a749d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.459555][ T6471] RAX: ffffffffffffffda RBX: 00007f79a67a6080 RCX: 00007f79a658cd29 [ 100.459564][ T6471] RDX: 0000000020000200 RSI: 00000000c00c642d RDI: 0000000000000005 [ 100.459573][ T6471] RBP: 00007f79a749d090 R08: 0000000000000000 R09: 0000000000000000 [ 100.459581][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.459589][ T6471] R13: 0000000000000000 R14: 00007f79a67a6080 R15: 00007ffec4f3ae68 [ 100.459610][ T6471] [ 100.474333][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 100.481380][ T29] audit: type=1400 audit(1737802608.090:499): avc: denied { write } for pid=6469 comm="syz.1.132" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.491180][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 101.021031][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 101.027754][ T8] [drm] Initialized udl on minor 2 [ 101.061833][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 101.121085][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 101.233271][ T6468] netlink: 'syz.4.131': attribute type 29 has an invalid length. [ 101.292655][ T29] audit: type=1400 audit(1737802608.960:500): avc: denied { ioctl } for pid=6467 comm="syz.4.131" path="socket:[9782]" dev="sockfs" ino=9782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.330753][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 101.349986][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 101.358945][ T5919] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.389364][ T8] usb 1-1: USB disconnect, device number 3 [ 101.395596][ T5919] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 101.768929][ T5919] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 101.885266][ T29] audit: type=1400 audit(1737802609.550:501): avc: denied { create } for pid=6485 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.914468][ T29] audit: type=1400 audit(1737802609.570:502): avc: denied { write } for pid=6485 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.939220][ T29] audit: type=1400 audit(1737802609.600:503): avc: denied { setopt } for pid=6485 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.230372][ T6486] random: crng reseeded on system resumption [ 102.237724][ T29] audit: type=1400 audit(1737802609.890:504): avc: denied { write } for pid=6485 comm="syz.2.134" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.735943][ T6500] fuse: Bad value for 'fd' [ 103.237731][ T29] audit: type=1400 audit(1737802609.890:505): avc: denied { open } for pid=6485 comm="syz.2.134" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.278877][ T29] audit: type=1326 audit(1737802610.100:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c66f8cd29 code=0x7ffc0000 [ 103.302105][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.310600][ T29] audit: type=1326 audit(1737802610.110:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f9c66f8cd29 code=0x7ffc0000 [ 103.333716][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.342642][ T6524] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 104.354424][ T6524] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 104.451283][ T6527] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.818512][ T5868] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.904345][ T6531] FAULT_INJECTION: forcing a failure. [ 104.904345][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.919957][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.1.147 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 104.919982][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.919991][ T6531] Call Trace: [ 104.919997][ T6531] [ 104.920003][ T6531] dump_stack_lvl+0x16c/0x1f0 [ 104.920032][ T6531] should_fail_ex+0x497/0x5b0 [ 104.920057][ T6531] _copy_from_user+0x2e/0xd0 [ 104.920081][ T6531] copy_msghdr_from_user+0x99/0x160 [ 104.920098][ T6531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.920113][ T6531] ? __lock_acquire+0xcc5/0x3c40 [ 104.920137][ T6531] ? hlock_class+0x4e/0x130 [ 104.920153][ T6531] ? __lock_acquire+0x15a9/0x3c40 [ 104.920180][ T6531] ___sys_sendmsg+0xff/0x1e0 [ 104.920197][ T6531] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.920210][ T6531] ? __pfx___lock_acquire+0x10/0x10 [ 104.920250][ T6531] ? __pfx___might_resched+0x10/0x10 [ 104.920274][ T6531] ? __might_fault+0xe3/0x190 [ 104.920296][ T6531] __sys_sendmmsg+0x201/0x420 [ 104.920315][ T6531] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.920339][ T6531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.920373][ T6531] ? fput+0x67/0x440 [ 104.920392][ T6531] ? ksys_write+0x1ba/0x250 [ 104.920414][ T6531] ? __pfx_ksys_write+0x10/0x10 [ 104.920440][ T6531] __x64_sys_sendmmsg+0x9c/0x100 [ 104.920454][ T6531] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.920479][ T6531] do_syscall_64+0xcd/0x250 [ 104.920502][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.920523][ T6531] RIP: 0033:0x7f79a658cd29 [ 104.920537][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.920552][ T6531] RSP: 002b:00007f79a74be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.920568][ T6531] RAX: ffffffffffffffda RBX: 00007f79a67a5fa0 RCX: 00007f79a658cd29 [ 104.920579][ T6531] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 104.920589][ T6531] RBP: 00007f79a74be090 R08: 0000000000000000 R09: 0000000000000000 [ 104.920598][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.920606][ T6531] R13: 0000000000000000 R14: 00007f79a67a5fa0 R15: 00007ffec4f3ae68 [ 104.920626][ T6531] [ 105.135376][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.212306][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 105.270569][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 105.277136][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.289146][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.299382][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.312215][ T5868] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.321338][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.331259][ T5868] usb 1-1: config 0 descriptor?? [ 105.545516][ T6517] netlink: 'syz.0.142': attribute type 21 has an invalid length. [ 105.557152][ T6517] netlink: 156 bytes leftover after parsing attributes in process `syz.0.142'. [ 105.590716][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.620664][ T5867] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.783044][ T5867] usb 4-1: config 64 has an invalid interface number: 79 but max is 0 [ 105.798265][ T5867] usb 4-1: config 64 has no interface number 0 [ 105.805587][ T5867] usb 4-1: config 64 interface 79 has no altsetting 0 [ 105.825691][ T5867] usb 4-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=a5.d3 [ 105.843275][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.856047][ T5867] usb 4-1: Product:   [ 105.860355][ T5867] usb 4-1: Manufacturer: 䰰禅뿹톑䡾蘏೿쪯癿蛥變ᦑ렧꧌嫂肖燠哻磠϶͔绽紸枞峊矡턩풩擉꭪䩹棦ꀱ볚␇ꉶ边๲㐝靖Ⳉ⿻㹗桙꾐쵻ᚽ扙﮸詮癫v集줥깷ẃ奀砗頶Ŭ溢ﺑ査홋㾸妸㙖㤽敓◛⏔贗㼧⥏洓鯰闠풏⛙ [ 105.888075][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.909773][ T5867] usb 4-1: SerialNumber: 쬍껫官˩矲䕍꜂᭘㼯땿盘඘鉜庶Ҏ졚㸠⹦ [ 105.972745][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 105.972784][ T29] audit: type=1400 audit(1737802613.640:550): avc: denied { create } for pid=6516 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.995545][ T5919] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 105.999193][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.999863][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 106.009053][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.014701][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.027036][ T5919] usb 2-1: config 0 descriptor?? [ 106.032261][ T5868] usb 1-1: USB disconnect, device number 4 [ 106.155293][ T5867] usb 4-1: Could not find all expected endpoints [ 106.164655][ T5867] usb 4-1: USB disconnect, device number 3 [ 106.257761][ T5919] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 106.277805][ T5919] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 106.472245][ T5919] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 106.487660][ T5919] [drm] Initialized udl on minor 2 [ 106.615509][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.662972][ T29] audit: type=1400 audit(1737802614.330:551): avc: denied { accept } for pid=6554 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.748430][ T29] audit: type=1400 audit(1737802614.350:552): avc: denied { ioctl } for pid=6554 comm="syz.0.155" path="socket:[9946]" dev="sockfs" ino=9946 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.802908][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.823501][ T5867] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.860613][ T29] audit: type=1400 audit(1737802614.520:553): avc: denied { ioctl } for pid=6556 comm="syz.0.156" path="socket:[11044]" dev="sockfs" ino=11044 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.881605][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.901259][ T5919] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 106.916494][ T5919] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 106.924641][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.940725][ T5919] usb 2-1: USB disconnect, device number 8 [ 106.946920][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 106.952129][ T5867] usb 5-1: config 0 descriptor?? [ 107.241349][ T5867] usb 5-1: string descriptor 0 read error: -32 [ 107.255474][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 107.270068][ T29] audit: type=1400 audit(1737802614.930:554): avc: denied { write } for pid=6568 comm="syz.0.159" name="raw6" dev="proc" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.473919][ T6575] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[6575] [ 107.497000][ T29] audit: type=1400 audit(1737802615.160:555): avc: denied { create } for pid=6549 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.555566][ T9] libceph: connect (1)[c::]:6789 error -101 [ 107.609697][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.614560][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 107.618678][ T29] audit: type=1400 audit(1737802615.160:556): avc: denied { read } for pid=6549 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.791617][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.831119][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.840442][ T29] audit: type=1400 audit(1737802615.210:557): avc: denied { write } for pid=6549 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.890298][ T29] audit: type=1400 audit(1737802615.210:558): avc: denied { nlmsg_read } for pid=6549 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.891216][ T8] libceph: connect (1)[c::]:6789 error -101 [ 107.911129][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.932161][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.943154][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 107.949251][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.105732][ T29] audit: type=1400 audit(1737802615.760:559): avc: denied { mount } for pid=6580 comm="syz.1.162" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.219823][ T6572] ceph: No mds server is up or the cluster is laggy [ 108.284737][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.301643][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.311455][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 108.318226][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 108.325788][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.346790][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.353875][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.366279][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.378734][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.408771][ T5867] pwc: Registered as video103. [ 108.440998][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 108.478280][ T5867] usb 5-1: USB disconnect, device number 10 [ 108.593144][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.776168][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.790667][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.802787][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 108.808095][ T6601] tc_dump_action: action bad kind [ 108.815998][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.827443][ T5868] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 108.857286][ T5868] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 109.193874][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.208476][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.217853][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.226093][ T5868] usb 2-1: SerialNumber: syz [ 109.249896][ T6592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.279026][ T6592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.615972][ T5868] hub 2-1:1.0: bad descriptor, ignoring hub [ 109.670700][ T5868] hub 2-1:1.0: probe with driver hub failed with error -5 [ 110.125276][ T6592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.173863][ T6592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.259121][ T6622] FAULT_INJECTION: forcing a failure. [ 110.259121][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 110.387908][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.3.173 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 110.387936][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 110.387945][ T6622] Call Trace: [ 110.387951][ T6622] [ 110.387957][ T6622] dump_stack_lvl+0x16c/0x1f0 [ 110.387985][ T6622] should_fail_ex+0x497/0x5b0 [ 110.388004][ T6622] ? fs_reclaim_acquire+0xae/0x150 [ 110.388026][ T6622] should_failslab+0xc2/0x120 [ 110.388041][ T6622] __kmalloc_cache_noprof+0x68/0x410 [ 110.388055][ T6622] ? __asan_memset+0x23/0x50 [ 110.388067][ T6622] ? __xdp_rxq_info_reg+0x14e/0x2d0 [ 110.388078][ T6622] alloc_netdev_mqs+0xf25/0x15d0 [ 110.388098][ T6622] rtnl_create_link+0xc10/0xfa0 [ 110.388126][ T6622] rtnl_newlink+0x14c6/0x1d60 [ 110.388155][ T6622] ? __pfx_rtnl_newlink+0x10/0x10 [ 110.388185][ T6622] ? __pfx___lock_acquire+0x10/0x10 [ 110.388199][ T6622] ? cred_has_capability.isra.0+0x192/0x2f0 [ 110.388210][ T6622] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 110.388223][ T6622] ? find_held_lock+0x2d/0x110 [ 110.388237][ T6622] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 110.388260][ T6622] ? __pfx_lock_release+0x10/0x10 [ 110.388280][ T6622] ? trace_lock_acquire+0x14e/0x1f0 [ 110.388302][ T6622] ? __pfx_rtnl_newlink+0x10/0x10 [ 110.388324][ T6622] rtnetlink_rcv_msg+0x95b/0xea0 [ 110.388339][ T6622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.388359][ T6622] netlink_rcv_skb+0x16b/0x440 [ 110.388372][ T6622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.388393][ T6622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.388429][ T6622] ? netlink_deliver_tap+0x1ae/0xd30 [ 110.388455][ T6622] netlink_unicast+0x53c/0x7f0 [ 110.388477][ T6622] ? __pfx_netlink_unicast+0x10/0x10 [ 110.388493][ T6622] netlink_sendmsg+0x8b8/0xd70 [ 110.388509][ T6622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.388528][ T6622] ____sys_sendmsg+0xaaf/0xc90 [ 110.388548][ T6622] ? copy_msghdr_from_user+0x10b/0x160 [ 110.388564][ T6622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.388594][ T6622] ___sys_sendmsg+0x135/0x1e0 [ 110.388610][ T6622] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.388627][ T6622] ? __pfx_lock_release+0x10/0x10 [ 110.388639][ T6622] ? trace_lock_acquire+0x14e/0x1f0 [ 110.388653][ T6622] ? __fget_files+0x206/0x3a0 [ 110.388670][ T6622] __sys_sendmsg+0x16e/0x220 [ 110.388684][ T6622] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.388716][ T6622] do_syscall_64+0xcd/0x250 [ 110.388740][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.388760][ T6622] RIP: 0033:0x7f6fa498cd29 [ 110.388770][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.388778][ T6622] RSP: 002b:00007f6fa5792038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.388788][ T6622] RAX: ffffffffffffffda RBX: 00007f6fa4ba5fa0 RCX: 00007f6fa498cd29 [ 110.388793][ T6622] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 110.388798][ T6622] RBP: 00007f6fa5792090 R08: 0000000000000000 R09: 0000000000000000 [ 110.388803][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.388808][ T6622] R13: 0000000000000000 R14: 00007f6fa4ba5fa0 R15: 00007fffdd659e58 [ 110.388822][ T6622] [ 110.698982][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.041129][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.174'. [ 111.356347][ T6635] input: syz0 as /devices/virtual/input/input7 [ 111.986935][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 111.986975][ T29] audit: type=1400 audit(1737802619.650:566): avc: denied { setattr } for pid=6629 comm="syz.0.177" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 112.040813][ T5868] cdc_ether 2-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 112.359398][ T29] audit: type=1400 audit(1737802620.020:567): avc: denied { node_bind } for pid=6640 comm="syz.2.178" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 112.408319][ T29] audit: type=1400 audit(1737802620.050:568): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.470759][ T9] usb 2-1: USB disconnect, device number 9 [ 112.477696][ T9] cdc_ether 2-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 112.578394][ T6647] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:19999 [ 112.952537][ T29] audit: type=1400 audit(1737802620.540:569): avc: denied { create } for pid=6659 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.962973][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.185'. [ 113.000854][ T5867] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 113.225465][ T6665] autofs: Unknown parameter './file1' [ 113.244183][ T5867] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 113.260800][ T5867] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 113.278460][ T5867] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 113.314522][ T5867] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 113.343786][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 113.372987][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.402439][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.422165][ T5867] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 113.445815][ T5867] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 113.463922][ T6665] netlink: 'syz.4.185': attribute type 4 has an invalid length. [ 113.471431][ T5867] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 113.473049][ T6673] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.490542][ T5867] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 113.505279][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 113.507115][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.522305][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.525496][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 113.542357][ T6673] bridge0: entered allmulticast mode [ 113.570923][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.600639][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.631465][ T5867] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 113.660609][ T5919] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.668215][ T5867] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 113.721117][ T5867] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 113.745472][ T5867] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 113.775189][ T29] audit: type=1400 audit(1737802621.440:570): avc: denied { mac_admin } for pid=6686 comm="syz.2.189" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.775369][ T6690] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 113.833231][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 113.841765][ T5919] usb 1-1: config 2 has an invalid interface number: 4 but max is 0 [ 113.862351][ T5919] usb 1-1: config 2 has an invalid descriptor of length 48, skipping remainder of the config [ 113.877357][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 113.889973][ T5919] usb 1-1: config 2 has no interface number 0 [ 113.911363][ T5867] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.914545][ T5919] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 113.931184][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.939184][ T5919] usb 1-1: Product: syz [ 113.951759][ T29] audit: type=1400 audit(1737802621.610:571): avc: denied { relabelto } for pid=6686 comm="syz.2.189" name="pids.max" dev="cgroup2" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 113.972386][ T5867] usb 4-1: string descriptor 0 read error: -22 [ 113.996600][ T5919] usb 1-1: Manufacturer: syz [ 114.002621][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.004763][ T5919] usb 1-1: SerialNumber: syz [ 114.016523][ T5867] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.042832][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.068708][ T5867] adutux 4-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 114.080625][ T29] audit: type=1400 audit(1737802621.610:572): avc: denied { associate } for pid=6686 comm="syz.2.189" name="pids.max" dev="cgroup2" ino=91 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 114.190624][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 114.207652][ T5818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 114.236484][ T6701] dccp_v6_rcv: dropped packet with invalid checksum [ 114.236604][ T5818] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 114.252086][ T6701] qnx4: Unknown parameter '' [ 114.260619][ T29] audit: type=1400 audit(1737802621.920:573): avc: denied { connect } for pid=6699 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.280687][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.309972][ T5818] usb 5-1: Product: syz [ 114.319010][ T5919] kobil_sct 1-1:2.4: required endpoints missing [ 114.329280][ T5818] usb 5-1: Manufacturer: syz [ 114.342059][ T5919] usb 1-1: USB disconnect, device number 5 [ 114.344541][ T5818] usb 5-1: SerialNumber: syz [ 114.391239][ T5818] usb 5-1: config 0 descriptor?? [ 114.413341][ T5818] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 114.430376][ T29] audit: type=1400 audit(1737802622.090:574): avc: denied { read write } for pid=6657 comm="syz.3.184" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.448042][ T5818] usb 5-1: Detected FT232R [ 114.486260][ T29] audit: type=1400 audit(1737802622.090:575): avc: denied { open } for pid=6657 comm="syz.3.184" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.602472][ T5818] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 114.889525][ T5818] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 115.629684][ T6722] block device autoloading is deprecated and will be removed. [ 115.694893][ T5818] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.729081][ T6719] delete_channel: no stack [ 115.837922][ T5818] usb 5-1: USB disconnect, device number 11 [ 116.030224][ T5818] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.062097][ T5818] ftdi_sio 5-1:0.0: device disconnected [ 116.493114][ T6733] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 116.535355][ T6737] FAULT_INJECTION: forcing a failure. [ 116.535355][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 116.571488][ T6738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.196'. [ 116.595075][ T5867] usb 4-1: USB disconnect, device number 4 [ 116.613855][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.4.198 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 116.613879][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.613888][ T6737] Call Trace: [ 116.613893][ T6737] [ 116.613900][ T6737] dump_stack_lvl+0x16c/0x1f0 [ 116.613929][ T6737] should_fail_ex+0x497/0x5b0 [ 116.613950][ T6737] ? fs_reclaim_acquire+0xae/0x150 [ 116.613975][ T6737] should_failslab+0xc2/0x120 [ 116.613994][ T6737] __kmalloc_noprof+0xcb/0x510 [ 116.614010][ T6737] ? d_absolute_path+0x137/0x1b0 [ 116.614029][ T6737] ? rcu_is_watching+0x12/0xc0 [ 116.614049][ T6737] tomoyo_encode2+0x100/0x3e0 [ 116.614073][ T6737] tomoyo_encode+0x29/0x50 [ 116.614090][ T6737] tomoyo_realpath_from_path+0x19d/0x720 [ 116.614122][ T6737] tomoyo_path_number_perm+0x248/0x590 [ 116.614138][ T6737] ? tomoyo_path_number_perm+0x235/0x590 [ 116.614156][ T6737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.614196][ T6737] ? __pfx_lock_release+0x10/0x10 [ 116.614218][ T6737] ? trace_lock_acquire+0x14e/0x1f0 [ 116.614240][ T6737] ? lock_acquire+0x2f/0xb0 [ 116.614261][ T6737] ? __fget_files+0x40/0x3a0 [ 116.614288][ T6737] ? __fget_files+0x206/0x3a0 [ 116.614316][ T6737] security_file_ioctl+0x9b/0x240 [ 116.614337][ T6737] __x64_sys_ioctl+0xb7/0x200 [ 116.614359][ T6737] do_syscall_64+0xcd/0x250 [ 116.614386][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.614409][ T6737] RIP: 0033:0x7f9c66f8cd29 [ 116.614422][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.614437][ T6737] RSP: 002b:00007f9c67d86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.614453][ T6737] RAX: ffffffffffffffda RBX: 00007f9c671a5fa0 RCX: 00007f9c66f8cd29 [ 116.614463][ T6737] RDX: 00000000200000c0 RSI: 00000000c02064b6 RDI: 0000000000000003 [ 116.614473][ T6737] RBP: 00007f9c67d86090 R08: 0000000000000000 R09: 0000000000000000 [ 116.614482][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.614491][ T6737] R13: 0000000000000000 R14: 00007f9c671a5fa0 R15: 00007ffc3b63ebd8 [ 116.614514][ T6737] [ 116.614525][ T6737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.887102][ T6738] binder: 6730:6738 ioctl c0306201 20000280 returned -14 [ 117.275629][ T5919] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.303561][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 117.303601][ T29] audit: type=1400 audit(1737802624.960:585): avc: denied { sys_admin } for pid=6743 comm="syz.3.201" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 117.512285][ T5919] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 117.597474][ T6756] mqueue: Unknown parameter '' [ 117.693647][ T5919] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 117.720589][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.728655][ T5919] usb 1-1: Product: syz [ 117.739503][ T5919] usb 1-1: Manufacturer: syz [ 117.757440][ T5919] usb 1-1: SerialNumber: syz [ 118.283007][ T6746] ======================================================= [ 118.283007][ T6746] WARNING: The mand mount option has been deprecated and [ 118.283007][ T6746] and is ignored by this kernel. Remove the mand [ 118.283007][ T6746] option from the mount to silence this warning. [ 118.283007][ T6746] ======================================================= [ 118.317875][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.461313][ T6746] tmpfs: Bad value for 'mpol' [ 118.473157][ T5919] usb 1-1: selecting invalid altsetting 1 [ 118.530608][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.770790][ T5919] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 118.770827][ T5919] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 119.360718][ T29] audit: type=1400 audit(1737802626.560:586): avc: denied { connect } for pid=6743 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.389421][ T5919] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 119.414345][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.448854][ T6746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6746 comm=syz.0.200 [ 119.454174][ T5919] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 119.522274][ T5919] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 119.537231][ T5919] usb 1-1: media controller created [ 119.561052][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.585974][ T29] audit: type=1400 audit(1737802627.050:587): avc: denied { getopt } for pid=6745 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.607398][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.620553][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.655392][ T9] usb 3-1: Product: syz [ 119.669827][ T9] usb 3-1: Manufacturer: syz [ 119.682832][ T9] usb 3-1: SerialNumber: syz [ 119.715815][ T9] usb 3-1: config 0 descriptor?? [ 119.757924][ T5919] DVB: Unable to find symbol m88rs2000_attach() [ 119.776908][ T5919] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 119.776938][ T5919] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 119.861140][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 119.880414][ T5919] usb 1-1: USB disconnect, device number 6 [ 120.126299][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.103385][ T9] usb 3-1: USB disconnect, device number 3 [ 121.122665][ T29] audit: type=1400 audit(1737802628.790:588): avc: denied { read } for pid=6793 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.165928][ T29] audit: type=1400 audit(1737802628.810:589): avc: denied { write } for pid=6793 comm="syz.3.212" path="socket:[12408]" dev="sockfs" ino=12408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.189519][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.207432][ T29] audit: type=1400 audit(1737802628.810:590): avc: denied { write } for pid=6791 comm="syz.4.211" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 121.372074][ T29] audit: type=1400 audit(1737802628.810:591): avc: denied { ioctl } for pid=6791 comm="syz.4.211" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 121.404635][ T29] audit: type=1400 audit(1737802628.830:592): avc: denied { ioctl } for pid=6793 comm="syz.3.212" path="socket:[12407]" dev="sockfs" ino=12407 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.897464][ T29] audit: type=1400 audit(1737802632.550:593): avc: denied { name_bind } for pid=6828 comm="syz.0.222" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.918994][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.310838][ T29] audit: type=1400 audit(1737802632.550:594): avc: denied { map } for pid=6828 comm="syz.0.222" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.334494][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.677740][ T29] audit: type=1400 audit(1737802633.150:595): avc: denied { getopt } for pid=6830 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.824560][ T5919] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 126.114249][ T5919] usb 5-1: not running at top speed; connect to a high speed hub [ 126.124291][ T5919] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 126.144584][ T5919] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 126.166601][ T29] audit: type=1400 audit(1737802633.820:596): avc: denied { bind } for pid=6843 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.185735][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.241135][ T5919] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=1e.13 [ 126.250218][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.272507][ T29] audit: type=1400 audit(1737802633.820:597): avc: denied { name_bind } for pid=6843 comm="syz.0.226" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 126.334179][ T5919] usb 5-1: Product: syz [ 126.338394][ T5919] usb 5-1: Manufacturer: syz [ 126.353340][ T5919] usb 5-1: SerialNumber: syz [ 126.923962][ T29] audit: type=1400 audit(1737802633.820:598): avc: denied { node_bind } for pid=6843 comm="syz.0.226" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 126.980607][ T29] audit: type=1400 audit(1737802634.100:599): avc: denied { listen } for pid=6843 comm="syz.0.226" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.000963][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.085168][ T29] audit: type=1400 audit(1737802634.100:600): avc: denied { connect } for pid=6843 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.130965][ T29] audit: type=1400 audit(1737802634.100:601): avc: denied { name_connect } for pid=6843 comm="syz.0.226" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 127.160407][ T5919] usbsevseg 5-1:7.0: USB 7 Segment device now attached [ 127.210770][ T5919] usb 5-1: USB disconnect, device number 12 [ 127.233505][ T5919] usbsevseg 5-1:7.0: USB 7 Segment now disconnected [ 127.300608][ T29] audit: type=1400 audit(1737802634.280:602): avc: denied { write } for pid=6843 comm="syz.0.226" laddr=172.20.20.170 lport=57336 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 128.590549][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.780647][ T5925] usb 2-1: config 64 has an invalid interface number: 79 but max is 0 [ 128.790654][ T5925] usb 2-1: config 64 has no interface number 0 [ 128.796813][ T5925] usb 2-1: config 64 interface 79 has no altsetting 0 [ 128.909680][ T5925] usb 2-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=a5.d3 [ 128.965151][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.980764][ T5925] usb 2-1: Product:   [ 128.985021][ T5925] usb 2-1: Manufacturer: 䰰禅뿹톑䡾蘏೿쪯癿蛥變ᦑ렧꧌嫂肖燠哻磠϶͔绽紸枞峊矡턩풩擉꭪䩹棦ꀱ볚␇ꉶ边๲㐝靖Ⳉ⿻㹗桙꾐쵻ᚽ扙﮸詮癫v集줥깷ẃ奀砗頶Ŭ溢ﺑ査홋㾸妸㙖㤽敓◛⏔贗㼧⥏洓鯰闠풏⛙ [ 129.160789][ T5867] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 129.273938][ T5925] usb 2-1: SerialNumber: 쬍껫官˩矲䕍꜂᭘㼯땿盘඘鉜庶Ҏ졚㸠⹦ [ 234.390452][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 234.397431][ C1] rcu: 0-...!: (1 GPs behind) idle=93a4/1/0x4000000000000000 softirq=17116/17118 fqs=1 [ 234.407991][ C1] rcu: (detected by 1, t=10506 jiffies, g=11281, q=164 ncpus=2) [ 234.415713][ C1] Sending NMI from CPU 1 to CPUs 0: [ 234.415738][ C0] NMI backtrace for cpu 0 [ 234.415747][ C0] CPU: 0 UID: 0 PID: 5925 Comm: kworker/0:5 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 234.415762][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.415771][ C0] Workqueue: usb_hub_wq hub_event [ 234.415793][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 234.415816][ C0] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 234.415828][ C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000002 [ 234.415838][ C0] RAX: 0000000000000000 RBX: ffff8880b862c880 RCX: ffffffff81a6ff8e [ 234.415847][ C0] RDX: 0000000000000004 RSI: 0000000000000010 RDI: 0000000000000000 [ 234.415855][ C0] RBP: ffff888053e97340 R08: 0000000000000001 R09: 0000000000000000 [ 234.415863][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffff8880b862c680 [ 234.415872][ C0] R13: 0000000000000010 R14: ffff8880b862c680 R15: ffffffff89690320 [ 234.415880][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 234.415896][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.415905][ C0] CR2: 00007f6fa5771d58 CR3: 000000007b30c000 CR4: 00000000003526f0 [ 234.415913][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.415921][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.415929][ C0] Call Trace: [ 234.415935][ C0] [ 234.415942][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 234.415960][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 234.415977][ C0] ? nmi_handle+0x1ac/0x5d0 [ 234.415994][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 234.416013][ C0] ? default_do_nmi+0x6a/0x160 [ 234.416027][ C0] ? exc_nmi+0x170/0x1e0 [ 234.416040][ C0] ? end_repeat_nmi+0xf/0x53 [ 234.416058][ C0] ? __pfx_advance_sched+0x10/0x10 [ 234.416074][ C0] ? enqueue_hrtimer+0x2ee/0x3c0 [ 234.416087][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 234.416106][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 234.416125][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 234.416144][ C0] [ 234.416148][ C0] [ 234.416152][ C0] enqueue_hrtimer+0xfa/0x3c0 [ 234.416164][ C0] __hrtimer_run_queues+0x903/0xae0 [ 234.416180][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 234.416192][ C0] ? read_tsc+0x9/0x20 [ 234.416207][ C0] hrtimer_interrupt+0x392/0x8e0 [ 234.416224][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 234.416243][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 234.416260][ C0] [ 234.416264][ C0] [ 234.416268][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.416286][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 234.416304][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 ca 3e f6 48 89 df e8 ee 49 3f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 20 30 f6 65 8b 05 96 f2 ab 74 85 c0 74 16 5b [ 234.416315][ C0] RSP: 0018:ffffc90004b16f78 EFLAGS: 00000246 [ 234.416325][ C0] RAX: 0000000000000006 RBX: ffff888028ec0000 RCX: 1ffffffff2ddd635 [ 234.416334][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd2e7c0 [ 234.416342][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff2dd6fa8 [ 234.416350][ C0] R10: ffffffff96eb7d47 R11: 0000000000000006 R12: 0000000000000002 [ 234.416358][ C0] R13: 0000000000000000 R14: ffff8880290db408 R15: ffff8880357e6008 [ 234.416372][ C0] dummy_urb_enqueue+0x546/0x8e0 [ 234.416389][ C0] usb_hcd_submit_urb+0x2d1/0x2090 [ 234.416403][ C0] ? __kmalloc_noprof+0x21c/0x510 [ 234.416416][ C0] ? usb_alloc_urb+0x69/0xa0 [ 234.416428][ C0] ? usb_control_msg+0x1d4/0x4b0 [ 234.416441][ C0] ? usb_get_string+0xab/0x1a0 [ 234.416455][ C0] ? usb_string_sub+0x107/0x390 [ 234.416470][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 234.416483][ C0] ? usb_generic_driver_probe+0xb1/0x110 [ 234.416498][ C0] ? usb_probe_device+0xec/0x3e0 [ 234.416514][ C0] ? really_probe+0x23e/0xa90 [ 234.416532][ C0] ? __driver_probe_device+0x1de/0x440 [ 234.416548][ C0] ? driver_probe_device+0x4c/0x1b0 [ 234.416565][ C0] ? __device_attach_driver+0x1df/0x310 [ 234.416582][ C0] ? bus_for_each_drv+0x157/0x1e0 [ 234.416596][ C0] ? __device_attach+0x1e8/0x4b0 [ 234.416613][ C0] ? bus_probe_device+0x17f/0x1c0 [ 234.416628][ C0] ? device_add+0x114b/0x1a70 [ 234.416640][ C0] ? usb_new_device+0xd09/0x1a20 [ 234.416655][ C0] ? hub_event+0x2d9a/0x4e10 [ 234.416671][ C0] ? process_one_work+0x9c5/0x1ba0 [ 234.416687][ C0] ? worker_thread+0x6c8/0xf00 [ 234.416709][ C0] ? kthread+0x3af/0x750 [ 234.416723][ C0] ? ret_from_fork+0x45/0x80 [ 234.416738][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 234.416755][ C0] usb_submit_urb+0x87c/0x1730 [ 234.416771][ C0] ? __init_swait_queue_head+0xca/0x150 [ 234.416786][ C0] usb_start_wait_urb+0x103/0x4c0 [ 234.416802][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 234.416820][ C0] ? __asan_memset+0x23/0x50 [ 234.416839][ C0] usb_control_msg+0x327/0x4b0 [ 234.416855][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 234.416872][ C0] usb_get_string+0xab/0x1a0 [ 234.416888][ C0] usb_string_sub+0x107/0x390 [ 234.416902][ C0] ? kasan_save_track+0x14/0x30 [ 234.416921][ C0] usb_string+0x307/0x670 [ 234.416937][ C0] usb_cache_string+0x80/0x150 [ 234.416953][ C0] usb_set_configuration+0x1697/0x1c50 [ 234.416975][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 234.416991][ C0] usb_generic_driver_probe+0xb1/0x110 [ 234.417006][ C0] usb_probe_device+0xec/0x3e0 [ 234.417023][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 234.417041][ C0] really_probe+0x23e/0xa90 [ 234.417059][ C0] __driver_probe_device+0x1de/0x440 [ 234.417076][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 234.417089][ C0] driver_probe_device+0x4c/0x1b0 [ 234.417107][ C0] __device_attach_driver+0x1df/0x310 [ 234.417125][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 234.417143][ C0] bus_for_each_drv+0x157/0x1e0 [ 234.417157][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 234.417173][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.417189][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.417206][ C0] __device_attach+0x1e8/0x4b0 [ 234.417223][ C0] ? __pfx___device_attach+0x10/0x10 [ 234.417241][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 234.417256][ C0] bus_probe_device+0x17f/0x1c0 [ 234.417272][ C0] device_add+0x114b/0x1a70 [ 234.417286][ C0] ? __pfx_device_add+0x10/0x10 [ 234.417298][ C0] ? add_device_randomness+0xb8/0xf0 [ 234.417315][ C0] usb_new_device+0xd09/0x1a20 [ 234.417334][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 234.417353][ C0] hub_event+0x2d9a/0x4e10 [ 234.417377][ C0] ? __pfx_hub_event+0x10/0x10 [ 234.417395][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 234.417412][ C0] ? rcu_is_watching+0x12/0xc0 [ 234.417426][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 234.417440][ C0] ? process_one_work+0x921/0x1ba0 [ 234.417456][ C0] ? lock_acquire+0x2f/0xb0 [ 234.417472][ C0] ? process_one_work+0x921/0x1ba0 [ 234.417489][ C0] process_one_work+0x9c5/0x1ba0 [ 234.417507][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 234.417528][ C0] ? __pfx_process_one_work+0x10/0x10 [ 234.417543][ C0] ? rcu_is_watching+0x12/0xc0 [ 234.417558][ C0] ? assign_work+0x1a0/0x250 [ 234.417573][ C0] worker_thread+0x6c8/0xf00 [ 234.417593][ C0] ? __pfx_worker_thread+0x10/0x10 [ 234.417609][ C0] kthread+0x3af/0x750 [ 234.417624][ C0] ? __pfx_kthread+0x10/0x10 [ 234.417637][ C0] ? lock_acquire+0x2f/0xb0 [ 234.417655][ C0] ? __pfx_kthread+0x10/0x10 [ 234.417670][ C0] ret_from_fork+0x45/0x80 [ 234.417685][ C0] ? __pfx_kthread+0x10/0x10 [ 234.417703][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.417721][ C0] [ 234.417734][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g11281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 235.186890][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 235.196850][ C1] rcu: RCU grace-period kthread stack dump: [ 235.202726][ C1] task:rcu_preempt state:R running task stack:28280 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 235.214475][ C1] Call Trace: [ 235.217746][ C1] [ 235.220674][ C1] __schedule+0x1142/0x5b60 [ 235.225177][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 235.230385][ C1] ? __pfx___schedule+0x10/0x10 [ 235.235234][ C1] ? schedule+0x298/0x350 [ 235.239563][ C1] ? __pfx_lock_release+0x10/0x10 [ 235.244591][ C1] ? lock_acquire+0x2f/0xb0 [ 235.249093][ C1] ? schedule+0x1fd/0x350 [ 235.253422][ C1] schedule+0xe7/0x350 [ 235.257490][ C1] schedule_timeout+0x124/0x280 [ 235.262336][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 235.267706][ C1] ? __pfx_process_timeout+0x10/0x10 [ 235.272994][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 235.278798][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 235.284260][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 235.289048][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 235.294351][ C1] ? rcu_gp_init+0xc82/0x1630 [ 235.299050][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.304258][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.310068][ C1] rcu_gp_kthread+0x271/0x380 [ 235.314748][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.319952][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.325151][ C1] ? __kthread_parkme+0x148/0x220 [ 235.330172][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.335379][ C1] kthread+0x3af/0x750 [ 235.339445][ C1] ? __pfx_kthread+0x10/0x10 [ 235.344037][ C1] ? __pfx_kthread+0x10/0x10 [ 235.348643][ C1] ret_from_fork+0x45/0x80 [ 235.353061][ C1] ? __pfx_kthread+0x10/0x10 [ 235.357650][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.362421][ C1] [ 235.365435][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 235.371748][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 235.382062][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.392110][ C1] Workqueue: events_unbound toggle_allocation_gate [ 235.398623][ C1] RIP: 0010:smp_call_function_many_cond+0x4cb/0x12c0 [ 235.405294][ C1] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 ff 83 e0 01 41 [ 235.424896][ C1] RSP: 0000:ffffc90000ab7928 EFLAGS: 00000293 [ 235.430957][ C1] RAX: 0000000000000000 RBX: ffff8880b8646980 RCX: ffffffff81adc2da [ 235.438925][ C1] RDX: ffff888143ec2440 RSI: ffffffff81adc2b4 RDI: 0000000000000005 [ 235.446889][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 235.454855][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d31 [ 235.462816][ C1] R13: 0000000000000001 R14: ffff8880b873fe00 R15: ffff8880b8646988 [ 235.470779][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 235.479703][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.486281][ C1] CR2: 00007f57c1911d58 CR3: 000000000df80000 CR4: 00000000003526f0 [ 235.494248][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.502210][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.510175][ C1] Call Trace: [ 235.513445][ C1] [ 235.516282][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 235.522605][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 235.527808][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 235.533270][ C1] ? timekeeping_advance+0x72e/0xa90 [ 235.538551][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 235.544198][ C1] ? __asan_memcpy+0x3c/0x60 [ 235.548811][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.553579][ C1] ? update_process_times+0x178/0x2d0 [ 235.558971][ C1] ? __pfx_update_process_times+0x10/0x10 [ 235.564701][ C1] ? update_wall_time+0x1c/0x40 [ 235.569555][ C1] ? tick_nohz_handler+0x376/0x530 [ 235.574670][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 235.580126][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 235.585498][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 235.591211][ C1] ? read_tsc+0x9/0x20 [ 235.595283][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 235.600397][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 235.606559][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 235.612369][ C1] [ 235.615293][ C1] [ 235.618217][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.624376][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 235.630439][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 235.636500][ C1] ? smp_call_function_many_cond+0x4cb/0x12c0 [ 235.642561][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 235.648634][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 235.653652][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 235.658763][ C1] text_poke_bp_batch+0x22b/0x760 [ 235.663787][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 235.668817][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 235.674374][ C1] ? text_poke_queue+0xef/0x180 [ 235.679242][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 235.685500][ C1] text_poke_finish+0x30/0x40 [ 235.690180][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 235.696172][ C1] jump_label_update+0x1d7/0x400 [ 235.701139][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 235.707045][ C1] static_key_enable+0x1a/0x20 [ 235.711810][ C1] toggle_allocation_gate+0xfc/0x260 [ 235.717099][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 235.723001][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 235.728198][ C1] ? process_one_work+0x921/0x1ba0 [ 235.733308][ C1] ? lock_acquire+0x2f/0xb0 [ 235.737810][ C1] ? process_one_work+0x921/0x1ba0 [ 235.742926][ C1] process_one_work+0x9c5/0x1ba0 [ 235.747870][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 235.754026][ C1] ? __pfx_process_one_work+0x10/0x10 [ 235.759395][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.764160][ C1] ? assign_work+0x1a0/0x250 [ 235.768754][ C1] worker_thread+0x6c8/0xf00 [ 235.773350][ C1] ? __kthread_parkme+0x148/0x220 [ 235.778368][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.783477][ C1] kthread+0x3af/0x750 [ 235.787544][ C1] ? __pfx_kthread+0x10/0x10 [ 235.792129][ C1] ? lock_acquire+0x2f/0xb0 [ 235.796636][ C1] ? __pfx_kthread+0x10/0x10 [ 235.801223][ C1] ret_from_fork+0x45/0x80 [ 235.805642][ C1] ? __pfx_kthread+0x10/0x10 [ 235.810231][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.815001][ C1]