last executing test programs: 9m40.439827747s ago: executing program 4 (id=285): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000000c0)="b484dcae1608a640cc7fecf092aa09b22d5951a81bc544e458e4a85b7f12a9f4d06a779edcb22edaac797d39a18a6dcb3524f9e2630eb9b878fff2eb55e755cc4297f1dd3fd069bf3199e7aa5e3e570b3f67d78102185767a6cc10ff1ccd2d1f1e4bbd27ef71b059048051fdb3a9b575479107e3967b13c4226a0833f53d5069f9da07dc1c82646db20db493c764122c01403bfd0d8bb5a8f9102500f36849d3b34479508ebf0402900d345dbae4ab", &(0x7f0000000180)=""/76}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 9m40.322115096s ago: executing program 4 (id=286): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000003d40)=[{{&(0x7f0000000980)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xff68, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) 9m40.284356952s ago: executing program 4 (id=287): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x40000}}, 0x20}}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$inet(0x2, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x6, 0x5, 0x0, 0x2, 0x6, 0x40, 0x401, 0x9}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xd7, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0xd2, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xffe0}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x5, 0x200, 0x24}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8e, 0xff}}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) 9m35.213418373s ago: executing program 4 (id=312): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x80, 0x20, 0x3, 0x7, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x1a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @ssrr={0x89, 0x1f, 0xf6, [@multicast1, @remote, @multicast2, @loopback, @loopback, @broadcast, @multicast1]}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="18006f4f437d00000000f3ff08000000"], &(0x7f0000001340)='GPL\x00', 0x1, 0x81, &(0x7f0000001380)=""/129, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x3, 0x5, 0x1, 0xd}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001480)=[r2], &(0x7f00000014c0)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x1, 0x5, 0xa}, {0x7fff, 0x5, 0xd, 0x2}, {0x1, 0x2, 0x0, 0x7}, {0x3, 0x1, 0x1, 0x3}, {0x3, 0x5, 0x1, 0x6}, {0x1, 0x3, 0x1, 0x7}], 0x10, 0x80000000, @void, @value}, 0x94) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x6, 0x1, &(0x7f0000000080)=@raw=[@alu={0x7, 0x0, 0xb, 0x5, 0xb, 0x50, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x8a, &(0x7f0000001240)=""/138, 0x9e967117acfae2b4, 0x678b31e569a2d875, '\x00', r0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = syz_open_dev$hidraw(&(0x7f0000001440), 0x3, 0x610040) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000001740)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_rr_get_interval(r7, &(0x7f00000016c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r9 = syz_open_procfs(r7, &(0x7f0000000180)='fdinfo/4\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x73) 9m34.612782797s ago: executing program 4 (id=313): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x200}, 0x8) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f0000000c00)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xd, 0x1, 0x2, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x10, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value}) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)='\x00', 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/80, 0x50, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x22509}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0xd, 0x1, 0x8, 0x4, @loopback, @mcast1, 0x8, 0x7800, 0xb, 0x2}}) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0xffffffffffffff5d, 0x1, {0x7, 0x4, 0xa, 0x1, 0x2, 0x10, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x9f, 0x9, 0xb, 0x4, 0x1, 0x0, 0x1b4f, 0x2}}, {0x8, 0x2, [0x2, 0x100]}}]}]}, 0x63}, 0x1, 0x7a00, 0x0, 0x4010}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1b, 0x0, &(0x7f00000000c0)="cc150800621b02c6fadd9963f392c758e6970039cf0c46a116c8f9", 0x0, 0x4, 0x0, 0xad3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r11, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) 9m34.097356353s ago: executing program 4 (id=318): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9m33.938272627s ago: executing program 32 (id=318): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8m34.428473041s ago: executing program 3 (id=513): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/49, 0x37, 0x31, 0x0, 0x8, 0x10000, @value=r0}, 0x28) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x58a40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000080)=0x7) map_shadow_stack(&(0x7f0000262000/0x800000)=nil, 0x800000, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xb, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20403, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) 8m33.386286017s ago: executing program 3 (id=518): r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x3, 0xf00, 0x10000) r1 = syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, r0}, &(0x7f0000004000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000000)) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000000004629b3bb0b"], 0x10}], 0x1}, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0x9a9, &(0x7f00000001c0)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x13, 0x2000ac0a, r2) 8m31.912799281s ago: executing program 3 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x4}, 0x1, 0x1}], 0x20) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x16b802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x83a4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) read$char_usb(r3, &(0x7f0000000100)=""/124, 0x7c) write$char_usb(r4, &(0x7f0000000440)="93", 0x1) 8m26.809824761s ago: executing program 3 (id=544): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1000000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x400001, 0x13e) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x48, @empty, 0x2}, 0x1c) 8m25.742299629s ago: executing program 3 (id=547): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x0, 0xb, {0xb, 0x21, "96ad8ee5e49a2286cf"}}, &(0x7f0000000080)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "ee563a261bb6ccf895949a3670825f9796091de60a4880fee9117f2e341d78a6103841f929b0fb72913bfbd4d13c3032ac7eb122988027ba6f36827f77084504cbfc43f914938241ad82987b856e5e6ef7b250db1af69cb36ac882bc5ad795f64d5f0677488c2bce9aab29655fd72de713829f0aae2719acc64a8a8bb0aa53aad428432d178222d0c42e7cba947cabc77bc4daaaedff3729426a2bebf0851ad632862c7adfc74231cd3995da0ddd895976e18e7eeede0ca7cc6cc260d8a8f41b86fb3b19848d91280301dc48db50bcc96c7c0ccb"}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x20, 0x5, 0xd6, "928b6dbee11e90474c68d608c1012428e7ab9cdae205f81e16cabbcb6f6a1cda79036f555dd93430ba03e085f4aedefffe58cf525fb3272f094a4842473582219ebf4e85834702543098b5e21b7560496be647ff07a10031b9b4c6639adcc61fb9678544992cc85818ccf9479e37bb2d2d22d0862737b50a9a4436b3b9852e005e39b848fb84e215accb7758ba9bae5f69c3c82e88e14d98e1271b4a16052afd21a3183dd4f712f69d4695583e8136885ef78ac37802e75503aa2de0e072af8c7352048a1ec4a131cfff4b1511ec9f3b6025b9eec8da"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6d}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x9f, {0x9d, "c0ba7ae0130681f846cf5550019bde8af75b8226f49ae6378605ce677b0c6a1f0b0b7c5e5380cc08bb81e44659e4def44fb582435f27881a37f8f9913ea65f8e9577fd3f1c93e7534cd43e458febd0e20148f3ce3eb8caa72097715fbbd7872d975775eab765742a7f51ff4f0234cdc6a70ce2f8e73bb677c908e722a16a1a3cce98e63c420c98d117b9b567f56b29334f4f289523b52b92251268543e"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xfe}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) 8m25.542719114s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x541b, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0xc002a0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r9, r9, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0x4, 0x3e40, 0x4, 0x0, 0x9, 0x2, 0x0, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r10 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @loopback}, {0xa, 0x0, 0x40000000, @local}, r11}}, 0x48) 8m25.015949103s ago: executing program 33 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x541b, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0xc002a0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r9, r9, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0x4, 0x3e40, 0x4, 0x0, 0x9, 0x2, 0x0, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r10 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @loopback}, {0xa, 0x0, 0x40000000, @local}, r11}}, 0x48) 20.560338851s ago: executing program 1 (id=2511): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x2, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) mq_getsetattr(r1, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x5}, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0121}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000600000003000000000000004a6a78752fe6d480446c40577e33c0f639f24a1255654fa3ce7b5d4857b8dfa56a05f8c30a28c4514204d52efe763396b5ae3718", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r10, &(0x7f0000000400)="b3d48c19479487ea2a39851c28f5bb7a1204fd11619a5b69c2d14d81d1d0b698d61c990f857fce00"/59, 0x3b, 0x4008c10, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000000)=""/172, 0xac}, {&(0x7f00000000c0)=""/21, 0x15}], 0x2, &(0x7f0000000140)=""/235, 0xeb}, 0x3}, {{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/141, 0x8d}], 0x2, &(0x7f0000000480)=""/164, 0xa4}, 0x7fffffff}, {{&(0x7f0000000540)=@rc, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/200, 0xc8}], 0x1, &(0x7f0000000700)=""/188, 0xbc}, 0xfd}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/72, 0x48}], 0x4, &(0x7f0000000a40)=""/189, 0xbd}, 0x8}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001140), 0x0, &(0x7f00000011c0)=""/136, 0x88}, 0x200}, {{&(0x7f0000001280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001300)=""/223, 0xdf}, {&(0x7f0000001400)=""/54, 0x36}], 0x2, &(0x7f0000001480)=""/47, 0x2f}, 0xcb3}], 0x6, 0x40010062, 0x0) 17.380105234s ago: executing program 1 (id=2523): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1f9303) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x709}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000180)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r0, 0x0, 0xc8) r7 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20004010) writev(r6, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8eca926c45911e7da74bf7747f31c8dd53bb7406578d84c714ddb3863916097ffd648fdd1b2791e4cfe3769b174428a2efdd360a937068a8178db570b975928ca2dc56d8dbf7349bf82023464eff6dc5b3fbad862f76e00cf962d1cf97887782b37f58d6da1599ae4758cf685f8c9dcd79be1824472337a13e4b1633081b1e44e470a0286eaa4c5fe0db228c72298ea945298f0b331b17b2ce2de8d11aa3af2bd35a67723", 0xa5}], 0x1) 8.706388678s ago: executing program 1 (id=2537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xadcd, 0x10100, 0x7fffffd, 0x4}, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040)={0x0, 0xb915, 0x2, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0xfffffffc}}, [0x10000, 0x2, 0x5, 0x7f, 0x9, 0x80, 0x800, 0x9, 0xf1c, 0x4601, 0x4, 0x9, 0x4, 0x6, 0x5]}, &(0x7f00000008c0)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000940)={r7, 0x406}, 0xc) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)={{0x107, 0x8, 0x8, 0xba, 0x298, 0x5, 0x263, 0x6}, "83e1b12d6eefc984a43def82ed1e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x52e) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J|', 0x2}], 0x1) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x16, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) 7.84209251s ago: executing program 6 (id=2541): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x8dffffff, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xff54, &(0x7f0000001080)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000001040)="9d7fa555ba8b4726d7ccaf8a207100e69cfac4377876021d7131acb8059f96bd206d4776368ed2a92432e5af71", 0x2d}], 0x2, &(0x7f00000011c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xc900) 7.433884393s ago: executing program 6 (id=2545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket(0x2b, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) move_pages(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000097000/0x2000)=nil, &(0x7f0000029000/0x2000)=nil], &(0x7f0000000100)=[0xfffffff7, 0x2], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.750050939s ago: executing program 2 (id=2546): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xf0}}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_open_dev$media(&(0x7f0000000040), 0xff, 0x72002) writev(r2, &(0x7f0000002800)=[{&(0x7f0000000140)="3fba3d96c8f7be54e89f121e49d4e19ead3f3fc98d231011bc4854000000003913294a17c016dcf47c3566bba15e3f959b2495ead7d0210cfdabaf8401b201158f1ffb7e0031547e0bc7cc90424f0824a28ec7b122d516090000005f2be3d7ab4463247b7ada6b8e0000000000000000", 0x70}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000032000107fcffffff0000000006"], 0x14}}, 0x0) 5.826463249s ago: executing program 5 (id=2548): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x34, 0x4, 0x0) r4 = socket(0x25, 0x80000, 0xfffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20002048) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000340)=""/187, &(0x7f0000000000)=0xbb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4) r5 = socket$inet(0x2, 0x3, 0xed) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.841568994s ago: executing program 5 (id=2550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x8000) 4.62566115s ago: executing program 1 (id=2552): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0xe}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1, 0xfffffff9, 0x0, @void, @value}, 0x28) (fail_nth: 6) 3.720987615s ago: executing program 0 (id=2553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setreuid(0xffffffffffffffff, 0xee00) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) sendmsg$rds(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0x4) setgroups(0xefff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4, r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000f5ff00000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000040000000060a010400000000000000000100000008000b400000000018000480140001800e000100636f6e6e6c696d69740000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x481}, 0x0) 3.658406626s ago: executing program 6 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 3.529544727s ago: executing program 1 (id=2555): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000059770c40c009030232d3000000010902120001000000000904000000fa10c900ee07fe3ae84e7c5c803252a1307bcc8cba56d4c852b87a74cda5de3ac231385c00f8281eb97b39ce1fbc5e1d8712875f6a3e9f66d85fbe2576c6fcdce436e53808501619667842"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) (fail_nth: 4) 3.529001442s ago: executing program 0 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r3], &(0x7f0000000040)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES64]) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 3.509828204s ago: executing program 5 (id=2557): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000059770c40c009030232d3000000010902120001000000000904000000fa10c900ee07fe3ae84e7c5c803252a1307bcc8cba56d4c852b87a74cda5de3ac231385c00f8281eb97b39ce1fbc5e1d8712875f6a3e9f66d85fbe2576c6fcdce436e53808501619667842"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 3.280139266s ago: executing program 0 (id=2558): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000059770c40c009030232d3000000010902120001000000000904000000fa10c900ee07fe3ae84e7c5c803252a1307bcc8cba56d4c852b87a74cda5de3ac231385c00f8281eb97b39ce1fbc5e1d8712875f6a3e9f66d85fbe2576c6fcdce436e53808501619667842"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 3.13711513s ago: executing program 2 (id=2559): syz_clone3(&(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.093945932s ago: executing program 2 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) r3 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r6, &(0x7f0000000240), 0x10000000000003bd, 0x0, 0x0, 0x1e) close(0x4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000000)={0x0, 0x303000, 0x8}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) 2.58409388s ago: executing program 6 (id=2561): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$isdn(0x22, 0x3, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)=""/109, 0xfffffffffffffffa}], 0x1}, 0x2}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/52, 0x34}, 0xdf}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/133, 0x85}, {&(0x7f0000000d80)=""/163, 0xa3}], 0x3, &(0x7f0000000e80)=""/44, 0x2c}, 0x3}], 0x3, 0x40012003, 0x0) syz_open_dev$dri(0x0, 0x80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000001040)="68b727b1164f8b7b28f72172d3d57d3b78b9f14920d7c39c319bc830df518d647c4fbfdc535cea0061f89fb2eea5076065e126d573b0c30771840bd6b34330c869a4ddeccb8c1776aae2b8fef8c8a60ed78b12e0e933b438bc74a8d5a618086d79802a400d29e674f438a6df225a303186def508d56dbad1b318556dc4b17aa6e8ff05bebb51cf9cd44eb4b629d25fe7cf1239c9fc729023bf5609ded859e2bdd9990370f6b6", 0xa6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x11, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0xc0045003, &(0x7f0000001100)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001000)=ANY=[@ANYBLOB="1816002000", @ANYRES16=r7, @ANYBLOB="110500800000000000000900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x24040005}, 0x840) socket$can_raw(0x1d, 0x3, 0x1) 2.101159317s ago: executing program 2 (id=2562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x14000}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000180)={@rand_addr=0x64010102, @multicast2, 0xffffffffffffffff, "1817ec42d52eada626404f0f77d8a5e71e578530e45000b9479940aaff0a8f17", 0x24, 0x6, 0x3b9daeba, 0x9}, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000070071111f000000000085100000020000008bec8e76d632358d5af366bb329d850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) clock_getres(0x7, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r6 = gettid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)=0x6) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffff0180c200000088a800008100000008004500005800000000000690"], 0x72) clock_gettime(0x0, &(0x7f0000000200)) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x8010, r4, 0x0) clock_settime(0x0, &(0x7f0000000280)={0x0, 0x3938700}) fcntl$setlease(r5, 0x400, 0x0) 1.742032513s ago: executing program 5 (id=2563): socket(0x1e, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r8, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) (fail_nth: 1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000000)) 1.739293062s ago: executing program 1 (id=2564): r0 = syz_usb_connect$hid(0x5, 0x55, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1803, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x0, 0x53}}}}}]}}]}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rxrpc_tx_ack\x00', r1, 0x0, 0xf440000000}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="60110500000005f593"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.272610423s ago: executing program 6 (id=2565): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) 1.103574255s ago: executing program 5 (id=2566): socket(0x1e, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8000007) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r8, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000000)) 1.026104354s ago: executing program 0 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x25, 0x1, 0x2) write(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x3, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x9, 0x3, 0x1, 0xa3f, 0x9, 0x210, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x6, 0x1, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x5, 0x8001, 0x4, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6, 0x401, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x1000101, 0x8, 0x3, 0x3, 0x1ff, 0x8000, 0x7, 0x1, 0x9, 0x800, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x5, 0x400, 0x401, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0xff, 0xfffffffe, 0xac9, 0x6, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x2, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x7, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x5, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff941, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0x81, 0x8, 0x6, 0x8, 0x2, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x9, 0x77e, 0xb95, 0x5, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x5, 0x8000, 0xa, 0x6, 0x4, 0xfffffff8, 0xce, 0x4, 0x9, 0x2, 0xa16f, 0x81, 0x8000, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0xfb, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x80000001, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x10, 0x8, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x101, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x2, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0xf, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0xa, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x1, 0xe7, 0xfffffff5, 0x2, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x5, 0x4155, 0xedb]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x5, 0x7, 0x0, 0x5, 0x0, @remote}, 0x10) 696.026359ms ago: executing program 0 (id=2568): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000180)=0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20040e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 662.934777ms ago: executing program 2 (id=2569): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x38, 0x0}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) 257.86476ms ago: executing program 0 (id=2570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x14000}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000180)={@rand_addr=0x64010102, @multicast2, 0xffffffffffffffff, "1817ec42d52eada626404f0f77d8a5e71e578530e45000b9479940aaff0a8f17", 0x24, 0x6, 0x3b9daeba, 0x9}, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000070071111f000000000085100000020000008bec8e76d632358d5af366bb329d850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) clock_getres(0x7, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r6 = gettid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)=0x6) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffff0180c200000088a800008100000008004500005800000000000690"], 0x72) clock_gettime(0x0, &(0x7f0000000200)) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x8010, r4, 0x0) clock_settime(0x0, &(0x7f0000000280)={0x0, 0x3938700}) fcntl$setlease(r5, 0x400, 0x0) 220.018346ms ago: executing program 6 (id=2571): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa4, 0xcf, 0x19, 0x40, 0x471, 0x602, 0x53f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x0, 0xf0, 0x9b, 0xcf, 0x0, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x950}}]}}]}}]}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x2, 0xffb7}, {0x6, 0x6}, {0x215b, 0x35}]}) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000ac0)={0x2c, &(0x7f0000000740)={0x0, 0x0, 0x5, {0x6c7a71fce38238ca, 0x1, "850000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x200, 0x0, 0x0, 0x40, 0x0, 0x0, 0x802004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0xffff1000, 0x81806}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="91d6f2e1e1fead00a82fabe5a41b5fd902000000000000004e005227dc"], 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 129.997042ms ago: executing program 5 (id=2572): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @ssrr={0x89, 0x3, 0xd7}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000019200)={&(0x7f00000190c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000191c0)={&(0x7f0000019140)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=2573): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x1c3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1d, 0x10, &(0x7f0000000380)=@raw=[@tail_call, @ldst={0x3, 0x3, 0x2, 0x3, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xd, 0xa, 0x0, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0xa}, @tail_call], &(0x7f00000004c0)='syzkaller\x00', 0xffff, 0xe4, &(0x7f0000000500)=""/228, 0x100, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000600), 0x0, 0x10, 0xbf12, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) setresuid(r2, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) io_setup(0x81, &(0x7f0000000180)=0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}]) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): nd } for pid=13863 comm="syz.1.2104" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.806529][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.424332][T13872] FAULT_INJECTION: forcing a failure. [ 595.424332][T13872] name failslab, interval 1, probability 0, space 0, times 0 [ 595.442497][ T51] usb 6-1: Cannot set MAC address [ 595.447793][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.0.2106 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 595.447928][ T51] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 595.458551][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 595.458569][T13872] Call Trace: [ 595.458577][T13872] [ 595.458586][T13872] dump_stack_lvl+0x16c/0x1f0 [ 595.458614][T13872] should_fail_ex+0x497/0x5b0 [ 595.458639][T13872] ? fs_reclaim_acquire+0xae/0x150 [ 595.458668][T13872] should_failslab+0xc2/0x120 [ 595.458690][T13872] __kmalloc_noprof+0xcb/0x510 [ 595.458711][T13872] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 595.458737][T13872] tomoyo_realpath_from_path+0xb9/0x720 [ 595.458761][T13872] ? tomoyo_path_number_perm+0x235/0x590 [ 595.458783][T13872] ? tomoyo_path_number_perm+0x235/0x590 [ 595.458805][T13872] tomoyo_path_number_perm+0x248/0x590 [ 595.458824][T13872] ? tomoyo_path_number_perm+0x235/0x590 [ 595.543572][T13872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.549556][T13872] ? __pfx_lock_release+0x10/0x10 [ 595.554559][T13872] ? trace_lock_acquire+0x14e/0x1f0 [ 595.559738][T13872] ? lock_acquire+0x2f/0xb0 [ 595.564217][T13872] ? __fget_files+0x40/0x3a0 [ 595.568785][T13872] ? __fget_files+0x206/0x3a0 [ 595.573451][T13872] security_file_ioctl+0x9b/0x240 [ 595.578482][T13872] __x64_sys_ioctl+0xb7/0x200 [ 595.583139][T13872] do_syscall_64+0xcd/0x250 [ 595.587622][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.593501][T13872] RIP: 0033:0x7f88bbf85d19 [ 595.597900][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.617503][T13872] RSP: 002b:00007f88bce7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.625893][T13872] RAX: ffffffffffffffda RBX: 00007f88bc175fa0 RCX: 00007f88bbf85d19 [ 595.633840][T13872] RDX: 0000000020000780 RSI: 00000000c0347c03 RDI: 0000000000000003 [ 595.641794][T13872] RBP: 00007f88bce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 595.649759][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.657706][T13872] R13: 0000000000000000 R14: 00007f88bc175fa0 R15: 00007fffa5851c38 [ 595.665662][T13872] [ 595.668731][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.785142][T13872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.894110][ T51] usb 6-1: USB disconnect, device number 56 [ 595.986590][T13882] fuse: Bad value for 'fd' [ 596.080486][ T29] audit: type=1400 audit(1734298323.620:1515): avc: denied { listen } for pid=13883 comm="syz.0.2109" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 596.177872][ T29] audit: type=1400 audit(1734298323.735:1516): avc: denied { read } for pid=13886 comm="syz.5.2111" path="socket:[41966]" dev="sockfs" ino=41966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 596.202291][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.376864][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2111'. [ 597.039532][ T116] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 597.214214][ T116] usb 7-1: Using ep0 maxpacket: 8 [ 597.278412][ T116] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 597.510982][ T116] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 597.591458][ T116] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.601485][ T116] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.614649][ T116] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.623856][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.915065][ T116] usb 7-1: usb_control_msg returned -32 [ 597.921523][ T116] usbtmc 7-1:16.0: can't read capabilities [ 598.166980][ T29] audit: type=1400 audit(1734298325.677:1517): avc: denied { create } for pid=13929 comm="syz.5.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 598.207548][ T116] usb 7-1: USB disconnect, device number 68 [ 598.282042][T13940] FAULT_INJECTION: forcing a failure. [ 598.282042][T13940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.827941][T13940] CPU: 1 UID: 0 PID: 13940 Comm: syz.1.2124 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 598.838833][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 598.848887][T13940] Call Trace: [ 598.852161][T13940] [ 598.855164][T13940] dump_stack_lvl+0x16c/0x1f0 [ 598.859850][T13940] should_fail_ex+0x497/0x5b0 [ 598.864536][T13940] _copy_from_user+0x2e/0xd0 [ 598.869132][T13940] copy_msghdr_from_user+0x99/0x160 [ 598.874328][T13940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 598.880141][T13940] ? __lock_acquire+0xcc5/0x3c40 [ 598.885089][T13940] ? find_held_lock+0x2d/0x110 [ 598.889864][T13940] ___sys_sendmsg+0xff/0x1e0 [ 598.894451][T13940] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 598.901041][T13940] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.906240][T13940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.911643][T13940] __sys_sendmmsg+0x201/0x420 [ 598.916324][T13940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 598.921539][T13940] ? fput+0x67/0x440 [ 598.925437][T13940] ? ksys_write+0x1ba/0x250 [ 598.929943][T13940] __x64_sys_sendmmsg+0x9c/0x100 [ 598.934879][T13940] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.940083][T13940] do_syscall_64+0xcd/0x250 [ 598.944593][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.950504][T13940] RIP: 0033:0x7f046ab85d19 [ 598.954919][T13940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.974525][T13940] RSP: 002b:00007f046b9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 598.982938][T13940] RAX: ffffffffffffffda RBX: 00007f046ad76080 RCX: 00007f046ab85d19 [ 598.990906][T13940] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 598.998871][T13940] RBP: 00007f046b9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 599.006924][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.014892][T13940] R13: 0000000000000001 R14: 00007f046ad76080 R15: 00007ffc46db00c8 [ 599.022874][T13940] [ 599.030659][ T29] audit: type=1400 audit(1734298325.688:1518): avc: denied { read } for pid=13929 comm="syz.5.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 599.108427][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'. [ 600.712609][T13972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.936543][T13973] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2132'. [ 601.079503][T13973] lo speed is unknown, defaulting to 1000 [ 601.085367][T13973] lo speed is unknown, defaulting to 1000 [ 601.095505][T13973] lo speed is unknown, defaulting to 1000 [ 601.121744][T13973] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 601.232949][T13973] lo speed is unknown, defaulting to 1000 [ 601.266252][T13973] lo speed is unknown, defaulting to 1000 [ 601.286823][T13973] lo speed is unknown, defaulting to 1000 [ 601.352147][T13973] lo speed is unknown, defaulting to 1000 [ 601.397666][T13973] lo speed is unknown, defaulting to 1000 [ 602.938523][T14011] batadv0 speed is unknown, defaulting to 1000 [ 603.333855][T14011] lo speed is unknown, defaulting to 1000 [ 603.445692][T14006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.486748][T14006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.513336][ T29] audit: type=1326 audit(1734298331.431:1519): auid=4294967295 uid=101 gid=102 ses=4294967295 subj=system_u:system_r:dhcpc_t pid=12335 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=c000003e syscall=41 compat=0 ip=0x7faae1cc2bd7 code=0x0 [ 603.663589][ T5900] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 603.795208][ T5900] usb 1-1: device descriptor read/64, error -71 [ 604.134881][ T5900] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 604.164310][ T116] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 605.001842][ T5900] usb 1-1: device descriptor read/64, error -71 [ 605.261435][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 605.262478][ T5900] usb usb1-port1: attempt power cycle [ 605.375009][ T29] audit: type=1400 audit(1734298333.384:1520): avc: denied { getopt } for pid=14046 comm="syz.6.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 605.430289][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.448922][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 605.462136][ T29] audit: type=1400 audit(1734298333.415:1521): avc: denied { name_bind } for pid=14046 comm="syz.6.2151" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 605.528482][ T116] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.537561][ T116] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=1 [ 605.567186][ T116] usb 2-1: Manufacturer: syz [ 605.576652][ T116] usb 2-1: SerialNumber: syz [ 605.587536][ T116] cdc_acm 2-1:1.0: Zero length descriptor references [ 605.594315][ T116] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 605.641486][ T29] audit: type=1400 audit(1734298333.646:1522): avc: denied { name_connect } for pid=14055 comm="syz.2.2155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 605.683765][ T5900] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 605.710071][ T5900] usb 1-1: device descriptor read/8, error -71 [ 605.729459][ T29] audit: type=1400 audit(1734298333.751:1523): avc: denied { accept } for pid=14055 comm="syz.2.2155" lport=56695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 606.052185][ T25] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 606.155943][ T29] audit: type=1400 audit(1734298334.192:1524): avc: denied { setopt } for pid=14055 comm="syz.2.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 606.214131][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 606.244660][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.273476][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.287223][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 606.299462][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.319261][ T25] usb 6-1: config 0 descriptor?? [ 606.851230][ T25] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 607.440111][ T25] usb 2-1: USB disconnect, device number 63 [ 607.674344][T14088] overlayfs: failed to clone upperpath [ 607.699250][T14090] input: syz0 as /devices/virtual/input/input34 [ 607.709427][ T29] audit: type=1400 audit(1734298335.830:1525): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3440 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.461144][ T29] audit: type=1400 audit(1734298336.618:1526): avc: denied { block_suspend } for pid=14097 comm="syz.2.2166" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.496172][ T5900] usb 6-1: USB disconnect, device number 57 [ 608.730397][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 608.928631][ T5912] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 609.004762][ T116] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 609.145287][ T5912] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.156687][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.210029][ T5912] usb 7-1: config 0 descriptor?? [ 609.217752][ T116] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.227659][ T116] usb 6-1: not running at top speed; connect to a high speed hub [ 609.243314][ T116] usb 6-1: config 4 has an invalid interface number: 111 but max is 0 [ 609.251622][ T116] usb 6-1: config 4 has no interface number 0 [ 609.257929][ T116] usb 6-1: config 4 interface 111 has no altsetting 0 [ 609.269942][ T116] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 609.279296][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.287500][ T116] usb 6-1: Product: syz [ 609.291832][ T116] usb 6-1: Manufacturer: syz [ 609.296525][ T116] usb 6-1: SerialNumber: syz [ 609.337956][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 609.345926][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 609.357421][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 609.369274][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.378993][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.388946][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 609.398916][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 609.408142][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.420886][ T25] usb 2-1: config 0 descriptor?? [ 609.426791][T14101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 609.434441][ T5912] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 609.437022][T14101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 609.443050][ T5912] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 609.647220][ T5912] [drm:udl_init] *ERROR* Selecting channel failed [ 609.661421][ T5912] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 609.669459][ T5912] [drm] Initialized udl on minor 2 [ 609.677476][ T5912] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.689152][ T5912] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 609.696904][ T5865] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.705157][ T5865] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 609.713718][ T5912] usb 7-1: USB disconnect, device number 69 [ 610.328085][ T29] audit: type=1400 audit(1734298338.581:1527): avc: denied { read } for pid=14116 comm="syz.6.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 610.349789][T14115] xt_bpf: check failed: parse error [ 610.363785][ T29] audit: type=1326 audit(1734298338.623:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb17985d19 code=0x7ffc0000 [ 610.387278][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.425041][ T29] audit: type=1326 audit(1734298338.623:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb17985d19 code=0x7ffc0000 [ 610.448544][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.461813][ T29] audit: type=1326 audit(1734298338.623:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb17985d19 code=0x7ffc0000 [ 610.485300][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.495741][ T29] audit: type=1326 audit(1734298338.623:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb17985d19 code=0x7ffc0000 [ 610.527031][ T29] audit: type=1326 audit(1734298338.623:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb17985d19 code=0x7ffc0000 [ 610.674150][ T29] audit: type=1400 audit(1734298338.948:1533): avc: denied { getopt } for pid=14124 comm="syz.0.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 610.697855][ T29] audit: type=1400 audit(1734298338.969:1534): avc: denied { write } for pid=14124 comm="syz.0.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 611.099930][ T29] audit: type=1400 audit(1734298339.389:1535): avc: denied { map } for pid=14131 comm="syz.0.2178" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.398656][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 611.432086][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2180'. [ 611.445426][ T5900] usb 2-1: USB disconnect, device number 64 [ 611.474563][T14142] batadv0 speed is unknown, defaulting to 1000 [ 611.520859][ T116] pvrusb2: Hardware description: Terratec Grabster AV400 [ 611.561982][ T116] pvrusb2: ********** [ 611.589608][ T116] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 611.625701][ T116] pvrusb2: Important functionality might not be entirely working. [ 611.662468][ T116] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 611.687604][ T116] pvrusb2: ********** [ 611.696959][ T116] usb 6-1: selecting invalid altsetting 0 [ 611.717596][ T2324] pvrusb2: control-write URB failure, status=-71 [ 611.722000][ T116] usb 6-1: USB disconnect, device number 58 [ 611.743499][T14153] 9pnet_fd: Insufficient options for proto=fd [ 611.758607][ T2324] pvrusb2: Device being rendered inoperable [ 611.775701][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 611.816724][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 611.856609][T14156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.906507][T14158] FAULT_INJECTION: forcing a failure. [ 611.906507][T14158] name failslab, interval 1, probability 0, space 0, times 0 [ 611.960152][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.0.2187 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 611.970941][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 611.980974][T14158] Call Trace: [ 611.984229][T14158] [ 611.987138][T14158] dump_stack_lvl+0x16c/0x1f0 [ 611.991804][T14158] should_fail_ex+0x497/0x5b0 [ 611.996486][T14158] ? fs_reclaim_acquire+0xae/0x150 [ 612.001584][T14158] should_failslab+0xc2/0x120 [ 612.006374][T14158] __kmalloc_noprof+0xcb/0x510 [ 612.011118][T14158] tomoyo_realpath_from_path+0xb9/0x720 [ 612.016649][T14158] tomoyo_mount_acl+0x66d/0x880 [ 612.021474][T14158] ? hlock_class+0x4e/0x130 [ 612.025969][T14158] ? __lock_acquire+0x15a9/0x3c40 [ 612.030970][T14158] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 612.036318][T14158] ? __pfx___lock_acquire+0x10/0x10 [ 612.041487][T14158] ? stack_trace_save+0x95/0xd0 [ 612.046326][T14158] ? __pfx_lock_release+0x10/0x10 [ 612.051342][T14158] ? trace_lock_acquire+0x14e/0x1f0 [ 612.056518][T14158] ? tomoyo_mount_permission+0x149/0x420 [ 612.062124][T14158] ? lock_acquire+0x2f/0xb0 [ 612.066599][T14158] ? tomoyo_mount_permission+0x149/0x420 [ 612.072209][T14158] tomoyo_mount_permission+0x16e/0x420 [ 612.077641][T14158] ? tomoyo_mount_permission+0x149/0x420 [ 612.083342][T14158] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 612.089313][T14158] ? get_current_fs_domain+0x184/0x1f0 [ 612.094751][T14158] security_sb_mount+0x9b/0x260 [ 612.099576][T14158] path_mount+0x129/0x1f20 [ 612.103975][T14158] ? kmem_cache_free+0x152/0x4c0 [ 612.108892][T14158] ? __pfx_path_mount+0x10/0x10 [ 612.113719][T14158] ? putname+0x13c/0x180 [ 612.117948][T14158] __x64_sys_mount+0x294/0x320 [ 612.122686][T14158] ? __pfx___x64_sys_mount+0x10/0x10 [ 612.127962][T14158] do_syscall_64+0xcd/0x250 [ 612.132444][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.138311][T14158] RIP: 0033:0x7f88bbf85d19 [ 612.142705][T14158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.162287][T14158] RSP: 002b:00007f88bce7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.171282][T14158] RAX: ffffffffffffffda RBX: 00007f88bc175fa0 RCX: 00007f88bbf85d19 [ 612.179239][T14158] RDX: 0000000020000100 RSI: 0000000020000280 RDI: 0000000020000040 [ 612.187190][T14158] RBP: 00007f88bce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 612.195136][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.203082][T14158] R13: 0000000000000000 R14: 00007f88bc175fa0 R15: 00007fffa5851c38 [ 612.211034][T14158] [ 612.214084][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.349575][T14158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 612.621408][T14170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.528274][T14188] netlink: 'syz.2.2199': attribute type 16 has an invalid length. [ 613.536515][T14188] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2199'. [ 613.548434][T14188] netlink: 'syz.2.2199': attribute type 13 has an invalid length. [ 613.556412][T14188] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2199'. [ 613.605223][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.718016][T14194] syzkaller1: entered allmulticast mode [ 614.830836][T14209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14209 comm=syz.5.2206 [ 614.848896][T14213] FAULT_INJECTION: forcing a failure. [ 614.848896][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 614.862393][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 614.862407][ T29] audit: type=1400 audit(1734298343.327:1540): avc: denied { map } for pid=14208 comm="syz.5.2206" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.900490][T14213] CPU: 1 UID: 0 PID: 14213 Comm: syz.6.2207 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 614.911276][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 614.921321][T14213] Call Trace: [ 614.924584][T14213] [ 614.927503][T14213] dump_stack_lvl+0x16c/0x1f0 [ 614.932175][T14213] should_fail_ex+0x497/0x5b0 [ 614.936851][T14213] ? fs_reclaim_acquire+0xae/0x150 [ 614.941957][T14213] should_failslab+0xc2/0x120 [ 614.946620][T14213] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 614.952413][T14213] ? __alloc_skb+0x2b1/0x380 [ 614.956996][T14213] __alloc_skb+0x2b1/0x380 [ 614.961402][T14213] ? __pfx___alloc_skb+0x10/0x10 [ 614.966338][T14213] netlink_ack+0x15f/0xb80 [ 614.970742][T14213] ? avc_has_perm_noaudit+0x61/0x3a0 [ 614.976023][T14213] netlink_rcv_skb+0x348/0x440 [ 614.980775][T14213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 614.986223][T14213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.991512][T14213] ? bpf_lsm_capable+0x9/0x10 [ 614.996169][T14213] ? security_capable+0x7e/0x260 [ 615.001091][T14213] ? ns_capable+0xd7/0x110 [ 615.005500][T14213] nfnetlink_rcv+0x1b4/0x430 [ 615.010080][T14213] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 615.015179][T14213] ? netlink_deliver_tap+0x1ae/0xd30 [ 615.020454][T14213] netlink_unicast+0x53c/0x7f0 [ 615.025214][T14213] ? __pfx_netlink_unicast+0x10/0x10 [ 615.030493][T14213] netlink_sendmsg+0x8b8/0xd70 [ 615.035252][T14213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.040544][T14213] ____sys_sendmsg+0xaaf/0xc90 [ 615.045315][T14213] ? copy_msghdr_from_user+0x10b/0x160 [ 615.050755][T14213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.056037][T14213] ___sys_sendmsg+0x135/0x1e0 [ 615.060700][T14213] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.065890][T14213] ? __pfx_lock_release+0x10/0x10 [ 615.071421][T14213] ? trace_lock_acquire+0x14e/0x1f0 [ 615.076622][T14213] ? __fget_files+0x206/0x3a0 [ 615.081288][T14213] __sys_sendmsg+0x16e/0x220 [ 615.085864][T14213] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.090970][T14213] do_syscall_64+0xcd/0x250 [ 615.095466][T14213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.101350][T14213] RIP: 0033:0x7f2b67f85d19 [ 615.105746][T14213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.125337][T14213] RSP: 002b:00007f2b68d15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.133736][T14213] RAX: ffffffffffffffda RBX: 00007f2b68175fa0 RCX: 00007f2b67f85d19 [ 615.141699][T14213] RDX: 0000000000008840 RSI: 0000000020000240 RDI: 0000000000000007 [ 615.149659][T14213] RBP: 00007f2b68d15090 R08: 0000000000000000 R09: 0000000000000000 [ 615.157618][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.165571][T14213] R13: 0000000000000000 R14: 00007f2b68175fa0 R15: 00007fff301923a8 [ 615.173538][T14213] [ 615.319387][T14219] netlink: 'syz.6.2209': attribute type 2 has an invalid length. [ 615.338468][T14219] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 615.528966][ T29] audit: type=1400 audit(1734298344.051:1541): avc: denied { getopt } for pid=14224 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 615.615767][T14223] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 616.040150][T14234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2212'. [ 616.049227][T14234] nbd: must specify at least one socket [ 617.990603][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.007610][ T29] audit: type=1400 audit(1734298346.067:1542): avc: denied { search } for pid=14246 comm="syz.5.2218" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 619.999144][T14280] befs: (nbd5): No write support. Marking filesystem read-only [ 620.007176][T14280] bio_check_eod: 2 callbacks suppressed [ 620.007203][T14280] syz.5.2225: attempt to access beyond end of device [ 620.007203][T14280] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 620.299441][ T29] audit: type=1400 audit(1734298349.049:1543): avc: denied { map } for pid=14277 comm="syz.2.2227" path="socket:[43936]" dev="sockfs" ino=43936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 620.784635][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 620.797442][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.871910][ T29] audit: type=1400 audit(1734298350.109:1544): avc: denied { read write } for pid=14297 comm="syz.5.2232" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 622.221380][T14308] mkiss: ax0: crc mode is auto. [ 622.304523][ T29] audit: type=1400 audit(1734298350.109:1545): avc: denied { open } for pid=14297 comm="syz.5.2232" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 622.387611][T14313] overlayfs: failed to clone upperpath [ 622.704148][ T5824] block nbd1: Receive control failed (result -32) [ 622.714903][ T5820] block nbd1: Receive control failed (result -32) [ 622.722097][T14314] block nbd1: shutting down sockets [ 622.805415][T14328] syzkaller1: entered allmulticast mode [ 622.907356][ T29] audit: type=1400 audit(1734298351.747:1546): avc: denied { write } for pid=14317 comm="syz.6.2236" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 623.051766][T14334] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 623.086720][ T29] audit: type=1326 audit(1734298351.978:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14333 comm="syz.2.2241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb17985d19 code=0x0 [ 623.132284][T14334] syz.2.2241 (14334) used greatest stack depth: 19952 bytes left [ 623.236277][T14339] netlink: 24576 bytes leftover after parsing attributes in process `syz.2.2241'. [ 623.285833][T14338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2242'. [ 623.633547][T14347] mkiss: ax0: crc mode is auto. [ 624.989146][ T5865] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 625.282248][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.301276][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.312197][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 625.321963][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.334855][ T5865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.343970][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.359015][ T5865] usb 2-1: config 0 descriptor?? [ 625.510708][ T51] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 625.531760][ T29] audit: type=1400 audit(1734298354.550:1548): avc: denied { write } for pid=14380 comm="syz.6.2256" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 625.666731][ T51] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 625.676142][ T25] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 625.686384][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.696390][ T51] usb 1-1: config 0 descriptor?? [ 625.836038][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 625.848796][ T25] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 625.858538][ T25] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 625.867046][ T25] usb 6-1: Product: syz [ 625.871371][ T25] usb 6-1: Manufacturer: syz [ 625.876084][ T25] usb 6-1: SerialNumber: syz [ 625.882441][ T25] usb 6-1: config 0 descriptor?? [ 625.888147][T14379] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 625.900212][ T51] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 625.908888][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 625.962785][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 625.968865][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 625.980798][ T5865] usb 2-1: USB disconnect, device number 65 [ 626.087999][ T5820] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 626.088058][ T5820] Bluetooth: hci1: Dropping invalid advertising data [ 626.104251][ T5820] Bluetooth: hci1: Malformed LE Event: 0x02 [ 626.115086][ T51] [drm:udl_init] *ERROR* Selecting channel failed [ 626.123621][ T5900] usb 6-1: USB disconnect, device number 59 [ 626.133984][ T51] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 626.141471][ T51] [drm] Initialized udl on minor 2 [ 626.147276][ T51] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.156784][ T51] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 626.164139][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.173011][ T51] usb 1-1: USB disconnect, device number 58 [ 626.179611][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 626.831731][ T29] audit: type=1400 audit(1734298355.905:1549): avc: denied { read } for pid=14394 comm="syz.1.2262" path="socket:[45268]" dev="sockfs" ino=45268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 627.335060][T14412] siw: device registration error -23 [ 627.416940][ T29] audit: type=1400 audit(1734298356.503:1550): avc: denied { append } for pid=14409 comm="syz.1.2266" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.440186][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.817062][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 627.843362][ T29] audit: type=1400 audit(1734298356.965:1551): avc: denied { remount } for pid=14409 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.945710][T14416] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2268'. [ 628.038845][T14418] syzkaller1: entered allmulticast mode [ 628.054536][T14423] FAULT_INJECTION: forcing a failure. [ 628.054536][T14423] name failslab, interval 1, probability 0, space 0, times 0 [ 628.098662][T14426] syz.6.2271: attempt to access beyond end of device [ 628.098662][T14426] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 628.117256][T14423] CPU: 0 UID: 0 PID: 14423 Comm: syz.1.2270 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 628.128047][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 628.138183][T14423] Call Trace: [ 628.141462][T14423] [ 628.144375][T14423] dump_stack_lvl+0x16c/0x1f0 [ 628.149035][T14423] should_fail_ex+0x497/0x5b0 [ 628.153692][T14423] ? fs_reclaim_acquire+0xae/0x150 [ 628.158805][T14423] should_failslab+0xc2/0x120 [ 628.163474][T14423] __kmalloc_noprof+0xcb/0x510 [ 628.168237][T14423] sock_kmalloc+0x111/0x170 [ 628.172723][T14423] ____sys_sendmsg+0x876/0xc90 [ 628.177475][T14423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.182756][T14423] ? __pfx_lock_release+0x10/0x10 [ 628.187773][T14423] ? lock_acquire+0x2f/0xb0 [ 628.192253][T14423] ? __fget_files+0x40/0x3a0 [ 628.196822][T14423] __sys_sendmsg_sock+0x29/0x40 [ 628.201652][T14423] io_sendmsg+0x1c7/0x7c0 [ 628.205973][T14423] io_issue_sqe+0x4c5/0x1200 [ 628.210566][T14423] io_submit_sqes+0x95a/0x25c0 [ 628.215316][T14423] __do_sys_io_uring_enter+0xd43/0x1620 [ 628.219634][T14426] gfs2: error -5 reading superblock [ 628.221112][T14423] ? __fget_files+0x206/0x3a0 [ 628.230995][T14423] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 628.236983][T14423] ? fput+0x67/0x440 [ 628.240864][T14423] ? ksys_write+0x1ba/0x250 [ 628.245348][T14423] ? __pfx_ksys_write+0x10/0x10 [ 628.250194][T14423] do_syscall_64+0xcd/0x250 [ 628.254694][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.260577][T14423] RIP: 0033:0x7f046ab85d19 [ 628.264983][T14423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.284574][T14423] RSP: 002b:00007f046b9c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 628.292973][T14423] RAX: ffffffffffffffda RBX: 00007f046ad75fa0 RCX: 00007f046ab85d19 [ 628.300922][T14423] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000003 [ 628.308870][T14423] RBP: 00007f046b9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 628.316822][T14423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.324771][T14423] R13: 0000000000000000 R14: 00007f046ad75fa0 R15: 00007ffc46db00c8 [ 628.332726][T14423] [ 628.793139][T14436] FAULT_INJECTION: forcing a failure. [ 628.793139][T14436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.811937][T14433] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2274'. [ 628.888084][T14436] CPU: 0 UID: 0 PID: 14436 Comm: syz.0.2275 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 628.898877][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 628.908910][T14436] Call Trace: [ 628.912166][T14436] [ 628.915076][T14436] dump_stack_lvl+0x16c/0x1f0 [ 628.919736][T14436] should_fail_ex+0x497/0x5b0 [ 628.924401][T14436] _copy_to_user+0x32/0xd0 [ 628.928813][T14436] simple_read_from_buffer+0xd0/0x160 [ 628.934173][T14436] proc_fail_nth_read+0x198/0x270 [ 628.939176][T14436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.944705][T14436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.950232][T14436] vfs_read+0x1df/0xbe0 [ 628.954365][T14436] ? __fget_files+0x1fc/0x3a0 [ 628.959017][T14436] ? __pfx___mutex_lock+0x10/0x10 [ 628.964020][T14436] ? __pfx_vfs_read+0x10/0x10 [ 628.968690][T14436] ? __fget_files+0x206/0x3a0 [ 628.973384][T14436] ksys_read+0x12b/0x250 [ 628.977637][T14436] ? __pfx_ksys_read+0x10/0x10 [ 628.982400][T14436] do_syscall_64+0xcd/0x250 [ 628.986896][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.992780][T14436] RIP: 0033:0x7f88bbf8472c [ 628.997181][T14436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.016794][T14436] RSP: 002b:00007f88bce7c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.025212][T14436] RAX: ffffffffffffffda RBX: 00007f88bc175fa0 RCX: 00007f88bbf8472c [ 629.033173][T14436] RDX: 000000000000000f RSI: 00007f88bce7c0a0 RDI: 0000000000000004 [ 629.041121][T14436] RBP: 00007f88bce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 629.049068][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.057014][T14436] R13: 0000000000000000 R14: 00007f88bc175fa0 R15: 00007fffa5851c38 [ 629.064969][T14436] [ 630.101733][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 630.162949][T14466] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2286'. [ 630.200964][T14466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14466 comm=syz.5.2286 [ 630.249226][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 630.288504][T14466] bridge0: port 1(syz_tun) entered blocking state [ 630.308893][T14466] bridge0: port 1(syz_tun) entered disabled state [ 630.317460][T14466] syz_tun: entered allmulticast mode [ 630.325258][T14466] syz_tun: entered promiscuous mode [ 630.337137][T14466] bridge0: port 1(syz_tun) entered blocking state [ 630.337925][T14466] bridge0: port 1(syz_tun) entered forwarding state [ 630.339737][ T5912] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 630.510469][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 630.636030][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 630.737611][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 630.749791][T14480] bridge0: port 1(syz_tun) entered blocking state [ 630.756238][T14480] bridge0: port 1(syz_tun) entered disabled state [ 630.762749][T14480] syz_tun: entered allmulticast mode [ 630.768542][T14480] syz_tun: entered promiscuous mode [ 630.773990][T14480] bridge0: port 1(syz_tun) entered blocking state [ 630.780434][T14480] bridge0: port 1(syz_tun) entered forwarding state [ 630.828917][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 630.840433][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.883095][ T5912] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 630.892167][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.908195][ T5912] usb 7-1: Product: syz [ 630.917697][ T5912] usb 7-1: Manufacturer: syz [ 630.943767][ T5912] usb 7-1: SerialNumber: syz [ 630.951772][ T29] audit: type=1400 audit(1734298360.230:1552): avc: denied { connect } for pid=14490 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 630.980865][ T5912] usb 7-1: config 0 descriptor?? [ 630.988710][T14463] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 631.018386][ T5912] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 631.054987][ C0] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 631.078015][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 631.107988][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 631.335481][T14463] macsec1: entered promiscuous mode [ 631.343345][T14463] macvlan1: entered promiscuous mode [ 631.485172][T14463] macvlan1: left promiscuous mode [ 631.549415][ T5900] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 631.746069][T14515] overlay: Unknown parameter '/' [ 631.765557][ T5912] usb 7-1: USB disconnect, device number 70 [ 631.912655][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.921654][ T5900] usb 1-1: config 1 has no interface number 0 [ 631.927889][ T5900] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.939069][ T5900] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 631.965576][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.974888][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.982954][ T5900] usb 1-1: Product: syz [ 631.987546][ T5900] usb 1-1: Manufacturer: syz [ 631.992400][ T5900] usb 1-1: SerialNumber: syz [ 632.213754][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 633.447390][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.460335][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.473721][ T5900] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 633.480060][ T5900] cdc_ncm 1-1:1.1: bind() failure [ 633.749061][ T5900] usb 1-1: USB disconnect, device number 59 [ 633.955598][T14530] bond0: (slave bridge0): Releasing backup interface [ 634.245390][ T51] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 634.275800][T14539] FAULT_INJECTION: forcing a failure. [ 634.275800][T14539] name failslab, interval 1, probability 0, space 0, times 0 [ 634.291366][T14539] CPU: 0 UID: 0 PID: 14539 Comm: syz.6.2308 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 634.302128][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 634.312173][T14539] Call Trace: [ 634.315429][T14539] [ 634.318336][T14539] dump_stack_lvl+0x16c/0x1f0 [ 634.322995][T14539] should_fail_ex+0x497/0x5b0 [ 634.327651][T14539] ? fs_reclaim_acquire+0xae/0x150 [ 634.332747][T14539] should_failslab+0xc2/0x120 [ 634.337417][T14539] __kmalloc_noprof+0xcb/0x510 [ 634.342183][T14539] ? hlock_class+0x4e/0x130 [ 634.346669][T14539] ovl_lookup+0x116a/0x21f0 [ 634.351158][T14539] ? __pfx_ovl_lookup+0x10/0x10 [ 634.355987][T14539] ? lock_acquire.part.0+0x11b/0x380 [ 634.361247][T14539] ? find_held_lock+0x2d/0x110 [ 634.366006][T14539] ? d_alloc+0x176/0x1e0 [ 634.370226][T14539] ? __pfx_lock_release+0x10/0x10 [ 634.375226][T14539] ? do_raw_spin_lock+0x12d/0x2c0 [ 634.380234][T14539] ? do_raw_spin_unlock+0x172/0x230 [ 634.385415][T14539] ? _raw_spin_unlock+0x28/0x50 [ 634.390245][T14539] lookup_one_qstr_excl+0x11d/0x190 [ 634.395422][T14539] ? mnt_want_write+0x161/0x450 [ 634.400272][T14539] do_renameat2+0x5ae/0xdd0 [ 634.404756][T14539] ? __pfx_do_renameat2+0x10/0x10 [ 634.408379][ T51] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.409752][T14539] ? lock_acquire+0x2f/0xb0 [ 634.418355][ T51] usb 2-1: not running at top speed; connect to a high speed hub [ 634.421855][T14539] ? __virt_addr_valid+0x5e/0x590 [ 634.421886][T14539] ? __phys_addr_symbol+0x30/0x80 [ 634.430665][ T51] usb 2-1: config 4 has an invalid interface number: 111 but max is 0 [ 634.434656][T14539] ? getname_flags.part.0+0x1c5/0x550 [ 634.434692][T14539] __x64_sys_rename+0x7d/0xa0 [ 634.434714][T14539] do_syscall_64+0xcd/0x250 [ 634.434739][T14539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.434762][T14539] RIP: 0033:0x7f2b67f85d19 [ 634.434783][T14539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.434802][T14539] RSP: 002b:00007f2b68d15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 634.434822][T14539] RAX: ffffffffffffffda RBX: 00007f2b68175fa0 RCX: 00007f2b67f85d19 [ 634.434836][T14539] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000020000180 [ 634.434849][T14539] RBP: 00007f2b68d15090 R08: 0000000000000000 R09: 0000000000000000 [ 634.434864][T14539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.434877][T14539] R13: 0000000000000000 R14: 00007f2b68175fa0 R15: 00007fff301923a8 [ 634.434900][T14539] [ 634.559624][ T29] audit: type=1400 audit(1734298364.031:1553): avc: denied { bind } for pid=14540 comm="syz.0.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 634.582774][ T51] usb 2-1: config 4 has no interface number 0 [ 634.597609][ T51] usb 2-1: config 4 interface 111 has no altsetting 0 [ 634.668238][ T51] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 634.678912][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.724825][ T51] usb 2-1: Product: syz [ 635.140064][ T8] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 635.339315][ T51] usb 2-1: Manufacturer: syz [ 635.344058][ T51] usb 2-1: SerialNumber: syz [ 635.362252][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 635.363121][ T51] usb 2-1: can't set config #4, error -71 [ 635.377942][ T51] usb 2-1: USB disconnect, device number 66 [ 635.385652][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 635.479533][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.489398][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.499172][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 635.509282][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 635.519974][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.533678][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 635.542801][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.567763][ T8] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 636.063696][ T25] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 636.387579][ T29] audit: type=1400 audit(1734298365.868:1554): avc: denied { create } for pid=14564 comm="syz.5.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 636.788936][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 636.806683][ T29] audit: type=1400 audit(1734298365.868:1555): avc: denied { setopt } for pid=14564 comm="syz.5.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 636.829533][ T29] audit: type=1400 audit(1734298365.868:1556): avc: denied { write } for pid=14564 comm="syz.5.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 636.876010][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.001962][ T25] usb 1-1: config 0 descriptor?? [ 637.032627][ T25] cp210x 1-1:0.0: cp210x converter detected [ 637.037269][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'. [ 637.077835][T14578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=14578 comm=syz.2.2318 [ 637.190991][T14584] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 637.190991][T14584] program syz.1.2320 not setting count and/or reply_len properly [ 637.227310][T14584] overlay: Unknown parameter 'measure' [ 637.427838][ T25] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 637.555279][ T5865] usb 7-1: USB disconnect, device number 71 [ 637.655056][T14597] syzkaller1: entered allmulticast mode [ 637.663155][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 638.758992][T14616] FAULT_INJECTION: forcing a failure. [ 638.758992][T14616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.772158][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.1.2327 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 638.782913][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 638.792965][T14616] Call Trace: [ 638.796221][T14616] [ 638.799142][T14616] dump_stack_lvl+0x16c/0x1f0 [ 638.803802][T14616] should_fail_ex+0x497/0x5b0 [ 638.808472][T14616] _copy_to_user+0x32/0xd0 [ 638.812902][T14616] usbdev_read+0x602/0x750 [ 638.817296][T14616] ? iovec_from_user.part.0+0x7e/0x130 [ 638.822752][T14616] ? __pfx_usbdev_read+0x10/0x10 [ 638.827686][T14616] ? bpf_lsm_file_permission+0x9/0x10 [ 638.833039][T14616] ? security_file_permission+0x71/0x210 [ 638.838649][T14616] ? __pfx_usbdev_read+0x10/0x10 [ 638.843564][T14616] vfs_readv+0x6bf/0x890 [ 638.847785][T14616] ? __pfx___lock_acquire+0x10/0x10 [ 638.852959][T14616] ? find_held_lock+0x2d/0x110 [ 638.857721][T14616] ? __pfx_vfs_readv+0x10/0x10 [ 638.862482][T14616] ? __fget_files+0x1fc/0x3a0 [ 638.867176][T14616] ? __pfx_lock_release+0x10/0x10 [ 638.872182][T14616] ? __fget_files+0x206/0x3a0 [ 638.876849][T14616] ? do_preadv+0x1b1/0x270 [ 638.881271][T14616] do_preadv+0x1b1/0x270 [ 638.885495][T14616] ? __pfx_do_preadv+0x10/0x10 [ 638.890241][T14616] do_syscall_64+0xcd/0x250 [ 638.894722][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.900602][T14616] RIP: 0033:0x7f046ab85d19 [ 638.905010][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.924599][T14616] RSP: 002b:00007f046b983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 638.932999][T14616] RAX: ffffffffffffffda RBX: 00007f046ad76160 RCX: 00007f046ab85d19 [ 638.941065][T14616] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000007 [ 638.949023][T14616] RBP: 00007f046b983090 R08: 0000000000000000 R09: 0000000000000000 [ 638.956978][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.964931][T14616] R13: 0000000000000000 R14: 00007f046ad76160 R15: 00007ffc46db00c8 [ 638.972920][T14616] [ 639.284067][ T29] audit: type=1400 audit(1734298368.871:1557): avc: denied { sqpoll } for pid=14618 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 639.936769][ T5865] usb 1-1: USB disconnect, device number 60 [ 639.945163][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.008111][ T5865] cp210x 1-1:0.0: device disconnected [ 640.571136][T14639] random: crng reseeded on system resumption [ 640.676436][T14639] Restarting kernel threads ... done. [ 640.721864][ T29] audit: type=1400 audit(1734298370.341:1558): avc: denied { write } for pid=14626 comm="syz.6.2332" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 641.006399][ T29] audit: type=1400 audit(1734298370.341:1559): avc: denied { open } for pid=14626 comm="syz.6.2332" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 641.063443][ T29] audit: type=1400 audit(1734298370.446:1560): avc: denied { ioctl } for pid=14626 comm="syz.6.2332" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 641.446436][ T5912] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 641.590826][ T29] audit: type=1400 audit(1734298371.412:1561): avc: denied { bind } for pid=14654 comm="syz.0.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.675072][T14657] FAULT_INJECTION: forcing a failure. [ 641.675072][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 641.687806][T14657] CPU: 0 UID: 0 PID: 14657 Comm: syz.0.2331 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 641.698559][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 641.708689][T14657] Call Trace: [ 641.711955][T14657] [ 641.714879][T14657] dump_stack_lvl+0x16c/0x1f0 [ 641.719548][T14657] should_fail_ex+0x497/0x5b0 [ 641.724215][T14657] ? fs_reclaim_acquire+0xae/0x150 [ 641.729320][T14657] should_failslab+0xc2/0x120 [ 641.734003][T14657] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 641.739826][T14657] ? __alloc_skb+0x2b1/0x380 [ 641.744427][T14657] __alloc_skb+0x2b1/0x380 [ 641.748851][T14657] ? __pfx___alloc_skb+0x10/0x10 [ 641.753786][T14657] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 641.759764][T14657] netlink_alloc_large_skb+0x69/0x130 [ 641.765137][T14657] netlink_sendmsg+0x689/0xd70 [ 641.769897][T14657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.775185][T14657] ____sys_sendmsg+0xaaf/0xc90 [ 641.779938][T14657] ? copy_msghdr_from_user+0x10b/0x160 [ 641.785382][T14657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.790662][T14657] ___sys_sendmsg+0x135/0x1e0 [ 641.795322][T14657] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.800536][T14657] ? __pfx_lock_release+0x10/0x10 [ 641.805560][T14657] ? trace_lock_acquire+0x14e/0x1f0 [ 641.810762][T14657] ? __fget_files+0x206/0x3a0 [ 641.815434][T14657] __sys_sendmsg+0x16e/0x220 [ 641.820016][T14657] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.825136][T14657] do_syscall_64+0xcd/0x250 [ 641.829635][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.835516][T14657] RIP: 0033:0x7f88bbf85d19 [ 641.839917][T14657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.859518][T14657] RSP: 002b:00007f88bce5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.867919][T14657] RAX: ffffffffffffffda RBX: 00007f88bc176080 RCX: 00007f88bbf85d19 [ 641.875872][T14657] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 000000000000000d [ 641.883826][T14657] RBP: 00007f88bce5b090 R08: 0000000000000000 R09: 0000000000000000 [ 641.891778][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.899819][T14657] R13: 0000000000000000 R14: 00007f88bc176080 R15: 00007fffa5851c38 [ 641.907786][T14657] [ 642.161200][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 642.168081][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 642.266172][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 642.277420][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 642.290457][ T5912] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 642.300009][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.355048][ T5912] usb 2-1: config 0 descriptor?? [ 642.523748][ T5912] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 642.735617][ T5912] usb 2-1: USB disconnect, device number 67 [ 642.748158][ T5174] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 643.278580][T14669] vlan2: entered allmulticast mode [ 643.284264][T14669] bridge_slave_0: entered allmulticast mode [ 643.297903][T14678] FAULT_INJECTION: forcing a failure. [ 643.297903][T14678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.312352][T14669] bridge_slave_0: left allmulticast mode [ 643.351840][T14678] CPU: 1 UID: 0 PID: 14678 Comm: syz.5.2345 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 643.362633][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 643.372667][T14678] Call Trace: [ 643.375923][T14678] [ 643.378834][T14678] dump_stack_lvl+0x16c/0x1f0 [ 643.383492][T14678] should_fail_ex+0x497/0x5b0 [ 643.388160][T14678] _copy_to_user+0x32/0xd0 [ 643.392558][T14678] drm_ioctl+0x5fe/0xc00 [ 643.396783][T14678] ? __pfx_vgem_fence_signal_ioctl+0x10/0x10 [ 643.402747][T14678] ? __pfx_drm_ioctl+0x10/0x10 [ 643.407518][T14678] ? __pfx_lock_release+0x10/0x10 [ 643.412554][T14678] ? selinux_file_ioctl+0x180/0x270 [ 643.417745][T14678] ? selinux_file_ioctl+0xb4/0x270 [ 643.422844][T14678] ? __pfx_drm_ioctl+0x10/0x10 [ 643.427602][T14678] __x64_sys_ioctl+0x190/0x200 [ 643.432358][T14678] do_syscall_64+0xcd/0x250 [ 643.436855][T14678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.442736][T14678] RIP: 0033:0x7f3503f85d19 [ 643.447134][T14678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.466743][T14678] RSP: 002b:00007f3504d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.475158][T14678] RAX: ffffffffffffffda RBX: 00007f3504175fa0 RCX: 00007f3503f85d19 [ 643.483128][T14678] RDX: 0000000020000000 RSI: 00000000c0106442 RDI: 0000000000000004 [ 643.491085][T14678] RBP: 00007f3504d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 643.499044][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.507006][T14678] R13: 0000000000000000 R14: 00007f3504175fa0 R15: 00007ffe01026398 [ 643.514974][T14678] [ 643.571657][ T29] audit: type=1326 audit(1734298373.480:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.614815][ T29] audit: type=1326 audit(1734298373.512:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.660151][ T29] audit: type=1326 audit(1734298373.512:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.688738][ T29] audit: type=1326 audit(1734298373.512:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.714413][T14685] netlink: 'syz.5.2349': attribute type 21 has an invalid length. [ 643.729488][T14685] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2349'. [ 643.748637][T14685] netlink: 'syz.5.2349': attribute type 1 has an invalid length. [ 643.789168][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 643.798978][T14687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2348'. [ 643.811398][ T29] audit: type=1326 audit(1734298373.512:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.878770][ T29] audit: type=1326 audit(1734298373.512:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 643.902375][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.962711][ T29] audit: type=1326 audit(1734298373.512:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 644.040299][ T29] audit: type=1326 audit(1734298373.512:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 644.063784][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.120802][ T29] audit: type=1326 audit(1734298373.512:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.6.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 644.144178][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.461647][T14713] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 644.486872][T14713] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 644.511438][T14713] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 644.536761][T14714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.544622][T14714] IPv6: NLM_F_CREATE should be set when creating new route [ 644.551864][T14714] IPv6: NLM_F_CREATE should be set when creating new route [ 644.559060][T14714] IPv6: NLM_F_CREATE should be set when creating new route [ 644.670082][T14717] binder: 14716:14717 ioctl 8918 20000000 returned -22 [ 644.744210][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2360'. [ 644.763106][T14723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.054731][T14728] input: syz1 as /devices/virtual/input/input38 [ 645.085622][T14731] input: syz1 as /devices/virtual/input/input37 [ 645.131375][T14734] raw_sendmsg: syz.6.2364 forgot to set AF_INET. Fix it! [ 645.353522][T14723] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 645.569211][ T5912] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 645.597871][ T25] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 646.056689][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 646.072626][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 646.074131][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 646.084333][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 646.100416][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.114216][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.124836][ T5912] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 646.126918][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.133886][ T5912] usb 2-1: config 0 has no interface number 0 [ 646.153236][ T25] usb 6-1: config 0 descriptor?? [ 646.159466][T14723] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 646.171775][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 646.181039][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.194430][ T5912] usb 2-1: Product: syz [ 646.198718][ T5912] usb 2-1: Manufacturer: syz [ 646.203383][ T5912] usb 2-1: SerialNumber: syz [ 646.210237][ T5912] usb 2-1: config 0 descriptor?? [ 646.217641][ T5912] smsc95xx v2.0.0 [ 646.230017][T14753] orangefs_mount: mount request failed with -4 [ 646.581459][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 646.615200][ T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 646.649756][ T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 646.879382][ T25] usb 6-1: USB disconnect, device number 60 [ 646.972048][T14782] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 647.982074][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 647.993126][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 648.007075][ T5912] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 648.018329][ T5912] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 648.037797][ T5912] usb 2-1: USB disconnect, device number 68 [ 648.075712][T14789] batadv0 speed is unknown, defaulting to 1000 [ 648.309804][T14789] lo speed is unknown, defaulting to 1000 [ 648.992064][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 648.992080][ T29] audit: type=1400 audit(1734298379.181:1622): avc: denied { read write } for pid=14797 comm="syz.5.2385" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 649.065950][ T29] audit: type=1400 audit(1734298379.255:1623): avc: denied { open } for pid=14797 comm="syz.5.2385" path="/363/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 649.098408][ T29] audit: type=1800 audit(1734298379.265:1624): pid=14798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2385" name="/" dev="9p" ino=2 res=0 errno=0 [ 649.160256][ T29] audit: type=1400 audit(1734298379.360:1625): avc: denied { unmount } for pid=7004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 649.445845][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 649.732945][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 649.761833][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.819153][ T8] usb 2-1: config 0 descriptor?? [ 651.167206][ T8] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 651.179423][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 651.367892][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 651.381602][ T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 651.390293][ T8] [drm] Initialized udl on minor 2 [ 651.397166][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 651.409650][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 651.421547][ T8] usb 2-1: USB disconnect, device number 69 [ 651.426537][T14820] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 651.435669][ T5912] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 651.444260][ T5912] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 651.693841][ T51] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 651.847396][ T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.857955][ T51] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 651.867146][ T51] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 651.876258][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.886897][ T51] usb 6-1: config 0 descriptor?? [ 652.215015][ T51] Bluetooth: Can't get state to change to load ram patch err [ 652.232703][ T51] Bluetooth: Loading patch file failed [ 652.248951][ T51] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 652.268841][ T51] usb 6-1: USB disconnect, device number 61 [ 653.030794][T14836] fuse: Unknown parameter 'grou00000000000000000000' [ 653.246096][ T51] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 653.417347][ T51] usb 6-1: Using ep0 maxpacket: 8 [ 653.423908][ T51] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 653.438900][ T51] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 653.458451][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.989422][ T29] audit: type=1400 audit(1734298384.420:1626): avc: denied { read } for pid=14833 comm="syz.5.2396" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 654.047368][ T29] audit: type=1400 audit(1734298384.420:1627): avc: denied { open } for pid=14833 comm="syz.5.2396" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 655.324042][ T29] audit: type=1400 audit(1734298385.785:1628): avc: denied { mount } for pid=14860 comm="syz.2.2406" name="/" dev="autofs" ino=47182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 656.113182][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 656.128944][ T29] audit: type=1400 audit(1734298386.667:1629): avc: denied { bind } for pid=14873 comm="syz.6.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 656.266547][T14875] netlink: 'syz.6.2407': attribute type 12 has an invalid length. [ 656.351838][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2408'. [ 656.500474][T14881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.993224][ T51] usb 6-1: string descriptor 0 read error: -71 [ 657.001515][ T51] hub 6-1:32.0: USB hub found [ 657.007759][ T51] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 657.040955][ T51] usb 6-1: USB disconnect, device number 62 [ 657.334284][T14897] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2414'. [ 658.396390][ T29] audit: type=1400 audit(1734298389.051:1630): avc: denied { mount } for pid=14910 comm="syz.1.2420" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 658.437221][ T29] audit: type=1400 audit(1734298389.082:1631): avc: denied { ioctl } for pid=14910 comm="syz.1.2420" path="socket:[46383]" dev="sockfs" ino=46383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 658.484622][ T29] audit: type=1400 audit(1734298389.103:1632): avc: denied { map } for pid=14920 comm="syz.5.2423" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 658.923470][ T29] audit: type=1400 audit(1734298389.596:1633): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 658.980553][ T29] audit: type=1326 audit(1734298389.659:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.349001][ T29] audit: type=1326 audit(1734298389.659:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.354454][T14933] FAULT_INJECTION: forcing a failure. [ 659.354454][T14933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.372594][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.399747][T14933] CPU: 0 UID: 0 PID: 14933 Comm: syz.1.2425 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 659.410542][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 659.420607][T14933] Call Trace: [ 659.423891][T14933] [ 659.426827][T14933] dump_stack_lvl+0x16c/0x1f0 [ 659.431525][T14933] should_fail_ex+0x497/0x5b0 [ 659.436208][T14933] _copy_to_user+0x32/0xd0 [ 659.440627][T14933] simple_read_from_buffer+0xd0/0x160 [ 659.446024][T14933] proc_fail_nth_read+0x198/0x270 [ 659.451054][T14933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.456583][T14933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.462106][T14933] vfs_read+0x1df/0xbe0 [ 659.466237][T14933] ? __fget_files+0x1fc/0x3a0 [ 659.470889][T14933] ? __pfx___mutex_lock+0x10/0x10 [ 659.475893][T14933] ? __pfx_vfs_read+0x10/0x10 [ 659.480564][T14933] ? __fget_files+0x206/0x3a0 [ 659.485220][T14933] ksys_read+0x12b/0x250 [ 659.489452][T14933] ? __pfx_ksys_read+0x10/0x10 [ 659.494193][T14933] do_syscall_64+0xcd/0x250 [ 659.498691][T14933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.504565][T14933] RIP: 0033:0x7f046ab8472c [ 659.508960][T14933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 659.528631][T14933] RSP: 002b:00007f046b9c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.537031][T14933] RAX: ffffffffffffffda RBX: 00007f046ad75fa0 RCX: 00007f046ab8472c [ 659.544990][T14933] RDX: 000000000000000f RSI: 00007f046b9c50a0 RDI: 0000000000000006 [ 659.552960][T14933] RBP: 00007f046b9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 659.560915][T14933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.568868][T14933] R13: 0000000000000000 R14: 00007f046ad75fa0 R15: 00007ffc46db00c8 [ 659.576827][T14933] [ 659.579830][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.591827][ T29] audit: type=1326 audit(1734298389.670:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.627837][ T29] audit: type=1326 audit(1734298389.670:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.651827][ T29] audit: type=1326 audit(1734298389.670:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.675723][ T29] audit: type=1326 audit(1734298389.670:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.701936][ T29] audit: type=1326 audit(1734298389.670:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.725733][ T29] audit: type=1326 audit(1734298389.670:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 659.749371][ T29] audit: type=1326 audit(1734298389.670:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b67f85d19 code=0x7ffc0000 [ 661.328560][ T25] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 661.484801][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 661.494509][ T25] usb 6-1: no configurations [ 661.502087][ T25] usb 6-1: can't read configurations, error -22 [ 661.642230][ T25] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 662.024469][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 662.028331][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 662.039997][ T25] usb 6-1: no configurations [ 662.044787][ T25] usb 6-1: can't read configurations, error -22 [ 662.055638][ T25] usb usb6-port1: attempt power cycle [ 662.465814][ T25] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 662.524124][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 662.531284][ T25] usb 6-1: no configurations [ 662.635568][ T25] usb 6-1: can't read configurations, error -22 [ 663.378023][T15006] syzkaller1: entered promiscuous mode [ 663.383846][T15006] syzkaller1: entered allmulticast mode [ 663.671393][T15010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.471745][T15017] netlink: 'syz.1.2453': attribute type 4 has an invalid length. [ 665.265430][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 665.265567][ T29] audit: type=1400 audit(1734298396.263:1676): avc: denied { nlmsg_read } for pid=15031 comm="syz.0.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.300960][T15036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2457'. [ 666.281167][ T29] audit: type=1400 audit(1734298397.135:1677): avc: denied { ioctl } for pid=15042 comm="syz.5.2460" path="socket:[47717]" dev="sockfs" ino=47717 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 667.156061][T15061] bond0: (slave vlan2): Opening slave failed [ 667.671059][T15067] batadv0 speed is unknown, defaulting to 1000 [ 668.395372][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 668.424944][T15067] lo speed is unknown, defaulting to 1000 [ 668.942628][ T8] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 669.085370][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 669.106083][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.133433][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.144647][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 669.154395][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 669.168746][ T8] usb 1-1: Product: syz [ 669.173534][ T8] usb 1-1: Manufacturer: syz [ 669.178291][ T8] usb 1-1: SerialNumber: syz [ 669.187301][ T8] usb 1-1: config 0 descriptor?? [ 669.194927][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 669.443812][ T8] usb 1-1: USB disconnect, device number 61 [ 669.629678][T15103] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2474'. [ 670.021668][T15115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 670.028717][ T8] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 670.040325][T15115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 670.050814][T15115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 670.059931][T15115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 670.074378][T15115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 670.084909][T15115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 670.207788][ T29] audit: type=1400 audit(1734298401.450:1678): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 670.331023][T15119] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2479'. [ 670.534614][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.539588][T15112] batadv0 speed is unknown, defaulting to 1000 [ 670.547829][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 670.589241][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.616472][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.636666][T15107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 670.649725][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.721109][T15112] lo speed is unknown, defaulting to 1000 [ 670.783119][T15124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15124 comm=syz.6.2480 [ 670.799913][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2480'. [ 670.976230][T15112] chnl_net:caif_netlink_parms(): no params data found [ 671.000660][T15107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 671.007214][T15107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 671.023394][T15107] vhci_hcd vhci_hcd.0: Device attached [ 671.125061][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2477'. [ 671.188851][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.229548][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2477'. [ 671.706165][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.723819][T15112] bridge_slave_0: entered allmulticast mode [ 671.730769][T15112] bridge_slave_0: entered promiscuous mode [ 671.743969][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.751443][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.759578][T15112] bridge_slave_1: entered allmulticast mode [ 671.771557][T15112] bridge_slave_1: entered promiscuous mode [ 671.977981][ T5912] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 672.232143][T15115] Bluetooth: hci1: command tx timeout [ 672.284445][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.305646][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.327372][T15143] fuse: Unknown parameter 'group_i00000000000000000000' [ 672.776000][T15112] team0: Port device team_slave_0 added [ 672.784458][T15112] team0: Port device team_slave_1 added [ 672.797746][T15152] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2486'. [ 672.826603][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.850510][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.877367][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.892061][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.899059][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.925467][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.986183][T15112] hsr_slave_0: entered promiscuous mode [ 672.994861][T15112] hsr_slave_1: entered promiscuous mode [ 673.000946][T15157] No memory to map [ 673.006076][ T29] audit: type=1400 audit(1734298404.390:1679): avc: denied { map } for pid=15154 comm="syz.6.2487" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 673.030408][T15112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.062161][T15112] Cannot create hsr debugfs directory [ 673.352635][T15129] vhci_hcd: connection reset by peer [ 673.363268][T15162] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 673.387031][ T29] audit: type=1400 audit(1734298404.789:1680): avc: denied { view } for pid=15161 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 673.418061][ T5861] usb 2-1: USB disconnect, device number 70 [ 673.438749][T15162] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 673.447687][ T9820] vhci_hcd: stop threads [ 673.451957][ T9820] vhci_hcd: release socket [ 673.489214][ T9820] vhci_hcd: disconnect device [ 673.499679][T15162] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 673.566288][T15162] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 673.684956][T15175] fuse: Unknown parameter 'use00000000000000000000' [ 673.692585][T15173] fuse: Unknown parameter 'use00000000000000000000' [ 673.850175][T15112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.965622][T15186] fuse: Unknown parameter 'group_id00000000000000000000' [ 673.988585][T15112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.038879][ T5861] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 674.087214][T15112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.182004][T15115] Bluetooth: hci1: command tx timeout [ 674.188796][T15112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.192610][ T5861] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 674.259826][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.272563][ T5861] usb 6-1: config 0 descriptor?? [ 674.475178][ T5861] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 674.497838][ T5861] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 674.516083][T15112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 674.526408][T15112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 674.536163][T15112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 674.548854][T15112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 674.664888][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.679058][ T5861] [drm:udl_init] *ERROR* Selecting channel failed [ 674.686127][ T51] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 674.741870][ T5861] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 674.752188][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.760144][ T5861] [drm] Initialized udl on minor 2 [ 674.773708][ T5861] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 674.774930][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.782031][ T5861] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 674.788712][ T9820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.796136][ T116] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 674.816262][ T5861] usb 6-1: USB disconnect, device number 67 [ 674.841534][ T51] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 674.850921][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.852612][ T116] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 674.883741][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.890836][ T9820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.908086][ T51] usb 7-1: config 0 descriptor?? [ 675.116117][ T51] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 675.125046][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 675.249517][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.312654][ T51] [drm:udl_init] *ERROR* Selecting channel failed [ 675.325853][ T51] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 675.332692][ T51] [drm] Initialized udl on minor 2 [ 675.445588][T15112] veth0_vlan: entered promiscuous mode [ 675.453456][T15112] veth1_vlan: entered promiscuous mode [ 675.467945][T15112] veth0_macvtap: entered promiscuous mode [ 675.477173][T15112] veth1_macvtap: entered promiscuous mode [ 675.546945][T15206] fuse: blksize only supported for fuseblk [ 676.024171][ T51] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.032219][ T51] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 676.049931][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.059847][ T1201] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.068537][ T1201] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.076441][ T1201] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 676.084061][ T51] usb 7-1: USB disconnect, device number 73 [ 676.097134][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.168509][T15115] Bluetooth: hci1: command tx timeout [ 676.214137][T15112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.257354][T15112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.270097][T15112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.278965][T15112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.389615][ T9820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.405979][ T9820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.436548][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.455287][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.467539][T15215] fuse: Unknown parameter 'group_id00000000000000000000' [ 676.512422][ T29] audit: type=1400 audit(1734298408.075:1681): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/root/syzkaller.IDvf4Z/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 676.516252][T15216] syzkaller1: entered allmulticast mode [ 676.576315][ T29] audit: type=1400 audit(1734298408.075:1682): avc: denied { mount } for pid=15112 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 676.620683][ T29] audit: type=1400 audit(1734298408.075:1683): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/root/syzkaller.IDvf4Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 676.666804][ T29] audit: type=1400 audit(1734298408.075:1684): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/root/syzkaller.IDvf4Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 676.711250][T15226] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 676.720219][ T29] audit: type=1400 audit(1734298408.128:1685): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 676.835309][T15228] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2507'. [ 676.853366][ T29] audit: type=1400 audit(1734298408.128:1686): avc: denied { mounton } for pid=15112 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 677.114743][ T5912] vhci_hcd: vhci_device speed not set [ 677.987260][ T29] audit: type=1400 audit(1734298409.093:1687): avc: denied { write } for pid=15230 comm="syz.2.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 678.015473][T15240] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 678.037764][T15239] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2506'. [ 678.051874][T15240] audit: out of memory in audit_log_start [ 678.153739][T15115] Bluetooth: hci1: command tx timeout [ 678.286080][ T5861] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 678.305779][T15252] FAULT_INJECTION: forcing a failure. [ 678.305779][T15252] name failslab, interval 1, probability 0, space 0, times 0 [ 678.407474][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.6.2514 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 678.418295][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 678.428356][T15252] Call Trace: [ 678.431633][T15252] [ 678.434561][T15252] dump_stack_lvl+0x16c/0x1f0 [ 678.439249][T15252] should_fail_ex+0x497/0x5b0 [ 678.443936][T15252] should_failslab+0xc2/0x120 [ 678.448644][T15252] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 678.454020][T15252] ? skb_clone+0x190/0x3f0 [ 678.458445][T15252] skb_clone+0x190/0x3f0 [ 678.462689][T15252] netlink_deliver_tap+0xabd/0xd30 [ 678.467834][T15252] netlink_unicast+0x5e1/0x7f0 [ 678.472609][T15252] ? __pfx_netlink_unicast+0x10/0x10 [ 678.477916][T15252] netlink_sendmsg+0x8b8/0xd70 [ 678.482692][T15252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.487991][T15252] ____sys_sendmsg+0xaaf/0xc90 [ 678.492758][T15252] ? copy_msghdr_from_user+0x10b/0x160 [ 678.498217][T15252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.503519][T15252] ___sys_sendmsg+0x135/0x1e0 [ 678.508203][T15252] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.513414][T15252] ? __pfx_lock_release+0x10/0x10 [ 678.518442][T15252] ? trace_lock_acquire+0x14e/0x1f0 [ 678.523660][T15252] ? __fget_files+0x206/0x3a0 [ 678.528347][T15252] __sys_sendmsg+0x16e/0x220 [ 678.532937][T15252] ? __pfx___sys_sendmsg+0x10/0x10 [ 678.538066][T15252] do_syscall_64+0xcd/0x250 [ 678.542578][T15252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.548475][T15252] RIP: 0033:0x7f2b67f85d19 [ 678.552894][T15252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.572509][T15252] RSP: 002b:00007f2b68d15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.580925][T15252] RAX: ffffffffffffffda RBX: 00007f2b68175fa0 RCX: 00007f2b67f85d19 [ 678.588895][T15252] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 678.596866][T15252] RBP: 00007f2b68d15090 R08: 0000000000000000 R09: 0000000000000000 [ 678.604837][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.612807][T15252] R13: 0000000000000000 R14: 00007f2b68175fa0 R15: 00007fff301923a8 [ 678.620792][T15252] [ 678.649385][T15254] 9pnet_fd: Insufficient options for proto=fd [ 679.314946][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 679.323962][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.813213][ T5861] usb 1-1: device not accepting address 62, error -71 [ 681.077229][T15265] fuse: Unknown parameter 'group_id00000000000000000000' [ 681.534224][ T5861] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 682.080890][ T5861] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 682.153719][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.230407][ T5861] usb 1-1: config 0 descriptor?? [ 682.363698][T15287] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 682.432044][ T5861] [drm] vendor descriptor length:6 data:06 5f 01 72 00 00 00 00 00 00 00 [ 682.440718][ T5861] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 682.658271][ T25] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 682.677054][ T5861] [drm:udl_init] *ERROR* Selecting channel failed [ 682.752965][ T29] audit: type=1400 audit(1734298414.616:1688): avc: denied { ioctl } for pid=15286 comm="syz.2.2525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.759035][ T5861] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 682.785890][ T5861] [drm] Initialized udl on minor 2 [ 682.841221][ T5861] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 682.849359][ T5861] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 682.857537][ T29] audit: type=1400 audit(1734298414.732:1689): avc: denied { create } for pid=15275 comm="syz.1.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.877998][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 682.886707][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 682.888688][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 682.900138][ T5861] usb 1-1: USB disconnect, device number 63 [ 682.906745][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 682.919531][ T25] usb 3-1: no configurations [ 682.943925][ T25] usb 3-1: can't read configurations, error -22 [ 682.947270][ T29] audit: type=1400 audit(1734298414.826:1690): avc: denied { execmem } for pid=15275 comm="syz.1.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 682.971728][ T29] audit: type=1400 audit(1734298414.826:1691): avc: denied { write } for pid=15275 comm="syz.1.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 683.015862][ T29] audit: type=1400 audit(1734298414.858:1692): avc: denied { write } for pid=15275 comm="syz.1.2523" path="socket:[47093]" dev="sockfs" ino=47093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 683.067615][ T25] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 683.085532][ T29] audit: type=1400 audit(1734298414.952:1693): avc: denied { read write } for pid=7004 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.129300][ T29] audit: type=1400 audit(1734298414.952:1694): avc: denied { open } for pid=7004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.156132][ T29] audit: type=1400 audit(1734298414.952:1695): avc: denied { ioctl } for pid=7004 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.262932][T15297] FAULT_INJECTION: forcing a failure. [ 683.262932][T15297] name failslab, interval 1, probability 0, space 0, times 0 [ 683.275799][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.5.2527 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 683.286567][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 683.296612][T15297] Call Trace: [ 683.297702][T15298] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2527'. [ 683.299879][T15297] [ 683.311709][T15297] dump_stack_lvl+0x16c/0x1f0 [ 683.316370][T15297] should_fail_ex+0x497/0x5b0 [ 683.321026][T15297] ? fs_reclaim_acquire+0xae/0x150 [ 683.326138][T15297] should_failslab+0xc2/0x120 [ 683.330830][T15297] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 683.336643][T15297] ? __alloc_skb+0x2b1/0x380 [ 683.341245][T15297] __alloc_skb+0x2b1/0x380 [ 683.345660][T15297] ? __pfx___alloc_skb+0x10/0x10 [ 683.350579][T15297] ? netlink_ack+0x8a/0xb80 [ 683.355076][T15297] netlink_ack+0x15f/0xb80 [ 683.359489][T15297] ? __pfx___lock_acquire+0x10/0x10 [ 683.364668][T15297] netlink_rcv_skb+0x348/0x440 [ 683.369413][T15297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.374422][T15297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.379691][T15297] ? down_read+0xc9/0x330 [ 683.384008][T15297] ? __pfx_down_read+0x10/0x10 [ 683.388753][T15297] ? netlink_deliver_tap+0x1ae/0xd30 [ 683.394040][T15297] genl_rcv+0x28/0x40 [ 683.398023][T15297] netlink_unicast+0x53c/0x7f0 [ 683.402783][T15297] ? __pfx_netlink_unicast+0x10/0x10 [ 683.408053][T15297] netlink_sendmsg+0x8b8/0xd70 [ 683.412799][T15297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.418085][T15297] ____sys_sendmsg+0xaaf/0xc90 [ 683.422828][T15297] ? copy_msghdr_from_user+0x10b/0x160 [ 683.428264][T15297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.433533][T15297] ___sys_sendmsg+0x135/0x1e0 [ 683.438196][T15297] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.443466][T15297] ? __pfx_lock_release+0x10/0x10 [ 683.448474][T15297] ? trace_lock_acquire+0x14e/0x1f0 [ 683.453690][T15297] ? __fget_files+0x206/0x3a0 [ 683.458365][T15297] __sys_sendmsg+0x16e/0x220 [ 683.462933][T15297] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.468036][T15297] do_syscall_64+0xcd/0x250 [ 683.472521][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.478395][T15297] RIP: 0033:0x7f3503f85d19 [ 683.482793][T15297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.502385][T15297] RSP: 002b:00007f3504d6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.510785][T15297] RAX: ffffffffffffffda RBX: 00007f3504176080 RCX: 00007f3503f85d19 [ 683.518747][T15297] RDX: 0000000000000010 RSI: 0000000020000900 RDI: 000000000000000e [ 683.526705][T15297] RBP: 00007f3504d6b090 R08: 0000000000000000 R09: 0000000000000000 [ 683.534655][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.542619][T15297] R13: 0000000000000000 R14: 00007f3504176080 R15: 00007ffe01026398 [ 683.550576][T15297] [ 683.805086][ T29] audit: type=1400 audit(1734298415.015:1696): avc: denied { create } for pid=15295 comm="syz.5.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 683.825560][ T29] audit: type=1400 audit(1734298415.015:1697): avc: denied { prog_load } for pid=15295 comm="syz.5.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.846216][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 683.868297][ T25] usb 3-1: no configurations [ 683.872930][ T25] usb 3-1: can't read configurations, error -22 [ 683.905952][ T25] usb usb3-port1: attempt power cycle [ 688.431995][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 688.432015][ T29] audit: type=1400 audit(1734298416.159:1716): avc: denied { map_create } for pid=15301 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.317860][ T29] audit: type=1400 audit(1734298416.159:1717): avc: denied { map_read map_write } for pid=15301 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.338108][ T29] audit: type=1400 audit(1734298416.159:1718): avc: denied { write } for pid=15301 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.506335][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 689.598675][ T29] audit: type=1400 audit(1734298421.808:1719): avc: denied { name_bind } for pid=15311 comm="syz.6.2532" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 689.630135][ T29] audit: type=1400 audit(1734298421.829:1720): avc: denied { create } for pid=15313 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 689.659146][T15316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.671681][ T29] audit: type=1400 audit(1734298421.829:1721): avc: denied { setopt } for pid=15313 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 689.712930][ T29] audit: type=1400 audit(1734298421.829:1722): avc: denied { bind } for pid=15313 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 689.717189][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 689.736985][ T25] usb 3-1: device not accepting address 47, error -71 [ 689.760000][T15316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15316 comm=syz.2.2535 [ 689.763424][ T29] audit: type=1400 audit(1734298421.871:1723): avc: denied { mounton } for pid=15315 comm="syz.2.2535" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 689.781081][T15316] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 689.810101][T15318] fuse: Bad value for 'user_id' [ 689.816296][T15318] fuse: Bad value for 'user_id' [ 689.828397][ T29] audit: type=1400 audit(1734298421.871:1724): avc: denied { mount } for pid=15315 comm="syz.2.2535" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 689.858012][ T29] audit: type=1400 audit(1734298421.892:1725): avc: denied { unmount } for pid=15315 comm="syz.2.2535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 690.125034][T15329] FAULT_INJECTION: forcing a failure. [ 690.125034][T15329] name failslab, interval 1, probability 0, space 0, times 0 [ 690.137877][T15329] CPU: 0 UID: 0 PID: 15329 Comm: syz.5.2536 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 690.148638][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 690.158766][T15329] Call Trace: [ 690.162047][T15329] [ 690.164970][T15329] dump_stack_lvl+0x16c/0x1f0 [ 690.169641][T15329] should_fail_ex+0x497/0x5b0 [ 690.174311][T15329] ? fs_reclaim_acquire+0xae/0x150 [ 690.179417][T15329] should_failslab+0xc2/0x120 [ 690.184085][T15329] __kmalloc_noprof+0xcb/0x510 [ 690.188835][T15329] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 690.194461][T15329] tomoyo_realpath_from_path+0xb9/0x720 [ 690.199996][T15329] ? tomoyo_path_number_perm+0x235/0x590 [ 690.205615][T15329] ? tomoyo_path_number_perm+0x235/0x590 [ 690.211234][T15329] tomoyo_path_number_perm+0x248/0x590 [ 690.216678][T15329] ? tomoyo_path_number_perm+0x235/0x590 [ 690.222299][T15329] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 690.228284][T15329] ? __pfx_lock_release+0x10/0x10 [ 690.233313][T15329] ? trace_lock_acquire+0x14e/0x1f0 [ 690.238503][T15329] ? lock_acquire+0x2f/0xb0 [ 690.242993][T15329] ? __fget_files+0x40/0x3a0 [ 690.247573][T15329] ? __fget_files+0x206/0x3a0 [ 690.252254][T15329] security_file_ioctl+0x9b/0x240 [ 690.257273][T15329] __x64_sys_ioctl+0xb7/0x200 [ 690.261945][T15329] do_syscall_64+0xcd/0x250 [ 690.266444][T15329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.272327][T15329] RIP: 0033:0x7f3503f85d19 [ 690.276729][T15329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.296325][T15329] RSP: 002b:00007f3504d6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.304726][T15329] RAX: ffffffffffffffda RBX: 00007f3504176080 RCX: 00007f3503f85d19 [ 690.312682][T15329] RDX: 0000000000000008 RSI: 0000000000005387 RDI: 0000000000000008 [ 690.320639][T15329] RBP: 00007f3504d6b090 R08: 0000000000000000 R09: 0000000000000000 [ 690.328594][T15329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.336551][T15329] R13: 0000000000000000 R14: 00007f3504176080 R15: 00007ffe01026398 [ 690.344517][T15329] [ 690.351853][T15329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.893996][T15334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2539'. [ 690.916015][ T8] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 690.956211][T15351] fuse: Unknown parameter 'use00000000000000000000' [ 691.153898][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 691.161772][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 691.171093][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.179416][ T8] usb 2-1: Product: syz [ 691.184157][ T8] usb 2-1: Manufacturer: syz [ 691.188810][ T8] usb 2-1: SerialNumber: syz [ 691.258135][ T8] usb 2-1: config 0 descriptor?? [ 691.273209][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 693.572960][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 693.572980][ T29] audit: type=1400 audit(1734298425.399:1779): avc: denied { create } for pid=15372 comm="syz.5.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 693.573451][ T8] gspca_sonixj: reg_w1 err -110 [ 693.606000][ T29] audit: type=1400 audit(1734298425.420:1780): avc: denied { setopt } for pid=15372 comm="syz.5.2548" lport=237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 693.616516][T15376] fuse: Bad value for 'user_id' [ 693.632075][T15376] fuse: Bad value for 'user_id' [ 693.635875][ T29] audit: type=1400 audit(1734298425.420:1781): avc: denied { create } for pid=15372 comm="syz.5.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.690722][ T29] audit: type=1400 audit(1734298425.430:1782): avc: denied { connect } for pid=15372 comm="syz.5.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.706562][ T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 693.710883][ T29] audit: type=1400 audit(1734298425.430:1783): avc: denied { write } for pid=15372 comm="syz.5.2548" laddr=fe80::11 lport=4 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.789590][T15379] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2550'. [ 693.803177][ T29] audit: type=1400 audit(1734298426.228:1784): avc: denied { create } for pid=15380 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 693.933515][ T29] audit: type=1400 audit(1734298426.228:1785): avc: denied { mount } for pid=15380 comm="syz.0.2551" name="/" dev="gadgetfs" ino=6911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 693.955662][ T8] usb 2-1: USB disconnect, device number 71 [ 694.500281][ T29] audit: type=1400 audit(1734298426.459:1786): avc: denied { create } for pid=15380 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 694.508010][T15387] FAULT_INJECTION: forcing a failure. [ 694.508010][T15387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.533689][T15387] CPU: 1 UID: 0 PID: 15387 Comm: syz.1.2552 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 694.544485][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 694.554538][T15387] Call Trace: [ 694.557818][T15387] [ 694.560740][T15387] dump_stack_lvl+0x16c/0x1f0 [ 694.565415][T15387] should_fail_ex+0x497/0x5b0 [ 694.570092][T15387] _copy_to_user+0x32/0xd0 [ 694.574505][T15387] copy_to_sockptr_offset.constprop.0+0x12b/0x150 [ 694.580907][T15387] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 694.587903][T15387] ? bpf_vlog_finalize+0x1ba/0x360 [ 694.593021][T15387] btf_new_fd+0x199d/0x5370 [ 694.597519][T15387] ? avc_has_perm_noaudit+0x143/0x3a0 [ 694.602981][T15387] ? __pfx_btf_new_fd+0x10/0x10 [ 694.607827][T15387] ? cap_capable+0x1cf/0x240 [ 694.612407][T15387] ? bpf_lsm_capable+0x9/0x10 [ 694.617069][T15387] ? security_capable+0x7e/0x260 [ 694.621993][T15387] ? ns_capable+0xd7/0x110 [ 694.626400][T15387] __sys_bpf+0x1747/0x49c0 [ 694.630807][T15387] ? __pfx_lock_release+0x10/0x10 [ 694.635848][T15387] ? __pfx___sys_bpf+0x10/0x10 [ 694.640604][T15387] ? vfs_write+0x306/0x1150 [ 694.645096][T15387] ? __mutex_unlock_slowpath+0x164/0x690 [ 694.650728][T15387] ? fput+0x67/0x440 [ 694.654613][T15387] ? ksys_write+0x1ba/0x250 [ 694.659102][T15387] ? __pfx_ksys_write+0x10/0x10 [ 694.663940][T15387] __x64_sys_bpf+0x78/0xc0 [ 694.668347][T15387] ? lockdep_hardirqs_on+0x7c/0x110 [ 694.673534][T15387] do_syscall_64+0xcd/0x250 [ 694.678031][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.683919][T15387] RIP: 0033:0x7f046ab85d19 [ 694.688322][T15387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.708004][T15387] RSP: 002b:00007f046b9c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 694.716402][T15387] RAX: ffffffffffffffda RBX: 00007f046ad75fa0 RCX: 00007f046ab85d19 [ 694.724368][T15387] RDX: 0000000000000028 RSI: 0000000020000200 RDI: 0000000000000012 [ 694.732324][T15387] RBP: 00007f046b9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 694.740279][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.748237][T15387] R13: 0000000000000001 R14: 00007f046ad75fa0 R15: 00007ffc46db00c8 [ 694.756205][T15387] [ 694.787694][ T29] audit: type=1400 audit(1734298426.459:1787): avc: denied { write } for pid=15380 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 694.807709][ T29] audit: type=1400 audit(1734298426.533:1788): avc: denied { read } for pid=15380 comm="syz.0.2551" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 695.354812][ T8] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 695.392245][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 695.508065][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 695.517633][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.527955][ T8] usb 2-1: config 0 descriptor?? [ 695.535353][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 695.550551][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 695.560224][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.570597][ T9] usb 6-1: config 0 descriptor?? [ 695.578178][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 695.652095][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 695.853226][T15394] FAULT_INJECTION: forcing a failure. [ 695.853226][T15394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.953223][ T25] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 696.046728][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.062761][T15394] CPU: 1 UID: 0 PID: 15394 Comm: syz.1.2555 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 696.073546][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 696.083599][T15394] Call Trace: [ 696.086875][T15394] [ 696.089805][T15394] dump_stack_lvl+0x16c/0x1f0 [ 696.094490][T15394] should_fail_ex+0x497/0x5b0 [ 696.099186][T15394] _copy_from_iter+0x2a1/0x1560 [ 696.104044][T15394] ? trace_lock_acquire+0x14e/0x1f0 [ 696.109251][T15394] ? __pfx__copy_from_iter+0x10/0x10 [ 696.114544][T15394] ? __virt_addr_valid+0x1a4/0x590 [ 696.119664][T15394] ? __virt_addr_valid+0x5e/0x590 [ 696.124690][T15394] ? __phys_addr_symbol+0x30/0x80 [ 696.129732][T15394] ? __check_object_size+0x488/0x710 [ 696.135033][T15394] netlink_sendmsg+0x813/0xd70 [ 696.139817][T15394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.145116][T15394] ____sys_sendmsg+0xaaf/0xc90 [ 696.149886][T15394] ? copy_msghdr_from_user+0x10b/0x160 [ 696.155350][T15394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.155458][ T9] gp8psk: usb in 128 operation failed. [ 696.160641][T15394] ___sys_sendmsg+0x135/0x1e0 [ 696.160668][T15394] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.160694][T15394] ? __pfx_lock_release+0x10/0x10 [ 696.160710][T15394] ? trace_lock_acquire+0x14e/0x1f0 [ 696.166721][ T9] gp8psk: usb in 137 operation failed. [ 696.171030][T15394] ? __fget_files+0x206/0x3a0 [ 696.171061][T15394] __sys_sendmsg+0x16e/0x220 [ 696.171079][T15394] ? __pfx___sys_sendmsg+0x10/0x10 [ 696.171112][T15394] do_syscall_64+0xcd/0x250 [ 696.171138][T15394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.171162][T15394] RIP: 0033:0x7f046ab85d19 [ 696.171180][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.171198][T15394] RSP: 002b:00007f046b9c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.171217][T15394] RAX: ffffffffffffffda RBX: 00007f046ad75fa0 RCX: 00007f046ab85d19 [ 696.171230][T15394] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 696.171241][T15394] RBP: 00007f046b9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 696.171253][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.171264][T15394] R13: 0000000000000000 R14: 00007f046ad75fa0 R15: 00007ffc46db00c8 [ 696.171286][T15394] [ 696.242070][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.357910][ T25] usb 1-1: config 0 descriptor?? [ 696.358090][ T8] gp8psk: usb in 128 operation failed. [ 696.364914][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 696.368833][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.386477][ T8] gp8psk: usb in 137 operation failed. [ 696.393968][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.408205][ T8] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 696.417651][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 696.426338][ T9] usb 6-1: media controller created [ 696.431707][ T8] usb 2-1: media controller created [ 696.458589][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.484478][ T9] gp8psk_fe: Frontend attached [ 696.492023][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.501912][ T9] usb 6-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 696.516167][ T8] gp8psk_fe: Frontend attached [ 696.521876][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 696.537199][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 696.551492][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 696.561845][ T25] gp8psk: usb in 128 operation failed. [ 696.568621][ T9] gp8psk: usb in 138 operation failed. [ 696.568745][ T25] gp8psk: usb in 137 operation failed. [ 696.578415][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 696.601345][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 696.607951][ T8] gp8psk: usb in 138 operation failed. [ 696.613732][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 696.623692][ T8] gp8psk: found Genpix USB device pID = 203 (hex) [ 696.633463][ T8] usb 2-1: USB disconnect, device number 72 [ 696.639608][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.646227][ T9] usb 6-1: USB disconnect, device number 68 [ 696.649289][ T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 696.699651][ T25] usb 1-1: media controller created [ 696.706089][T15419] syzkaller1: entered allmulticast mode [ 696.716664][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.742525][ T25] gp8psk_fe: Frontend attached [ 696.757932][ T25] usb 1-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 696.765431][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 696.777776][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 696.810638][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 696.863013][ T25] gp8psk: usb in 138 operation failed. [ 696.870923][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 696.944014][T15425] FAULT_INJECTION: forcing a failure. [ 696.944014][T15425] name failslab, interval 1, probability 0, space 0, times 0 [ 696.958055][T15425] CPU: 0 UID: 0 PID: 15425 Comm: syz.5.2563 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 696.968824][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 696.978864][T15425] Call Trace: [ 696.982218][T15425] [ 696.985136][T15425] dump_stack_lvl+0x16c/0x1f0 [ 696.989813][T15425] should_fail_ex+0x497/0x5b0 [ 696.994481][T15425] ? fs_reclaim_acquire+0xae/0x150 [ 696.999588][T15425] should_failslab+0xc2/0x120 [ 697.004255][T15425] __kmalloc_node_noprof+0xd1/0x510 [ 697.009460][T15425] ? __pfx___mutex_lock+0x10/0x10 [ 697.014474][T15425] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 697.019924][T15425] __kvmalloc_node_noprof+0xad/0x1a0 [ 697.025199][T15425] traverse.part.0.constprop.0+0x392/0x640 [ 697.031005][T15425] seq_read_iter+0x934/0x12b0 [ 697.035674][T15425] ? hlock_class+0x4e/0x130 [ 697.040170][T15425] ? __lock_acquire+0x15a9/0x3c40 [ 697.045200][T15425] seq_read+0x39f/0x4e0 [ 697.049352][T15425] ? __pfx_seq_read+0x10/0x10 [ 697.054028][T15425] ? avc_policy_seqno+0x9/0x20 [ 697.058785][T15425] ? __pfx_seq_read+0x10/0x10 [ 697.063454][T15425] proc_reg_read+0x23d/0x330 [ 697.068030][T15425] ? __pfx_proc_reg_read+0x10/0x10 [ 697.073138][T15425] vfs_read+0x1df/0xbe0 [ 697.077279][T15425] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 697.083073][T15425] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 697.089656][T15425] ? __pfx_vfs_read+0x10/0x10 [ 697.094322][T15425] ? rcu_is_watching+0x12/0xc0 [ 697.099077][T15425] ? __rcu_read_unlock+0x2b4/0x580 [ 697.104176][T15425] ? __fget_files+0x206/0x3a0 [ 697.108844][T15425] __x64_sys_pread64+0x1f6/0x250 [ 697.113768][T15425] ? __pfx___x64_sys_pread64+0x10/0x10 [ 697.119221][T15425] do_syscall_64+0xcd/0x250 [ 697.123722][T15425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.129626][T15425] RIP: 0033:0x7f3503f85d19 [ 697.134039][T15425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.153633][T15425] RSP: 002b:00007f3504d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 697.162035][T15425] RAX: ffffffffffffffda RBX: 00007f3504176160 RCX: 00007f3503f85d19 [ 697.169991][T15425] RDX: 0000000000000049 RSI: 00000000200001c0 RDI: 000000000000000a [ 697.177948][T15425] RBP: 00007f3504d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 697.185905][T15425] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.193878][T15425] R13: 0000000000000000 R14: 00007f3504176160 R15: 00007ffe01026398 [ 697.201844][T15425] [ 697.204908][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.445006][ T25] gp8psk: found Genpix USB device pID = 203 (hex) [ 697.461457][ T25] usb 1-1: USB disconnect, device number 64 [ 697.497650][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 697.594922][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 697.819716][ T8] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 697.840881][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 697.847499][ T8] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 697.856612][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.868440][ T8] usb 2-1: config 0 descriptor?? [ 698.550131][ T8] hid_mf 0003:0079:1803.000B: item fetching failed at offset 2/5 [ 698.563543][ T8] hid_mf 0003:0079:1803.000B: HID parse failed. [ 698.570081][ T8] hid_mf 0003:0079:1803.000B: probe with driver hid_mf failed with error -22 [ 698.610642][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 698.610653][ T29] audit: type=1400 audit(1734298431.268:1824): avc: denied { unlink } for pid=15453 comm="syz.2.2573" name="#2e" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 698.643961][ T29] audit: type=1400 audit(1734298431.310:1825): avc: denied { mount } for pid=15453 comm="syz.2.2573" name="/" dev="overlay" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 698.646625][T15454] [ 698.668521][T15454] ====================================================== [ 698.675511][T15454] WARNING: possible circular locking dependency detected [ 698.682499][T15454] 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 Not tainted [ 698.689576][T15454] ------------------------------------------------------ [ 698.696565][T15454] syz.2.2573/15454 is trying to acquire lock: [ 698.702598][T15454] ffff88807b53c100 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x342/0x5b0 [ 698.712757][T15454] [ 698.712757][T15454] but task is already holding lock: [ 698.720101][T15454] ffff8880282d4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 698.729399][T15454] [ 698.729399][T15454] which lock already depends on the new lock. [ 698.729399][T15454] [ 698.739777][T15454] [ 698.739777][T15454] the existing dependency chain (in reverse order) is: [ 698.748777][T15454] [ 698.748777][T15454] -> #3 (&of->mutex){+.+.}-{4:4}: [ 698.755967][T15454] __mutex_lock+0x19b/0xa60 [ 698.761011][T15454] kernfs_fop_write_iter+0x27b/0x500 [ 698.766824][T15454] iter_file_splice_write+0x90f/0x10b0 [ 698.772820][T15454] do_splice+0x145c/0x1f60 [ 698.777746][T15454] __do_splice+0x327/0x360 [ 698.782679][T15454] __x64_sys_splice+0x187/0x250 [ 698.788049][T15454] do_syscall_64+0xcd/0x250 [ 698.793059][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.799458][T15454] [ 698.799458][T15454] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 698.806829][T15454] __mutex_lock+0x19b/0xa60 [ 698.811842][T15454] pipe_lock+0x64/0x80 [ 698.816431][T15454] iter_file_splice_write+0x1eb/0x10b0 [ 698.822400][T15454] do_splice+0x145c/0x1f60 [ 698.827314][T15454] __do_splice+0x327/0x360 [ 698.832230][T15454] __x64_sys_splice+0x187/0x250 [ 698.837579][T15454] do_syscall_64+0xcd/0x250 [ 698.842588][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.848988][T15454] [ 698.848988][T15454] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 698.856443][T15454] mnt_want_write+0x6f/0x450 [ 698.861542][T15454] ovl_create_object+0x12e/0x300 [ 698.866982][T15454] lookup_open.isra.0+0x1174/0x14c0 [ 698.872687][T15454] path_openat+0x904/0x2d60 [ 698.877691][T15454] do_filp_open+0x20c/0x470 [ 698.882693][T15454] do_sys_openat2+0x17a/0x1e0 [ 698.887875][T15454] __x64_sys_openat+0x175/0x210 [ 698.893233][T15454] do_syscall_64+0xcd/0x250 [ 698.898242][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.904641][T15454] [ 698.904641][T15454] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 698.913326][T15454] __lock_acquire+0x249e/0x3c40 [ 698.918681][T15454] lock_acquire.part.0+0x11b/0x380 [ 698.924294][T15454] down_read+0x9a/0x330 [ 698.928966][T15454] walk_component+0x342/0x5b0 [ 698.934158][T15454] path_lookupat+0x17f/0x770 [ 698.939248][T15454] filename_lookup+0x221/0x5f0 [ 698.944509][T15454] kern_path+0x35/0x50 [ 698.949076][T15454] lookup_bdev+0xd9/0x280 [ 698.953914][T15454] resume_store+0x1d8/0x460 [ 698.958920][T15454] kobj_attr_store+0x55/0x80 [ 698.964012][T15454] sysfs_kf_write+0x117/0x170 [ 698.969194][T15454] kernfs_fop_write_iter+0x33d/0x500 [ 698.974979][T15454] vfs_write+0x5ae/0x1150 [ 698.979806][T15454] ksys_write+0x12b/0x250 [ 698.984634][T15454] do_syscall_64+0xcd/0x250 [ 698.989649][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.996052][T15454] [ 698.996052][T15454] other info that might help us debug this: [ 698.996052][T15454] [ 699.006255][T15454] Chain exists of: [ 699.006255][T15454] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 699.006255][T15454] [ 699.019611][T15454] Possible unsafe locking scenario: [ 699.019611][T15454] [ 699.027034][T15454] CPU0 CPU1 [ 699.032374][T15454] ---- ---- [ 699.037713][T15454] lock(&of->mutex); [ 699.041675][T15454] lock(&pipe->mutex); [ 699.048327][T15454] lock(&of->mutex); [ 699.054804][T15454] rlock(&ovl_i_mutex_dir_key[depth]); [ 699.060328][T15454] [ 699.060328][T15454] *** DEADLOCK *** [ 699.060328][T15454] [ 699.068447][T15454] 4 locks held by syz.2.2573/15454: [ 699.073617][T15454] #0: ffff8880305169b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 699.082670][T15454] #1: ffff888030eb8420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 699.091617][T15454] #2: ffff8880282d4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 699.101341][T15454] #3: ffff888140ebd788 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 699.111329][T15454] [ 699.111329][T15454] stack backtrace: [ 699.117195][T15454] CPU: 0 UID: 0 PID: 15454 Comm: syz.2.2573 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 699.127932][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 699.137966][T15454] Call Trace: [ 699.141222][T15454] [ 699.144134][T15454] dump_stack_lvl+0x116/0x1f0 [ 699.148797][T15454] print_circular_bug+0x419/0x5d0 [ 699.153804][T15454] check_noncircular+0x31a/0x400 [ 699.158720][T15454] ? stack_trace_save+0x95/0xd0 [ 699.163559][T15454] ? __pfx_check_noncircular+0x10/0x10 [ 699.169005][T15454] ? add_lock_to_list+0x17d/0x390 [ 699.174017][T15454] __lock_acquire+0x249e/0x3c40 [ 699.178855][T15454] ? __pfx___lock_acquire+0x10/0x10 [ 699.184039][T15454] ? lock_acquire.part.0+0x11b/0x380 [ 699.189306][T15454] ? find_held_lock+0x2d/0x110 [ 699.194059][T15454] lock_acquire.part.0+0x11b/0x380 [ 699.199160][T15454] ? walk_component+0x342/0x5b0 [ 699.204021][T15454] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 699.209667][T15454] ? rcu_is_watching+0x12/0xc0 [ 699.214428][T15454] ? trace_lock_acquire+0x14e/0x1f0 [ 699.219622][T15454] ? walk_component+0x342/0x5b0 [ 699.224466][T15454] ? lock_acquire+0x2f/0xb0 [ 699.228950][T15454] ? walk_component+0x342/0x5b0 [ 699.233791][T15454] down_read+0x9a/0x330 [ 699.237935][T15454] ? walk_component+0x342/0x5b0 [ 699.242771][T15454] ? __pfx_down_read+0x10/0x10 [ 699.247520][T15454] ? lookup_fast+0x155/0x540 [ 699.252098][T15454] walk_component+0x342/0x5b0 [ 699.256764][T15454] path_lookupat+0x17f/0x770 [ 699.261335][T15454] filename_lookup+0x221/0x5f0 [ 699.266079][T15454] ? __pfx_filename_lookup+0x10/0x10 [ 699.271348][T15454] ? getname_kernel+0x52/0x370 [ 699.276096][T15454] ? __asan_memcpy+0x3c/0x60 [ 699.280666][T15454] kern_path+0x35/0x50 [ 699.284715][T15454] lookup_bdev+0xd9/0x280 [ 699.289035][T15454] ? __pfx_lookup_bdev+0x10/0x10 [ 699.293959][T15454] ? __asan_memcpy+0x3c/0x60 [ 699.298531][T15454] resume_store+0x1d8/0x460 [ 699.303020][T15454] ? __pfx_resume_store+0x10/0x10 [ 699.308028][T15454] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 699.313643][T15454] ? rcu_is_watching+0x12/0xc0 [ 699.318397][T15454] ? __pfx_resume_store+0x10/0x10 [ 699.323403][T15454] kobj_attr_store+0x55/0x80 [ 699.327978][T15454] ? __pfx_kobj_attr_store+0x10/0x10 [ 699.333247][T15454] sysfs_kf_write+0x117/0x170 [ 699.338000][T15454] kernfs_fop_write_iter+0x33d/0x500 [ 699.343265][T15454] ? __pfx_sysfs_kf_write+0x10/0x10 [ 699.348454][T15454] vfs_write+0x5ae/0x1150 [ 699.352763][T15454] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 699.358553][T15454] ? __pfx___mutex_lock+0x10/0x10 [ 699.363646][T15454] ? __pfx_vfs_write+0x10/0x10 [ 699.368396][T15454] ksys_write+0x12b/0x250 [ 699.372703][T15454] ? __pfx_ksys_write+0x10/0x10 [ 699.377538][T15454] do_syscall_64+0xcd/0x250 [ 699.382026][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.387902][T15454] RIP: 0033:0x7f0ed5185d19 [ 699.392295][T15454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.411886][T15454] RSP: 002b:00007f0ed6094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.420279][T15454] RAX: ffffffffffffffda RBX: 00007f0ed5375fa0 RCX: 00007f0ed5185d19 [ 699.428235][T15454] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003 [ 699.436189][T15454] RBP: 00007f0ed5201a20 R08: 0000000000000000 R09: 0000000000000000 [ 699.444139][T15454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.452088][T15454] R13: 0000000000000000 R14: 00007f0ed5375fa0 R15: 00007ffc96581538 [ 699.460132][T15454] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 699.463207][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.516368][ T29] audit: type=1400 audit(1734298432.202:1826): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[5158]" dev="pipefs" ino=5158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 699.541544][ T8] usb 2-1: USB disconnect, device number 73 [ 699.556258][T15454] block device autoloading is deprecated and will be removed. [ 699.573470][T15454] PM: Image not found (code -22) [ 699.621360][ T25] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 699.699786][T13707] bridge0: port 1(syz_tun) entered disabled state [ 699.780757][T13707] syz_tun (unregistering): left allmulticast mode [ 699.790875][T13707] syz_tun (unregistering): left promiscuous mode [ 699.818016][T13707] bridge0: port 1(syz_tun) entered disabled state [ 699.994759][T15444] bridge0: port 1(syz_tun) entered disabled state [ 700.004492][T15444] syz_tun (unregistering): left allmulticast mode [ 700.010917][T15444] syz_tun (unregistering): left promiscuous mode [ 700.017948][T15444] bridge0: port 1(syz_tun) entered disabled state [ 700.043401][ T25] usb 7-1: device descriptor read/all, error -71 [ 700.069994][ T9813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.080626][ T9813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 700.157801][ T9813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.168306][ T9813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 700.246538][ T9813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.259079][ T9813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 700.299850][ T9813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.310375][ T9813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 700.405893][ T9813] bond1 (unregistering): (slave gretap1): Releasing active interface [ 700.606844][ T9813] bond0 (unregistering): Released all slaves [ 700.614574][ T9813] bond1 (unregistering): Released all slaves [ 700.661657][ T9813] tipc: Left network mode [ 700.775705][ T9813] hsr_slave_0: left promiscuous mode [ 700.781255][ T9813] hsr_slave_1: left promiscuous mode [ 700.788111][ T9813] veth1_macvtap: left promiscuous mode [ 700.793649][ T9813] veth0_macvtap: left promiscuous mode [ 700.799168][ T9813] veth1_vlan: left promiscuous mode [ 700.804868][ T9813] veth0_vlan: left promiscuous mode [ 701.276481][ T9813] IPVS: stop unused estimator thread 0... [ 701.322174][ T6181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.358491][ T6181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.395300][ T6181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.452823][ T6181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.517940][ T6181] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.585012][ T6181] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.642062][ T6181] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.680523][ T6181] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.738637][ T6181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.785853][ T6181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.824381][ T6181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.881346][ T6181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.936951][ T6181] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.985774][ T6181] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.024916][ T6181] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.081077][ T6181] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.135603][ T6181] bridge_slave_1: left allmulticast mode [ 702.141430][ T6181] bridge_slave_1: left promiscuous mode [ 702.147104][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.154769][ T6181] bridge_slave_0: left allmulticast mode [ 702.160606][ T6181] bridge_slave_0: left promiscuous mode [ 702.166329][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.273846][ T6181] dvmrp0 (unregistering): left allmulticast mode [ 702.529234][ T6181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.538730][ T6181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.547861][ T6181] bond0 (unregistering): Released all slaves [ 702.555604][ T6181] bond1 (unregistering): Released all slaves [ 702.563004][ T6181] bond2 (unregistering): Released all slaves [ 702.660817][ T6181] bond0 (unregistering): Released all slaves [ 702.668311][ T6181] bond1 (unregistering): Released all slaves [ 702.760168][ T6181] bond0 (unregistering): Released all slaves [ 702.848919][ T6181] bond0 (unregistering): Released all slaves [ 702.856932][ T6181] bond1 (unregistering): Released all slaves [ 702.909475][ T6181] tipc: Left network mode [ 703.449846][ T6181] hsr_slave_0: left promiscuous mode [ 703.475768][ T6181] hsr_slave_1: left promiscuous mode [ 703.481505][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.488925][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.496297][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.503759][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.513404][ T6181] hsr_slave_0: left promiscuous mode [ 703.519040][ T6181] hsr_slave_1: left promiscuous mode [ 703.525848][ T6181] hsr_slave_0: left promiscuous mode [ 703.532288][ T6181] hsr_slave_1: left promiscuous mode [ 703.539349][ T6181] hsr_slave_0: left promiscuous mode [ 703.544888][ T6181] hsr_slave_1: left promiscuous mode [ 703.555323][ T6181] veth1_macvtap: left promiscuous mode [ 703.560822][ T6181] veth0_macvtap: left promiscuous mode [ 703.566324][ T6181] veth1_vlan: left promiscuous mode [ 703.571526][ T6181] veth0_vlan: left promiscuous mode [ 703.577177][ T6181] veth1_macvtap: left promiscuous mode [ 703.582626][ T6181] veth0_macvtap: left promiscuous mode [ 703.588301][ T6181] veth1_vlan: left promiscuous mode [ 703.593558][ T6181] veth0_vlan: left promiscuous mode [ 703.599134][ T6181] veth1_macvtap: left promiscuous mode [ 703.604615][ T6181] veth0_macvtap: left promiscuous mode [ 703.610080][ T6181] veth1_vlan: left promiscuous mode [ 703.615367][ T6181] veth0_vlan: left promiscuous mode [ 703.620962][ T6181] veth1_macvtap: left promiscuous mode [ 703.626440][ T6181] veth0_macvtap: left promiscuous mode [ 703.632126][ T6181] veth1_vlan: left promiscuous mode [ 703.637334][ T6181] veth0_vlan: left promiscuous mode [ 703.788477][ T6181] team0 (unregistering): Port device team_slave_1 removed [ 703.810070][ T6181] team0 (unregistering): Port device team_slave_0 removed [ 704.011884][ T6181] smc: removing net device bridge_slave_1 with user defined pnetid SYZ0 [ 704.409918][ T9812] smc: removing ib device syz2 [ 705.345044][ T6181] IPVS: stop unused estimator thread 0...