last executing test programs: 3m10.325546383s ago: executing program 1 (id=72): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000004000000030000000001000013010000000000000fffff000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000fcdbdf2524ff000000000000000002004e22000002000d0001000000feff0c00010000000c00028006000f0075030000000000000000060004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x8, 0x3, 0xd, 0x200, 0xffffffff, 0x1c, 0xe}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0x541b, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0xe0442, 0x0) write$tcp_mem(r6, &(0x7f00000001c0)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 3m8.850695926s ago: executing program 1 (id=76): openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008a0000a7350000000000000085000000000000"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x2, 0xc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000040), 0x0, r4) 2m59.842396922s ago: executing program 1 (id=96): openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x2, 0xc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) 2m58.077147877s ago: executing program 1 (id=98): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000010140)={0x2020}, 0x2036) 2m55.521352641s ago: executing program 1 (id=105): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) io_submit(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 2m54.366599861s ago: executing program 1 (id=107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) listen(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x20ffd002) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) listen(r0, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000004c0)={0x9, {{0xa, 0x4e21, 0x3b0, @loopback, 0x6}}}, 0x88) syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x4000000, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x1}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 2m39.319834183s ago: executing program 32 (id=107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) listen(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x20ffd002) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) listen(r0, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000004c0)={0x9, {{0xa, 0x4e21, 0x3b0, @loopback, 0x6}}}, 0x88) syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x4000000, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x1}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 1m32.254234782s ago: executing program 5 (id=284): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0x1, [[0xfffffff8, 0x7fffffff, 0x6, 0x8, 0x401, 0xc, 0x7, 0xff], [0xffffff7f, 0x8, 0x5, 0x12, 0x3ff80000, 0x9, 0x3, 0x7], [0x4, 0x0, 0xfffffffe, 0x7, 0xad, 0x9, 0xbd, 0x2c00]], '\x00', [{0xfffff800, 0x8, 0x0, 0x0, 0x1}, {0x1, 0x4}, {0x3ff, 0x5, 0x0, 0x0, 0x1}, {0x1, 0x10000, 0x1, 0x1, 0x1}, {0x8, 0x99, 0x1}, {0x3, 0x7fff, 0x1, 0x1}, {0x2, 0x33c, 0x1, 0x1, 0x0, 0x1}, {0xc51, 0xfffffffb, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x1}, {0xc0e, 0x4}, {0x2, 0x40, 0x0, 0x1, 0x1}, {0x0, 0x40, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x9}) r1 = socket$kcm(0x10, 0x2, 0x0) flistxattr(r1, &(0x7f0000000000)=""/40, 0x28) 1m31.310515682s ago: executing program 5 (id=290): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150007000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf052000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100"], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x238f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') read$FUSE(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x59, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x9, 0x100, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x745a}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x600, 0xe, 0xe2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x25, 0x1, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x67, 0x5, 0x10, 0x20, 0x6}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x4, 0xf00f, 0x2, [0x30, 0xff000f, 0x3f, 0xf, 0xffc00f]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}]}) socket$inet_dccp(0x2, 0x6, 0x0) 1m27.169760209s ago: executing program 5 (id=297): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 1m18.375571317s ago: executing program 5 (id=321): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1m16.007309492s ago: executing program 5 (id=327): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="6df321a137cf0a522a4e8aa5610908833224176aa61d5c52ce5a08fd50bcdbae3a8f8b09e0fa58b5284cf35ea1cd28c9831700b1e10bac37203120a222e6c13b3e", @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYRESHEX=r2, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000000338067c4e781ccf6ec78c25152f6c3b5424af30840ae91b4b608b44b077fbf297d"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 1m13.88137005s ago: executing program 5 (id=332): syz_emit_ethernet(0x8c, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x7, "9606053d00"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x2}, {0x0, 0xa, "ffd11634eea26b0f"}, {0x0, 0x5, "02a209"}]}]}}, "a811a23da439"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 58.116132175s ago: executing program 33 (id=332): syz_emit_ethernet(0x8c, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x7, "9606053d00"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x2}, {0x0, 0xa, "ffd11634eea26b0f"}, {0x0, 0x5, "02a209"}]}]}}, "a811a23da439"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 17.40400891s ago: executing program 6 (id=454): kexec_load(0x0, 0x0, 0x0, 0x0) 17.152180929s ago: executing program 6 (id=457): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003040000000403", @ANYRES64=r3]}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x54}}, 0x0) 17.059027817s ago: executing program 3 (id=458): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000000338067c4e781ccf6ec78c25152f6c3b5424af30840ae91b4b608b44b077fbf297d"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 15.798413321s ago: executing program 3 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 14.528620819s ago: executing program 3 (id=465): unshare(0x64000600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') r5 = syz_usb_connect$cdc_ncm(0x3, 0xb3, &(0x7f0000003900)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010902a10002010700f60804000001020d00000a24060001bc46ef0e7d05240001000d240f01020000000700000009060000000014000000010c241b01007f2e0a020400ff1524120700a317a88b045e4f01a607c0ffcb7e392a0424020407240a0102fa021024070700007f0008000001ff03ff0f0905810340004202080904010000020d00000904010102020d0000090582022800060606090503022000050309f37d97e859d53b6ea72e26cff0175d65bc1b70feacf20638f384c9c2f48d3047666563eb77d462601272f5d46599de51ae339c980609e28c155900c7ee4527a154c6d208a48b51aac4dc8bd75fd529d0daef9ed2df77f1adda2ce1d3fb351e940f331b878f3fe0a81e74"], &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xff, 0x2, 0x1, 0x60, 0x7}, 0x151, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], 0x2, [{0xce, &(0x7f0000002900)=@string={0xce, 0x3, "c69a42b306dbf2c5a22a84fd091db053cf77379f6449dc46fd5c69df605f45ac719d3266e9452862dae39d4a2d528ffb680736dbce7785142d54e7b4e03070ecf72f8df80e2ed1e1caa9a094d71c8c642ec4e346865d78093999c3c307e4f4c518c0ce5eadc205d714b6166b5a6e99adc78098256858fe23ee143e0a3dea4cd26eb0c9580ff17daf30e4490e831f5081475b22c061887ec34b5d7418cf151c63365e452dff3e296a3d45fcb4f49ec25d35f14330014b68428bee00b84b5c5d5c3bd83796fcdec758472b105a"}}, {0xd2, &(0x7f0000002a00)=@string={0xd2, 0x3, "f5a544faa18da4b59b9d0846d712ba98ed9e78a0dba3b0b3ba1757484fbad43620db9c864ec0029a75abb736cadac95d41afd5bebba9eae08e06b5b54c53f87d2da9f127edbacb43fe2f2b67d43652b757ed4688b20c6edb71e1810c890ba1a5f7e421fca7623303d7b90ed1f41233c1b3702b8edea542a9dbbcf2b4e1ec4356c6d9bf9b47a476f4dd4d1cc91c2817f711d8daa510a6077077919c5fcc371f2192599d18b37bc4c5491787d6f87840323817657c9e474f7955a32fc5c67c00f9a87b22ed254f3c49381e1bdaddebfd79"}}]}) syz_usb_control_io(r5, &(0x7f0000002d80)={0x2c, &(0x7f0000002b00)={0x20, 0xf, 0xf5, {0xf5, 0xc, "efb87a9144a1de43be898c91dae208264666920b0ab80f10d5f05f73457e0db178e4bf7f60840915e35d2b5fee63585774b8237671fa6e02e704198c8445e40b878996dbefbb845d66053a67611955b4f91ebbf2f99d244efbf65f4be3f12cd754c3f40713c2ee168f775d72bece3b7065e1ccf41817dd653684b1034c372f9f019d0dd9ecc798bd52456008df28141a12f49aa7f59333f9d1c077ad5a9c135fac09f0088dc5773a69191e624a25e7cd7be66e48773eeeedec05cce170fdbf11e490bec4bf875ddbde9ea9e662b5288873a83a6ff233f3235c7dcd3c580ff63669f7283574311cf63006f3d9b2f3f66a502c3d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000002c00)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x4, 0x401}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x2, 0x5, 0x1ff, 0x6}]}}, &(0x7f0000002c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x3, 0x8, "bc7bda0b", "a0f2f43a"}}, &(0x7f0000002d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x7, 0x30, 0x4, 0x1000, 0xde7e}}}, &(0x7f00000032c0)={0x84, &(0x7f0000002dc0)={0x80, 0x5, 0xff, "9a58c7f1173ea903de7853a47065b13c1dda60c62c63a7ef0bddd9b3e1307a80427d68484ac91f5c3984d3d3b4d12a4a5cc85ee74eedf90961b7db75dfc067ea91dfb557b7b856c75c49261965fdd0d936cd3839c0f139fb398d2fd1e7d1bcd593eb0d530fa2cf1b0e61610417277d8de16b24aabf9b7c6fb3f3aff4cf2b927057ac66d66fda921c4d77c4cd9e8f55f44a57bc50cc906194cd4ea1313a4a8969e6d7f824f18360b49bd8d1e5a05fc365ed10501bec505614fae7ff2c5f3a84b5e4c95a5393b5ed58d35fe34ec07cea34c4752c83cf1d28d3bc19a34001ac970552dc07b767eeb3881ef02bcac9bd0bca33f0f78a03c811ed56af2cc8f14003"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000002f80)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000002fc0)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000003000)={0x40, 0x7, 0x2, 0xfff9}, &(0x7f0000003040)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000003080)={0x40, 0xb, 0x2, "1a51"}, &(0x7f00000030c0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000003100)={0x40, 0x13, 0x6, @remote}, &(0x7f0000003140)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000003180)={0x40, 0x19, 0x2, "61a7"}, &(0x7f00000031c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000003200)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000003240)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000003280)={0x40, 0x21, 0x1, 0x6}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0000000000000000000051229dc9", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7fff, 0x8, 0x8, 0xd}, {0x81, 0x4, 0x0, 0x29f3}, {0xfe61, 0x4d, 0x98, 0x4}, {0x884, 0x0, 0x2, 0x1}, {0xfffd, 0x8d, 0x8, 0xffffea2e}, {0x1000, 0xfb, 0xd5, 0xb}]}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000012002927000000000000000028001a"], 0x38}}, 0x0) getpeername$packet(r2, &(0x7f0000003600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003640)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003780)={{r4, 0xffffffffffffffff}, &(0x7f0000003700), &(0x7f0000003740)=r6}, 0x20) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000037c0), 0x583080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0x19, 0x29, &(0x7f0000003380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x1, 0x2, 0x0, 0x6, 0x2, 0xc, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa30}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3ff, 0x8f, &(0x7f0000003540)=""/143, 0x41000, 0x0, '\x00', r10, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000003680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000036c0)={0x2, 0x4, 0x0, 0x2}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000003800)=[r2, r11, r12, r3], 0x0, 0x10, 0xdaa7, @void, @value}, 0x94) recvmmsg(r7, &(0x7f0000002580)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000025c0)=""/232, 0xe8}, {&(0x7f0000002380)=""/138, 0x8a}, {&(0x7f0000002440)=""/108, 0x6c}], 0x4, &(0x7f0000002500)=""/69, 0x45}, 0x1}], 0x1, 0x102, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x69e7) 13.408181447s ago: executing program 4 (id=469): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 12.72005991s ago: executing program 6 (id=470): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xf}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) semget(0x1, 0xdf9d981d985f570c, 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x80000002}) r3 = getpid() openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="163cd8f5fe41f7586c5439a11c545740412c2f203e19bb33935d0e8a4866f503a19fc3f1e60c08cb9174596e1d9b200d4502cb6d4cdcfa05000000000000001481b45abb83ce3d909c889f118f51e767f3bc2ecc4ed19daccdcf633dabd8e41ed14e07ded20bc5d95f9e530f0dc8b7c1465ce513d00fd3d756ea65a58a03ae971cb3509b8a7a328ff98462a2bcb78c5a907eab56fe34c65dd9b27f6fc58ff36ca9995d298426a388c1710e10b75d583ef48d170657d2900aba08"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3e, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x8000, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0xfc, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "48b7"}, {0x5, 0x24, 0x0, 0x71df}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0xa}, {0x6, 0x24, 0x1a, 0x7fff}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x4, 0xef, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xca, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x70, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x32, 0x9, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xf9, 0x7, 0x6, 0x40, 0x9}, 0x61, &(0x7f0000000100)={0x5, 0xf, 0x61, 0x2, [@generic={0x52, 0x10, 0x1, "dbb751ae99f97edf3f46cc3f04cc0cc239a413324036a9a53c0dc2fb69318f5036237bf6d17c47d20a2ebabc83c4d80665d13cea064d86f4dae30109518554b4d069f6975ef3761a2d89e58f034e68"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0xe, 0x6ec}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}]}) 11.899205623s ago: executing program 4 (id=472): r0 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 10.717565977s ago: executing program 3 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000010140)={0x2020}, 0x2036) 9.824233751s ago: executing program 4 (id=477): openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x2, 0xc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000040), 0x0, r4) 8.8800008s ago: executing program 3 (id=479): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 7.723960986s ago: executing program 2 (id=480): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xfffffffc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x81f) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x24c}}) io_uring_enter(r3, 0x5464, 0x4040, 0x0, 0x0, 0xffffffffffffffa8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = timerfd_create(0x1, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 6.534165988s ago: executing program 6 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 6.502770151s ago: executing program 2 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 5.719763914s ago: executing program 4 (id=483): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r0, 0x851, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@private=0xa010100, 0x0, 0x2000, 0xfffc, 0x4, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x65a, 0x8002}, {0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8) connect$inet6(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x100000000) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0xfc, &(0x7f00000005c0)={0x5, 0xf, 0xfc, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x6, 0xf00f, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x7, 0x1, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "288cf6c31486d40b6f8e5a8c772cef83"}, @generic={0xc2, 0x10, 0xb, "b37b7cae600b5a9df6bc58e651e05ee043e43ec53d81344345192a54574329ac6ca22e9384722061fa85e10f1ae9a439b6559fc918d9ecdad145acd27fc44d9b9a11ce68bcda8a565d275b23ed972f6baf54c76b518a1bc48cd5da1af49da2a9ad2af6bcc27bf86c2875f522750571a73160ded518319b501e6183b26b282bfd48e7635afe7246339d5c9d386da95768c423c70e7b609c5ad8c8864df0744ed85b3d399f4e0c8f0717ca37a6de5903e1c3ca49ca1092c74c5b587db26b646c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xda, 0x3, 0x9343}]}, 0x3, [{0xe6, &(0x7f0000000700)=@string={0xe6, 0x3, "55af795e2c67c2d1e2baf3597a4ade7e91a315a234d0343690b89f94bab48d87bb21fb5dfa1a86a67b50c7090de611492fa4b0fcaf88401bccd97a31266f31ed267c10c6f918dc12097831d78c93c67e72e72f910cee5c2b56ff7de9afb73799c041148a5e8bcc87ed4d85ea2433b45dfdfa5500e4ae16a66478a0a99415f96ec00505d2d2ef23b390e5c07f8a3c25ee9167adff4a4f47007a78c0daf2b02f909d6449d490d78f0919fffc43e52a4775aa77508941718f3472a5e0bd756489d9cc746a15c3dd16f11645a6ea325f94fd2466e78bc6161b10aecc26ecf5e4ee3aa669ce6d"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}, {0xb1, &(0x7f0000000280)=@string={0xb1, 0x3, "202534bbe1d7d4698e1d3e7a998693a0358e604559546ea2036b519dd8bbdad2a27ce4443a29d86a7eb46c2d9957d5e81345b6f6f145f42f3d93a984573dbb7203d704d3735035472d59663c03a2c0f0014c19ed6fde9cd7bd086f1de4ae23e84d3297fb11db7ef584d77554d51668bb527436fcb666175deb86e377aad93294101e8166ca5b3f3f48039bae9145c22a71b5e34b355fc4f1fbe42ab521ded75b1399155c49fc7f5cc6e12469339feb"}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r7}}], 0x20, 0x6044}, 0x6) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) 5.520939634s ago: executing program 2 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1f, 0x0, 0x0, "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", 0x0, "6ec676dce86faa1bf093a4c779c066d432ee4be2"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "b6d58d14c3ef2fe9"}, 0x3}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000002000)=""/4096, 0x1000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x80c0, 0x40, 0x28}, 0x18) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x880) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000004c0)={0x100000, 0x1000, 0x0, 0x6, 0x80000001, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) keyctl$set_reqkey_keyring(0xe, 0x6) 5.468972909s ago: executing program 6 (id=485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfc01, 0x500}}}, {{@arp={@local, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'xfrm0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @empty, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.440042769s ago: executing program 0 (id=486): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x80000000, 0x2, {0x6, @win={{0x5043, 0x9c, 0x6, 0x1}, 0x2, 0x3, 0x0, 0x6, 0x0, 0x8}}, 0x65c}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 4.488774387s ago: executing program 0 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000010140)={0x2020}, 0x2036) 4.444902902s ago: executing program 2 (id=488): r0 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 3.307109298s ago: executing program 0 (id=489): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x1, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64, @ANYBLOB="fb3de22b0989f16e8a0fe97f9dbfc1c1baaf6e8232da6286dc15050024cde8ba7666f871f2ead1926864774facd8517c1bb7d7688120383754e65e001cee1d08f0cf56bd5269a0e68f26ebd0cce11778ce5d872a294136e6286f75d4f06bb88fce4dcb90298a3f516e55316865896c44174138681dbfaf350be294a17fe5898365e3b14616d1dc16060631f6b43c9a99cb3c47a7270058ed14a36b1d9efc4b21c2c1571e91abd70e320b5e986fdf60eaa26de84f94"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000000), 0x80000000, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kexec_load(0x0, 0x0, 0x0, 0x0) 3.282746855s ago: executing program 3 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1f, 0x0, 0x0, "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", 0x0, "6ec676dce86faa1bf093a4c779c066d432ee4be2"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "b6d58d14c3ef2fe9"}, 0x3}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000002000)=""/4096, 0x1000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x80c0, 0x40, 0x28}, 0x18) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x880) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000004c0)={0x100000, 0x1000, 0x0, 0x6, 0x80000001, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"24783e245402fd60273e14c3eb090723ac476c7538b5ea19588c28b06516b72c6d73315762a6555c17a6d5554aaacc942d2328f17bd1c1121342c854847f3de3f12ce9d138093f6a5df3c89a72cb4e7b08827e473a39dffaab7929106845137921fc23a872ad3bf6cfcecbab32d6936e26f52c5ad8b0afd9102d54eec650987b229e64deac8e9aaa9c38229a701259d2b4211012b3eee1d382e7fce9a55a458c4fab7878d594718a47681c915f7fd7c502d1099140cc71538582497de53482f60ec3e66f21cab92485ed154f7283e05539487e211cf750c461ef2c76315064df74415bcdfa867d8b27fa63b3bba3230a1a9605d3091204dba17ca4b55d4f721607521f5e45c791bb45de35eb1917c1e9c1f65bdcca8822a03a1d2ef1118681e258c7e20e8bbdbdbae0b2d015d019428cc9742e92151bb7c4b2b0a36b9042249028b7b2a068b87b9dfbdd8dbd4b7e4e74801b9e2e4e112462ed6f14e2196778e27c041a3c7f6bcbf0ff4d30f692af0c8d160414d4e22427bafa7a8c2f6c8bd9883a3b70aa510654a5441343489d94ee314da0f3886e76b43c028e47138899d2ba84776eaf60da2f8340169152b42df69eb0f583d5cc986112b23650d1d8ed7310a445db4be5cd9918bb5a806a2c7ae870f3b4b1ac46dc42cbe74b51b25da2805d72b61493bdc2e04e4477978b40fd9a965bfa742224adeaae6277f57ad0b695d997a2239c2fd46eb430df27849b1a65d92e1900a1e48225f94f737f9d8c5284f2205df5732afd59bd0b3b1934c7db1581ec4684c3bcd5381e0e3be00cdfc21ba691c45c4537e9690708b68fa700814d27cb50df2b1be14a7a3e3981d6c6044a73ecbe40f2304b724ba10133ffec218b242ae97a52f16984247c28fe950d49dc7900475b777b37813e61d0cfd6da391f07ab622dec7b121967e80d67c8c7db77e05e37712b92aee01230ca29badfd714db3c03bea8e840d5dafc6a27fa98c7a6179ad39df582088e31e17ee283a76c5c9a05d0a0b4fc95a6aa46104947bac4f50b0e57925e3be186df0409e5c2c5b775347e83c9c8829e95623541603ce68589e942d3724ab7963731167f0954faa87b98aba0336469a127f3377a5d0cb91d11749d1489226c9da6abe765c2f1206ca7be3b9f7e116b7bc1baad37b14b842cbb89c348147e493a615f1972ef9baf03cc353c979865573bc40b84ac6cecf673985479ebaf24f2ad9d905874249bed88ed0c69479a0a7b53ecad68cff344866d03e4eb0cf80610af2465d64d3dceaf4fd6a5ee2eda719233fb33ef043b6019fec948bf5d0295a4f7af154475cbb3461650f7fcfc66c03db610ce8244ad432157ba91df573f3e13b430d4272d60b9a9a454bc1cafa87f1aa9c289ab6dae4f0e81f496d6767bf1bb503aebbd8a58e7dba9f643ab02e000d5f01e896e4c1d6e5b9771faacec322aa2b121d679c7941469dc233adfc5a83fe218a8ea686750e1426eb81fdd86ec193102bae34eb7e48986a18d05284ec1cffeae698ef739181f94a0c91a754f333cd44bc9053144c3f1491fc31684376a382b33e8c3d70eedbf5245dc63d86033c739c6f0f4ebab3007075c4dc66d7a8c93a718a7ec03d811b0ee727b0e695ebbc507d410f7e88204bb209beeef2b6fd0b4db48cd33a0b6591d91caf6676a4a74125afc3a04ea7eac3ce2662694999e891e77ef72ee4ec64b92b8918a3cb53cee960caf02b2cfb5449a64ad7ce57a5aa931a898d8adfc25c36d03861d5504772624b69ce823597b4488882e88a0f90362f604d4b722f9255220c3528a547b1c2d73aeb6034e549706fc467072adfd6a951b6a788b1e40a0c12cdc10f4be0e7cbb2b47704a8a684aeaf74d9e08bef07e3be8aed8ac00f398ff9f4e7cac9c5dbaadfdb0858d6d98dcfbddd609d5489e3f18b5db69aeff479281a976d30905eaf78121cf6365ff43e063e768cddd88040cc49c6961ba276f48b7e92419d0eadbf79cf8304ec48f51c5ca311d9530b6ade8702640c88ebe2f99ce88e8dc25b1373fee1aee3ca8e6a5905209205e0033ff02afcb4d1e08bfb0566ba2b07abaa07f48c37ccc147fcb627262391aa59df48450476aeaf85c6b82c3faca07679268f27260bae1ccfeaffa3af472bdd92c0b84dee9b857b2d0d72895db5e87527747fefb9906eeb4e9fc98c5d89937134a8650e1dc6a2abe84859302da2854000152043da9a8d09b4cb34ba15a6bd031cc116db6fbd5d50afaf6f7169af9794235de346b70f638e8c46a8a4c80da4844c0589e3eba83eecf0efcbab54b577448038134d169bb66fd4028c7dba7eb869a0de8ca9337633a784dcd6693c2a55621ecbb0ef025f69f234508df53d23e8bb11ff9399dc79aa79adcbbc969e55ed2e7b0a606e024457209cec002f38b18a7abf2aae9a178194ed70080f59350a44ffdc1d89332cae9923e13f36ae05d73fffd41281a0cdc6a95740082a3742350ab95b4065340154e3efaf044ee867e1b66f656bdd8c2273c03aeff9f655457863cb3419656f8f144b592b6ba56d4d2bdc4aee710e5871a10f560a237c3e357902ac150ffc23f78e81a2c71543bd89c3ed6d1e57cacae6f5141a84849d90e0e5df1ee86d18993dbb272bd2d54713c9f222802e22ee2976174caf00abe8fdd6d432dd2993b74cbb16839f11d6393c1b291c7e7f501ecc9edd433f21b80c8890883fb7b591c6486be7ed48402b618518b10445edfdc3a4ad8d3ce4b2439a1def220ba384e7cb3e69b782035087598c546bc68a72f4fe51e95ffae21091552849d02ebb1b0dda26bc3477cb3d74360587bb8712d85c6e458cf334b4c65823c22ca818dd0e81d20b6050cb8590452486ea641e6dc4c61efc3675517cdb820debd0f66f78ca88efdc6dc1679ab95a52fb85d78e43de6409805c43f63bd516610c17782377f4e6659a803e725742c05aa251d7236c8b5d45009aa62e17697f31735a3a3a56839d8ef0d68501d3f584283ce80cc371dfa0ab0724c3265429456ea4c9a27759f49e02a7b9d5028b4eda3836876a4567758ea1d5136db27be77b1656de90792c939fa3e9572bd6f7fa6662223f4d8b5c88cc7d3605b9489cf7afacdb34b04527a3d1448ab4011bc92b5ae8521b93b657a90ecba6e6a89472e31c22ae31cbb046c2964204ed9fcfcef49d0f1f96f239cf9997b70d9cffdbfca813dd723fed1d95ee994b6094e6e57905544d60e605533acc921bae751aca79515cdbb2dcc7828968252421308d95fe68dbb136ad5b611ea37912f75df2aee792b8a387f5cad76a6157a7363ef567d77b1bc476d35768079a868733513985b26f7cf79ce76c807eace09146558e85dd1bb867996500a99fc26129a16496bff1ddebd97db54bd7f78b35003a1b702c51bfceb2abc0a5fd55cb02f67458c93b0cbecb086dbf8a066a7771b29953a50089812b28901acc0d97845e6a9ade6b366b8c880753080e6c73c99165aae12ce51b723ec366cd6730634a81fabaa1f0b01c750458bf365e60dfeb605b86bd7a37b6492c483dd74e3a2fa6d152d0e230cee186f1259f97d6b9ff615fe012f58a382c2809a8e63334230b93b24de8fdd1dba7bc9f623c82f1a8e81287d08555f71e2af0aad9202e9352058e66771d813b7fb68fce040b06cc168c2c7d9fcf3bd5cdec5bd8ce2b338cedbfb6cfad342973aa2e2faedde11efc2466896c81f7842cbf25f78403e1f0f5ca5544cbecd7bba70b616f29a4388fc4896428a23d8772dc21794c20d76f55439fa66b94c56c7e01ac016820caca23f42de23c309d86b2cb207dcd096d6a44d2f681c7bc725d3f81cc6a08c2ae82ca55228125034f312fe04f2befb4c4ef6fcb803c1474988a7e07810e60d0d38d1934b135015d39b49fa48bfee6ad4ad0298bc5e66e8d357ee47fe61f215f7326de507addbf4ababa0cb928c947e91354ed232332cbde85e5dc3e173fdbc4d4dd96786bd6dce83cf1ea099b06f2a4f18dc0394951e6ee2eb72dfa6a013713590aebdeda149bc06b64ad40fa64538edd9afd408bb013d38b3cbf17c265f0295b0e085112dc490230322b1eecaf727d0fc3e67226e0f8a50af7025e960072c336d0a9838f328a68ed1d6551a5743d10504193f0e32ced3ba98b8a21b3c431efb8dd3a2cadf10e12daf461d5d9171d2ca7ae218c0bb868c363feb0487d8ffac4a654c6c551a3725902c7ebc55ed822605c039363f4e4e24ea4b3d7dfd21d07c9228a3b37c31b7124aea3faaa5930dd138ca433069a7c3807c1828dcab13ab9ff0afa6a3ff63d5811269913e4f9774a59ff9df2dbe7ff2c29e599253324b5514f4c2b634996fcd421797712b159896e9f3ba234d6ebb658c792dee2aa26001b5b6427dc311924b24264ec2155a0a32d8f51205925fe80e5fea15d957c327165791e7571b74fed1003e680b6f743fa6fa91f8e423b5cb68e86eb2e13f6b6a94ee4b992b59f6a4978d93a60ee207986bb5be365740b990d98f1866e58d5182532312b570daa8d1f9a8d0ae551480e0fad001aec5a17dc64b0ab5704780c0408b5fb1dc69a55f29514facae81b7f6e6503fea6a75a912a966f6f20ce7ee726be01c698ebd81cd81d972fd6278ff9591e4def2877cdcaee3ea046911cb5a6abc16197eda0a850f8c6acd59e845dae487e4427694fdd50b1bdf9da7e662ad05ef239e8ecb9e3156d1cf27b6b0579745f046a163eabf6e385bb617cbbf77e93bfba6a422c44d6e60bfd03928c32837e991cad562b8db3a21777b1f7b1496c1774d202a0b63f80d3f3bdcba0b8ae06ce357a6a88de0b98a4fa0bcba5e9b2cece271fbf4476b606ae02299ecb88d527af0db95e306279dc0ee14127a780586b4821b0aa0456df345e1034de046623bf53496ba41fdc2897996a90e315b9c9fd23be0e38f80e233d7cf42566e0ed721364bb8685b5bef438c136fb3a2fe1cd36a18fe1384adf503ae9c3a50f5c7c8610145b63de52183ceccb49b55940ab504943cd8b0df6bc52a47bbbec418b4af2f29ebdc8fe09460f2ca409519a10c45ecccb3e3342ea8c30152ef43416fca25a2b79b8815295fc802dd80a5f6ba72f32e54b8166dd8c9079d3ba0f06e00020b691d7d49cdde6e65f5b61624404d52509fd34a9430bb85085bda9df7f98d890d53e559ebf3c024ea90b68c32fe7b149ddd12b7386c9a6b441453f91ce3d351d0c64185795befae6bb9ce2646af1319a6b8f4daf1904c2684ebae533a3939c83b1be1bfb5f3ffb34b00532df06337f520bafe1c4bee4c2854ddfd7867a94c9a660c1311e1da75876406e8a2372bc521ef178ca0e0a6b3f587493a31aafc46490dfedb0283b3d2ba0536bc3f76ca685cad56b28499da509a925d769dad43264260ca857436a8b28e3067a70d07c87988fb30f069773b40bcfe0552f392e5c5508efde3b303231f991d6c14fc5639347bb11315237ba57fb81d4acf5f5a17f31debf3c3e69df45f5f46e34b1f8af4d712cd65d4da93634bb878eb044381f29935972b835b2fd7a75082dd67f67c94a073ebba59d57c8a828cc21ce7875c5ab42b6b342303fddad0852ab24caeaf33af93c9ba023d2b1e7eb4fcd91a8ef680d7d641dea186a5c7f20401be0c26ce5ab44d5efd932ee0dfff62ab58408e0aaa6ec1d68c9d56c3f47c2ce2df2c9e342208e8c653ef850dd622e1e7cfe70b3b23e353746a076736c3addb9247384e4424754ccfc181f60c24f940ae4b17bf8c5710cb97a28b493edad712240bf420acdf9fc2e232056558c62894c10836ea6476d751", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) keyctl$set_reqkey_keyring(0xe, 0x6) 2.830798958s ago: executing program 2 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mknod(0x0, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1.516530744s ago: executing program 0 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.340175185s ago: executing program 2 (id=493): openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x2, 0xc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000040), 0x0, r4) 1.31849211s ago: executing program 6 (id=494): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) (fail_nth: 1) 1.178639032s ago: executing program 0 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 289.056999ms ago: executing program 4 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x40) syz_clone(0x11800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r2) (async) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x40) (async) syz_clone(0x11800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000080), 0x12) (async) 196.165846ms ago: executing program 0 (id=497): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) socket(0x29, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 0s ago: executing program 4 (id=498): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) kernel console output (not intermixed with test programs): 031810][ T54] Bluetooth: hci3: command tx timeout [ 61.031988][ T5820] Bluetooth: hci2: command tx timeout [ 61.044745][ T5814] veth1_macvtap: entered promiscuous mode [ 61.062452][ T5823] veth1_vlan: entered promiscuous mode [ 61.134346][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.146046][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.158020][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.168807][ T5823] veth0_macvtap: entered promiscuous mode [ 61.183744][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.195518][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.205830][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.208792][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.216828][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.245778][ T5823] veth1_macvtap: entered promiscuous mode [ 61.262955][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.273495][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.282727][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.291722][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.309471][ T5826] veth0_macvtap: entered promiscuous mode [ 61.335253][ T5821] veth0_vlan: entered promiscuous mode [ 61.346943][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.353929][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.364255][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.365764][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.387763][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.398263][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.408819][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.422158][ T5826] veth1_macvtap: entered promiscuous mode [ 61.443065][ T5821] veth1_vlan: entered promiscuous mode [ 61.454054][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.461767][ T29] audit: type=1400 audit(1733426159.685:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.ZZHYj0/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.465455][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.497003][ T29] audit: type=1400 audit(1733426159.685:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.503896][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.523667][ T29] audit: type=1400 audit(1733426159.685:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.ZZHYj0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.541093][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.563388][ T29] audit: type=1400 audit(1733426159.685:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.569330][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.595310][ T29] audit: type=1400 audit(1733426159.685:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.ZZHYj0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.616643][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.639408][ T29] audit: type=1400 audit(1733426159.685:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.ZZHYj0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.667379][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.672847][ T29] audit: type=1400 audit(1733426159.725:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.696770][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.696798][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.696808][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.696821][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.697806][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.718230][ T29] audit: type=1400 audit(1733426159.835:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.798079][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.806358][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.813486][ T29] audit: type=1400 audit(1733426159.835:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.847320][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.863986][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873099][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.882846][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.892541][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.921944][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.932820][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.943019][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.953605][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.963452][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.973909][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.984709][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.003361][ T5821] veth0_macvtap: entered promiscuous mode [ 62.021803][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.030822][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.039667][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.048484][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.099041][ T5821] veth1_macvtap: entered promiscuous mode [ 62.114651][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.133130][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.163031][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.208868][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.223985][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.240058][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.255904][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.266953][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.282511][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.297944][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.316476][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.370829][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.386707][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.469129][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.539907][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.588353][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.651590][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.703058][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.756454][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.828257][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.905193][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.914354][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.926486][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.935449][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.973573][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.983320][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.036581][ T5820] Bluetooth: hci4: command tx timeout [ 63.042283][ T5820] Bluetooth: hci1: command tx timeout [ 63.047844][ T5820] Bluetooth: hci0: command tx timeout [ 63.050160][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.061520][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.077007][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.112383][ T54] Bluetooth: hci2: command tx timeout [ 63.118939][ T54] Bluetooth: hci3: command tx timeout [ 63.161516][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.207809][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.222039][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.316679][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.364869][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.856107][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.890082][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.931831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.241395][ C1] hrtimer: interrupt took 37140 ns [ 64.718722][ T5913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.754483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.763103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.771623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.073613][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 65.073650][ T29] audit: type=1400 audit(1733426163.275:148): avc: denied { read } for pid=5914 comm="syz.4.6" name="event3" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.102594][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.108949][ T29] audit: type=1400 audit(1733426163.275:149): avc: denied { open } for pid=5914 comm="syz.4.6" path="/dev/input/event3" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.124504][ T5820] Bluetooth: hci0: command tx timeout [ 65.132865][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.133451][ T29] audit: type=1400 audit(1733426163.285:150): avc: denied { ioctl } for pid=5914 comm="syz.4.6" path="/dev/input/event3" dev="devtmpfs" ino=1013 ioctlcmd=0x45ef scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.144823][ T5820] Bluetooth: hci1: command tx timeout [ 65.144859][ T5820] Bluetooth: hci4: command tx timeout [ 65.170309][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.192155][ T29] audit: type=1400 audit(1733426163.315:151): avc: denied { read write } for pid=5916 comm="syz.1.7" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 65.215122][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.223731][ T29] audit: type=1400 audit(1733426163.315:152): avc: denied { open } for pid=5916 comm="syz.1.7" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 65.227150][ T54] Bluetooth: hci3: command tx timeout [ 65.248650][ T29] audit: type=1400 audit(1733426163.315:153): avc: denied { mounton } for pid=5916 comm="syz.1.7" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.252833][ T54] Bluetooth: hci2: command tx timeout [ 65.289488][ T29] audit: type=1400 audit(1733426163.515:154): avc: denied { write } for pid=5914 comm="syz.4.6" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.325413][ T5920] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.328939][ T5921] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.649799][ T29] audit: type=1400 audit(1733426167.875:155): avc: denied { bind } for pid=5942 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.827932][ T29] audit: type=1400 audit(1733426168.025:156): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.847886][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.370847][ T29] audit: type=1400 audit(1733426168.025:157): avc: denied { name_bind } for pid=5942 comm="syz.2.12" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.389824][ T29] audit: type=1400 audit(1733426168.025:158): avc: denied { node_bind } for pid=5942 comm="syz.2.12" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 71.412235][ T29] audit: type=1400 audit(1733426168.025:159): avc: denied { write } for pid=5942 comm="syz.2.12" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.721417][ T29] audit: type=1400 audit(1733426168.025:160): avc: denied { connect } for pid=5942 comm="syz.2.12" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.742727][ T29] audit: type=1400 audit(1733426168.025:161): avc: denied { name_connect } for pid=5942 comm="syz.2.12" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.764886][ T29] audit: type=1400 audit(1733426168.045:162): avc: denied { listen } for pid=5942 comm="syz.2.12" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.786115][ T29] audit: type=1400 audit(1733426168.045:163): avc: denied { read } for pid=5942 comm="syz.2.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.808618][ T29] audit: type=1400 audit(1733426168.045:164): avc: denied { open } for pid=5942 comm="syz.2.12" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.832111][ T29] audit: type=1400 audit(1733426168.045:165): avc: denied { create } for pid=5942 comm="syz.2.12" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.854477][ T29] audit: type=1400 audit(1733426168.145:166): avc: denied { create } for pid=5942 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.874635][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.881183][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.351725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.072878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.177079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 76.109827][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 76.109854][ T29] audit: type=1400 audit(1733426174.335:181): avc: denied { create } for pid=5997 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.139446][ T29] audit: type=1400 audit(1733426174.365:182): avc: denied { write } for pid=5997 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.333047][ T29] audit: type=1400 audit(1733426174.565:183): avc: denied { ioctl } for pid=5982 comm="syz.3.22" path="socket:[8464]" dev="sockfs" ino=8464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.585578][ T25] cfg80211: failed to load regulatory.db [ 78.736973][ T29] audit: type=1400 audit(1733426176.445:184): avc: denied { read write } for pid=6016 comm="syz.1.30" name="vbi4" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.825560][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.852872][ T29] audit: type=1400 audit(1733426176.445:185): avc: denied { open } for pid=6016 comm="syz.1.30" path="/dev/vbi4" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.875983][ T29] audit: type=1400 audit(1733426177.065:186): avc: denied { create } for pid=6020 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.896002][ T29] audit: type=1400 audit(1733426177.075:187): avc: denied { connect } for pid=6020 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.923554][ T29] audit: type=1400 audit(1733426177.155:188): avc: denied { bind } for pid=6020 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.942847][ T29] audit: type=1400 audit(1733426177.155:189): avc: denied { write } for pid=6020 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.962129][ T29] audit: type=1400 audit(1733426177.155:190): avc: denied { read } for pid=6020 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.981871][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.385565][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.396949][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 79.408216][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 80.367318][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.376482][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.390917][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.491331][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.610146][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.860807][ T6046] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.171948][ T5899] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 82.351136][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.39'. [ 82.360064][ T6058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'. [ 82.481783][ T5899] usb 4-1: USB disconnect, device number 2 [ 82.713817][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.899979][ T6068] trusted_key: encrypted_key: insufficient parameters specified [ 84.641693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.817799][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 84.893656][ T29] audit: type=1400 audit(1733426183.045:197): avc: denied { read } for pid=6076 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.975910][ T29] audit: type=1400 audit(1733426183.145:198): avc: denied { wake_alarm } for pid=6076 comm="syz.4.43" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.997113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.029673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.312130][ T29] audit: type=1400 audit(1733426183.545:199): avc: denied { read } for pid=6094 comm="syz.0.49" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.335219][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.396107][ T29] audit: type=1400 audit(1733426183.595:200): avc: denied { open } for pid=6094 comm="syz.0.49" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.461642][ T29] audit: type=1400 audit(1733426184.415:201): avc: denied { write } for pid=6094 comm="syz.0.49" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.214173][ T29] audit: type=1400 audit(1733426185.445:202): avc: denied { read write } for pid=6102 comm="syz.0.51" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.247488][ T29] audit: type=1400 audit(1733426185.445:203): avc: denied { open } for pid=6102 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.349904][ T29] audit: type=1400 audit(1733426185.465:204): avc: denied { create } for pid=6102 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.866956][ T6112] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.053922][ T6130] trusted_key: encrypted_key: insufficient parameters specified [ 94.006368][ T6161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.683108][ T6156] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.808533][ T6163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6163 comm=syz.4.67 [ 94.965143][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.687078][ T6189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6189 comm=syz.1.72 [ 97.971627][ T29] audit: type=1400 audit(1733426196.155:205): avc: denied { create } for pid=6186 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.165678][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 98.175555][ T5899] usb 4-1: can't read configurations, error -71 [ 99.196550][ T29] audit: type=1400 audit(1733426197.075:206): avc: denied { create } for pid=6186 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.073192][ T6220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.79'. [ 101.922154][ T29] audit: type=1400 audit(1733426200.155:207): avc: denied { bind } for pid=6222 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.177019][ T29] audit: type=1400 audit(1733426200.155:208): avc: denied { ioctl } for pid=6222 comm="syz.3.82" path="/dev/video6" dev="devtmpfs" ino=938 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.341566][ T29] audit: type=1400 audit(1733426200.405:209): avc: denied { append } for pid=6222 comm="syz.3.82" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.362482][ T6230] netlink: 4884 bytes leftover after parsing attributes in process `syz.3.82'. [ 102.366567][ T29] audit: type=1400 audit(1733426200.405:210): avc: denied { map } for pid=6222 comm="syz.3.82" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.396957][ T29] audit: type=1400 audit(1733426200.405:211): avc: denied { write execute } for pid=6222 comm="syz.3.82" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.421233][ T29] audit: type=1400 audit(1733426200.575:212): avc: denied { ioctl } for pid=6222 comm="syz.3.82" path="socket:[8837]" dev="sockfs" ino=8837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.426733][ T6246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6246 comm=syz.0.86 [ 105.688517][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.88'. [ 105.911122][ T29] audit: type=1400 audit(1733426204.135:213): avc: denied { write } for pid=6247 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.261625][ T29] audit: type=1400 audit(1733426204.485:214): avc: denied { write } for pid=6250 comm="syz.0.89" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.384349][ T6262] netlink: 4884 bytes leftover after parsing attributes in process `syz.0.89'. [ 107.146894][ T6270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6270 comm=syz.3.91 [ 107.694804][ T29] audit: type=1400 audit(1733426205.915:215): avc: denied { mounton } for pid=6273 comm="syz.2.93" path="/17/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.787483][ T29] audit: type=1400 audit(1733426205.995:216): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.011744][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.418528][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.363312][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 109.373186][ T5902] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 109.382962][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.392007][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.558376][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.605966][ T5902] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 109.656744][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.852680][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.872173][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.421619][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.587814][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 110.607572][ T5899] usb 3-1: descriptor type invalid, skip [ 110.619403][ T5899] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 110.632820][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.661516][ T5899] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 110.679690][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.689321][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.697810][ T5899] usb 3-1: Product: syz [ 110.702496][ T5899] usb 3-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 110.732273][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.807763][ T5899] usb 3-1: SerialNumber: syz [ 110.936205][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 111.713926][ T5323] usb 4-1: USB disconnect, device number 5 [ 111.782536][ T29] audit: type=1400 audit(1733426210.005:217): avc: denied { write } for pid=6291 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.812974][ T29] audit: type=1400 audit(1733426210.005:218): avc: denied { nlmsg_read } for pid=6291 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.833269][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.088560][ T6309] vivid-004: kernel_thread() failed [ 112.230626][ T29] audit: type=1400 audit(1733426210.455:219): avc: denied { read write } for pid=6316 comm="syz.0.104" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.374286][ T29] audit: type=1400 audit(1733426210.485:220): avc: denied { open } for pid=6316 comm="syz.0.104" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.398578][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.054118][ T29] audit: type=1400 audit(1733426211.245:221): avc: denied { create } for pid=6316 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 113.343026][ T2150] usb 3-1: USB disconnect, device number 2 [ 113.682657][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6337 comm=syz.0.108 [ 115.485641][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 117.867229][ T6370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.117'. [ 118.776180][ T29] audit: type=1400 audit(1733426217.005:222): avc: denied { sys_module } for pid=6371 comm="syz.3.118" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.797100][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.093597][ T6385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 120.209483][ T6381] netlink: 4884 bytes leftover after parsing attributes in process `syz.3.118'. [ 123.141460][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.301766][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 123.314037][ T8] usb 3-1: descriptor type invalid, skip [ 123.341825][ T8] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 123.361201][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.382688][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 123.470267][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.129'. [ 124.058305][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.067512][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.076553][ T8] usb 3-1: Product: syz [ 124.089266][ T8] usb 3-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 124.119065][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.189522][ T8] usb 3-1: SerialNumber: syz [ 126.890843][ T8] usb 3-1: USB disconnect, device number 3 [ 128.093890][ T6443] vivid-001: kernel_thread() failed [ 128.936723][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.139'. [ 129.718108][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.979954][ T8] usb 5-1: config 90 has an invalid descriptor of length 218, skipping remainder of the config [ 130.286253][ T8] usb 5-1: config 90 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.485571][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.501563][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.510474][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.517811][ T8] usb 5-1: config 90 interface 0 has no altsetting 0 [ 130.526497][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.534222][ T8] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=65.9e [ 130.543371][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.552017][ T8] usb 5-1: Product: syz [ 130.557372][ T8] usb 5-1: Manufacturer: syz [ 130.562326][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.569540][ T8] usb 5-1: SerialNumber: syz [ 130.574506][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.586570][ T29] audit: type=1400 audit(1733426228.815:223): avc: denied { mounton } for pid=6468 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 131.891523][ T29] audit: type=1400 audit(1733426229.435:224): avc: denied { accept } for pid=6471 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.226900][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 132.578441][ T8] usb 5-1: can't set config #90, error -71 [ 132.619894][ T8] usb 5-1: USB disconnect, device number 3 [ 132.631543][ T54] Bluetooth: hci5: command tx timeout [ 132.880468][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.892770][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899179][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.921900][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.929303][ T6468] bridge_slave_0: entered allmulticast mode [ 132.936453][ T29] audit: type=1400 audit(1733426231.155:225): avc: denied { create } for pid=6485 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.964899][ T6468] bridge_slave_0: entered promiscuous mode [ 132.970991][ T29] audit: type=1400 audit(1733426231.175:226): avc: denied { ioctl } for pid=6485 comm="syz.0.144" path="socket:[10254]" dev="sockfs" ino=10254 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.481756][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.523253][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.558007][ T6468] bridge_slave_1: entered allmulticast mode [ 133.587923][ T6468] bridge_slave_1: entered promiscuous mode [ 133.698922][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.451647][ T6498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.147'. [ 134.469792][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.548664][ T6468] team0: Port device team_slave_0 added [ 134.627566][ T6468] team0: Port device team_slave_1 added [ 134.711694][ T54] Bluetooth: hci5: command tx timeout [ 134.738769][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.766322][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.578479][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.609638][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.634372][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.779529][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.961781][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.013307][ T6468] hsr_slave_0: entered promiscuous mode [ 136.050497][ T6468] hsr_slave_1: entered promiscuous mode [ 136.076502][ T6468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.101559][ T6468] Cannot create hsr debugfs directory [ 136.146923][ T5864] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.175607][ T5864] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 136.215959][ T5864] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 136.251585][ T5864] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.318868][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.157896][ T54] Bluetooth: hci5: command tx timeout [ 137.250312][ T5864] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.416537][ T5864] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 137.627395][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.725682][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.748255][ T6468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.910335][ T6468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.377368][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.412611][ T6468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.450257][ T6468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.696748][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.052111][ T5323] usb 1-1: USB disconnect, device number 2 [ 139.199491][ T54] Bluetooth: hci5: command tx timeout [ 139.555659][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.210976][ T6537] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.670458][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.681155][ T29] audit: type=1400 audit(1733426238.885:227): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.748781][ T29] audit: type=1400 audit(1733426238.885:228): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=2431 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.779787][ T12] bridge_slave_1: left allmulticast mode [ 140.788793][ T12] bridge_slave_1: left promiscuous mode [ 140.802169][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.880596][ T29] audit: type=1400 audit(1733426238.885:229): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2431 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.903594][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.913560][ T29] audit: type=1400 audit(1733426238.885:230): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2431 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.936763][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.246162][ T12] bridge_slave_0: left allmulticast mode [ 141.298659][ T12] bridge_slave_0: left promiscuous mode [ 141.467510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.014784][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.032580][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.049279][ T12] bond0 (unregistering): Released all slaves [ 144.224713][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.282628][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.289808][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.641253][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.648460][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.908158][ T29] audit: type=1400 audit(1733426243.085:231): avc: denied { read } for pid=6580 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.947801][ T29] audit: type=1400 audit(1733426243.085:232): avc: denied { open } for pid=6580 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.129630][ T29] audit: type=1400 audit(1733426243.085:233): avc: denied { getattr } for pid=6580 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.976472][ T5864] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.001425][ T6596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.169'. [ 146.116273][ T29] audit: type=1400 audit(1733426244.335:234): avc: denied { write } for pid=6578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.162094][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 146.228213][ T29] audit: type=1400 audit(1733426244.335:235): avc: denied { add_name } for pid=6578 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.250658][ T5864] usb 5-1: descriptor type invalid, skip [ 146.271052][ T29] audit: type=1400 audit(1733426244.335:236): avc: denied { create } for pid=6578 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.286444][ T5864] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 146.515574][ T29] audit: type=1400 audit(1733426244.335:237): avc: denied { write } for pid=6578 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.541611][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.067713][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.077967][ T5864] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 147.110326][ T29] audit: type=1400 audit(1733426244.335:238): avc: denied { append } for pid=6578 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.139025][ T29] audit: type=1400 audit(1733426244.455:239): avc: denied { remove_name } for pid=6601 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.162835][ T29] audit: type=1400 audit(1733426244.455:240): avc: denied { unlink } for pid=6601 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.183484][ T5864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.196334][ T6606] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.214591][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.223998][ T5864] usb 5-1: Product: syz [ 147.228395][ T5864] usb 5-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 147.270161][ T5864] usb 5-1: SerialNumber: syz [ 147.293272][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.171'. [ 147.296830][ T5864] usb 5-1: can't set config #1, error -71 [ 147.310669][ T5864] usb 5-1: USB disconnect, device number 4 [ 149.580233][ T12] hsr_slave_0: left promiscuous mode [ 149.645467][ T12] hsr_slave_1: left promiscuous mode [ 149.659362][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.669674][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.717139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.726009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.734197][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.761078][ T12] veth1_macvtap: left promiscuous mode [ 149.771754][ T12] veth0_macvtap: left promiscuous mode [ 149.782677][ T12] veth1_vlan: left promiscuous mode [ 149.794730][ T12] veth0_vlan: left promiscuous mode [ 149.914830][ T5864] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.934810][ T5864] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.947384][ T5864] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 149.959146][ T5864] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.969526][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.016863][ T5864] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.123576][ T5864] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 150.199194][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.810233][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.946316][ T12] team0 (unregistering): Port device team_slave_0 removed [ 151.740835][ T29] audit: type=1400 audit(1733426249.965:241): avc: denied { mount } for pid=6660 comm="syz.3.182" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 151.934990][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.033107][ T2150] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.222910][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.223542][ T2150] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.282404][ T2150] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.304757][ T2150] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 152.326768][ T2150] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.336250][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.352918][ T2150] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.371603][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.401548][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 152.403599][ T2150] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 152.411247][ T5864] usb 4-1: descriptor type invalid, skip [ 152.436789][ T6468] veth0_vlan: entered promiscuous mode [ 152.458129][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.484753][ T5864] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 152.506011][ T6468] veth1_vlan: entered promiscuous mode [ 152.510499][ T2150] usb 1-1: USB disconnect, device number 3 [ 152.512230][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.512257][ T5864] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 152.513989][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.562212][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 152.571562][ T6468] veth0_macvtap: entered promiscuous mode [ 152.579526][ T5903] usb 3-1: descriptor type invalid, skip [ 152.602462][ T5903] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 152.614755][ T6468] veth1_macvtap: entered promiscuous mode [ 152.631554][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.643353][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.649748][ T6694] Zero length message leads to an empty skb [ 152.667295][ T5903] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 152.676546][ T5864] usb 4-1: Product: syz [ 152.688449][ T5864] usb 4-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 152.741837][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.750930][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.771490][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.789693][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.806526][ T5903] usb 3-1: Product: syz [ 152.820424][ T5903] usb 3-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 152.863670][ T5864] usb 4-1: SerialNumber: syz [ 152.875680][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.891889][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.901899][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.912446][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.924626][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.926102][ T5903] usb 3-1: SerialNumber: syz [ 152.935724][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.957314][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.016303][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.059982][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.248309][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.317141][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.391698][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.527716][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.565979][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.589024][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.607501][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.617749][ T6468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.626893][ T6468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.651594][ T6468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.660391][ T6468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.225361][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.227175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.243968][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.279360][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.678382][ T8] usb 4-1: USB disconnect, device number 6 [ 154.782342][ T5323] usb 5-1: USB disconnect, device number 5 [ 155.167641][ T8] usb 3-1: USB disconnect, device number 4 [ 156.662272][ T6746] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 157.848273][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.5.193'. [ 159.026598][ T6785] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.313217][ T6797] netlink: 4884 bytes leftover after parsing attributes in process `syz.2.201'. [ 163.886267][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.214'. [ 164.630267][ T6876] netlink: 80 bytes leftover after parsing attributes in process `syz.3.210'. [ 165.733801][ T6891] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.561546][ T6917] netlink: 4884 bytes leftover after parsing attributes in process `syz.5.221'. [ 168.425549][ T6935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.226'. [ 170.495968][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.285513][ T5899] usb 3-1: device descriptor read/all, error -71 [ 173.993450][ T29] audit: type=1400 audit(1733426272.225:242): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.015630][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.101683][ T7003] netlink: 4884 bytes leftover after parsing attributes in process `syz.2.237'. [ 174.121064][ T29] audit: type=1400 audit(1733426272.225:243): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.242556][ T29] audit: type=1400 audit(1733426272.225:244): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.827213][ T7023] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.588072][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 179.425714][ T7055] FAULT_INJECTION: forcing a failure. [ 179.425714][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.438830][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.3.247 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 179.449412][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.459477][ T7055] Call Trace: [ 179.462741][ T7055] [ 179.465654][ T7055] dump_stack_lvl+0x16c/0x1f0 [ 179.470333][ T7055] should_fail_ex+0x497/0x5b0 [ 179.475001][ T7055] _copy_from_user+0x2e/0xd0 [ 179.479582][ T7055] copy_msghdr_from_user+0x99/0x160 [ 179.484774][ T7055] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.490573][ T7055] ? __lock_acquire+0xcc5/0x3c40 [ 179.495514][ T7055] ___sys_sendmsg+0xff/0x1e0 [ 179.500092][ T7055] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.505286][ T7055] ? trace_lock_acquire+0x14e/0x1f0 [ 179.510488][ T7055] __sys_sendmmsg+0x201/0x420 [ 179.515155][ T7055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.520346][ T7055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.526323][ T7055] ? fput+0x67/0x440 [ 179.530214][ T7055] ? ksys_write+0x1ba/0x250 [ 179.534706][ T7055] ? __pfx_ksys_write+0x10/0x10 [ 179.539545][ T7055] __x64_sys_sendmmsg+0x9c/0x100 [ 179.544471][ T7055] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.549666][ T7055] do_syscall_64+0xcd/0x250 [ 179.554170][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.560058][ T7055] RIP: 0033:0x7f257617ff19 [ 179.564469][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.584080][ T7055] RSP: 002b:00007f2576f40058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.592480][ T7055] RAX: ffffffffffffffda RBX: 00007f2576345fa0 RCX: 00007f257617ff19 [ 179.600433][ T7055] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 179.608386][ T7055] RBP: 00007f2576f400a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.616339][ T7055] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 179.624295][ T7055] R13: 0000000000000000 R14: 00007f2576345fa0 R15: 00007ffcea9b5a68 [ 179.632256][ T7055] [ 181.192975][ T7089] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.940319][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 181.946513][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 181.952665][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 181.958672][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 182.138755][ T7079] netlink: 4884 bytes leftover after parsing attributes in process `syz.0.252'. [ 182.479425][ T7116] overlayfs: missing 'lowerdir' [ 182.622005][ T7117] 9pnet_fd: Insufficient options for proto=fd [ 183.685221][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 185.043797][ T968] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.242552][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 185.293509][ T968] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.489440][ T968] usb 1-1: config 0 has no interface number 0 [ 185.495724][ T968] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 185.505626][ T968] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.668209][ T968] usb 1-1: config 0 interface 41 has no altsetting 0 [ 185.681932][ T968] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.691557][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.701787][ T968] usb 1-1: Product: syz [ 185.706850][ T968] usb 1-1: Manufacturer: syz [ 185.711616][ T968] usb 1-1: SerialNumber: syz [ 185.733528][ T968] usb 1-1: config 0 descriptor?? [ 185.944381][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.965927][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.200343][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.210176][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.470278][ T968] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 186.513456][ T968] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 186.589065][ T968] usb 1-1: USB disconnect, device number 4 [ 188.994881][ T29] audit: type=1400 audit(1733426287.225:245): avc: denied { create } for pid=7172 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.263473][ T29] audit: type=1400 audit(1733426287.225:246): avc: denied { connect } for pid=7172 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.351700][ T29] audit: type=1400 audit(1733426287.565:247): avc: denied { create } for pid=7172 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.611613][ T29] audit: type=1326 audit(1733426288.835:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 190.641619][ T7190] netlink: 4884 bytes leftover after parsing attributes in process `syz.3.273'. [ 190.732013][ T29] audit: type=1326 audit(1733426288.835:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 191.337345][ T29] audit: type=1326 audit(1733426288.835:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 191.361802][ T29] audit: type=1326 audit(1733426288.925:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23ccbb27c5 code=0x7ffc0000 [ 191.400087][ T29] audit: type=1326 audit(1733426288.925:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 191.481481][ T29] audit: type=1326 audit(1733426288.925:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 191.542785][ T29] audit: type=1326 audit(1733426288.945:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.5.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f23ccb7ff19 code=0x7ffc0000 [ 193.141663][ T968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 193.350670][ T7245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.281'. [ 193.903296][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 193.966566][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.977366][ T968] usb 1-1: config 0 has no interfaces? [ 193.988856][ T968] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.609326][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615723][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.954744][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.437429][ T968] usb 1-1: config 0 descriptor?? [ 195.512590][ T968] usb 1-1: can't set config #0, error -71 [ 195.525720][ T968] usb 1-1: USB disconnect, device number 5 [ 195.686987][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 195.687003][ T29] audit: type=1400 audit(1733426293.905:272): avc: denied { bind } for pid=7260 comm="syz.2.285" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.713444][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.817123][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.286'. [ 196.233998][ T29] audit: type=1400 audit(1733426293.905:273): avc: denied { node_bind } for pid=7260 comm="syz.2.285" saddr=fe80::bb src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 196.273513][ T29] audit: type=1400 audit(1733426293.905:274): avc: denied { connect } for pid=7260 comm="syz.2.285" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.525180][ T7283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.289'. [ 196.962020][ T7285] FAULT_INJECTION: forcing a failure. [ 196.962020][ T7285] name failslab, interval 1, probability 0, space 0, times 1 [ 196.974964][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.0.288 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 196.985563][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.995623][ T7285] Call Trace: [ 196.998903][ T7285] [ 197.001832][ T7285] dump_stack_lvl+0x16c/0x1f0 [ 197.006523][ T7285] should_fail_ex+0x497/0x5b0 [ 197.011209][ T7285] ? fs_reclaim_acquire+0xae/0x150 [ 197.016344][ T7285] should_failslab+0xc2/0x120 [ 197.021035][ T7285] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 197.026415][ T7285] ? lockdep_init_map_type+0x16d/0x7d0 [ 197.031888][ T7285] ? security_inode_alloc+0x3b/0x2b0 [ 197.037189][ T7285] security_inode_alloc+0x3b/0x2b0 [ 197.042310][ T7285] inode_init_always_gfp+0xce4/0x1030 [ 197.047696][ T7285] alloc_inode+0x82/0x230 [ 197.052035][ T7285] sock_alloc+0x40/0x280 [ 197.056291][ T7285] __sock_create+0xc1/0x8d0 [ 197.060819][ T7285] __sys_socket+0x14f/0x260 [ 197.065339][ T7285] ? __pfx___sys_socket+0x10/0x10 [ 197.070371][ T7285] ? ksys_write+0x1ba/0x250 [ 197.074879][ T7285] ? __pfx_ksys_write+0x10/0x10 [ 197.079779][ T7285] __x64_sys_socket+0x72/0xb0 [ 197.084467][ T7285] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.089676][ T7285] do_syscall_64+0xcd/0x250 [ 197.094188][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.100095][ T7285] RIP: 0033:0x7fd74e77ff19 [ 197.104510][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.124126][ T7285] RSP: 002b:00007fd74f529058 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 197.132554][ T7285] RAX: ffffffffffffffda RBX: 00007fd74e946160 RCX: 00007fd74e77ff19 [ 197.140617][ T7285] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 197.148600][ T7285] RBP: 00007fd74f5290a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.156587][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.164572][ T7285] R13: 0000000000000000 R14: 00007fd74e946160 R15: 00007ffc6a4c4d38 [ 197.172567][ T7285] [ 197.175635][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.229740][ T7285] socket: no more sockets [ 197.557255][ T29] audit: type=1400 audit(1733426295.185:275): avc: denied { setopt } for pid=7274 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.779709][ T29] audit: type=1400 audit(1733426295.935:276): avc: denied { create } for pid=7280 comm="syz.5.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.361541][ T2150] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.978973][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 200.144781][ T2150] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 200.154314][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.168426][ T2150] usb 3-1: Product: syz [ 200.189379][ T2150] usb 3-1: Manufacturer: syz [ 200.212958][ T2150] usb 3-1: SerialNumber: syz [ 200.314432][ T2150] usb 3-1: config 0 descriptor?? [ 200.441257][ T2150] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 201.462436][ T2150] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 201.497625][ T7358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.302'. [ 201.541791][ T29] audit: type=1400 audit(1733426299.745:277): avc: denied { create } for pid=7357 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.798034][ T29] audit: type=1400 audit(1733426299.745:278): avc: denied { getopt } for pid=7357 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.989533][ T29] audit: type=1400 audit(1733426300.215:279): avc: denied { ioctl } for pid=7361 comm="syz.3.303" path="socket:[13826]" dev="sockfs" ino=13826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.201510][ T968] usb 3-1: USB disconnect, device number 7 [ 204.821729][ T7402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.050552][ T29] audit: type=1400 audit(1733426303.275:280): avc: denied { read write } for pid=7401 comm="syz.3.309" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.141488][ T29] audit: type=1400 audit(1733426303.275:281): avc: denied { open } for pid=7401 comm="syz.3.309" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.229203][ T29] audit: type=1400 audit(1733426303.305:282): avc: denied { ioctl } for pid=7401 comm="syz.3.309" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.308748][ T29] audit: type=1400 audit(1733426303.305:283): avc: denied { set_context_mgr } for pid=7401 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 205.362080][ T29] audit: type=1400 audit(1733426303.325:284): avc: denied { map } for pid=7401 comm="syz.3.309" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.443553][ T29] audit: type=1400 audit(1733426303.335:285): avc: denied { call } for pid=7401 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 207.521802][ T29] audit: type=1400 audit(1733426305.725:286): avc: denied { getopt } for pid=7424 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 207.565444][ T29] audit: type=1400 audit(1733426305.775:287): avc: denied { ioctl } for pid=7424 comm="syz.2.316" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13075 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.690344][ T7444] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.510496][ T29] audit: type=1400 audit(1733426312.735:288): avc: denied { setopt } for pid=7478 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.541830][ T968] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.849682][ T7482] FAULT_INJECTION: forcing a failure. [ 214.849682][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 214.871732][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.4.333 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 214.882368][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.892432][ T7482] Call Trace: [ 214.895711][ T7482] [ 214.898627][ T7482] dump_stack_lvl+0x16c/0x1f0 [ 214.903304][ T7482] should_fail_ex+0x497/0x5b0 [ 214.907966][ T7482] ? fs_reclaim_acquire+0xae/0x150 [ 214.913064][ T7482] should_failslab+0xc2/0x120 [ 214.917725][ T7482] __kmalloc_cache_node_noprof+0x6e/0x420 [ 214.923438][ T7482] ? mark_lock+0xb5/0xc60 [ 214.927767][ T7482] ? __get_vm_area_node+0x101/0x2f0 [ 214.932975][ T7482] __get_vm_area_node+0x101/0x2f0 [ 214.938874][ T7482] __vmalloc_node_range_noprof+0x26a/0x1530 [ 214.944767][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 214.950306][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 214.955854][ T7482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.962213][ T7482] ? __pfx___lock_acquire+0x10/0x10 [ 214.967428][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 214.972963][ T7482] __vmalloc_noprof+0x6d/0x90 [ 214.977645][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 214.983198][ T7482] bpf_prog_alloc_no_stats+0x54/0x620 [ 214.988576][ T7482] ? security_capable+0x7e/0x260 [ 214.993503][ T7482] bpf_prog_alloc+0x3b/0x230 [ 214.998076][ T7482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.003952][ T7482] bpf_prog_load+0x1b3f/0x2660 [ 215.008701][ T7482] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.013795][ T7482] ? avc_has_perm_noaudit+0x143/0x3a0 [ 215.019162][ T7482] ? selinux_bpf+0xde/0x130 [ 215.023684][ T7482] __sys_bpf+0x4043/0x49c0 [ 215.028102][ T7482] ? __pfx_lock_release+0x10/0x10 [ 215.033116][ T7482] ? __pfx___sys_bpf+0x10/0x10 [ 215.037867][ T7482] ? vfs_write+0x306/0x1150 [ 215.042364][ T7482] ? __mutex_unlock_slowpath+0x164/0x690 [ 215.048008][ T7482] ? fput+0x67/0x440 [ 215.051887][ T7482] ? ksys_write+0x1ba/0x250 [ 215.056375][ T7482] ? __pfx_ksys_write+0x10/0x10 [ 215.061207][ T7482] __x64_sys_bpf+0x78/0xc0 [ 215.065617][ T7482] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.070799][ T7482] do_syscall_64+0xcd/0x250 [ 215.075292][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.081182][ T7482] RIP: 0033:0x7fdfc5b7ff19 [ 215.085585][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.105182][ T7482] RSP: 002b:00007fdfc39f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.113580][ T7482] RAX: ffffffffffffffda RBX: 00007fdfc5d46160 RCX: 00007fdfc5b7ff19 [ 215.121537][ T7482] RDX: 0000000000000090 RSI: 0000000020002c40 RDI: 0000000000000005 [ 215.129506][ T7482] RBP: 00007fdfc39f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.137490][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.145444][ T7482] R13: 0000000000000001 R14: 00007fdfc5d46160 R15: 00007ffdbba37f68 [ 215.153406][ T7482] [ 215.260853][ T7482] syz.4.333: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.277845][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.4.333 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 215.288461][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.298508][ T7482] Call Trace: [ 215.301776][ T7482] [ 215.304710][ T7482] dump_stack_lvl+0x16c/0x1f0 [ 215.309407][ T7482] warn_alloc+0x24d/0x3a0 [ 215.313732][ T7482] ? __pfx_warn_alloc+0x10/0x10 [ 215.318592][ T7482] ? rcu_is_watching+0x12/0xc0 [ 215.323363][ T7482] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 215.329356][ T7482] ? __kasan_kmalloc+0x8a/0xb0 [ 215.334134][ T7482] ? __get_vm_area_node+0x1dc/0x2f0 [ 215.339361][ T7482] __vmalloc_node_range_noprof+0xd27/0x1530 [ 215.345274][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 215.350822][ T7482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.357156][ T7482] ? __pfx___lock_acquire+0x10/0x10 [ 215.362356][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 215.367898][ T7482] __vmalloc_noprof+0x6d/0x90 [ 215.372569][ T7482] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 215.378110][ T7482] bpf_prog_alloc_no_stats+0x54/0x620 [ 215.383477][ T7482] ? security_capable+0x7e/0x260 [ 215.388421][ T7482] bpf_prog_alloc+0x3b/0x230 [ 215.393013][ T7482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.398907][ T7482] bpf_prog_load+0x1b3f/0x2660 [ 215.403678][ T7482] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.408788][ T7482] ? avc_has_perm_noaudit+0x143/0x3a0 [ 215.414183][ T7482] ? selinux_bpf+0xde/0x130 [ 215.418692][ T7482] __sys_bpf+0x4043/0x49c0 [ 215.423107][ T7482] ? __pfx_lock_release+0x10/0x10 [ 215.428127][ T7482] ? __pfx___sys_bpf+0x10/0x10 [ 215.432893][ T7482] ? vfs_write+0x306/0x1150 [ 215.437395][ T7482] ? __mutex_unlock_slowpath+0x164/0x690 [ 215.443037][ T7482] ? fput+0x67/0x440 [ 215.446931][ T7482] ? ksys_write+0x1ba/0x250 [ 215.451429][ T7482] ? __pfx_ksys_write+0x10/0x10 [ 215.456278][ T7482] __x64_sys_bpf+0x78/0xc0 [ 215.460696][ T7482] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.465899][ T7482] do_syscall_64+0xcd/0x250 [ 215.470404][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.476297][ T7482] RIP: 0033:0x7fdfc5b7ff19 [ 215.480706][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.500319][ T7482] RSP: 002b:00007fdfc39f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.508732][ T7482] RAX: ffffffffffffffda RBX: 00007fdfc5d46160 RCX: 00007fdfc5b7ff19 [ 215.516697][ T7482] RDX: 0000000000000090 RSI: 0000000020002c40 RDI: 0000000000000005 [ 215.524660][ T7482] RBP: 00007fdfc39f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.532623][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.540585][ T7482] R13: 0000000000000001 R14: 00007fdfc5d46160 R15: 00007ffdbba37f68 [ 215.548559][ T7482] [ 215.801083][ T7482] Mem-Info: [ 215.854334][ T7482] active_anon:5917 inactive_anon:0 isolated_anon:0 [ 215.854334][ T7482] active_file:18425 inactive_file:38497 isolated_file:0 [ 215.854334][ T7482] unevictable:768 dirty:392 writeback:0 [ 215.854334][ T7482] slab_reclaimable:11141 slab_unreclaimable:100276 [ 215.854334][ T7482] mapped:29474 shmem:1437 pagetables:908 [ 215.854334][ T7482] sec_pagetables:0 bounce:0 [ 215.854334][ T7482] kernel_misc_reclaimable:0 [ 215.854334][ T7482] free:1322075 free_pcp:393 free_cma:0 [ 216.022642][ T7482] Node 0 active_anon:23848kB inactive_anon:0kB active_file:73768kB inactive_file:153912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118016kB dirty:1428kB writeback:200kB shmem:4124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no [ 216.102688][ T7482] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 216.171735][ T968] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.194651][ T7482] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.222281][ T968] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.234944][ T7482] lowmem_reserve[]: 0 2459 2459 0 0 [ 216.240519][ T7482] Node 0 DMA32 free:1364336kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:24148kB inactive_anon:0kB active_file:73968kB inactive_file:153820kB unevictable:1536kB writepending:1528kB present:3129332kB managed:2547172kB mlocked:0kB bounce:0kB free_pcp:536kB local_pcp:316kB free_cma:0kB [ 216.281995][ T968] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 216.291961][ T968] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.301102][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.346600][ T7482] lowmem_reserve[]: 0 0 0 0 0 [ 216.487401][ T968] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.499632][ T7482] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 216.531629][ T5323] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.049199][ T7482] lowmem_reserve[]: 0 0 0 0 0 [ 217.071873][ T7482] Node 1 Normal free:3909332kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.139838][ T7482] lowmem_reserve[]: 0 0 0 0 0 [ 217.144722][ T7482] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.157607][ T7482] Node 0 DMA32: 34*4kB (U) 133*8kB (UME) 328*16kB (UME) 618*32kB (UME) 470*64kB (UME) 106*128kB (UME) 69*256kB (UME) 48*512kB (UME) 30*1024kB (UM) 8*2048kB (UME) 291*4096kB (UM) = 1351152kB [ 217.216661][ T7482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.228487][ T7482] Node 1 Normal: 201*4kB (UM) 26*8kB (UME) 24*16kB (UME) 161*32kB (UME) 83*64kB (UME) 35*128kB (UME) 13*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 2*2048kB (U) 946*4096kB (M) = 3909332kB [ 217.247256][ T7482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.256857][ T7482] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.266243][ T7482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.276384][ T7482] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.286531][ T7482] 58452 total pagecache pages [ 217.292601][ T7482] 0 pages in swap cache [ 217.309169][ T7482] Free swap = 124996kB [ 217.364314][ T7482] Total swap = 124996kB [ 217.368486][ T7482] 2097051 pages RAM [ 217.381538][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 217.389557][ T7482] 0 pages HighMem/MovableOnly [ 217.390714][ T5323] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.416216][ T5323] usb 3-1: config 179 has no interface number 0 [ 217.431583][ T5323] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.454784][ T7482] 428600 pages reserved [ 217.458252][ T5323] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 217.480736][ T7482] 0 pages cma reserved [ 217.621556][ T5323] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.641433][ T5323] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 217.652935][ T5323] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.666247][ T5323] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.675422][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.703838][ T5129] Bluetooth: hci3: unexpected event for opcode 0x200b [ 217.733798][ T7489] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 218.367842][ T29] audit: type=1400 audit(1733426316.595:289): avc: denied { ioctl } for pid=7488 comm="syz.2.335" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 218.428936][ T7512] netlink: 4884 bytes leftover after parsing attributes in process `syz.3.339'. [ 218.523890][ T968] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 218.580051][ T968] usb 4-1: USB disconnect, device number 7 [ 218.610598][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.667606][ T29] audit: type=1400 audit(1733426316.875:290): avc: denied { ioctl } for pid=7488 comm="syz.2.335" path="socket:[14086]" dev="sockfs" ino=14086 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.724989][ T5323] usb 3-1: USB disconnect, device number 8 [ 218.730884][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 218.730915][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 218.891339][ T7504] syz.4.340 (7504): drop_caches: 2 [ 219.062136][ T29] audit: type=1400 audit(1733426317.285:291): avc: denied { write } for pid=7516 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.082543][ T29] audit: type=1326 audit(1733426317.285:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.4.341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfc5b7ff19 code=0x0 [ 219.105117][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.235905][ T7521] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.655415][ T29] audit: type=1400 audit(1733426317.885:293): avc: denied { write } for pid=7522 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.867481][ T29] audit: type=1400 audit(1733426317.915:294): avc: denied { connect } for pid=7522 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.991875][ T29] audit: type=1400 audit(1733426318.195:295): avc: denied { write } for pid=7522 comm="syz.3.343" name="anycast6" dev="proc" ino=4026533439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.748694][ T29] audit: type=1400 audit(1733426318.975:296): avc: denied { bind } for pid=7528 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.373398][ T29] audit: type=1400 audit(1733426321.605:297): avc: denied { getopt } for pid=7551 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.731416][ T29] audit: type=1400 audit(1733426322.765:298): avc: denied { shutdown } for pid=7548 comm="syz.2.351" laddr=fe80::13 lport=55991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.854820][ T7562] vivid-004: kernel_thread() failed [ 224.855312][ T7563] syz.2.351 (7563) used greatest stack depth: 20576 bytes left [ 225.077156][ T29] audit: type=1400 audit(1733426322.935:299): avc: denied { create } for pid=7548 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.483531][ T7572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.354'. [ 227.436956][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.358'. [ 230.968750][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.979121][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.987876][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.998508][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.083321][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.365'. [ 231.728812][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.738792][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.373833][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 233.575937][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.892923][ T5129] Bluetooth: hci4: command tx timeout [ 234.220876][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.369'. [ 234.392517][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.454502][ T7611] chnl_net:caif_netlink_parms(): no params data found [ 234.518772][ T7639] netlink: 4884 bytes leftover after parsing attributes in process `syz.2.368'. [ 235.793109][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.814949][ T29] audit: type=1400 audit(1733426334.045:300): avc: denied { create } for pid=7657 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.938992][ T5129] Bluetooth: hci4: command tx timeout [ 236.520129][ T29] audit: type=1400 audit(1733426334.075:301): avc: denied { write } for pid=7657 comm="syz.3.374" path="socket:[14606]" dev="sockfs" ino=14606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 236.544310][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.562434][ T29] audit: type=1400 audit(1733426334.075:302): avc: denied { nlmsg_read } for pid=7657 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 236.602323][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.761298][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.790761][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.819231][ T7611] bridge_slave_0: entered allmulticast mode [ 236.848815][ T7611] bridge_slave_0: entered promiscuous mode [ 237.001901][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.048670][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.154377][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.173043][ T5864] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.216011][ T5864] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 237.252687][ T7611] bridge_slave_1: entered allmulticast mode [ 237.291006][ T5864] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 237.338489][ T7611] bridge_slave_1: entered promiscuous mode [ 237.394129][ T5864] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.455147][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.487077][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.545745][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.597360][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.713630][ T29] audit: type=1400 audit(1733426335.945:303): avc: denied { ioctl } for pid=7674 comm="syz.0.379" path="socket:[14325]" dev="sockfs" ino=14325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.730960][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 237.770743][ T5864] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 237.810220][ T69] bridge_slave_1: left allmulticast mode [ 237.818344][ T69] bridge_slave_1: left promiscuous mode [ 237.976314][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.056256][ T5129] Bluetooth: hci4: command tx timeout [ 238.176028][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.345386][ T69] bridge_slave_0: left allmulticast mode [ 238.428024][ T69] bridge_slave_0: left promiscuous mode [ 238.434054][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.312583][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.324235][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.326968][ T7687] Falling back ldisc for ptm0. [ 239.345829][ T69] bond0 (unregistering): Released all slaves [ 239.359551][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 239.379778][ T7611] team0: Port device team_slave_0 added [ 239.391286][ T7611] team0: Port device team_slave_1 added [ 239.429743][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'. [ 239.457792][ T29] audit: type=1400 audit(1733426337.685:304): avc: denied { read write } for pid=7690 comm="syz.0.382" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 239.516286][ T29] audit: type=1400 audit(1733426337.725:305): avc: denied { open } for pid=7690 comm="syz.0.382" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 239.575367][ T2150] hid-generic FFF2:0003:0000.0001: unknown main item tag 0x0 [ 239.587783][ T2150] hid-generic FFF2:0003:0000.0001: unknown main item tag 0x0 [ 239.603163][ T2150] hid-generic FFF2:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 239.710293][ T2150] usb 5-1: USB disconnect, device number 6 [ 239.861617][ T29] audit: type=1400 audit(1733426338.025:306): avc: denied { read } for pid=7692 comm="syz.3.383" name="media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.304573][ T5129] Bluetooth: hci4: command tx timeout [ 240.332566][ T29] audit: type=1400 audit(1733426338.025:307): avc: denied { open } for pid=7692 comm="syz.3.383" path="/dev/media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.479404][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.488489][ T29] audit: type=1400 audit(1733426338.025:308): avc: denied { ioctl } for pid=7692 comm="syz.3.383" path="/dev/media5" dev="devtmpfs" ino=973 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.512821][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.556377][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.679540][ T29] audit: type=1400 audit(1733426338.815:309): avc: denied { write } for pid=7699 comm="syz.4.384" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.851625][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.944439][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.119019][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.137025][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.227991][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.295176][ T46] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 241.303514][ T46] usb 5-1: config 0 has no interface number 0 [ 241.309665][ T46] usb 5-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 241.321418][ T46] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.332576][ T46] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.342934][ T46] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 241.352800][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.383290][ T29] audit: type=1400 audit(1733426339.615:310): avc: denied { append } for pid=7705 comm="syz.2.387" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.390035][ T46] usb 5-1: config 0 descriptor?? [ 241.421176][ T46] keyspan 5-1:0.136: Keyspan 2 port adapter converter detected [ 241.430456][ T46] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 1 [ 241.440454][ T46] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 84 [ 241.448763][ T46] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 2 [ 241.488335][ T46] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 241.500927][ T46] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 88 [ 241.509099][ T46] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 6 [ 241.538320][ T46] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 241.768668][ T29] audit: type=1400 audit(1733426339.965:311): avc: granted { setsecparam } for pid=7699 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 241.990367][ T7611] hsr_slave_0: entered promiscuous mode [ 242.034563][ T7611] hsr_slave_1: entered promiscuous mode [ 242.101504][ T7611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.128574][ T7611] Cannot create hsr debugfs directory [ 242.250224][ T29] audit: type=1400 audit(1733426340.475:312): avc: denied { read } for pid=5175 comm="acpid" name="event8" dev="devtmpfs" ino=2810 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 242.660642][ T29] audit: type=1400 audit(1733426340.885:313): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2810 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 242.712455][ T29] audit: type=1400 audit(1733426340.885:314): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2810 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 242.817603][ T69] hsr_slave_0: left promiscuous mode [ 242.866045][ T69] hsr_slave_1: left promiscuous mode [ 242.957866][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.967023][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.062237][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.212780][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.447620][ T7747] fuse: Unknown parameter '0x0000000000000005' [ 243.467383][ T69] veth1_macvtap: left promiscuous mode [ 243.478344][ T69] veth0_macvtap: left promiscuous mode [ 243.489364][ T69] veth1_vlan: left promiscuous mode [ 243.498985][ T69] veth0_vlan: left promiscuous mode [ 243.510459][ T5864] usb 5-1: USB disconnect, device number 7 [ 243.538172][ T5864] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 243.595351][ T5864] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 243.803036][ T5864] keyspan 5-1:0.136: device disconnected [ 246.074472][ T69] team0 (unregistering): Port device team_slave_1 removed [ 246.381857][ T69] team0 (unregistering): Port device team_slave_0 removed [ 247.034941][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.392'. [ 247.044014][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.396'. [ 247.084969][ T7768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.973212][ T7784] vivid-001: kernel_thread() failed [ 248.140100][ T7788] FAULT_INJECTION: forcing a failure. [ 248.140100][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 248.153033][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.4.402 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 248.163646][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.173711][ T7788] Call Trace: [ 248.176983][ T7788] [ 248.179909][ T7788] dump_stack_lvl+0x16c/0x1f0 [ 248.184592][ T7788] should_fail_ex+0x497/0x5b0 [ 248.189273][ T7788] ? fs_reclaim_acquire+0xae/0x150 [ 248.194391][ T7788] should_failslab+0xc2/0x120 [ 248.199071][ T7788] __kmalloc_noprof+0xcb/0x510 [ 248.203838][ T7788] ? d_absolute_path+0x137/0x1b0 [ 248.208775][ T7788] ? rcu_is_watching+0x12/0xc0 [ 248.213562][ T7788] tomoyo_encode2+0x100/0x3e0 [ 248.218272][ T7788] tomoyo_encode+0x29/0x50 [ 248.222699][ T7788] tomoyo_realpath_from_path+0x19d/0x720 [ 248.228338][ T7788] tomoyo_path_number_perm+0x248/0x590 [ 248.233804][ T7788] ? tomoyo_path_number_perm+0x235/0x590 [ 248.239436][ T7788] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.245421][ T7788] ? arch_scale_cpu_capacity+0x15/0xb0 [ 248.250892][ T7788] ? __pfx_lock_release+0x10/0x10 [ 248.255922][ T7788] ? trace_lock_acquire+0x14e/0x1f0 [ 248.261142][ T7788] ? lock_acquire+0x2f/0xb0 [ 248.265645][ T7788] ? __fget_files+0x40/0x3a0 [ 248.270237][ T7788] ? __fget_files+0x206/0x3a0 [ 248.274915][ T7788] security_file_ioctl+0x9b/0x240 [ 248.279943][ T7788] __x64_sys_ioctl+0xb7/0x200 [ 248.284625][ T7788] do_syscall_64+0xcd/0x250 [ 248.289137][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.295039][ T7788] RIP: 0033:0x7fdfc5b7ff19 [ 248.299449][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.319057][ T7788] RSP: 002b:00007fdfc39f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.327472][ T7788] RAX: ffffffffffffffda RBX: 00007fdfc5d46160 RCX: 00007fdfc5b7ff19 [ 248.335443][ T7788] RDX: 0000000020001b80 RSI: 0000000040104593 RDI: 0000000000000006 [ 248.343411][ T7788] RBP: 00007fdfc39f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.351380][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.359351][ T7788] R13: 0000000000000000 R14: 00007fdfc5d46160 R15: 00007ffdbba37f68 [ 248.367334][ T7788] [ 248.372315][ T7788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.986917][ T7799] fuse: Unknown parameter '0x0000000000000005' [ 249.261651][ T7611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.895897][ T7611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.966735][ T7611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.080866][ T7611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.242715][ T968] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.411779][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 250.434503][ T968] usb 1-1: descriptor type invalid, skip [ 250.466825][ T968] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 250.544894][ T968] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.670030][ T968] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 250.740697][ T968] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.741096][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.760390][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.780771][ T7827] FAULT_INJECTION: forcing a failure. [ 250.780771][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 250.788805][ T968] usb 1-1: Product: syz [ 250.801435][ T968] usb 1-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 250.809561][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.843375][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.3.410 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 250.854004][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.861431][ T968] usb 1-1: SerialNumber: syz [ 250.864051][ T7827] Call Trace: [ 250.864063][ T7827] [ 250.864072][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 250.879537][ T7827] should_fail_ex+0x497/0x5b0 [ 250.884238][ T7827] ? fs_reclaim_acquire+0xae/0x150 [ 250.889364][ T7827] should_failslab+0xc2/0x120 [ 250.894055][ T7827] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 250.899872][ T7827] ? __alloc_skb+0x2b1/0x380 [ 250.904481][ T7827] __alloc_skb+0x2b1/0x380 [ 250.908909][ T7827] ? __pfx___alloc_skb+0x10/0x10 [ 250.913863][ T7827] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 250.919865][ T7827] netlink_alloc_large_skb+0x69/0x130 [ 250.925260][ T7827] netlink_sendmsg+0x689/0xd70 [ 250.930045][ T7827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.935352][ T7827] ____sys_sendmsg+0xaaf/0xc90 [ 250.940130][ T7827] ? copy_msghdr_from_user+0x10b/0x160 [ 250.945602][ T7827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.950910][ T7827] ___sys_sendmsg+0x135/0x1e0 [ 250.955600][ T7827] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.960817][ T7827] ? __pfx_lock_release+0x10/0x10 [ 250.965849][ T7827] ? trace_lock_acquire+0x14e/0x1f0 [ 250.971072][ T7827] ? __fget_files+0x206/0x3a0 [ 250.975763][ T7827] __sys_sendmsg+0x16e/0x220 [ 250.980362][ T7827] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.985496][ T7827] do_syscall_64+0xcd/0x250 [ 250.990013][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.995922][ T7827] RIP: 0033:0x7f257617ff19 [ 251.000341][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.019960][ T7827] RSP: 002b:00007f2576f40058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.028390][ T7827] RAX: ffffffffffffffda RBX: 00007f2576345fa0 RCX: 00007f257617ff19 [ 251.036371][ T7827] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 251.044354][ T7827] RBP: 00007f2576f400a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.052332][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.060312][ T7827] R13: 0000000000000000 R14: 00007f2576345fa0 R15: 00007ffcea9b5a68 [ 251.068307][ T7827] [ 251.071399][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.267320][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.274498][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.321781][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.328949][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.371138][ T7611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.381729][ T7611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.506346][ T29] audit: type=1400 audit(1733426349.635:315): avc: denied { accept } for pid=7826 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 251.866646][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.198201][ T968] usb 1-1: USB disconnect, device number 6 [ 253.204972][ T29] audit: type=1400 audit(1733426351.385:316): avc: denied { setattr } for pid=7878 comm="syz.3.416" name="L2CAP" dev="sockfs" ino=15696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.228270][ T29] audit: type=1400 audit(1733426351.385:317): avc: denied { open } for pid=7878 comm="syz.3.416" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 253.251998][ T29] audit: type=1400 audit(1733426351.385:318): avc: denied { setopt } for pid=7878 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.924123][ T7894] fuse: Unknown parameter '0x0000000000000005' [ 254.047771][ T7611] veth0_vlan: entered promiscuous mode [ 254.138112][ T7611] veth1_vlan: entered promiscuous mode [ 254.204741][ T7611] veth0_macvtap: entered promiscuous mode [ 255.062618][ T7611] veth1_macvtap: entered promiscuous mode [ 255.168724][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.203886][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.227999][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.261502][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.290160][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.500955][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.729754][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.754712][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761296][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.850755][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.872220][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.884976][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.422'. [ 255.897080][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.931488][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.954261][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.964931][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.974789][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.985313][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.995315][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.005804][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.016610][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.094128][ T7611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.111461][ T7611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.123377][ T7611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.139588][ T7611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.375322][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.413971][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.475835][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.505541][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.530598][ T29] audit: type=1400 audit(1733426354.755:319): avc: denied { mounton } for pid=7611 comm="syz-executor" path="/root/syzkaller.ABQBnq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 256.557292][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.569731][ T7934] FAULT_INJECTION: forcing a failure. [ 256.569731][ T7934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.582908][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.3.425 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 256.593518][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.603590][ T7934] Call Trace: [ 256.606879][ T7934] [ 256.609814][ T7934] dump_stack_lvl+0x16c/0x1f0 [ 256.614519][ T7934] should_fail_ex+0x497/0x5b0 [ 256.619232][ T7934] strncpy_from_user+0x3b/0x2d0 [ 256.624112][ T7934] getname_flags.part.0+0x8f/0x550 [ 256.629262][ T7934] getname+0x8d/0xe0 [ 256.633177][ T7934] do_sys_openat2+0x104/0x1e0 [ 256.637886][ T7934] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.643114][ T7934] ? __fget_files+0x206/0x3a0 [ 256.647822][ T7934] __x64_sys_openat+0x175/0x210 [ 256.652707][ T7934] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.658099][ T7934] ? ksys_write+0x1ba/0x250 [ 256.662628][ T7934] do_syscall_64+0xcd/0x250 [ 256.667169][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.673071][ T7934] RIP: 0033:0x7f257617ff19 [ 256.677479][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.697104][ T7934] RSP: 002b:00007f2576f1f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.705523][ T7934] RAX: ffffffffffffffda RBX: 00007f2576346080 RCX: 00007f257617ff19 [ 256.713489][ T7934] RDX: 0000000000000002 RSI: 0000000020000240 RDI: ffffffffffffff9c [ 256.721467][ T7934] RBP: 00007f2576f1f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.729453][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.737426][ T7934] R13: 0000000000000000 R14: 00007f2576346080 R15: 00007ffcea9b5a68 [ 256.745409][ T7934] [ 256.748507][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.929753][ T29] audit: type=1400 audit(1733426355.155:320): avc: denied { read } for pid=7939 comm="syz.2.426" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.571508][ T29] audit: type=1400 audit(1733426355.195:321): avc: denied { open } for pid=7939 comm="syz.2.426" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.670753][ T29] audit: type=1400 audit(1733426355.865:322): avc: denied { ioctl } for pid=7939 comm="syz.2.426" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.076962][ T7951] warning: `syz.3.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 259.171234][ T7975] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.200507][ T7976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.217332][ T7978] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 259.650786][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'. [ 259.807323][ T29] audit: type=1400 audit(1733426358.025:323): avc: denied { search } for pid=5485 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=14904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 261.903505][ T29] audit: type=1400 audit(1733426360.115:324): avc: denied { execute } for pid=8002 comm="syz.6.431" path="/2/cpu.stat" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.345288][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.447'. [ 267.402443][ T8047] netlink: 80 bytes leftover after parsing attributes in process `syz.2.445'. [ 267.461572][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.613272][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.775959][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.785828][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 267.795844][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.805019][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.838953][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.581615][ T29] audit: type=1400 audit(1733426366.125:325): avc: denied { sqpoll } for pid=8063 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 268.638998][ T8] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 268.966819][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.250820][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.302721][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.482581][ T5864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 270.377876][ T968] usb 5-1: USB disconnect, device number 8 [ 270.531523][ T29] audit: type=1400 audit(1733426368.745:326): avc: denied { execmod } for pid=8103 comm="syz.4.456" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 270.562313][ T29] audit: type=1400 audit(1733426368.745:327): avc: denied { execute } for pid=8103 comm="syz.4.456" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 271.756465][ T5323] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 271.981501][ T5323] usb 7-1: Using ep0 maxpacket: 16 [ 272.002373][ T5323] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.022533][ T5323] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.040427][ T5323] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.060091][ T5323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.123163][ T5323] usb 7-1: Product: syz [ 272.173183][ T5323] usb 7-1: Manufacturer: syz [ 272.194204][ T5323] usb 7-1: SerialNumber: syz [ 272.327620][ T8132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.461'. [ 273.160650][ T5323] usb 7-1: cannot find UAC_HEADER [ 273.261590][ T5323] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 273.322186][ T5323] usb 7-1: USB disconnect, device number 2 [ 273.438953][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 274.356345][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.400773][ T8161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 275.501306][ T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 275.728827][ T8163] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 275.843012][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 275.849534][ T968] usb 4-1: descriptor type invalid, skip [ 275.856266][ T968] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 275.865389][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.875597][ T968] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 275.886745][ T968] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.898699][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.951510][ T5899] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 275.971096][ T968] usb 4-1: Product: syz [ 276.167691][ T8178] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 276.338347][ T968] usb 4-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 276.371489][ T968] usb 4-1: SerialNumber: syz [ 277.341459][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 277.393658][ T968] usb 4-1: can't set config #1, error -71 [ 277.509878][ T968] usb 4-1: USB disconnect, device number 8 [ 277.530364][ T5899] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 277.554341][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.621616][ T5899] usb 7-1: Product: syz [ 277.631694][ T5899] usb 7-1: Manufacturer: syz [ 277.640575][ T5899] usb 7-1: SerialNumber: syz [ 277.652634][ T5899] usb 7-1: config 0 descriptor?? [ 279.549468][ T5899] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 279.556963][ T5899] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 279.780279][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.788969][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.102415][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 280.240758][ T8224] netlink: 80 bytes leftover after parsing attributes in process `syz.2.480'. [ 280.270989][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 280.293032][ T46] usb 1-1: descriptor type invalid, skip [ 280.317677][ T46] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 280.337373][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.375087][ T46] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 280.400589][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.414394][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.432707][ T46] usb 1-1: Product: syz [ 280.447249][ T46] usb 1-1: Manufacturer: ꗵ梅趡떤鶛䘈዗颺黭ꁸꏛ뎰ឺ䡗멏㛔蚜쁎騂ꭵ㚷巉꽁뻕ꦻڎ떵卌緸꤭⟱뫭䏋⿾末㛔띒衆ಲಁஉꖡﰡ抧̳맗턎ዴ섳炳踫ꗞꥂ볛듲噃鮿ꑇ䷝줜⠜ꗚꘐ瀇酷徜㟌℟妒ᢝ箳엄ᝉ횇磸㉀᜸籥䞞祏ꍕ씯糆豈箨伥䤼Ḹ秽 [ 280.520046][ T46] usb 1-1: SerialNumber: syz [ 280.786771][ T5323] usb 7-1: USB disconnect, device number 3 [ 281.716566][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'. [ 281.739082][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.6.481'. [ 282.166859][ T46] usb 1-1: USB disconnect, device number 7 [ 282.710224][ T8257] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.201481][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 283.387961][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.399585][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 283.439643][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 284.246858][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.256065][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.491758][ T8284] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 284.792004][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.275259][ T8] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 286.434805][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.678472][ T8313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.495'. [ 287.324892][ T25] usb 5-1: USB disconnect, device number 9 [ 288.258585][ T8333] FAULT_INJECTION: forcing a failure. [ 288.258585][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.259286][ T8333] [ 288.259293][ T8333] ====================================================== [ 288.259300][ T8333] WARNING: possible circular locking dependency detected [ 288.259308][ T8333] 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 Not tainted [ 288.259319][ T8333] ------------------------------------------------------ [ 288.259325][ T8333] syz.6.494/8333 is trying to acquire lock: [ 288.259335][ T8333] ffffffff8e0c8800 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 288.259387][ T8333] [ 288.259387][ T8333] but task is already holding lock: [ 288.259392][ T8333] ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 288.259443][ T8333] [ 288.259443][ T8333] which lock already depends on the new lock. [ 288.259443][ T8333] [ 288.259448][ T8333] [ 288.259448][ T8333] the existing dependency chain (in reverse order) is: [ 288.259454][ T8333] [ 288.259454][ T8333] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 288.259478][ T8333] _raw_spin_lock_nested+0x31/0x40 [ 288.259499][ T8333] raw_spin_rq_lock_nested+0x29/0x130 [ 288.259518][ T8333] task_rq_lock+0xcf/0x3b0 [ 288.259537][ T8333] cgroup_move_task+0x82/0x250 [ 288.259554][ T8333] css_set_move_task+0x288/0x5f0 [ 288.259573][ T8333] cgroup_post_fork+0x1c6/0x910 [ 288.259596][ T8333] copy_process+0x50d9/0x8df0 [ 288.259618][ T8333] kernel_clone+0xfd/0x960 [ 288.259640][ T8333] user_mode_thread+0xb4/0xf0 [ 288.259663][ T8333] rest_init+0x23/0x2b0 [ 288.259687][ T8333] start_kernel+0x3e4/0x4d0 [ 288.259711][ T8333] x86_64_start_reservations+0x18/0x30 [ 288.259736][ T8333] x86_64_start_kernel+0xb2/0xc0 [ 288.259759][ T8333] common_startup_64+0x13e/0x148 [ 288.259781][ T8333] [ 288.259781][ T8333] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 288.259804][ T8333] _raw_spin_lock_irqsave+0x3a/0x60 [ 288.259823][ T8333] try_to_wake_up+0xb6/0x1490 [ 288.259840][ T8333] __wake_up_common+0x131/0x1e0 [ 288.259860][ T8333] __wake_up+0x31/0x60 [ 288.259876][ T8333] tty_port_default_wakeup+0x2a/0x40 [ 288.259897][ T8333] serial8250_tx_chars+0x68e/0x860 [ 288.259919][ T8333] serial8250_handle_irq+0x74d/0xc80 [ 288.259940][ T8333] serial8250_default_handle_irq+0x9a/0x210 [ 288.259963][ T8333] serial8250_interrupt+0x103/0x210 [ 288.259985][ T8333] __handle_irq_event_percpu+0x229/0x7d0 [ 288.260009][ T8333] handle_irq_event+0xab/0x1e0 [ 288.260032][ T8333] handle_edge_irq+0x263/0xd10 [ 288.260054][ T8333] __common_interrupt+0xdf/0x250 [ 288.260079][ T8333] common_interrupt+0x61/0xe0 [ 288.260105][ T8333] asm_common_interrupt+0x26/0x40 [ 288.260129][ T8333] unwind_next_frame+0x540/0x20c0 [ 288.260149][ T8333] arch_stack_walk+0x95/0x100 [ 288.260171][ T8333] stack_trace_save+0x95/0xd0 [ 288.260196][ T8333] kasan_save_stack+0x33/0x60 [ 288.260215][ T8333] kasan_save_track+0x14/0x30 [ 288.260234][ T8333] kasan_save_free_info+0x3b/0x60 [ 288.260259][ T8333] __kasan_slab_free+0x51/0x70 [ 288.260279][ T8333] slab_free_after_rcu_debug+0x115/0x340 [ 288.260300][ T8333] rcu_core+0x79d/0x14d0 [ 288.260322][ T8333] handle_softirqs+0x213/0x8f0 [ 288.260343][ T8333] do_softirq+0xb2/0xf0 [ 288.260363][ T8333] __local_bh_enable_ip+0x100/0x120 [ 288.260384][ T8333] copy_fpstate_to_sigframe+0x2d3/0xaf0 [ 288.260410][ T8333] get_sigframe+0x4aa/0x9c0 [ 288.260438][ T8333] x64_setup_rt_frame+0x129/0xcf0 [ 288.260461][ T8333] arch_do_signal_or_restart+0x5e6/0x7e0 [ 288.260485][ T8333] syscall_exit_to_user_mode+0x150/0x2a0 [ 288.260507][ T8333] do_syscall_64+0xda/0x250 [ 288.260529][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.260552][ T8333] [ 288.260552][ T8333] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 288.260576][ T8333] _raw_spin_lock_irqsave+0x3a/0x60 [ 288.260596][ T8333] __wake_up+0x1c/0x60 [ 288.260611][ T8333] tty_port_default_wakeup+0x2a/0x40 [ 288.260632][ T8333] serial8250_tx_chars+0x68e/0x860 [ 288.260652][ T8333] serial8250_handle_irq+0x74d/0xc80 [ 288.260673][ T8333] serial8250_default_handle_irq+0x9a/0x210 [ 288.260696][ T8333] serial8250_interrupt+0x103/0x210 [ 288.260718][ T8333] __handle_irq_event_percpu+0x229/0x7d0 [ 288.260742][ T8333] handle_irq_event+0xab/0x1e0 [ 288.260764][ T8333] handle_edge_irq+0x263/0xd10 [ 288.260785][ T8333] __common_interrupt+0xdf/0x250 [ 288.260810][ T8333] common_interrupt+0xba/0xe0 [ 288.260834][ T8333] asm_common_interrupt+0x26/0x40 [ 288.260856][ T8333] _raw_spin_unlock_irqrestore+0x31/0x80 [ 288.260875][ T8333] uart_write+0x2a4/0xb30 [ 288.260892][ T8333] n_tty_write+0x419/0x1140 [ 288.260913][ T8333] file_tty_write.constprop.0+0x506/0x9a0 [ 288.260931][ T8333] redirected_tty_write+0xcc/0x140 [ 288.260950][ T8333] vfs_write+0x5ae/0x1150 [ 288.260966][ T8333] ksys_write+0x12b/0x250 [ 288.260983][ T8333] do_syscall_64+0xcd/0x250 [ 288.261004][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.261027][ T8333] [ 288.261027][ T8333] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 288.261051][ T8333] _raw_spin_lock_irqsave+0x3a/0x60 [ 288.261070][ T8333] serial8250_console_write+0xb56/0x17c0 [ 288.261093][ T8333] console_flush_all+0x803/0xc60 [ 288.261115][ T8333] console_unlock+0xd9/0x210 [ 288.261137][ T8333] vprintk_emit+0x424/0x6f0 [ 288.261160][ T8333] vprintk+0x7f/0xa0 [ 288.261182][ T8333] _printk+0xc8/0x100 [ 288.261200][ T8333] register_console+0xbfd/0x1170 [ 288.261224][ T8333] univ8250_console_init+0x5f/0x90 [ 288.261243][ T8333] console_init+0x154/0x690 [ 288.261266][ T8333] start_kernel+0x29a/0x4d0 [ 288.261289][ T8333] x86_64_start_reservations+0x18/0x30 [ 288.261312][ T8333] x86_64_start_kernel+0xb2/0xc0 [ 288.261335][ T8333] common_startup_64+0x13e/0x148 [ 288.261357][ T8333] [ 288.261357][ T8333] -> #0 (console_owner){-...}-{0:0}: [ 288.261376][ T8333] __lock_acquire+0x249e/0x3c40 [ 288.261392][ T8333] lock_acquire.part.0+0x11b/0x380 [ 288.261407][ T8333] console_lock_spinning_enable+0xb0/0xd0 [ 288.261435][ T8333] console_flush_all+0x7ac/0xc60 [ 288.261458][ T8333] console_unlock+0xd9/0x210 [ 288.261480][ T8333] vprintk_emit+0x424/0x6f0 [ 288.261502][ T8333] vprintk+0x7f/0xa0 [ 288.261525][ T8333] _printk+0xc8/0x100 [ 288.261543][ T8333] should_fail_ex+0x46c/0x5b0 [ 288.261568][ T8333] strncpy_from_user+0x3b/0x2d0 [ 288.261592][ T8333] strncpy_from_user_nofault+0x7f/0x180 [ 288.261612][ T8333] bpf_probe_read_compat_str+0xf1/0x170 [ 288.261631][ T8333] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 288.261646][ T8333] bpf_trace_run4+0x245/0x5a0 [ 288.261664][ T8333] __bpf_trace_sched_switch+0x13e/0x190 [ 288.261685][ T8333] __traceiter_sched_switch+0x6c/0xc0 [ 288.261704][ T8333] __schedule+0x1b71/0x5ad0 [ 288.261723][ T8333] preempt_schedule_irq+0x51/0x90 [ 288.261743][ T8333] irqentry_exit+0x36/0x90 [ 288.261763][ T8333] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 288.261786][ T8333] write_comp_data+0x11/0x90 [ 288.261806][ T8333] vfs_write+0x2f6/0x1150 [ 288.261823][ T8333] ksys_write+0x12b/0x250 [ 288.261839][ T8333] do_syscall_64+0xcd/0x250 [ 288.261861][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.261884][ T8333] [ 288.261884][ T8333] other info that might help us debug this: [ 288.261884][ T8333] [ 288.261889][ T8333] Chain exists of: [ 288.261889][ T8333] console_owner --> &p->pi_lock --> &rq->__lock [ 288.261889][ T8333] [ 288.261914][ T8333] Possible unsafe locking scenario: [ 288.261914][ T8333] [ 288.261918][ T8333] CPU0 CPU1 [ 288.261923][ T8333] ---- ---- [ 288.261927][ T8333] lock(&rq->__lock); [ 288.261937][ T8333] lock(&p->pi_lock); [ 288.261949][ T8333] lock(&rq->__lock); [ 288.261961][ T8333] lock(console_owner); [ 288.261971][ T8333] [ 288.261971][ T8333] *** DEADLOCK *** [ 288.261971][ T8333] [ 288.261975][ T8333] 6 locks held by syz.6.494/8333: [ 288.261987][ T8333] #0: ffff88802b7a27f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 288.262033][ T8333] #1: ffff8880578e2420 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 288.262079][ T8333] #2: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 288.262124][ T8333] #3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 288.262167][ T8333] #4: ffffffff8e1a8c40 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 288.262214][ T8333] #5: ffffffff8e1a8cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60 [ 288.262261][ T8333] [ 288.262261][ T8333] stack backtrace: [ 288.262267][ T8333] CPU: 1 UID: 0 PID: 8333 Comm: syz.6.494 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 288.262290][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.262302][ T8333] Call Trace: [ 288.262308][ T8333] [ 288.262315][ T8333] dump_stack_lvl+0x116/0x1f0 [ 288.262340][ T8333] print_circular_bug+0x419/0x5d0 [ 288.262362][ T8333] check_noncircular+0x31a/0x400 [ 288.262383][ T8333] ? __pfx_check_noncircular+0x10/0x10 [ 288.262406][ T8333] ? lockdep_lock+0xc6/0x200 [ 288.262436][ T8333] ? __pfx_lockdep_lock+0x10/0x10 [ 288.262464][ T8333] __lock_acquire+0x249e/0x3c40 [ 288.262490][ T8333] ? __pfx___lock_acquire+0x10/0x10 [ 288.262514][ T8333] lock_acquire.part.0+0x11b/0x380 [ 288.262534][ T8333] ? console_lock_spinning_enable+0x9f/0xd0 [ 288.262560][ T8333] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 288.262582][ T8333] ? rcu_is_watching+0x12/0xc0 [ 288.262607][ T8333] ? trace_lock_acquire+0x14e/0x1f0 [ 288.262633][ T8333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.262656][ T8333] ? console_lock_spinning_enable+0x9f/0xd0 [ 288.262681][ T8333] ? lock_acquire+0x2f/0xb0 [ 288.262701][ T8333] ? console_lock_spinning_enable+0x9f/0xd0 [ 288.262727][ T8333] console_lock_spinning_enable+0xb0/0xd0 [ 288.262751][ T8333] ? console_lock_spinning_enable+0x9f/0xd0 [ 288.262775][ T8333] console_flush_all+0x7ac/0xc60 [ 288.262803][ T8333] ? __pfx_console_flush_all+0x10/0x10 [ 288.262830][ T8333] ? printk_percpu_data_ready+0x9/0x20 [ 288.262853][ T8333] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 288.262873][ T8333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.262898][ T8333] console_unlock+0xd9/0x210 [ 288.262922][ T8333] ? __pfx_console_unlock+0x10/0x10 [ 288.262946][ T8333] ? lock_acquire+0x2f/0xb0 [ 288.262965][ T8333] ? vprintk+0x7f/0xa0 [ 288.262990][ T8333] ? __down_trylock_console_sem+0xb0/0x140 [ 288.263013][ T8333] vprintk_emit+0x424/0x6f0 [ 288.263039][ T8333] ? __pfx_vprintk_emit+0x10/0x10 [ 288.263063][ T8333] ? hlock_class+0x4e/0x130 [ 288.263087][ T8333] ? __lock_acquire+0xcc5/0x3c40 [ 288.263109][ T8333] vprintk+0x7f/0xa0 [ 288.263134][ T8333] _printk+0xc8/0x100 [ 288.263154][ T8333] ? __pfx__printk+0x10/0x10 [ 288.263174][ T8333] ? hlock_class+0x4e/0x130 [ 288.263198][ T8333] ? ___ratelimit+0x24c/0x570 [ 288.263220][ T8333] ? __pfx_mark_lock+0x10/0x10 [ 288.263239][ T8333] ? __pfx____ratelimit+0x10/0x10 [ 288.263263][ T8333] should_fail_ex+0x46c/0x5b0 [ 288.263292][ T8333] strncpy_from_user+0x3b/0x2d0 [ 288.263318][ T8333] strncpy_from_user_nofault+0x7f/0x180 [ 288.263341][ T8333] bpf_probe_read_compat_str+0xf1/0x170 [ 288.263362][ T8333] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 288.263378][ T8333] bpf_trace_run4+0x245/0x5a0 [ 288.263398][ T8333] ? __pfx_bpf_trace_run4+0x10/0x10 [ 288.263420][ T8333] ? __pfx_lock_release+0x10/0x10 [ 288.263450][ T8333] __bpf_trace_sched_switch+0x13e/0x190 [ 288.263472][ T8333] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 288.263495][ T8333] ? psi_group_change+0x6dc/0xd20 [ 288.263518][ T8333] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 288.263544][ T8333] __traceiter_sched_switch+0x6c/0xc0 [ 288.263566][ T8333] __schedule+0x1b71/0x5ad0 [ 288.263587][ T8333] ? irqentry_exit+0x3b/0x90 [ 288.263609][ T8333] ? __pfx_mark_lock+0x10/0x10 [ 288.263632][ T8333] ? __pfx___schedule+0x10/0x10 [ 288.263654][ T8333] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 288.263678][ T8333] ? mark_held_locks+0x9f/0xe0 [ 288.263700][ T8333] preempt_schedule_irq+0x51/0x90 [ 288.263722][ T8333] irqentry_exit+0x36/0x90 [ 288.263744][ T8333] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 288.263769][ T8333] RIP: 0010:write_comp_data+0x11/0x90 [ 288.263791][ T8333] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 5f d2 69 7e <65> 8b 05 60 d2 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 288.263810][ T8333] RSP: 0018:ffffc90004b57d20 EFLAGS: 00000286 [ 288.263826][ T8333] RAX: 0000000000000000 RBX: 0000000000008000 RCX: ffffffff820e3416 [ 288.263839][ T8333] RDX: ffff888030f94880 RSI: 0000000000008000 RDI: 0000000000000003 [ 288.263852][ T8333] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000008000 [ 288.263864][ T8333] R10: 0000000000008000 R11: 1ffffffff1c38cf1 R12: ffff88807e461038 [ 288.263878][ T8333] R13: ffff88807e461038 R14: 0000000000000000 R15: 1ffff9200096afaf [ 288.263894][ T8333] ? vfs_write+0x2f6/0x1150 [ 288.263915][ T8333] vfs_write+0x2f6/0x1150 [ 288.263935][ T8333] ? __pfx___mutex_lock+0x10/0x10 [ 288.263958][ T8333] ? __pfx_vfs_write+0x10/0x10 [ 288.263979][ T8333] ? fdget_pos+0x267/0x390 [ 288.264003][ T8333] ksys_write+0x12b/0x250 [ 288.264022][ T8333] ? __pfx_ksys_write+0x10/0x10 [ 288.264044][ T8333] do_syscall_64+0xcd/0x250 [ 288.264069][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.264093][ T8333] RIP: 0033:0x7f5a1e97e9cf [ 288.264108][ T8333] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 288.264126][ T8333] RSP: 002b:00007f5a1f6cc050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 288.264144][ T8333] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5a1e97e9cf [ 288.264158][ T8333] RDX: 0000000000000001 RSI: 00007f5a1f6cc0a0 RDI: 0000000000000006 [ 288.264171][ T8333] RBP: 00007f5a1f6cc0a0 R08: 0000000000000000 R09: 00007f5a1f6cbe17 [ 288.264183][ T8333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 288.264196][ T8333] R13: 0000000000000000 R14: 00007f5a1eb46160 R15: 00007ffc44cd7178 [ 288.264215][ T8333] [ 289.650157][ T8333] CPU: 1 UID: 0 PID: 8333 Comm: syz.6.494 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 289.660717][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.670744][ T8333] Call Trace: [ 289.674013][ T8333] [ 289.676925][ T8333] dump_stack_lvl+0x116/0x1f0 [ 289.681590][ T8333] should_fail_ex+0x497/0x5b0 [ 289.686257][ T8333] strncpy_from_user+0x3b/0x2d0 [ 289.691086][ T8333] strncpy_from_user_nofault+0x7f/0x180 [ 289.696623][ T8333] bpf_probe_read_compat_str+0xf1/0x170 [ 289.702158][ T8333] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 289.707603][ T8333] bpf_trace_run4+0x245/0x5a0 [ 289.712254][ T8333] ? __pfx_bpf_trace_run4+0x10/0x10 [ 289.717444][ T8333] ? __pfx_lock_release+0x10/0x10 [ 289.722447][ T8333] __bpf_trace_sched_switch+0x13e/0x190 [ 289.727970][ T8333] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 289.734011][ T8333] ? psi_group_change+0x6dc/0xd20 [ 289.739032][ T8333] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 289.745683][ T8333] __traceiter_sched_switch+0x6c/0xc0 [ 289.751030][ T8333] __schedule+0x1b71/0x5ad0 [ 289.755508][ T8333] ? irqentry_exit+0x3b/0x90 [ 289.760093][ T8333] ? __pfx_mark_lock+0x10/0x10 [ 289.764847][ T8333] ? __pfx___schedule+0x10/0x10 [ 289.769724][ T8333] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 289.775516][ T8333] ? mark_held_locks+0x9f/0xe0 [ 289.780260][ T8333] preempt_schedule_irq+0x51/0x90 [ 289.785261][ T8333] irqentry_exit+0x36/0x90 [ 289.789655][ T8333] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 289.795110][ T8333] RIP: 0010:write_comp_data+0x11/0x90 [ 289.800457][ T8333] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 5f d2 69 7e <65> 8b 05 60 d2 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 289.820042][ T8333] RSP: 0018:ffffc90004b57d20 EFLAGS: 00000286 [ 289.826087][ T8333] RAX: 0000000000000000 RBX: 0000000000008000 RCX: ffffffff820e3416 [ 289.834045][ T8333] RDX: ffff888030f94880 RSI: 0000000000008000 RDI: 0000000000000003 [ 289.842023][ T8333] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000008000 [ 289.850057][ T8333] R10: 0000000000008000 R11: 1ffffffff1c38cf1 R12: ffff88807e461038 [ 289.858092][ T8333] R13: ffff88807e461038 R14: 0000000000000000 R15: 1ffff9200096afaf [ 289.866037][ T8333] ? vfs_write+0x2f6/0x1150 [ 289.870519][ T8333] vfs_write+0x2f6/0x1150 [ 289.874825][ T8333] ? __pfx___mutex_lock+0x10/0x10 [ 289.879825][ T8333] ? __pfx_vfs_write+0x10/0x10 [ 289.884562][ T8333] ? fdget_pos+0x267/0x390 [ 289.888955][ T8333] ksys_write+0x12b/0x250 [ 289.893280][ T8333] ? __pfx_ksys_write+0x10/0x10 [ 289.898134][ T8333] do_syscall_64+0xcd/0x250 [ 289.902631][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.908503][ T8333] RIP: 0033:0x7f5a1e97e9cf [ 289.912893][ T8333] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 289.932496][ T8333] RSP: 002b:00007f5a1f6cc050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 289.940883][ T8333] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5a1e97e9cf [ 289.948825][ T8333] RDX: 0000000000000001 RSI: 00007f5a1f6cc0a0 RDI: 0000000000000006 [ 289.956769][ T8333] RBP: 00007f5a1f6cc0a0 R08: 0000000000000000 R09: 00007f5a1f6cbe17 [ 289.964713][ T8333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 289.972676][ T8333] R13: 0000000000000000 R14: 00007f5a1eb46160 R15: 00007ffc44cd7178 [ 289.980673][ T8333] [ 289.983805][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.047485][ T29] audit: type=1400 audit(1733426388.245:328): avc: denied { setopt } for pid=8305 comm="syz.6.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1