last executing test programs: 1m12.380516793s ago: executing program 4 (id=5): r0 = gettid() msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/143) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYRES16=r0], 0x50) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009c604000000fddbdf25021f00cb", @ANYRES32=r5, @ANYBLOB="08000100ac14144108000200ff"], 0x48}}, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000d2cbfb000300000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000040000000300"/28], 0x50) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0xc00, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000001400b59500000000000000000a4000003f13d2c0585fd39244a7e757066969df52edc4f812a944b075c58f045ead4dea7ce9100a194fe76b93c9b87c606cd8f1951f1d7723287d0f53b3a7e759f49fb1d01e9949f7e4d7bfacce556fdc885237f600"/123, @ANYRES32=0x0], 0x18}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff, 0x0, 0x0, 0x0, 0x29}, [@generic={0x1, 0x3, 0x2, 0x8, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0xf670, 0x0, 0x0, 0x41100, 0x1f, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000740)={0xfffffffe, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x6, 0xffffff1d}, 0x10, 0x1593f, r6, 0x9, &(0x7f00000007c0)=[r6, r7, r1, r1, r7, r7, r1, r6, r6], &(0x7f0000000800)=[{0x1, 0x2, 0xe, 0xc}, {0x3, 0x3, 0x10, 0x2}, {0x3, 0x5, 0x3, 0x8}, {0x3, 0x5, 0x7, 0x3}, {0x0, 0x4, 0x7, 0x3}, {0x5, 0x3, 0x8, 0x7}, {0x0, 0x2, 0xa, 0x5}, {0x4, 0x3, 0x0, 0x1}, {0xfffffff8, 0x1, 0xb, 0x9}], 0x10, 0x6, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r11, r10, 0x0, r11}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r12, 0xc08c5336, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) personality(0x5000002) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 1m11.956606448s ago: executing program 4 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0xa}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m11.334343339s ago: executing program 4 (id=7): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc2600fff7ffff00bf67000000000000340300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m10.078373911s ago: executing program 4 (id=12): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x20, 0x1, 0x0, "f85a7c9b8d6744d14b604e59bff017b9a7f20650dbf742ab4a8ac3e76f438b0c", 0x34343452}) (fail_nth: 2) 1m7.674058708s ago: executing program 4 (id=18): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) 1m6.40776265s ago: executing program 32 (id=18): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) 22.561020755s ago: executing program 0 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000001580), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) ptrace$cont(0x9, r1, 0x34d, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r7, &(0x7f0000001c80)}, 0x20) memfd_create(0x0, 0x1e) close(r6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtclass={0x0, 0x28, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x10, 0xf}, {0xc, 0x2}}, [@TCA_RATE={0x0, 0x5, {0x7, 0x7}}, @tclass_kind_options=@c_qfq={{}, {0x0, 0x2, [@TCA_QFQ_LMAX={0x0, 0x2, 0x1}]}}, @tclass_kind_options=@c_red, @tclass_kind_options=@c_taprio, @tclass_kind_options=@c_drr={{}, {0x0, 0x2, @TCA_DRR_QUANTUM={0x0, 0x1, 0x400}}}, @tclass_kind_options=@c_taprio, @tclass_kind_options=@c_ingress, @tclass_kind_options=@c_sfq, @TCA_RATE={0x0, 0x5, {0x40, 0xaf}}, @TCA_RATE={0x0, 0x5, {0xc, 0x4}}]}, 0x24}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 21.827764894s ago: executing program 5 (id=172): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_request}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1, 0xfffffffd, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000800)=0xffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statfs(0x0, 0x0) 21.088453549s ago: executing program 0 (id=175): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x8000000000006) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="038048baf18036ec0c7c1326aec2000000bbbbbbbbbbbb08004700003800020000002f907800000000e000008000000000324b000001028090781200183f250000000000000000"], 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) poll(&(0x7f00000000c0)=[{r1, 0x20}], 0x1, 0x80000001) sendmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 19.044253396s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 12.260239109s ago: executing program 5 (id=185): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x60, 0x2e, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbmod={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x4}, {0x1a, 0x6, "8f16b60e1ec630f6c0572b5adecd9a850460693df81e"}, {0xc, 0x7, {0x6c5e575e545eb80a}}, {0xc, 0x8, {0x3}}}}]}]}, 0x60}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000320001002abd7000fedbdb2504000000080004000200000008000500", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f045}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x80db}], 0x1, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x3, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 11.171069818s ago: executing program 5 (id=191): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582020e"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000d80)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @jmp={0x5, 0x0, 0x9, 0x1, 0x2, 0xffffffffffffffc2, 0xfffffffffffffffc}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) socketpair(0xa, 0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) acct(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) unshare(0x62040200) 11.088680159s ago: executing program 2 (id=192): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7f8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') dup3(r3, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r2, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) 10.856401468s ago: executing program 0 (id=193): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000006800010000000000fddbdf25020000000000000006000700060000000c000880050004000100000008000500", @ANYRES32=r2, @ANYBLOB="49adb642d4e9c12361abf424bd8b6b2d25a553a0906bff5578c25684e63de19622973f25c7cd7f3f807c4efde7d29e9a0f56cba7b1c18645c011327d3bf118a8c1ae65448863b1f63e4cc8ac079c570276fb7c306519bd4191f19fdfeb5bdc6d9b244f9be8f85683554fd9396e7bd4bfd4"], 0x34}, 0x1, 0x0, 0x0, 0x20044c12}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x12, @loopback, 0x15, 0x0, 'wrr\x00'}, 0xfffffd6c) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0)=0x8, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000001380)={0x0}, 0x7}, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) readv(r9, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x4) 10.128634767s ago: executing program 2 (id=194): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002030300000000000000000000000000090002000000000802000000080001"], 0x28}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 9.835427641s ago: executing program 2 (id=195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0xfffffffffffffed1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000e59500006102000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3}, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x20) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x4000, 0x31364d4e, 0x0, 0x7, [{0x0, 0xfffffff7}, {}, {0x0, 0x4}, {0x0, 0xffffffff}, {0x0, 0x3}, {0x0, 0x7}, {}, {0x0, 0x4}], 0x0, 0x0, 0x7, 0x0, 0x6}}) unshare(0x8000000) semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x76bb, 0x1000}], 0x1, 0x0) unshare(0x8040080) syz_open_dev$sndctrl(0x0, 0x2, 0xa0c80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 8.626456683s ago: executing program 2 (id=197): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 8.47292425s ago: executing program 2 (id=199): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d04, 0x0) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4884}, 0x20050800) 7.616719781s ago: executing program 5 (id=201): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d04, 0x0) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4884}, 0x20050800) 5.528642228s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d04, 0x0) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000e4000000090a010400000000000000000700ffff08000a40000000000900020073797a30000000000900010073797a3000000000080005400000000da0001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000087c0000800b00010064796e73657400006c0002800900010073797a30000000000800044000000017080005400000001008000340000000000c00064000000000000003ff080005400000000d280007800b0001006c6f6f6b75700000180002800900010073797a31000000000800024000000012080005400000001008000340000001"], 0x12c}, 0x1, 0x0, 0x0, 0x4884}, 0x20050800) 5.384499761s ago: executing program 3 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x80000000, 0x6, 0x4}) mkdir(&(0x7f0000000440)='./file0\x00', 0x11) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 5.292420565s ago: executing program 3 (id=212): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mknod(0x0, 0x10, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0xfffffff8, {0xffffffffffffffff}, {}, 0x0, 0x7fffffffffffffff}) sched_setscheduler(r3, 0x0, &(0x7f0000000240)=0x9) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = msgget$private(0x0, 0x6f6) msgsnd(r4, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x401, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) msgrcv(r4, 0x0, 0x0, 0x2, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)="b59df46b6f287dc20e7faf5c61a8ea4eb51f7dbc224cb43840661d75d55e81e75e93cd8e30d1892efc2a4eb194a5a1d7b73cd7a748e81121be994e19940ab86d303018078ff9e65df914dc569be9829e40a0f5ccebf02b9a5ca9696eef1122dda2a7284e312d43c4e8674b8e876ec69c394a08a3cc95ccc0d6aa40a43437ec3da35d67085df168e473881e3463fbbc6d49820e8d345963b89593dd22368233d7dbc56eca7f18c53aae1b850c0636fc0bf057a1745873900972bd0a655021879d25041073bb665262591f33ca7b706ece7e9c18a028fec87598296adb2411841b8c", 0xe1}, {&(0x7f0000000740)="22f2d6a0426beb165ae97eddf330ed93231443b71abe72b6b0f10a50036818b69b01f00ea79dcc905afd24d41689e949f79acfe31b334c82b828ca2add26057e439355fe7d41c083503205830f2e09fc1cdcc61ef2ae21848897b1779bd3bb036a426a3ed8ee44e97f772832919559fba6bca3a99dbf4770a2190cf27b3a", 0x7e}, {&(0x7f0000000040)}, {&(0x7f00000007c0)="bf3cfa91436cdbe26a14ab63df85958cba28f215192188023a755ea4e517f3051473ead08fbf2fb2699c6fb8e3cdbd3158ca3f6fb59f7ca597fc301c087ba1c3df6515b631d1252fa28f40440471a93058184d58efa31c88b7b4c97ac62e09d39fb109ab635426c91002f0f40d817e9cb77cfd3b9e658f6d78704baab66c654538c4f811a57f94dac9c1b453ad76c62479853e39a8c3ee6491e8e40a2c5c7f586f6cdbee927bcf325fdc1fa1a0278712299262daecaa619f08f4830f89eb457d13222f5355544ab335a5323de835c016e1e81907e5", 0xd5}], 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x11d0}, 0x10) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x8040) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x800, 0x2000000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x9, 0x9, 0x1, 0x8, 0x7, 0x10, 0xe063, 0xfffffffc}}}}]}, 0x58}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.942309722s ago: executing program 1 (id=213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000000101040000000000000000020000002400018014d87320e97f9a90a8a581ac71f74d0f00018008000100e000000108000200e00000010c00028005000100000000000800034000001408f74ef8dc544227bdc7eabe984ddece93dc61f7ce4fc3b4fa84fd23291740ab232eb77ecf2c801974f8d57aa00128c498f9149b4dced8f4937c812ddb2b845b1d12f6354a0b7b6fec497f9d89fb6ba5d4fcf73e5e6c5c3b7eb819898729e8355e9b87946469a95896971bc57edeeee8c6b5fe7c94645aab00174462e6748883b01ef802cc8c299b46a0aeb405010782e9b528092c5c10"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r4, 0x8000000000000000, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000000007000000000000ffff000000dd3cf1d785f4247fb3ee9053031200436ef1d2938567d0e0deee935b7761224c0923d608b7c6f30a", @ANYRES32=r0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 4.869099251s ago: executing program 1 (id=214): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x2f, 0x4608, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2f, 0x4608, @val=@netkit={@void, @value=r1}}, 0x1c) 4.612435023s ago: executing program 1 (id=215): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mknod(0x0, 0x10, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0xfffffff8, {0xffffffffffffffff}, {}, 0x0, 0x7fffffffffffffff}) sched_setscheduler(r3, 0x0, &(0x7f0000000240)=0x9) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = msgget$private(0x0, 0x6f6) msgsnd(r4, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x401, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"3b8ad086dd15d64720bd1c89cb484aa8f75da543a97113bce861202a62b81f3e5f9fd4ccd92e306739ef31ca41de5df155fc8a273defa477414d4f323d4833063d53d728e134b7efd4c9a12337d2eee0774842ca44d089b20837a7f3a748d07f71bfc1d20dc7db0b7934cff141258b6fb8a520461039812fcd4b5223a4e85e5384d4e0c78d22c0a4d2cd3cb38cb18baf33ac7151a18ed0dffb95e2ff9224a2e5ac7fc9c2885dee95ee7a954efc44c9ae34d1605712c0139d00f34ef2feed1574f7988d58126b7527b1b2183e7112db16da93c862e880204a92024f9ad6f91ae8ef9a57472a61c95ac4667b6ad4096cff4a28036c2806ddbe777ce2b9303482dc99fc8fe153b6dd60c9ce519af3cc50d99af1832591bb948140bc46b39860e64acfb6398a80159ad3512658b2ae364648ddc1179b70b1d8186bf55d9f8b944b160f947eea6352b23cf92bb48fe4fa71463bdecd194e118d0d05e7e6e1c8047b20ac71210638b59bbdac01534cbe8177e4ac683ff3f2be84c81919dc7c654f35122802bc2b9ba050832cb23cde9fb718ce5489170dfc4009b64d0cb87740c16dd298f81a80c5afe1447a1340530e168e0fb7293bcc779de343be0961534b0b997d0546c23a999738773785193d0bd9b53d2bf02f4f7b783b87c99e71906ed0129c1bfa284d043e56769e4ac2ca8e99e61ec1b8adee456b0de0beebb623ae3332270c97a799ba1dab4313cfdb7cde2d6a1229a72ca726b695a4da03111846f1b71cea0270f2519b9d71848c79b6be6b5c57bcdcee99011b546f551eb8b564a0de2aa75007162dd0c0d0d682202af2cfcea3a4e76e2fea50d82062c11eee05a8c0acd10c64aa2e2559aecb2170b22a13ad727d51b5cb784c72841fcc2bb605ddbfd783813519212226beb74ae41d5ac2408b0eb229fa1b401791d07be57927d2be55222cb1f942b32fde80ef30f0492ea1e51adbc25e504f62e97c2106e79bdf96ffce78fc499352a95c778efba278d67a5223268cd2741bc606c38aa9bd266a2c3a120bb7bd713b1c0d550652fd42fa8045498c4bcadbd51d510b804a55ee317e939e8b7a354b3301fb5b543ab26878e266f86deeb959cebbac3762c1da69f4a162aab6ff3f139cdd4757f241832a210791b0b365597272e62f74d42750afd9534bf1142418faca7519d6d1888dbfd1a02852aabd301d0a8f374db93b505e74ac68a033c8c2e5c7b1a2eeb35c12ba55825a9d5431f566c3a7996b11d40812105e7c29b6dc36e0121fc4ab787fd9ec4c259d989b1da6caf93a91b415ea6fb1a6d8501f8d9c8c4dcd7d11bd840ac9749819f933f046000ad0c135c666d0f9f5c54f4e563ce2fb14ec0c0eead06ec46813c343670e6bee08171ac375540a60f2aee9a355df512872c49ef3b9ff6848753e3881c32918b4fe7bf26a1a0e7d92bfafcc193e630d1179bd1a98644bd4586c7c4036bdd957f1d32e77c005bca885bd02f5e7acbaa888509246f33150a0cdb31f32cd53da057ab84f23a7e5c883af533cbe238cd9006a97c9e8847a369eb5e996f815049e026a8407ab34058cf437c1f1f8adc0f944774ec84ea30728351a7ec986d50fccdbef797b6b8ba500cba20471726d5d0d47839103352b26e5c793746e671b591850dd51358175e2632ee479ca76cceda0b24a768ac91014d43fdc3e804a7c388ebc87dd25eedfd2db720f723545ea05989a7425647f8c573718fa0ca237cca00c075a4787702cda168673a227ea47c49c278d102ed6d20d597165233339f8567eda6d688a556e6e9e798f1a33945bae75225a682e5a72594bfec7c16195e7f400c25e60dba696b96b327037027c0fafb923ea437c8aef4e005f215c3854190d388d1ca31799097dda0ec637e05a44d80b9877b6d45d78ad38c6c5aad38207b0d7a4dc3fb51af305c48c8ce7682996a07ed44d9e85030688403f5cb0a357f11aaeb29e450a748506c8029f0e1f2b318c0e0cee8c57c2c37ee683f6c30c032320c367baf57733a9ff4d35776cc8ba592f7e314aa8c74e57466bf1edb51af3c977abd1cf5506c217ca50259e50ebe8eab00151a24e8fc8dc922fee2d65f490e33f378d0138cdfdea9e2c402b0a6b1f61837d42e76c674b1ba45aef73c0c7c483e2e142f2874bbf8ae8f7c8230cfc835886f30b273be59c12f37968ee28342cc84bf4762d2b296320d92944f48c10afec23d6fcd74a6de99166282f9a83fb46e41e1ba72b025e3f0043586052cf45dba9f95f6100e0420a5209e623830470611d6df1bf96f3a93e77862bca857576ecc06bbee81d99594e7f3fd91df809279ee770f86fa77c154508c330c5fd5ea58b04acc23703308cfda6d6a695b5be40ed7e0c9289c43eaffea88b0196d632812f8ffd212dfe83ddfcade09e031f0e64debef831e8b55253fb54e43aa3b2dfadc7b3c2bc231f98a3aac93fff6aa367d7c0f7b78bf0ca1dba1a6ddc5ed1f29ed861edf187ba1f056ef823d066bfb49971867879d35a931ceedc2e7fd23e693d3694b224942cb97d505cd45e28d407a45779bce7437ae94d29c56fee6689da246d1e3160e5699c91aab6ba57f2235196c4dc50f82a30435fbb99c4a7ec9bd2c16e430a8045a8b759d8314d5ab5be8485083e3128d3ccc98a35b079f183763eb699cb0f93904c27c44d1b97c285f28be60a5de1c12d1c48f940f008ea714954fb85374da093e2b3240604930822512235b3bf993d39dedb1ac9967b81e56ccd951884c58aa40940999b27ace051c640aab588e067a1fd6cb49dd102726c2aea8738fa7e3dcc7f863a565a849423975356379fe162755a69290d29b092419f78c393094d06c47a7c22e07d9853605494fea2fb82b15841b0963917f87106de2b7d54cbb5f6aa1e035b6b46239971c0f38331000c5df56481c03f68262484c625f28c4229bd39e5c8781505589edc93efcfb4505e69ede7a1698f9454e7971d2ebcb62560cd3a129daaaad73d1e965f5b9986f125ecc3382f021963194522d9ca800961c42434fa07af2748a4f359729e72e361160409bd7751286ef5c107797e9b96f681b7bd0567b5e3d157301a0ccd504269556847bfe512640747ec69752067115db8f89e3abf1d241c9f61a468713df736f2b7493afde9d812aed7abd73bb79775f39e4fbf97c6021d10db8f653411251f6a77ad73fb9b805f1db45a20f5f9e13b4ba49a788bf527b3005627f75db8b01215df9088b82c20880899ea3687162e32f8a3de57c48e93e6f8977425ec905b13c3e7df60715756bf2a5d3c249fa14ae5c3c88115fc256a09a7268e272efcb384f9b4ae0403829282e2b76fcf32c731a242e5230dec0f62b365baa64cb7a0432e9f3328ce2e8b87d957105c009d922e3816ba187db5805eedc2411a2a7d22f9c549079e1d48307596370a7c34960c9115c1fc6da54f2107e3c6e7e559104278e6eeabe80064224fa87844ccecce3b934cea9b10ff19be43b161fdabedfa29a543858cc568c5f5ce9e0d23d7e31f0a0807ca830471ff4a0570d533c936bd4515783721ba98b8d7b70b078225e461b94973bffe5a609802a014673f067c56a8b87a7884827592548ba235e5c3f48c763d769cb9e9d0215354cd695a602ae13c9f0e9999a14b0b625f955964c15ead248ada508f66659ac7b1da534ef5907ad6402c483822ea3e0a4e1b9be9c506eac105008abd2f2b26e3002bd5430b04cdd4c2b4539a27d4a325275b246b98d1c90b6bf82549522b2a9ad2aa72c8d05084cf923a960b1f993ef5e8851246083f1d0964228282ec67955d36cd34139e6b044a5def7eafe30e0fdfb65bca5d041315c668d8b429bd85ab0ff98cc60fa42886542db939aed3400233215df784d6766e038b6a67b987cd18ec3d729167967555036b1e0bd3417cc228b9fa31ddad48d2533c9630f426214e9ca90e3b228ef334a3239edc07be3f72fc09e801d1b426e36705717316be4293b7712b03da4e343284ad302ee5f4e6b9f96602a514319be178b293ace85938110e7f7071e8caf670d344f551fd0361011b26ce8fad6fea895c128bd0e2b1addf65bd4f72c3e023bf9bd41bdf1a46e757476c08c5c079931afc07bb5731f1eb62370c1ff299908561241e2ee004a9c3828059fd08afec70f1ceb5560317201cbfa8fe8faba06d363cd08d5ed73086f0ea28df1984a4e3d03335ed9fd5a2bcd01e71921b1671aabcb358f5070cdcf8ec1133e8519d230f41bab58d4474512c88c06120e49e11af539867c9d47106d6cffe8d82747d0e9b2c82e6182d1a7879909ec90c7fe11636bd8a4a3a2b4118f58b449d442152070f5c2fc8f00e39ed06d7feb6ae6be5acbfaf5089aa8bfd397f833761567e4fdabd6e3e3a8b77b33257f331bf6a3c366e4befe1f6f1e9b467801110c91987f297cd2cb0b94603f4ab5e9b63a2308e0e9529c59341d78a10535844026b07f33435b86d9afd1170d4c9eb683bab14d56325ea5bcfba0aa055f97cfd4dc2cc6684b4f73eaaecfe6fbe466a448a345bad4bfd3f674732fafd8e25015f260ec49a7870a758f741d1181c065cacd4ea53b55c90a8b0a5f5ea4039fc7660f646cdb786af4274c71f511a505e082286e3dd5a196e7493114df0234f93eb6a7ea9e6332aa650cc5dfc8a4c565e6e6c2c355bb7881b7a9f77dfd696dcfe87896f5424d6dde62a4c84f223ee54ff9da19a3e290b30f62f95b15c822abc0c2d090a2013a6efbb222db3dbf312458506977074d3e7e5e5501271aa59974bf4af191ceab99b1ae4b61d431d8d21dddb89ceadb9d755a9808a02cfd357220bb2ead1986d8a315fc3bc0d2d98b34ba1cf95ecfc73960bcd8369eaf1472d3f56c8afa561a2aeb9e995c1ccd3814db788ae328e0bcd333e4f4eaa6811eee24f6cc1a86c60b102eb5bbbe8c8c459bdcae040d3e1c5e45d365e599366f3cb5db03262eeb3f340f31975d623c3adacb142712ae8d9970365bf501734a498e64d311ffa228ba3dfe0e60a06de6562c6a4f33b70b0aa137c3992d398dc8c9ceb5b627ddc4e58940c4fdf5b6bebadd5647eac3899cfa6fa02703b4787a2dda579fa30cb4debafd4828fc72e4038ea4b3ea0f67be895ee6a2b04b2b79e0fbb957caf64191c540524f2e951f68111d3f989d87410c5854de228699bb250a141687d48ce39d367ce6cf2db2a5cb9ddb9cac0e2910f1289e98746d86fdd1f720d97d824b0842053cc4d52f2e5e68af1a8257dbfe172adbce064cbdfe5283584a2c3c56b021f09bf4257255525d51c7a5a2257f2d6fbca5d0c0e903f118085817b0a9be4ce1e3984d64ccdd7916b16c62d64053c31791eca295f0716563e6032f37eb74c063bee27369c6469e9734855df9197560b78893fadbfff8d2ce44a6e25975dc332193dd0d6b9d717b2037af0d4ce6d037768d9892242e8c1ac70041c91a3bfa4b8a8aff9c5ecc7baf7ea8afb6afdf6944b8fd4707192b2dda935a2d449383b62f08a67531397515e2e58086b6db820c806c38788813a7faa726c712089b2cf20b472974ef5a207ff4781dc9c26348c6c9dced774010d95fd0c218c4f8e164cea9e9d3d1b93099aecc82b004d26e88beb69368bb8c341213ad7ca379c62537e150bd622c6d9cb1d67f9c9df52c7c050e649dea9d86dfc2f7bfea65f1e4a2e7a7afd88e69bf57998c19fd43d93ae14bde7859db325804ae3d8a415d501b875924592fa29c32ccc0ec100eb002d0675cb6fd5b46d7c3303cfa2b8381eb166cd73e7c2cd20f59f5ec2ebe8e8cc13327f5528a473", 0x1000}}, 0x1006) msgrcv(r4, 0x0, 0x0, 0x2, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)="b59df46b6f287dc20e7faf5c61a8ea4eb51f7dbc224cb43840661d75d55e81e75e93cd8e30d1892efc2a4eb194a5a1d7b73cd7a748e81121be994e19940ab86d303018078ff9e65df914dc569be9829e40a0f5ccebf02b9a5ca9696eef1122dda2a7284e312d43c4e8674b8e876ec69c394a08a3cc95ccc0d6aa40a43437ec3da35d67085df168e473881e3463fbbc6d49820e8d345963b89593dd22368233d7dbc56eca7f18c53aae1b850c0636fc0bf057a1745873900972bd0a655021879d25041073bb665262591f33ca7b706ece7e9c18a028fec87598296adb2411841b8c", 0xe1}, {&(0x7f0000000740)="22f2d6a0426beb165ae97eddf330ed93231443b71abe72b6b0f10a50036818b69b01f00ea79dcc905afd24d41689e949f79acfe31b334c82b828ca2add26057e439355fe7d41c083503205830f2e09fc1cdcc61ef2ae21848897b1779bd3bb036a426a3ed8ee44e97f772832919559fba6bca3a99dbf4770a2190cf27b3a", 0x7e}, {&(0x7f0000000040)}, {&(0x7f00000007c0)="bf3cfa91436cdbe26a14ab63df85958cba28f215192188023a755ea4e517f3051473ead08fbf2fb2699c6fb8e3cdbd3158ca3f6fb59f7ca597fc301c087ba1c3df6515b631d1252fa28f40440471a93058184d58efa31c88b7b4c97ac62e09d39fb109ab635426c91002f0f40d817e9cb77cfd3b9e658f6d78704baab66c654538c4f811a57f94dac9c1b453ad76c62479853e39a8c3ee6491e8e40a2c5c7f586f6cdbee927bcf325fdc1fa1a0278712299262daecaa619f08f4830f89eb457d13222f5355544ab335a5323de835c016e1e81907e5", 0xd5}], 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x11d0}, 0x10) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x8040) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x800, 0x2000000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x9, 0x9, 0x1, 0x8, 0x7, 0x10, 0xe063, 0xfffffffc}}}}]}, 0x58}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.198904684s ago: executing program 2 (id=216): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000940)=""/218, 0xda) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x401, 0xd) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) poll(&(0x7f0000000800)=[{r2, 0x1287}, {r1, 0x8105}, {r1}, {r2, 0x18}, {r1, 0x1000}, {r2, 0x1}, {r1, 0x80}, {r1, 0x2205}, {r1, 0x4200}], 0x9, 0xb214) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000ff000000ff00000009000000000000000300000d000000000b00040000000000010000000000000010000000040000000f0000000600000f030000000100000050000000da4b0000040000000a00000004000000050000000600000004000000050000000500000007000000050000000600000000010000010000009b0200005600000062de8a10000000000000070000000002000000000000020400000005000000030000040410000008000000040000000400000010000000090000000000f8ff0500000004000603c4ce326fdca511bc799a3a0000800000000f1500000000000b02000000080000000000001203000000100000000000001204000000100000000000001002000000060000000000000905"], &(0x7f0000000480)=""/196, 0x121, 0xc4, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000e4078239000000000000000000000000000000000000000000fe29dfe3ead3464e25cabbda622ee82228ea53f5027a8c7c645eb6d32b25d82e6c1065247704d6ca92d01df856d2a7eaefc282fa7c5891726e57212bff57d3983220061f16de73df87698f7b29949d699acdbd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x9, &(0x7f0000000180)=@raw=[@exit, @ldst={0x0, 0x1, 0x6, 0xb, 0x5, 0x0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}], &(0x7f0000000200)='GPL\x00', 0x7, 0xf7, &(0x7f0000000240)=""/247, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x3, 0x4, 0x10000}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f00000006c0)=[r6], &(0x7f0000000700)=[{0x2, 0x5, 0xd, 0x6}], 0x10, 0x1000, @void, @value}, 0x94) syz_usb_disconnect(r0) 4.127003807s ago: executing program 3 (id=217): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000203030000000000000000000000000009000200000000080200000008000100"], 0x28}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 4.043787255s ago: executing program 3 (id=218): unshare(0x40020000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r1, @ANYRES64=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000840) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_secret(0x0) fchmod(r4, 0x134) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0xa00}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x168042, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x8) write$vga_arbiter(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 3.487496848s ago: executing program 1 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x6) r3 = socket$unix(0x1, 0xa, 0x0) recvmmsg$unix(r3, &(0x7f000001c940)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/149, 0x95}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000480)=""/162, 0xa2}], 0x3}}, {{0x0, 0x0, &(0x7f00000199c0)=[{&(0x7f0000019580)=""/167, 0xa7}, {&(0x7f0000019640)=""/129, 0x81}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000019700)=""/126, 0x7e}, {&(0x7f0000019780)=""/216, 0xd8}, {&(0x7f0000019880)}, {&(0x7f00000198c0)=""/105, 0x69}, {&(0x7f0000019940)=""/90, 0x5a}], 0x9, &(0x7f0000019a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000019b00)=@abs, 0x6e, &(0x7f0000019d00)=[{&(0x7f0000019b80)=""/219, 0xdb}, {&(0x7f0000019c80)=""/34, 0x22}, {&(0x7f0000019cc0)=""/52, 0x34}], 0x3, &(0x7f0000019d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000019e00), 0x6e, &(0x7f000001a200)=[{&(0x7f0000019e80)=""/228, 0xe4}, {&(0x7f0000019f80)=""/156, 0x9c}, {&(0x7f000001a040)=""/163, 0xa3}, {&(0x7f000001a100)=""/74, 0x4a}, {&(0x7f000001a180)=""/71, 0x47}], 0x5, &(0x7f000001a280)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f000001a300)=@abs, 0x6e, &(0x7f000001b480)=[{&(0x7f000001a380)=""/184, 0xb8}, {&(0x7f000001a440)=""/4096, 0x1000}, {&(0x7f000001b440)=""/14, 0xe}], 0x3, &(0x7f000001b4c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f000001bb00)=[{&(0x7f000001b580)=""/245, 0xf5}, {&(0x7f000001b680)=""/112, 0x70}, {&(0x7f000001b700)}, {&(0x7f000001b740)=""/155, 0x9b}, {&(0x7f000001b800)=""/26, 0x1a}, {&(0x7f000001b840)=""/100, 0x64}, {&(0x7f000001b8c0)=""/84, 0x54}, {&(0x7f000001b940)=""/221, 0xdd}, {&(0x7f000001ba40)=""/186, 0xba}], 0x9, &(0x7f000001bbc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f000001bfc0)=[{&(0x7f000001bc00)=""/39, 0x27}, {&(0x7f000001bc40)=""/136, 0x88}, {&(0x7f000001bd00)=""/137, 0x89}, {&(0x7f000001bdc0)=""/25, 0x19}, {&(0x7f000001be00)=""/154, 0x9a}, {&(0x7f0000019880)}, {&(0x7f000001bf00)=""/154, 0x9a}], 0x7, &(0x7f000001c040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f000001c1c0), 0x6e, &(0x7f000001c700)=[{&(0x7f000001c240)=""/182, 0xb6}, {&(0x7f000001c300)=""/138, 0x8a}, {&(0x7f000001c3c0)=""/54, 0x36}, {&(0x7f000001c400)=""/178, 0xb2}, {&(0x7f000001c4c0)=""/115, 0x73}, {&(0x7f000001c540)=""/185, 0xb9}, {&(0x7f000001c600)=""/100, 0x64}, {&(0x7f000001c680)=""/110, 0x6e}], 0x8, &(0x7f000001c780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f000001c8c0)=[{&(0x7f000001c840)=""/82, 0x52}], 0x1, &(0x7f000001c900)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x10000, &(0x7f000001cb80)) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) munlockall() setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0) 3.396159382s ago: executing program 5 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001100)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="580300003a00290200000000000000000a"], 0x358}}, 0x0) 3.33865197s ago: executing program 3 (id=221): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x2f, 0x4608, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2f, 0x4608, @val=@netkit={@void, @value=r1}}, 0x1c) 2.006549528s ago: executing program 5 (id=222): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0], 0x68}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@generic="31970c5b3f34f99922b1329c3c"]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x44, r9, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 1.992234551s ago: executing program 1 (id=223): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) 1.460979748s ago: executing program 3 (id=224): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000ffe9489486e089e7c87ba6207768000000f5ffffff000000800000000000006405e7a96bbd46908476c27ca5163d111cb9ee217743f88dc5dac0334b961e48a25de7a9672dc084832555", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff00534d2a95b418f36f96354f9375006ad22eb22600cfd288e7cadff0af350000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r2) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x6, 0x6, 0x9, 0x7f}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 394.682882ms ago: executing program 1 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005c090000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0], 0x68}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@generic="31970c5b3f34f99922b1329c3c"]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$NS_GET_USERNS(r0, 0x8004b709, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 0s ago: executing program 0 (id=226): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x27ff, 0x200006, 0x2, 0xb, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): rms(): no params data found [ 54.315346][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.328327][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.348914][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 54.368110][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 54.411750][ T5813] team0: Port device team_slave_0 added [ 54.446898][ T5813] team0: Port device team_slave_1 added [ 54.460665][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.467976][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.475186][ T5818] bridge_slave_0: entered allmulticast mode [ 54.482079][ T5818] bridge_slave_0: entered promiscuous mode [ 54.515697][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.524405][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.533004][ T5818] bridge_slave_1: entered allmulticast mode [ 54.539505][ T5818] bridge_slave_1: entered promiscuous mode [ 54.564986][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.572099][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.598067][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.629318][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.637528][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.644764][ T5814] bridge_slave_0: entered allmulticast mode [ 54.651849][ T5814] bridge_slave_0: entered promiscuous mode [ 54.661278][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.668255][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.694258][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.706842][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.730239][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.737580][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.745674][ T5814] bridge_slave_1: entered allmulticast mode [ 54.752325][ T5814] bridge_slave_1: entered promiscuous mode [ 54.778337][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.813877][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.840531][ T5818] team0: Port device team_slave_0 added [ 54.848571][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.856443][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.866535][ T5819] bridge_slave_0: entered allmulticast mode [ 54.873752][ T5819] bridge_slave_0: entered promiscuous mode [ 54.882213][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.898067][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.905691][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.912869][ T5812] bridge_slave_0: entered allmulticast mode [ 54.919307][ T5812] bridge_slave_0: entered promiscuous mode [ 54.927476][ T5818] team0: Port device team_slave_1 added [ 54.934419][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.943594][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.950704][ T5819] bridge_slave_1: entered allmulticast mode [ 54.957913][ T5819] bridge_slave_1: entered promiscuous mode [ 54.975181][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.982456][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.989626][ T5812] bridge_slave_1: entered allmulticast mode [ 54.998896][ T5812] bridge_slave_1: entered promiscuous mode [ 55.026545][ T5814] team0: Port device team_slave_0 added [ 55.050768][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.060446][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.086970][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.104319][ T5814] team0: Port device team_slave_1 added [ 55.113094][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.124997][ T5813] hsr_slave_0: entered promiscuous mode [ 55.133813][ T5813] hsr_slave_1: entered promiscuous mode [ 55.145764][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.152846][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.178941][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.198085][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.219381][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.239941][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.247010][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.273425][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.293400][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.310350][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.319721][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.346052][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.359419][ T5819] team0: Port device team_slave_0 added [ 55.393697][ T5819] team0: Port device team_slave_1 added [ 55.431500][ T5818] hsr_slave_0: entered promiscuous mode [ 55.437593][ T5818] hsr_slave_1: entered promiscuous mode [ 55.443829][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.452014][ T5818] Cannot create hsr debugfs directory [ 55.459784][ T5812] team0: Port device team_slave_0 added [ 55.468067][ T5812] team0: Port device team_slave_1 added [ 55.484517][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.491574][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.517689][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.552044][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.559018][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.585836][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.629103][ T5814] hsr_slave_0: entered promiscuous mode [ 55.635551][ T5814] hsr_slave_1: entered promiscuous mode [ 55.642286][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.649869][ T5814] Cannot create hsr debugfs directory [ 55.656255][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.663429][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.689559][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.719864][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.726987][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.753190][ T54] Bluetooth: hci0: command tx timeout [ 55.753193][ T5822] Bluetooth: hci1: command tx timeout [ 55.764664][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.801055][ T54] Bluetooth: hci3: command tx timeout [ 55.801223][ T5822] Bluetooth: hci4: command tx timeout [ 55.806865][ T54] Bluetooth: hci2: command tx timeout [ 55.842373][ T5819] hsr_slave_0: entered promiscuous mode [ 55.848367][ T5819] hsr_slave_1: entered promiscuous mode [ 55.856946][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.864845][ T5819] Cannot create hsr debugfs directory [ 55.906427][ T5812] hsr_slave_0: entered promiscuous mode [ 55.912577][ T5812] hsr_slave_1: entered promiscuous mode [ 55.918437][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.926486][ T5812] Cannot create hsr debugfs directory [ 55.999987][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.022406][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.061819][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.100181][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.210631][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.220703][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.242612][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.256702][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.299694][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.309991][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.319783][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.338076][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.379291][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.394176][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.407613][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.416800][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.445180][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.488070][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.516786][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.524323][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.548815][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.562590][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.576999][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.604744][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.611838][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.629977][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.640550][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.679237][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.690632][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.715843][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.715858][ T29] audit: type=1400 audit(1737261141.310:111): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.740070][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.762174][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.769337][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.803942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.811139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.852802][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.863493][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.889847][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.896944][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.909358][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.916465][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.943335][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.950415][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.971306][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.978482][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.018331][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.114887][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.168692][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.214581][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.221699][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.286634][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.293762][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.418360][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.440583][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.512912][ T5813] veth0_vlan: entered promiscuous mode [ 57.529296][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.556117][ T5818] veth0_vlan: entered promiscuous mode [ 57.569193][ T5813] veth1_vlan: entered promiscuous mode [ 57.610339][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.631597][ T5818] veth1_vlan: entered promiscuous mode [ 57.638675][ T5813] veth0_macvtap: entered promiscuous mode [ 57.664577][ T5814] veth0_vlan: entered promiscuous mode [ 57.676969][ T5813] veth1_macvtap: entered promiscuous mode [ 57.695899][ T5819] veth0_vlan: entered promiscuous mode [ 57.712460][ T5814] veth1_vlan: entered promiscuous mode [ 57.720117][ T5819] veth1_vlan: entered promiscuous mode [ 57.730562][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.763369][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.772751][ T5818] veth0_macvtap: entered promiscuous mode [ 57.786666][ T5818] veth1_macvtap: entered promiscuous mode [ 57.801565][ T54] Bluetooth: hci0: command tx timeout [ 57.801681][ T5822] Bluetooth: hci1: command tx timeout [ 57.822106][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834001][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.842973][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.851792][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.869900][ T5819] veth0_macvtap: entered promiscuous mode [ 57.879885][ T5819] veth1_macvtap: entered promiscuous mode [ 57.885875][ T5822] Bluetooth: hci2: command tx timeout [ 57.891416][ T54] Bluetooth: hci4: command tx timeout [ 57.891449][ T54] Bluetooth: hci3: command tx timeout [ 57.905415][ T5814] veth0_macvtap: entered promiscuous mode [ 57.914122][ T5814] veth1_macvtap: entered promiscuous mode [ 57.939099][ T5812] veth0_vlan: entered promiscuous mode [ 57.947344][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.958608][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.970002][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.996662][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.008927][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.019074][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.033369][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.044888][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.056862][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.067752][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.079181][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.093123][ T5812] veth1_vlan: entered promiscuous mode [ 58.112798][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.124591][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.135960][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.146971][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.157907][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.166147][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.176907][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.186978][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.197685][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.213810][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.224326][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.236451][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.249316][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.258620][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.267540][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.276379][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308785][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320313][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.329099][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.339062][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.356150][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.367566][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.377591][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.388111][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.398012][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.409304][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.420479][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.432922][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.452446][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.474690][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.485601][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.495179][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.504310][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.521838][ T5812] veth0_macvtap: entered promiscuous mode [ 58.547858][ T5812] veth1_macvtap: entered promiscuous mode [ 58.574012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.586150][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.625547][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.636941][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.647356][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.658565][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.668664][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.679113][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.689392][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.699916][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.710716][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.726383][ T29] audit: type=1400 audit(1737261143.310:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.CCLgBR/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.753055][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.761046][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.768665][ T29] audit: type=1400 audit(1737261143.320:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.798195][ T29] audit: type=1400 audit(1737261143.320:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.CCLgBR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.828161][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.830113][ T29] audit: type=1400 audit(1737261143.320:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.861584][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.871514][ T29] audit: type=1400 audit(1737261143.330:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.CCLgBR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.871553][ T29] audit: type=1400 audit(1737261143.330:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.CCLgBR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.871586][ T29] audit: type=1400 audit(1737261143.330:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.871613][ T29] audit: type=1400 audit(1737261143.350:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.969286][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.980827][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.990775][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.998659][ T29] audit: type=1400 audit(1737261143.350:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=7170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.001348][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.001379][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.001394][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.004209][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.066830][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.111824][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.119644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.184328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.192199][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.234490][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.248230][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.250073][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.267531][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.275983][ T5896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.277877][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.293952][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.318271][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.339990][ T5896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.343900][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.540610][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.549497][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.560860][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.592633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.914522][ T5824] Bluetooth: hci1: command tx timeout [ 59.921047][ T5822] Bluetooth: hci0: command tx timeout [ 59.961566][ T5822] Bluetooth: hci3: command tx timeout [ 59.969923][ T54] Bluetooth: hci4: command tx timeout [ 59.976812][ T5824] Bluetooth: hci2: command tx timeout [ 60.078922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.155846][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.176769][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.288716][ T5909] FAULT_INJECTION: forcing a failure. [ 60.288716][ T5909] name failslab, interval 1, probability 0, space 0, times 1 [ 60.337634][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.2.3 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 60.348090][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.358192][ T5909] Call Trace: [ 60.361571][ T5909] [ 60.364509][ T5909] dump_stack_lvl+0x16c/0x1f0 [ 60.369229][ T5909] should_fail_ex+0x497/0x5b0 [ 60.373930][ T5909] ? fs_reclaim_acquire+0xae/0x150 [ 60.379064][ T5909] should_failslab+0xc2/0x120 [ 60.383769][ T5909] __kmalloc_noprof+0xcb/0x510 [ 60.388824][ T5909] ? rcu_is_watching+0x12/0xc0 [ 60.393613][ T5909] tomoyo_encode2+0x100/0x3e0 [ 60.398319][ T5909] tomoyo_encode+0x29/0x50 [ 60.402758][ T5909] tomoyo_realpath_from_path+0x19d/0x720 [ 60.408412][ T5909] ? tomoyo_path_number_perm+0x235/0x590 [ 60.414067][ T5909] tomoyo_path_number_perm+0x248/0x590 [ 60.419538][ T5909] ? tomoyo_path_number_perm+0x235/0x590 [ 60.425189][ T5909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.431218][ T5909] ? __pfx_lock_release+0x10/0x10 [ 60.436265][ T5909] ? trace_lock_acquire+0x14e/0x1f0 [ 60.441489][ T5909] ? lock_acquire+0x2f/0xb0 [ 60.446015][ T5909] ? __fget_files+0x40/0x3a0 [ 60.450630][ T5909] ? __fget_files+0x206/0x3a0 [ 60.455326][ T5909] security_file_ioctl+0x9b/0x240 [ 60.460366][ T5909] __x64_sys_ioctl+0xb7/0x200 [ 60.465071][ T5909] do_syscall_64+0xcd/0x250 [ 60.469593][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.475502][ T5909] RIP: 0033:0x7f7d7fb85d29 [ 60.479938][ T5909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.499563][ T5909] RSP: 002b:00007f7d80a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.507994][ T5909] RAX: ffffffffffffffda RBX: 00007f7d7fd76080 RCX: 00007f7d7fb85d29 [ 60.515976][ T5909] RDX: 0000000020000080 RSI: 000000000000890c RDI: 0000000000000003 [ 60.523960][ T5909] RBP: 00007f7d80a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.531938][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.539911][ T5909] R13: 0000000000000000 R14: 00007f7d7fd76080 R15: 00007ffc97d16ee8 [ 60.547910][ T5909] [ 60.614061][ T5909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.648839][ T5916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.278137][ T5914] overlayfs: failed to clone lowerpath [ 62.537638][ T54] Bluetooth: hci0: command tx timeout [ 62.543111][ T54] Bluetooth: hci1: command tx timeout [ 62.548540][ T54] Bluetooth: hci3: command tx timeout [ 62.548890][ T5822] Bluetooth: hci2: command tx timeout [ 62.553966][ T54] Bluetooth: hci4: command tx timeout [ 62.560308][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 62.560321][ T29] audit: type=1400 audit(1737261146.430:160): avc: denied { create } for pid=5930 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.283056][ T29] audit: type=1400 audit(1737261146.470:161): avc: denied { write } for pid=5930 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.349262][ T29] audit: type=1400 audit(1737261147.040:162): avc: denied { write } for pid=5932 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.419313][ T29] audit: type=1400 audit(1737261148.010:163): avc: denied { read write } for pid=5942 comm="syz.0.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.527658][ T29] audit: type=1400 audit(1737261148.010:164): avc: denied { open } for pid=5942 comm="syz.0.14" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.732099][ T29] audit: type=1400 audit(1737261148.010:165): avc: denied { ioctl } for pid=5942 comm="syz.0.14" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.861526][ T29] audit: type=1400 audit(1737261148.220:166): avc: denied { map } for pid=5945 comm="syz.1.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.904119][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.932693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.938065][ T29] audit: type=1400 audit(1737261148.220:167): avc: denied { read write } for pid=5945 comm="syz.1.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.970235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.482110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.686928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.695677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.749539][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 64.770956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.883340][ T5872] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 64.889400][ T29] audit: type=1400 audit(1737261148.250:168): avc: denied { create } for pid=5945 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.957734][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.989199][ T29] audit: type=1400 audit(1737261148.250:169): avc: denied { ioctl } for pid=5945 comm="syz.1.16" path="socket:[7835]" dev="sockfs" ino=7835 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.998785][ T5872] usb 2-1: Product: syz [ 65.016953][ T5955] dvmrp0: entered allmulticast mode [ 65.043531][ T5872] usb 2-1: Manufacturer: syz [ 65.048249][ T5872] usb 2-1: SerialNumber: syz [ 65.108157][ T5872] usb 2-1: config 0 descriptor?? [ 65.159538][ T5872] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 65.211890][ T5964] team0: entered promiscuous mode [ 65.232157][ T5964] team_slave_0: entered promiscuous mode [ 65.238140][ T5964] team_slave_1: entered promiscuous mode [ 65.260075][ T5964] FAULT_INJECTION: forcing a failure. [ 65.260075][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.280195][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.2.20 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 65.290735][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.300803][ T5964] Call Trace: [ 65.304092][ T5964] [ 65.307025][ T5964] dump_stack_lvl+0x16c/0x1f0 [ 65.311722][ T5964] should_fail_ex+0x497/0x5b0 [ 65.316423][ T5964] _copy_to_user+0x32/0xd0 [ 65.320862][ T5964] simple_read_from_buffer+0xd0/0x160 [ 65.326251][ T5964] proc_fail_nth_read+0x198/0x270 [ 65.331283][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.336847][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.342397][ T5964] vfs_read+0x1df/0xbe0 [ 65.346547][ T5964] ? __fget_files+0x1fc/0x3a0 [ 65.351212][ T5964] ? __pfx___mutex_lock+0x10/0x10 [ 65.356240][ T5964] ? __pfx_vfs_read+0x10/0x10 [ 65.360929][ T5964] ? __fget_files+0x206/0x3a0 [ 65.365601][ T5964] ksys_read+0x12b/0x250 [ 65.369832][ T5964] ? __pfx_ksys_read+0x10/0x10 [ 65.374593][ T5964] do_syscall_64+0xcd/0x250 [ 65.379091][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.384978][ T5964] RIP: 0033:0x7f7d7fb8473c [ 65.389382][ T5964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.408984][ T5964] RSP: 002b:00007f7d80a80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.417391][ T5964] RAX: ffffffffffffffda RBX: 00007f7d7fd75fa0 RCX: 00007f7d7fb8473c [ 65.425354][ T5964] RDX: 000000000000000f RSI: 00007f7d80a800a0 RDI: 0000000000000004 [ 65.433317][ T5964] RBP: 00007f7d80a80090 R08: 0000000000000000 R09: 0000000000000000 [ 65.441285][ T5964] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 65.449245][ T5964] R13: 0000000000000000 R14: 00007f7d7fd75fa0 R15: 00007ffc97d16ee8 [ 65.457212][ T5964] [ 65.555611][ T5964] team0: left promiscuous mode [ 65.584700][ T5964] team_slave_0: left promiscuous mode [ 65.609861][ T5964] team_slave_1: left promiscuous mode [ 65.657651][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.675050][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.696511][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.706841][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.715198][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.724665][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.788640][ T3431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.027702][ T3431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.691044][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.768472][ T3431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.800864][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.845650][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 66.855675][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.867321][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.881119][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.894331][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.904795][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.919257][ T3431] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.932818][ T9] usb 1-1: config 0 descriptor?? [ 66.946420][ T5986] FAULT_INJECTION: forcing a failure. [ 66.946420][ T5986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.965399][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.2.26 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 66.975955][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.986027][ T5986] Call Trace: [ 66.989305][ T5986] [ 66.992230][ T5986] dump_stack_lvl+0x16c/0x1f0 [ 66.996892][ T5986] should_fail_ex+0x497/0x5b0 [ 67.001659][ T5986] _copy_from_user+0x2e/0xd0 [ 67.006694][ T5986] kstrtouint_from_user+0xd7/0x1c0 [ 67.011832][ T5986] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 67.017580][ T5986] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.023238][ T5986] proc_fail_nth_write+0x84/0x250 [ 67.028284][ T5986] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.033936][ T5986] ? ksys_write+0x12b/0x250 [ 67.038472][ T5986] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.044127][ T5986] vfs_write+0x24c/0x1150 [ 67.048479][ T5986] ? __fget_files+0x1fc/0x3a0 [ 67.053169][ T5986] ? __pfx___mutex_lock+0x10/0x10 [ 67.058211][ T5986] ? __pfx_vfs_write+0x10/0x10 [ 67.062995][ T5986] ? __fget_files+0x206/0x3a0 [ 67.067690][ T5986] ksys_write+0x12b/0x250 [ 67.072045][ T5986] ? __pfx_ksys_write+0x10/0x10 [ 67.076883][ T5986] do_syscall_64+0xcd/0x250 [ 67.081378][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.087259][ T5986] RIP: 0033:0x7f7d7fb847df [ 67.091656][ T5986] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.111261][ T5986] RSP: 002b:00007f7d80a3e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.119685][ T5986] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d7fb847df [ 67.127667][ T5986] RDX: 0000000000000001 RSI: 00007f7d80a3e0a0 RDI: 0000000000000004 [ 67.135634][ T5986] RBP: 00007f7d80a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.143603][ T5986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 67.151582][ T5986] R13: 0000000000000001 R14: 00007f7d7fd76160 R15: 00007ffc97d16ee8 [ 67.159565][ T5986] [ 67.219919][ T5872] gspca_stk1135: reg_w 0xd err -71 [ 67.226167][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.240968][ T5872] gspca_stk1135: Sensor write failed [ 67.253499][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.270127][ T5872] gspca_stk1135: Sensor write failed [ 67.308783][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 67.311036][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.345328][ T5872] gspca_stk1135: Sensor read failed [ 67.355061][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.365388][ T5872] gspca_stk1135: Sensor read failed [ 67.370684][ T5872] gspca_stk1135: Detected sensor type unknown (0x0) [ 67.377813][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.384205][ T5872] gspca_stk1135: Sensor read failed [ 67.391117][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.397489][ T5872] gspca_stk1135: Sensor read failed [ 67.413441][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.419791][ T5872] gspca_stk1135: Sensor write failed [ 67.425349][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 67.444897][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 67.466245][ T5872] gspca_stk1135: Sensor write failed [ 67.563192][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 67.563208][ T29] audit: type=1400 audit(1737261152.160:187): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2728 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.571132][ T5872] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 67.591732][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.683217][ T29] audit: type=1400 audit(1737261152.160:188): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2728 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.735467][ T29] audit: type=1400 audit(1737261152.160:189): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2728 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.760346][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.870684][ T54] Bluetooth: hci1: command tx timeout [ 67.873115][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 67.893945][ T5872] usb 2-1: USB disconnect, device number 2 [ 67.963750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.981032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.057370][ T29] audit: type=1400 audit(1737261152.230:190): avc: denied { map_read map_write } for pid=5990 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.079720][ T29] audit: type=1400 audit(1737261152.670:191): avc: denied { read write } for pid=5997 comm="syz.2.28" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.112662][ T29] audit: type=1400 audit(1737261152.670:192): avc: denied { open } for pid=5997 comm="syz.2.28" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.141627][ T29] audit: type=1400 audit(1737261152.700:193): avc: denied { ioctl } for pid=5997 comm="syz.2.28" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.216690][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.258550][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.291370][ T29] audit: type=1400 audit(1737261152.710:194): avc: denied { write } for pid=5997 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.338465][ T5967] bridge_slave_0: entered allmulticast mode [ 68.339458][ T5967] bridge_slave_0: entered promiscuous mode [ 68.368798][ T6008] binder: 6007:6008 ioctl c00c6211 9999999999999999 returned -14 [ 68.411069][ T29] audit: type=1400 audit(1737261152.740:195): avc: denied { connect } for pid=5997 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.456443][ T3431] bridge_slave_1: left allmulticast mode [ 68.456527][ T3431] bridge_slave_1: left promiscuous mode [ 68.456761][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.503984][ T29] audit: type=1400 audit(1737261152.920:196): avc: denied { create } for pid=5997 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.601751][ T3431] bridge_slave_0: left allmulticast mode [ 68.601779][ T3431] bridge_slave_0: left promiscuous mode [ 68.601904][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.711371][ T5872] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 68.787326][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.362823][ T4853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.381428][ T5872] usb 1-1: device descriptor read/64, error -71 [ 69.481940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.556391][ T4853] usb 4-1: Using ep0 maxpacket: 16 [ 69.576861][ T4853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 69.610213][ T4853] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 69.621773][ T4853] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 69.634008][ T4853] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 69.648237][ T4853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.657427][ T4853] usb 4-1: Product: syz [ 69.661180][ T5872] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 69.675342][ T4853] usb 4-1: Manufacturer: syz [ 69.679983][ T4853] usb 4-1: SerialNumber: syz [ 69.687382][ T4853] usb 4-1: config 0 descriptor?? [ 69.694646][ T6019] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.703715][ T6019] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.715371][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 69.722327][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 69.729206][ T4853] port100 4-1:0.0: NFC: Could not get supported command types [ 69.823620][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.833393][ T5872] usb 1-1: device firmware changed [ 69.840464][ T9] usb 1-1: USB disconnect, device number 2 [ 69.847084][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.864708][ T3431] bond0 (unregistering): Released all slaves [ 69.878600][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.886473][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 69.893985][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.911370][ T5967] bridge_slave_1: entered allmulticast mode [ 69.928204][ T5967] bridge_slave_1: entered promiscuous mode [ 69.951070][ T6020] warning: `syz.1.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.041091][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.465722][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.661055][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 71.679974][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 71.710502][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 71.720636][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 71.743969][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 71.754265][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.784060][ T9] usb 1-1: Product: syz [ 71.800981][ T9] usb 1-1: Manufacturer: syz [ 71.805610][ T9] usb 1-1: SerialNumber: syz [ 71.839212][ T9] usb 1-1: config 0 descriptor?? [ 71.870687][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.887330][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.901135][ T6017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.908954][ T6017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.961084][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 71.996977][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 72.003393][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 72.014328][ T9] port100 1-1:0.0: NFC: Could not get supported command types [ 72.673701][ T8] usb 1-1: USB disconnect, device number 3 [ 72.820538][ T4853] usb 4-1: USB disconnect, device number 2 [ 72.983856][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 72.983872][ T29] audit: type=1400 audit(1737261157.570:213): avc: denied { write } for pid=6033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.037960][ T5967] team0: Port device team_slave_0 added [ 73.051708][ T29] audit: type=1400 audit(1737261157.570:214): avc: denied { add_name } for pid=6033 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.052669][ T5967] team0: Port device team_slave_1 added [ 73.074030][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.091836][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.120357][ T29] audit: type=1400 audit(1737261157.570:215): avc: denied { create } for pid=6033 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.145238][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 73.207678][ T29] audit: type=1400 audit(1737261157.580:216): avc: denied { write } for pid=6033 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1974 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.251196][ T3431] hsr_slave_0: left promiscuous mode [ 73.264743][ T3431] hsr_slave_1: left promiscuous mode [ 73.271179][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 73.276853][ T29] audit: type=1400 audit(1737261157.580:217): avc: denied { append } for pid=6033 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1974 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.280731][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 73.311075][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.320416][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.336561][ T29] audit: type=1400 audit(1737261157.620:218): avc: denied { mount } for pid=6054 comm="syz.3.40" name="/" dev="overlay" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.337525][ T6068] input: syz0 as /devices/virtual/input/input7 [ 73.359494][ T29] audit: type=1400 audit(1737261157.630:219): avc: denied { setopt } for pid=6057 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.387622][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.397531][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.405291][ T29] audit: type=1400 audit(1737261157.630:220): avc: denied { create } for pid=6054 comm="syz.3.40" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.414357][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 73.425671][ T4853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.445687][ T29] audit: type=1400 audit(1737261157.630:221): avc: denied { link } for pid=6054 comm="syz.3.40" name="#5" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.470073][ T29] audit: type=1400 audit(1737261157.630:222): avc: denied { rename } for pid=6054 comm="syz.3.40" name="#6" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.506821][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 73.516715][ T3431] veth1_macvtap: left promiscuous mode [ 73.516960][ T3431] veth0_macvtap: left promiscuous mode [ 73.528763][ T3431] veth1_vlan: left promiscuous mode [ 73.529870][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 73.534351][ T3431] veth0_vlan: left promiscuous mode [ 73.544731][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.557621][ T8] usb 1-1: Product: syz [ 73.562156][ T8] usb 1-1: Manufacturer: syz [ 73.566774][ T8] usb 1-1: SerialNumber: syz [ 73.581850][ T8] usb 1-1: config 0 descriptor?? [ 73.587405][ T6050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.599108][ T6050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.612396][ T4853] usb 3-1: device descriptor read/64, error -71 [ 73.614271][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 73.625306][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 73.632428][ T8] port100 1-1:0.0: NFC: Could not get supported command types [ 73.867579][ T4853] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.978950][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 74.082451][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 74.138150][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 74.331764][ T4853] usb 3-1: device descriptor read/64, error -71 [ 75.089359][ T4853] usb usb3-port1: attempt power cycle [ 75.434847][ T4853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.512032][ T4853] usb 3-1: device descriptor read/8, error -71 [ 75.664247][ T6080] openvswitch: netlink: Message has 1275 unknown bytes. [ 75.676879][ T6080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.824175][ T4853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.862477][ T4853] usb 3-1: device descriptor read/8, error -71 [ 75.967057][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.976852][ T4853] usb usb3-port1: unable to enumerate USB device [ 75.991511][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.065932][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.115265][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.132783][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 76.140257][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.249367][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.370283][ T5967] hsr_slave_0: entered promiscuous mode [ 76.381261][ T5967] hsr_slave_1: entered promiscuous mode [ 76.692201][ T6090] netlink: 'syz.2.49': attribute type 3 has an invalid length. [ 76.893869][ T46] cfg80211: failed to load regulatory.db [ 76.911078][ T6090] netlink: 666 bytes leftover after parsing attributes in process `syz.2.49'. [ 78.030256][ T4853] usb 1-1: USB disconnect, device number 4 [ 78.245568][ T6122] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 78.303225][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 78.420471][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 78.420488][ T29] audit: type=1400 audit(1737261163.010:249): avc: denied { create } for pid=6126 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.429829][ T6127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 78.461117][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.501302][ T6132] netlink: 204 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.532259][ T5967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.591306][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.620968][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 78.643188][ T5967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.653542][ T6137] FAULT_INJECTION: forcing a failure. [ 78.653542][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.685218][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 78.705456][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 78.708306][ T5967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.892281][ T29] audit: type=1400 audit(1737261163.400:250): avc: denied { read write } for pid=6119 comm="syz.2.56" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.931315][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.3.58 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 78.941847][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.951893][ T6137] Call Trace: [ 78.955158][ T6137] [ 78.958076][ T6137] dump_stack_lvl+0x16c/0x1f0 [ 78.962755][ T6137] should_fail_ex+0x497/0x5b0 [ 78.967431][ T6137] _copy_to_iter+0x465/0x1560 [ 78.972101][ T6137] ? __pfx__copy_to_iter+0x10/0x10 [ 78.977200][ T6137] ? __virt_addr_valid+0x1a4/0x590 [ 78.982309][ T6137] ? __virt_addr_valid+0x5e/0x590 [ 78.987323][ T6137] ? __phys_addr_symbol+0x30/0x80 [ 78.992338][ T6137] ? __check_object_size+0x488/0x710 [ 78.997618][ T6137] seq_read_iter+0xd00/0x12b0 [ 79.002298][ T6137] seq_read+0x39f/0x4e0 [ 79.006448][ T6137] ? __pfx_seq_read+0x10/0x10 [ 79.011120][ T6137] ? import_ubuf+0x1b6/0x220 [ 79.015711][ T6137] ? avc_policy_seqno+0x9/0x20 [ 79.020476][ T6137] ? __pfx_seq_read+0x10/0x10 [ 79.025156][ T6137] proc_reg_read+0x23d/0x330 [ 79.029758][ T6137] ? __pfx_proc_reg_read+0x10/0x10 [ 79.034867][ T6137] vfs_readv+0x6bf/0x890 [ 79.039099][ T6137] ? __pfx___lock_acquire+0x10/0x10 [ 79.044285][ T6137] ? find_held_lock+0x2d/0x110 [ 79.049044][ T6137] ? __pfx_vfs_readv+0x10/0x10 [ 79.053800][ T6137] ? __fget_files+0x1fc/0x3a0 [ 79.058466][ T6137] ? __pfx_lock_release+0x10/0x10 [ 79.063484][ T6137] ? __fget_files+0x206/0x3a0 [ 79.068158][ T6137] ? do_preadv+0x1b1/0x270 [ 79.072561][ T6137] do_preadv+0x1b1/0x270 [ 79.076796][ T6137] ? __pfx_do_preadv+0x10/0x10 [ 79.081569][ T6137] do_syscall_64+0xcd/0x250 [ 79.086067][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.091953][ T6137] RIP: 0033:0x7f0f5a785d29 [ 79.096356][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.115950][ T6137] RSP: 002b:00007f0f5b5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 79.124349][ T6137] RAX: ffffffffffffffda RBX: 00007f0f5a975fa0 RCX: 00007f0f5a785d29 [ 79.132310][ T6137] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000008 [ 79.140268][ T6137] RBP: 00007f0f5b5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.148224][ T6137] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 79.156180][ T6137] R13: 0000000000000000 R14: 00007f0f5a975fa0 R15: 00007ffd032bb4e8 [ 79.164150][ T6137] [ 79.167216][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.221060][ T29] audit: type=1400 audit(1737261163.410:251): avc: denied { open } for pid=6119 comm="syz.2.56" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 79.226862][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.341307][ T5967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.553627][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 79.585726][ T5872] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 79.597823][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.616254][ T5872] usb 2-1: Product: syz [ 79.631405][ T5872] usb 2-1: Manufacturer: syz [ 79.646533][ T5872] usb 2-1: SerialNumber: syz [ 79.773972][ T5872] usb 2-1: config 0 descriptor?? [ 79.808933][ T29] audit: type=1400 audit(1737261164.400:252): avc: denied { bind } for pid=6146 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.857945][ T6118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.925500][ T5872] port100 2-1:0.0: NFC: Could not get supported command types [ 79.985558][ T29] audit: type=1400 audit(1737261164.580:253): avc: denied { listen } for pid=6146 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.002846][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.007156][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 80.230175][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.256750][ T5967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.267224][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.310174][ T6163] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.318931][ T6163] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.330009][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.337127][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.350978][ T29] audit: type=1400 audit(1737261164.900:254): avc: denied { create } for pid=6162 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 80.386307][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.393453][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.598305][ T8] usb 2-1: USB disconnect, device number 3 [ 80.689037][ T29] audit: type=1400 audit(1737261165.280:255): avc: denied { setopt } for pid=6175 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.739479][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.860685][ T6181] FAULT_INJECTION: forcing a failure. [ 80.860685][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 80.896913][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.3.65 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 80.907450][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.917526][ T6181] Call Trace: [ 80.920820][ T6181] [ 80.923781][ T6181] dump_stack_lvl+0x16c/0x1f0 [ 80.928483][ T6181] should_fail_ex+0x497/0x5b0 [ 80.933180][ T6181] ? fs_reclaim_acquire+0xae/0x150 [ 80.938314][ T6181] should_failslab+0xc2/0x120 [ 80.943013][ T6181] __kmalloc_noprof+0xcb/0x510 [ 80.947794][ T6181] ? d_absolute_path+0x137/0x1b0 [ 80.952750][ T6181] ? rcu_is_watching+0x12/0xc0 [ 80.956714][ T29] audit: type=1400 audit(1737261165.490:256): avc: denied { audit_write } for pid=6183 comm="syz.0.66" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.957522][ T6181] tomoyo_encode2+0x100/0x3e0 [ 80.983026][ T6181] tomoyo_encode+0x29/0x50 [ 80.987462][ T6181] tomoyo_realpath_from_path+0x19d/0x720 [ 80.993117][ T6181] tomoyo_path_number_perm+0x248/0x590 [ 80.998585][ T6181] ? tomoyo_path_number_perm+0x235/0x590 [ 81.004218][ T6181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.010214][ T6181] ? __pfx_lock_release+0x10/0x10 [ 81.015232][ T6181] ? trace_lock_acquire+0x14e/0x1f0 [ 81.020430][ T6181] ? lock_acquire+0x2f/0xb0 [ 81.024926][ T6181] ? __fget_files+0x40/0x3a0 [ 81.029505][ T6181] ? __fget_files+0x206/0x3a0 [ 81.034173][ T6181] security_file_ioctl+0x9b/0x240 [ 81.039190][ T6181] __x64_sys_ioctl+0xb7/0x200 [ 81.043901][ T6181] do_syscall_64+0xcd/0x250 [ 81.048400][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.054287][ T6181] RIP: 0033:0x7f0f5a785d29 [ 81.058688][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.078288][ T6181] RSP: 002b:00007f0f5b5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.086693][ T6181] RAX: ffffffffffffffda RBX: 00007f0f5a975fa0 RCX: 00007f0f5a785d29 [ 81.094654][ T6181] RDX: 0000000020000000 RSI: 0000000040305652 RDI: 0000000000000003 [ 81.102610][ T6181] RBP: 00007f0f5b5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 81.110575][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.118539][ T6181] R13: 0000000000000000 R14: 00007f0f5a975fa0 R15: 00007ffd032bb4e8 [ 81.126509][ T6181] [ 81.129586][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.146248][ T29] audit: type=1400 audit(1737261165.740:257): avc: denied { create } for pid=6186 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.149484][ T6188] tipc: Trying to set illegal importance in message [ 81.189929][ T6181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.271186][ T29] audit: type=1400 audit(1737261165.740:258): avc: denied { setopt } for pid=6186 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.607211][ T5967] veth0_vlan: entered promiscuous mode [ 81.660530][ T5967] veth1_vlan: entered promiscuous mode [ 81.681244][ T5967] veth0_macvtap: entered promiscuous mode [ 81.690243][ T5967] veth1_macvtap: entered promiscuous mode [ 81.704867][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.715385][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.725534][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.736111][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.746211][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.756754][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.766653][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.777170][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.789918][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.799337][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.810051][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.820199][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.831264][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.841162][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.851659][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.861719][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.873112][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.883951][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.914046][ T6208] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(31166876775694) <= P.seqno(0) <= S.SWH(31166876775768)) and (P.ackno exists or LAWL(107055751032901) <= P.ackno(107055751032902) <= S.AWH(107055751032902), sending SYNC... [ 81.936333][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.949199][ T5967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.958669][ T5967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.972272][ T5967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.005132][ T5967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.160982][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.363891][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.383705][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 82.401232][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.463193][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 82.474597][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 82.484592][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.494417][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.516948][ T5872] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 82.530393][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.540979][ T5872] usb 2-1: Product: syz [ 82.547194][ T5872] usb 2-1: Manufacturer: syz [ 82.570531][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.583012][ T5872] usb 2-1: SerialNumber: syz [ 82.596537][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.611923][ T5872] usb 2-1: config 0 descriptor?? [ 82.628194][ T6207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.638119][ T5872] port100 2-1:0.0: NFC: Could not get supported command types [ 82.788962][ T6242] FAULT_INJECTION: forcing a failure. [ 82.788962][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.807972][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.5.19 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 82.818501][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.828560][ T6242] Call Trace: [ 82.831834][ T6242] [ 82.834756][ T6242] dump_stack_lvl+0x16c/0x1f0 [ 82.839437][ T6242] should_fail_ex+0x497/0x5b0 [ 82.844113][ T6242] _copy_from_user+0x2e/0xd0 [ 82.848692][ T6242] copy_from_sockptr_offset.constprop.0+0x123/0x140 [ 82.855277][ T6242] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 82.862389][ T6242] ? tcp_setsockopt+0xae/0x100 [ 82.867159][ T6242] smc_setsockopt+0x29a/0xa00 [ 82.871833][ T6242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.877721][ T6242] ? __pfx_smc_setsockopt+0x10/0x10 [ 82.882918][ T6242] ? selinux_socket_setsockopt+0x6a/0x80 [ 82.888555][ T6242] ? __pfx_smc_setsockopt+0x10/0x10 [ 82.893750][ T6242] do_sock_setsockopt+0x222/0x480 [ 82.898768][ T6242] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 82.904306][ T6242] ? lock_acquire+0x2f/0xb0 [ 82.908806][ T6242] __sys_setsockopt+0x1a0/0x230 [ 82.913651][ T6242] __x64_sys_setsockopt+0xbd/0x160 [ 82.918755][ T6242] ? do_syscall_64+0x91/0x250 [ 82.923445][ T6242] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.928652][ T6242] do_syscall_64+0xcd/0x250 [ 82.933155][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.939051][ T6242] RIP: 0033:0x7fd841b85d29 [ 82.943459][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.963070][ T6242] RSP: 002b:00007fd8429be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.971477][ T6242] RAX: ffffffffffffffda RBX: 00007fd841d75fa0 RCX: 00007fd841b85d29 [ 82.979463][ T6242] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000003 [ 82.987428][ T6242] RBP: 00007fd8429be090 R08: 000000000000000c R09: 0000000000000000 [ 82.995389][ T6242] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 83.003351][ T6242] R13: 0000000000000000 R14: 00007fd841d75fa0 R15: 00007ffd2eda8548 [ 83.011332][ T6242] [ 83.014472][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.035577][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.262110][ T5866] usb 3-1: device descriptor read/64, error -71 [ 83.275745][ T5872] usb 2-1: USB disconnect, device number 4 [ 83.443783][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 83.443800][ T29] audit: type=1400 audit(1737261168.030:274): avc: denied { append } for pid=6250 comm="syz.0.80" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.531436][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.661750][ T5866] usb 3-1: device descriptor read/64, error -71 [ 83.668226][ T29] audit: type=1400 audit(1737261168.260:275): avc: denied { connect } for pid=6258 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.687413][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.722435][ T1199] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.811409][ T5866] usb usb3-port1: attempt power cycle [ 83.910987][ T6002] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.930988][ T1199] usb 6-1: Using ep0 maxpacket: 16 [ 83.938844][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 83.961125][ T1199] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 83.990996][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.000761][ T1199] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 84.028324][ T1199] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 84.038001][ T1199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.050273][ T1199] usb 6-1: Product: syz [ 84.057994][ T1199] usb 6-1: Manufacturer: syz [ 84.062833][ T1199] usb 6-1: SerialNumber: syz [ 84.069032][ T6002] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 84.080764][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.089260][ T1199] usb 6-1: config 0 descriptor?? [ 84.096589][ T6002] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 84.106062][ T6252] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.113411][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.121220][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.131805][ T1199] port100 6-1:0.0: NFC: Could not get supported command types [ 84.144572][ T6002] usb 1-1: config 0 descriptor?? [ 84.155688][ T5866] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 84.192443][ T5866] usb 3-1: device descriptor read/8, error -71 [ 84.301236][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 84.319232][ T8] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 84.329040][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.349305][ T8] usb 4-1: Product: syz [ 84.359427][ T8] usb 4-1: Manufacturer: syz [ 84.365855][ T8] usb 4-1: SerialNumber: syz [ 84.373470][ T6002] usb 1-1: string descriptor 0 read error: -71 [ 84.380258][ T6002] usb 1-1: ucan: probing device on interface #0 [ 84.400602][ T6002] usb 1-1: ucan: invalid endpoint configuration [ 84.411713][ T8] usb 4-1: config 0 descriptor?? [ 84.438841][ T8] as10x_usb: device has been detected [ 84.460687][ T6002] usb 1-1: ucan: probe failed; try to update the device firmware [ 84.472985][ T8] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 84.512595][ T6002] usb 1-1: USB disconnect, device number 5 [ 84.573702][ T1199] usb 6-1: USB disconnect, device number 2 [ 84.585994][ T8] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 84.591179][ T5866] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 84.631575][ T5866] usb 3-1: device descriptor read/8, error -71 [ 84.667746][ T8] as10x_usb: error during firmware upload part1 [ 84.674428][ T8] Registered device Abilis Systems DVB-Titan [ 84.751556][ T5866] usb usb3-port1: unable to enumerate USB device [ 85.178228][ T6306] mmap: syz.1.85 (6306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.557475][ T29] audit: type=1400 audit(1737261170.150:276): avc: denied { listen } for pid=6326 comm="syz.5.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.391036][ T29] audit: type=1400 audit(1737261170.180:277): avc: denied { connect } for pid=6326 comm="syz.5.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.861062][ T6002] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.868944][ T1199] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.879138][ T5866] usb 4-1: USB disconnect, device number 3 [ 87.020402][ T5866] Unregistered device Abilis Systems DVB-Titan [ 87.027890][ T5866] as10x_usb: device has been disconnected [ 87.031233][ T6002] usb 3-1: Using ep0 maxpacket: 8 [ 87.045023][ T1199] usb 6-1: Using ep0 maxpacket: 8 [ 87.062527][ T1199] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 87.072118][ T1199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.084783][ T6002] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.095051][ T6002] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 87.107100][ T6002] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 87.117207][ T1199] usb 6-1: config 0 descriptor?? [ 87.300805][ T6002] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 87.346843][ T29] audit: type=1400 audit(1737261171.880:278): avc: denied { mount } for pid=6348 comm="syz.3.95" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.650682][ T6002] usb 3-1: config 4 has no interface number 0 [ 87.723557][ T29] audit: type=1400 audit(1737261171.880:279): avc: denied { mounton } for pid=6348 comm="syz.3.95" path="/22/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 87.723598][ T29] audit: type=1400 audit(1737261172.150:280): avc: denied { getopt } for pid=6326 comm="syz.5.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.749729][ T6002] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 87.749763][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.749808][ T6002] usb 3-1: Product: syz [ 87.749827][ T6002] usb 3-1: Manufacturer: syz [ 87.749845][ T6002] usb 3-1: SerialNumber: syz [ 87.956191][ T29] audit: type=1400 audit(1737261172.550:281): avc: denied { bind } for pid=6334 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.985003][ T6002] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 88.001116][ T6002] usb 3-1: No streaming interface found for terminal 6. [ 88.025661][ T6002] usb 3-1: USB disconnect, device number 10 [ 88.090733][ T29] audit: type=1400 audit(1737261172.680:282): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.228235][ T29] audit: type=1400 audit(1737261172.820:283): avc: denied { create } for pid=6358 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.506702][ T6361] loop6: detected capacity change from 0 to 524287999 [ 88.558416][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.567887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.599963][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 88.600004][ T29] audit: type=1400 audit(1737261173.150:287): avc: denied { write } for pid=6358 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.636721][ T6366] loop6: detected capacity change from 524287999 to 524287952 [ 88.822369][ T6361] loop6: unable to read partition table [ 88.828446][ T6361] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 88.876578][ T6364] Zero length message leads to an empty skb [ 88.904018][ T6361] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 89.035144][ T29] audit: type=1400 audit(1737261173.630:288): avc: denied { listen } for pid=6360 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.091350][ T1199] usb 6-1: string descriptor 0 read error: -71 [ 89.182960][ T1199] usb 6-1: USB disconnect, device number 3 [ 89.585350][ T6379] FAULT_INJECTION: forcing a failure. [ 89.585350][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 89.931315][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.3.102 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 89.941942][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.951986][ T6379] Call Trace: [ 89.955246][ T6379] [ 89.958160][ T6379] dump_stack_lvl+0x16c/0x1f0 [ 89.962827][ T6379] should_fail_ex+0x497/0x5b0 [ 89.967490][ T6379] ? fs_reclaim_acquire+0xae/0x150 [ 89.972587][ T6379] should_failslab+0xc2/0x120 [ 89.977251][ T6379] __kmalloc_noprof+0xcb/0x510 [ 89.982013][ T6379] ? rcu_is_watching+0x12/0xc0 [ 89.986808][ T6379] tomoyo_encode2+0x100/0x3e0 [ 89.991491][ T6379] tomoyo_encode+0x29/0x50 [ 89.995927][ T6379] tomoyo_realpath_from_path+0x19d/0x720 [ 90.001588][ T6379] ? tomoyo_path_number_perm+0x235/0x590 [ 90.007241][ T6379] tomoyo_path_number_perm+0x248/0x590 [ 90.012713][ T6379] ? tomoyo_path_number_perm+0x235/0x590 [ 90.018354][ T6379] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.024346][ T6379] ? __pfx_lock_release+0x10/0x10 [ 90.029363][ T6379] ? trace_lock_acquire+0x14e/0x1f0 [ 90.034561][ T6379] ? lock_acquire+0x2f/0xb0 [ 90.039060][ T6379] ? __fget_files+0x40/0x3a0 [ 90.043651][ T6379] ? __fget_files+0x206/0x3a0 [ 90.048325][ T6379] security_file_ioctl+0x9b/0x240 [ 90.053347][ T6379] __x64_sys_ioctl+0xb7/0x200 [ 90.058019][ T6379] do_syscall_64+0xcd/0x250 [ 90.062521][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.068418][ T6379] RIP: 0033:0x7f0f5a785d29 [ 90.072822][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.092422][ T6379] RSP: 002b:00007f0f5b5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.100828][ T6379] RAX: ffffffffffffffda RBX: 00007f0f5a975fa0 RCX: 00007f0f5a785d29 [ 90.108789][ T6379] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 90.116746][ T6379] RBP: 00007f0f5b5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 90.124967][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.132925][ T6379] R13: 0000000000000000 R14: 00007f0f5a975fa0 R15: 00007ffd032bb4e8 [ 90.140902][ T6379] [ 90.251159][ T6379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.644056][ T6376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.787224][ T29] audit: type=1400 audit(1737261175.380:289): avc: denied { read } for pid=6360 comm="syz.0.98" dev="sockfs" ino=10747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.936614][ T6395] fuse: Bad value for 'group_id' [ 90.941659][ T6395] fuse: Bad value for 'group_id' [ 91.555634][ T6002] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.606448][ T29] audit: type=1400 audit(1737261175.530:290): avc: denied { read write } for pid=6394 comm="syz.2.105" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.630472][ T29] audit: type=1400 audit(1737261175.530:291): avc: denied { open } for pid=6394 comm="syz.2.105" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.654080][ T29] audit: type=1400 audit(1737261176.200:292): avc: denied { ioctl } for pid=6396 comm="syz.1.106" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.760943][ T29] audit: type=1400 audit(1737261176.330:293): avc: denied { append } for pid=6401 comm="syz.5.109" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.811289][ T6407] netlink: 'syz.5.109': attribute type 10 has an invalid length. [ 91.947304][ T6002] usb 2-1: Using ep0 maxpacket: 32 [ 91.965188][ T6002] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 91.974898][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.987374][ T29] audit: type=1400 audit(1737261176.580:294): avc: denied { bind } for pid=6404 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.990842][ T6002] usb 2-1: config 0 descriptor?? [ 92.025217][ T6407] syz_tun: entered promiscuous mode [ 92.053893][ T6407] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.328030][ T6002] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 92.891905][ T6002] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 92.891934][ T6002] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 92.957031][ T29] audit: type=1400 audit(1737261177.550:295): avc: denied { write } for pid=6414 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.121375][ T29] audit: type=1400 audit(1737261177.630:296): avc: denied { write } for pid=6414 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.206072][ T5866] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.300671][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 94.300687][ T29] audit: type=1400 audit(1737261178.890:300): avc: denied { connect } for pid=6434 comm="syz.1.117" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.329568][ T29] audit: type=1400 audit(1737261178.900:301): avc: denied { connect } for pid=6434 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.348995][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.357639][ T29] audit: type=1400 audit(1737261178.900:302): avc: denied { name_connect } for pid=6434 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 94.397422][ T29] audit: type=1400 audit(1737261178.900:303): avc: denied { listen } for pid=6434 comm="syz.1.117" lport=39784 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.481293][ T29] audit: type=1400 audit(1737261178.950:304): avc: denied { accept } for pid=6434 comm="syz.1.117" lport=39784 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.510970][ T5866] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 94.528314][ T5866] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 94.559221][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.594609][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.603011][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.616887][ T6447] FAULT_INJECTION: forcing a failure. [ 94.616887][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 94.741229][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.5.119 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 94.751858][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.761925][ T6447] Call Trace: [ 94.765216][ T6447] [ 94.768153][ T6447] dump_stack_lvl+0x16c/0x1f0 [ 94.772848][ T6447] should_fail_ex+0x497/0x5b0 [ 94.777539][ T6447] ? fs_reclaim_acquire+0xae/0x150 [ 94.782687][ T6447] should_failslab+0xc2/0x120 [ 94.787384][ T6447] __kmalloc_noprof+0xcb/0x510 [ 94.792166][ T6447] ? rcu_is_watching+0x12/0xc0 [ 94.796950][ T6447] tomoyo_encode2+0x100/0x3e0 [ 94.801653][ T6447] tomoyo_encode+0x29/0x50 [ 94.806077][ T6447] tomoyo_realpath_from_path+0x19d/0x720 [ 94.811706][ T6447] ? tomoyo_path_number_perm+0x235/0x590 [ 94.817328][ T6447] tomoyo_path_number_perm+0x248/0x590 [ 94.821153][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 94.822767][ T6447] ? tomoyo_path_number_perm+0x235/0x590 [ 94.822797][ T6447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.835772][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 94.839469][ T6447] ? __pfx_lock_release+0x10/0x10 [ 94.839499][ T6447] ? trace_lock_acquire+0x14e/0x1f0 [ 94.839530][ T6447] ? lock_acquire+0x2f/0xb0 [ 94.865229][ T6447] ? __fget_files+0x40/0x3a0 [ 94.868888][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 94.869821][ T6447] ? __fget_files+0x206/0x3a0 [ 94.869852][ T6447] security_file_ioctl+0x9b/0x240 [ 94.885071][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.889358][ T6447] __x64_sys_ioctl+0xb7/0x200 [ 94.889394][ T6447] do_syscall_64+0xcd/0x250 [ 94.905411][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.908226][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.908259][ T6447] RIP: 0033:0x7fd841b85d29 [ 94.920752][ T46] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 94.923810][ T6447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.923832][ T6447] RSP: 002b:00007fd8429be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.923850][ T6447] RAX: ffffffffffffffda RBX: 00007fd841d75fa0 RCX: 00007fd841b85d29 [ 94.923862][ T6447] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.923874][ T6447] RBP: 00007fd8429be090 R08: 0000000000000000 R09: 0000000000000000 [ 94.923886][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.923897][ T6447] R13: 0000000000000000 R14: 00007fd841d75fa0 R15: 00007ffd2eda8548 [ 94.923922][ T6447] [ 95.038751][ T6447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.745758][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.754146][ T46] usb 4-1: Product: syz [ 95.758324][ T46] usb 4-1: Manufacturer: syz [ 95.763223][ T46] usb 4-1: SerialNumber: syz [ 95.771986][ T46] usb 4-1: config 0 descriptor?? [ 95.777573][ T6431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 95.789219][ T46] port100 4-1:0.0: NFC: Could not get supported command types [ 95.900981][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 96.052013][ T5866] usb 3-1: not running at top speed; connect to a high speed hub [ 96.070028][ T5866] usb 3-1: config 1 has an invalid interface number: 56 but max is 0 [ 96.079092][ T5866] usb 3-1: config 1 has no interface number 0 [ 96.267664][ T29] audit: type=1400 audit(1737261180.860:305): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.285378][ T5866] usb 3-1: config 1 interface 56 has no altsetting 0 [ 96.371997][ T5866] usb 3-1: New USB device found, idVendor=0984, idProduct=0301, bcdDevice= 1.28 [ 96.381392][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.389465][ T5866] usb 3-1: Product: syz [ 96.402408][ T5866] usb 3-1: Manufacturer: syz [ 96.407122][ T5866] usb 3-1: SerialNumber: syz [ 97.026974][ T6486] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 97.035825][ T6486] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.158518][ T29] audit: type=1400 audit(1737261181.750:306): avc: denied { getopt } for pid=6452 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.227698][ T29] audit: type=1400 audit(1737261181.770:307): avc: denied { setopt } for pid=6452 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.291167][ T29] audit: type=1400 audit(1737261181.790:308): avc: denied { ioctl } for pid=6494 comm="syz.5.128" path="socket:[11092]" dev="sockfs" ino=11092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.417240][ T29] audit: type=1400 audit(1737261182.010:309): avc: denied { shutdown } for pid=6491 comm="syz.1.127" lport=55851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.521140][ T4853] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 97.683872][ T4853] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.692863][ T4853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.702492][ T4853] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.717158][ T4853] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.726585][ T4853] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.734756][ T4853] usb 6-1: Product: syz [ 97.739071][ T4853] usb 6-1: Manufacturer: syz [ 97.747814][ T4853] cdc_wdm 6-1:1.0: skipping garbage [ 97.753504][ T4853] cdc_wdm 6-1:1.0: skipping garbage [ 97.758767][ T4853] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.006426][ T4853] usb 4-1: USB disconnect, device number 4 [ 98.063360][ T46] usb 6-1: USB disconnect, device number 4 [ 98.149172][ T6508] netlink: 72 bytes leftover after parsing attributes in process `syz.1.130'. [ 98.224973][ T5866] usb-storage 3-1:1.56: USB Mass Storage device detected [ 98.242738][ T5866] usb-storage 3-1:1.56: Quirks match for vid 0984 pid 0301: 800000 [ 98.290369][ T5866] usb 3-1: USB disconnect, device number 11 [ 98.441180][ T4853] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.503675][ T1199] usb 1-1: USB disconnect, device number 6 [ 98.591006][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.608082][ T4853] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.628300][ T4853] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.661681][ T4853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.685556][ T4853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.708029][ T4853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.746267][ T4853] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.773441][ T4853] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.781723][ T4853] usb 4-1: Product: syz [ 98.786573][ T4853] usb 4-1: Manufacturer: syz [ 98.798981][ T4853] cdc_wdm 4-1:1.0: skipping garbage [ 98.804565][ T4853] cdc_wdm 4-1:1.0: skipping garbage [ 98.813088][ T4853] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 98.819043][ T4853] cdc_wdm 4-1:1.0: Unknown control protocol [ 98.820133][ T6522] FAULT_INJECTION: forcing a failure. [ 98.820133][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 98.825032][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 98.854894][ T5866] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 98.864039][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.879941][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.134 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 98.890554][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.900635][ T6522] Call Trace: [ 98.903917][ T6522] [ 98.906860][ T6522] dump_stack_lvl+0x16c/0x1f0 [ 98.911561][ T6522] should_fail_ex+0x497/0x5b0 [ 98.916260][ T6522] ? fs_reclaim_acquire+0xae/0x150 [ 98.919596][ T6525] FAULT_INJECTION: forcing a failure. [ 98.919596][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 98.921374][ T6522] should_failslab+0xc2/0x120 [ 98.921405][ T6522] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 98.944442][ T6522] ? __alloc_skb+0x2b1/0x380 [ 98.949056][ T6522] __alloc_skb+0x2b1/0x380 [ 98.953481][ T6522] ? __pfx___alloc_skb+0x10/0x10 [ 98.958434][ T6522] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 98.964425][ T6522] netlink_alloc_large_skb+0x69/0x130 [ 98.969814][ T6522] netlink_sendmsg+0x689/0xd70 [ 98.974602][ T6522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.979909][ T6522] ____sys_sendmsg+0xaaf/0xc90 [ 98.984688][ T6522] ? copy_msghdr_from_user+0x10b/0x160 [ 98.990161][ T6522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.995474][ T6522] ___sys_sendmsg+0x135/0x1e0 [ 99.000150][ T6522] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.005348][ T6522] ? __pfx_lock_release+0x10/0x10 [ 99.010378][ T6522] ? trace_lock_acquire+0x14e/0x1f0 [ 99.015599][ T6522] ? __fget_files+0x206/0x3a0 [ 99.020282][ T6522] __sys_sendmsg+0x16e/0x220 [ 99.024868][ T6522] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.029987][ T6522] do_syscall_64+0xcd/0x250 [ 99.034499][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.040400][ T6522] RIP: 0033:0x7f5170985d29 [ 99.044813][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.064448][ T6522] RSP: 002b:00007f5171750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.072857][ T6522] RAX: ffffffffffffffda RBX: 00007f5170b75fa0 RCX: 00007f5170985d29 [ 99.080819][ T6522] RDX: 0000000000004000 RSI: 0000000020000080 RDI: 0000000000000003 [ 99.088794][ T6522] RBP: 00007f5171750090 R08: 0000000000000000 R09: 0000000000000000 [ 99.096761][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.104726][ T6522] R13: 0000000000000000 R14: 00007f5170b75fa0 R15: 00007ffef8a165b8 [ 99.112700][ T6522] [ 99.115726][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.123783][ T5866] usb 3-1: config 0 descriptor?? [ 99.143048][ T5866] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 99.144878][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.5.136 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 99.159724][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.169799][ T6525] Call Trace: [ 99.173078][ T6525] [ 99.176015][ T6525] dump_stack_lvl+0x16c/0x1f0 [ 99.180711][ T6525] should_fail_ex+0x497/0x5b0 [ 99.185411][ T6525] ? fs_reclaim_acquire+0xae/0x150 [ 99.190537][ T6525] should_failslab+0xc2/0x120 [ 99.195229][ T6525] __kmalloc_noprof+0xcb/0x510 [ 99.199997][ T6525] ? d_absolute_path+0x137/0x1b0 [ 99.204940][ T6525] ? rcu_is_watching+0x12/0xc0 [ 99.209706][ T6525] tomoyo_encode2+0x100/0x3e0 [ 99.214389][ T6525] tomoyo_encode+0x29/0x50 [ 99.218800][ T6525] tomoyo_realpath_from_path+0x19d/0x720 [ 99.224439][ T6525] tomoyo_path_number_perm+0x248/0x590 [ 99.229887][ T6525] ? tomoyo_path_number_perm+0x235/0x590 [ 99.235533][ T6525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.241537][ T6525] ? __pfx_lock_release+0x10/0x10 [ 99.246554][ T6525] ? trace_lock_acquire+0x14e/0x1f0 [ 99.251750][ T6525] ? lock_acquire+0x2f/0xb0 [ 99.256248][ T6525] ? __fget_files+0x40/0x3a0 [ 99.260838][ T6525] ? __fget_files+0x206/0x3a0 [ 99.265535][ T6525] security_file_ioctl+0x9b/0x240 [ 99.270575][ T6525] __x64_sys_ioctl+0xb7/0x200 [ 99.275255][ T6525] do_syscall_64+0xcd/0x250 [ 99.279757][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.285646][ T6525] RIP: 0033:0x7fd841b85d29 [ 99.290048][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.309648][ T6525] RSP: 002b:00007fd8429be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.318053][ T6525] RAX: ffffffffffffffda RBX: 00007fd841d75fa0 RCX: 00007fd841b85d29 [ 99.326018][ T6525] RDX: 0000000000000003 RSI: 0000000000004c09 RDI: 0000000000000004 [ 99.333982][ T6525] RBP: 00007fd8429be090 R08: 0000000000000000 R09: 0000000000000000 [ 99.341950][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.349911][ T6525] R13: 0000000000000000 R14: 00007fd841d75fa0 R15: 00007ffd2eda8548 [ 99.357883][ T6525] [ 99.381209][ T6525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.392123][ T1199] usb 4-1: USB disconnect, device number 5 [ 99.461191][ T6525] Invalid logical block size (3) [ 99.853737][ T5866] gspca_sonixj: reg_w1 err -71 [ 99.859765][ T5866] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 99.908686][ T5866] usb 3-1: USB disconnect, device number 12 [ 99.965808][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 99.965824][ T29] audit: type=1400 audit(1737261184.560:311): avc: denied { map } for pid=6530 comm="syz.1.138" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.061048][ T29] audit: type=1400 audit(1737261184.560:312): avc: denied { execute } for pid=6530 comm="syz.1.138" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.084158][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.278512][ T6546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6546 comm=syz.3.140 [ 100.319986][ T29] audit: type=1400 audit(1737261184.910:313): avc: denied { read } for pid=6545 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 101.008956][ T29] audit: type=1400 audit(1737261184.940:314): avc: denied { read write } for pid=6545 comm="syz.3.140" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.097189][ T29] audit: type=1400 audit(1737261184.940:315): avc: denied { open } for pid=6545 comm="syz.3.140" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.121077][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.322257][ T29] audit: type=1400 audit(1737261185.810:316): avc: denied { bind } for pid=6556 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.401120][ T29] audit: type=1400 audit(1737261185.840:317): avc: denied { write } for pid=6556 comm="syz.2.143" lport=58636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.820399][ T6581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.148'. [ 102.872439][ T6580] syz.3.147 uses obsolete (PF_INET,SOCK_PACKET) [ 103.105919][ T5815] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 103.711913][ T29] audit: type=1400 audit(1737261187.820:318): avc: denied { create } for pid=6575 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.910702][ T29] audit: type=1400 audit(1737261188.280:319): avc: denied { bind } for pid=6577 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.936301][ T5815] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 103.954518][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.998372][ T5815] usb 3-1: config 0 descriptor?? [ 104.145668][ T29] audit: type=1400 audit(1737261188.740:320): avc: denied { bind } for pid=6595 comm="syz.5.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.164888][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.261615][ T5815] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 104.315939][ T5815] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 104.515119][ T5815] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 104.540405][ T5815] [drm] Initialized udl on minor 2 [ 106.225098][ T5815] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 106.235503][ T5815] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 106.298015][ T4853] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.324047][ T4853] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.336352][ T4853] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 106.366327][ T5815] usb 3-1: USB disconnect, device number 13 [ 106.609071][ T6648] FAULT_INJECTION: forcing a failure. [ 106.609071][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 106.761049][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.961138][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 107.015032][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.5.160 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 107.025661][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.035723][ T6648] Call Trace: [ 107.039002][ T6648] [ 107.041934][ T6648] dump_stack_lvl+0x16c/0x1f0 [ 107.046623][ T6648] should_fail_ex+0x497/0x5b0 [ 107.051312][ T6648] ? fs_reclaim_acquire+0xae/0x150 [ 107.056428][ T6648] should_failslab+0xc2/0x120 [ 107.061112][ T6648] __kmalloc_noprof+0xcb/0x510 [ 107.065889][ T6648] ? skcipher_recvmsg+0xb5/0x1020 [ 107.070929][ T6648] sock_kmalloc+0x111/0x170 [ 107.075455][ T6648] af_alg_alloc_areq+0xbc/0x2e0 [ 107.080582][ T6648] skcipher_recvmsg+0x326/0x1020 [ 107.085644][ T6648] ? find_held_lock+0x2d/0x110 [ 107.090436][ T6648] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 107.095844][ T6648] sock_recvmsg+0x1f6/0x250 [ 107.100369][ T6648] ____sys_recvmsg+0x219/0x6b0 [ 107.105162][ T6648] ? __pfx_____sys_recvmsg+0x10/0x10 [ 107.110482][ T6648] ___sys_recvmsg+0x115/0x1a0 [ 107.115174][ T6648] ? __pfx____sys_recvmsg+0x10/0x10 [ 107.120382][ T6648] ? __pfx_lock_release+0x10/0x10 [ 107.125506][ T6648] ? trace_lock_acquire+0x14e/0x1f0 [ 107.130738][ T6648] do_recvmmsg+0x2f8/0x740 [ 107.135190][ T6648] ? __pfx_do_recvmmsg+0x10/0x10 [ 107.140141][ T6648] ? vfs_write+0x306/0x1150 [ 107.144664][ T6648] ? __mutex_unlock_slowpath+0x164/0x690 [ 107.150325][ T6648] ? __fget_files+0x206/0x3a0 [ 107.155029][ T6648] __x64_sys_recvmmsg+0x239/0x290 [ 107.160064][ T6648] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 107.165638][ T6648] do_syscall_64+0xcd/0x250 [ 107.170158][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.176068][ T6648] RIP: 0033:0x7fd841b85d29 [ 107.180495][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.200122][ T6648] RSP: 002b:00007fd8429be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 107.208552][ T6648] RAX: ffffffffffffffda RBX: 00007fd841d75fa0 RCX: 00007fd841b85d29 [ 107.216536][ T6648] RDX: 0000000000000002 RSI: 0000000020002680 RDI: 0000000000000004 [ 107.224520][ T6648] RBP: 00007fd8429be090 R08: 0000000000000000 R09: 0000000000000000 [ 107.232514][ T6648] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001 [ 107.240499][ T6648] R13: 0000000000000000 R14: 00007fd841d75fa0 R15: 00007ffd2eda8548 [ 107.248498][ T6648] [ 107.265538][ T6656] trusted_key: syz.5.160 sent an empty control message without MSG_MORE. [ 107.351024][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 107.366921][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 107.377009][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.390941][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 107.408045][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 107.423229][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.448519][ T8] usb 4-1: Product: syz [ 107.469267][ T8] usb 4-1: Manufacturer: syz [ 107.499936][ T8] usb 4-1: SerialNumber: syz [ 107.531999][ T8] usb 4-1: config 0 descriptor?? [ 107.537497][ T6637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.564020][ T8] port100 4-1:0.0: NFC: Could not get supported command types [ 107.992802][ T9] usb 4-1: USB disconnect, device number 6 [ 108.696803][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 108.696832][ T29] audit: type=1400 audit(1737261193.290:325): avc: denied { bind } for pid=6688 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.952945][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 109.599955][ T29] audit: type=1400 audit(1737261193.570:326): avc: denied { connect } for pid=6687 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.662706][ T29] audit: type=1400 audit(1737261194.060:327): avc: denied { create } for pid=6701 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.688255][ T29] audit: type=1400 audit(1737261194.060:328): avc: denied { setopt } for pid=6701 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.386937][ T29] audit: type=1400 audit(1737261194.980:329): avc: denied { read } for pid=6714 comm="syz.3.173" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.936775][ T29] audit: type=1400 audit(1737261195.020:330): avc: denied { open } for pid=6714 comm="syz.3.173" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.674713][ T29] audit: type=1400 audit(1737261195.030:331): avc: denied { ioctl } for pid=6714 comm="syz.3.173" path="socket:[11555]" dev="sockfs" ino=11555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.837119][ T29] audit: type=1400 audit(1737261195.050:332): avc: denied { create } for pid=6714 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.858197][ T29] audit: type=1400 audit(1737261196.220:333): avc: denied { setopt } for pid=6721 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.882255][ T29] audit: type=1400 audit(1737261196.340:334): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2809 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 112.053626][ T6725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 112.396454][ T6745] netlink: 'syz.2.180': attribute type 3 has an invalid length. [ 112.511822][ T6745] netlink: 666 bytes leftover after parsing attributes in process `syz.2.180'. [ 119.420201][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.185'. [ 119.615014][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 119.615033][ T29] audit: type=1400 audit(1737261204.190:339): avc: denied { sqpoll } for pid=6779 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.625327][ T29] audit: type=1400 audit(1737261205.220:340): avc: denied { read } for pid=6796 comm="syz.2.192" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.720402][ T29] audit: type=1400 audit(1737261205.220:341): avc: denied { open } for pid=6796 comm="syz.2.192" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.801222][ T5815] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.021235][ T5815] usb 6-1: Using ep0 maxpacket: 16 [ 121.066326][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 121.085407][ T5815] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 121.105185][ T5815] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 121.123943][ T5815] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 121.151013][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.174929][ T5815] usb 6-1: Product: syz [ 121.179113][ T5815] usb 6-1: Manufacturer: syz [ 121.184143][ T5815] usb 6-1: SerialNumber: syz [ 121.192247][ T5815] usb 6-1: config 0 descriptor?? [ 121.201208][ T6801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 121.208578][ T6801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 121.237235][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 121.243611][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 121.250797][ T5815] port100 6-1:0.0: NFC: Could not get supported command types [ 121.322327][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.491000][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 121.498885][ T5866] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 121.514712][ T6820] netlink: 'syz.2.194': attribute type 3 has an invalid length. [ 121.516495][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.531675][ T6820] netlink: 666 bytes leftover after parsing attributes in process `syz.2.194'. [ 121.715288][ T5866] usb 1-1: Product: syz [ 121.720036][ T5866] usb 1-1: Manufacturer: syz [ 121.725890][ T5866] usb 1-1: SerialNumber: syz [ 121.732341][ T5866] usb 1-1: config 0 descriptor?? [ 121.739949][ T5866] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 122.612203][ T5866] gspca_stk1135: reg_w 0x2 err -110 [ 122.613263][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613281][ T5866] gspca_stk1135: Sensor write failed [ 122.613315][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613326][ T5866] gspca_stk1135: Sensor write failed [ 122.613352][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613361][ T5866] gspca_stk1135: Sensor read failed [ 122.613386][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613395][ T5866] gspca_stk1135: Sensor read failed [ 122.613403][ T5866] gspca_stk1135: Detected sensor type unknown (0x0) [ 122.613433][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613443][ T5866] gspca_stk1135: Sensor read failed [ 122.613472][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613481][ T5866] gspca_stk1135: Sensor read failed [ 122.613509][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613518][ T5866] gspca_stk1135: Sensor write failed [ 122.613544][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 122.613553][ T5866] gspca_stk1135: Sensor write failed [ 122.613600][ T5866] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 122.997391][ T6837] [U]  [ 123.209361][ T29] audit: type=1400 audit(1737261207.800:342): avc: denied { name_bind } for pid=6842 comm="syz.3.198" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.325191][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 123.326636][ T6851] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 123.862038][ T5815] usb 6-1: USB disconnect, device number 5 [ 123.992997][ T29] audit: type=1400 audit(1737261208.590:343): avc: denied { create } for pid=6808 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.012856][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.178067][ T29] audit: type=1400 audit(1737261208.610:344): avc: denied { write } for pid=6808 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.845690][ T29] audit: type=1400 audit(1737261209.350:345): avc: denied { setopt } for pid=6808 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.232714][ T6878] netlink: 'syz.1.205': attribute type 3 has an invalid length. [ 125.240674][ T6878] netlink: 666 bytes leftover after parsing attributes in process `syz.1.205'. [ 125.518430][ T6884] FAULT_INJECTION: forcing a failure. [ 125.518430][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 125.541626][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.1.207 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 125.552252][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.562321][ T6884] Call Trace: [ 125.565609][ T6884] [ 125.568545][ T6884] dump_stack_lvl+0x16c/0x1f0 [ 125.573247][ T6884] should_fail_ex+0x497/0x5b0 [ 125.577944][ T6884] ? fs_reclaim_acquire+0xae/0x150 [ 125.583072][ T6884] should_failslab+0xc2/0x120 [ 125.587765][ T6884] __kmalloc_noprof+0xcb/0x510 [ 125.592558][ T6884] ? d_absolute_path+0x137/0x1b0 [ 125.597534][ T6884] ? rcu_is_watching+0x12/0xc0 [ 125.602319][ T6884] tomoyo_encode2+0x100/0x3e0 [ 125.607018][ T6884] tomoyo_encode+0x29/0x50 [ 125.611444][ T6884] tomoyo_realpath_from_path+0x19d/0x720 [ 125.617083][ T6884] tomoyo_path_number_perm+0x248/0x590 [ 125.622536][ T6884] ? tomoyo_path_number_perm+0x235/0x590 [ 125.628179][ T6884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.634168][ T6884] ? __pfx_lock_release+0x10/0x10 [ 125.639181][ T6884] ? trace_lock_acquire+0x14e/0x1f0 [ 125.644375][ T6884] ? lock_acquire+0x2f/0xb0 [ 125.648865][ T6884] ? __fget_files+0x40/0x3a0 [ 125.653445][ T6884] ? __fget_files+0x206/0x3a0 [ 125.658111][ T6884] security_file_ioctl+0x9b/0x240 [ 125.663127][ T6884] __x64_sys_ioctl+0xb7/0x200 [ 125.667805][ T6884] do_syscall_64+0xcd/0x250 [ 125.672305][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.678189][ T6884] RIP: 0033:0x7f3e3c185d29 [ 125.682591][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.702198][ T6884] RSP: 002b:00007f3e3cf53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.710597][ T6884] RAX: ffffffffffffffda RBX: 00007f3e3c376080 RCX: 00007f3e3c185d29 [ 125.718555][ T6884] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 125.726514][ T6884] RBP: 00007f3e3cf53090 R08: 0000000000000000 R09: 0000000000000000 [ 125.734473][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.742432][ T6884] R13: 0000000000000000 R14: 00007f3e3c376080 R15: 00007ffe7365f578 [ 125.750401][ T6884] [ 125.789817][ T6884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.035583][ T29] audit: type=1400 audit(1737261210.630:346): avc: denied { mounton } for pid=6888 comm="syz.3.209" path="/proc/156/task" dev="proc" ino=11944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 126.045386][ T9] usb 1-1: USB disconnect, device number 7 [ 126.072076][ T6892] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 126.177865][ T29] audit: type=1400 audit(1737261210.770:347): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.602138][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 126.611167][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'. [ 127.432247][ T6914] netlink: 'syz.3.217': attribute type 3 has an invalid length. [ 127.440006][ T6914] netlink: 666 bytes leftover after parsing attributes in process `syz.3.217'. [ 127.553521][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.218'. [ 127.771327][ T4853] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.005029][ T4853] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.021992][ T4853] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.043556][ T4853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.068570][ T4853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 128.143990][ T4853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 128.192672][ T4853] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.202954][ T4853] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.211484][ T4853] usb 3-1: Product: syz [ 128.227172][ T4853] usb 3-1: Manufacturer: syz [ 129.081149][ T6932] Bluetooth: MGMT ver 1.23 [ 129.480928][ T29] audit: type=1400 audit(1737261213.540:348): avc: denied { create } for pid=6925 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.961266][ T29] audit: type=1400 audit(1737261213.640:349): avc: denied { wake_alarm } for pid=6925 comm="syz.1.219" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.977349][ T4853] cdc_wdm 3-1:1.0: skipping garbage [ 129.991256][ T4853] cdc_wdm 3-1:1.0: skipping garbage [ 130.066855][ T29] audit: type=1400 audit(1737261213.670:350): avc: denied { write } for pid=6925 comm="syz.1.219" path="socket:[12852]" dev="sockfs" ino=12852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.142002][ T6936] netlink: 72 bytes leftover after parsing attributes in process `syz.5.222'. [ 130.199568][ T4853] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 130.205925][ T4853] cdc_wdm 3-1:1.0: Unknown control protocol [ 130.255641][ T4853] usb 3-1: USB disconnect, device number 14 [ 131.139843][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.416257][ T6947] netlink: 72 bytes leftover after parsing attributes in process `syz.1.225'. [ 131.540972][ T29] audit: type=1400 audit(1737261216.130:351): avc: denied { append } for pid=6949 comm="syz.0.226" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.568276][ T6950] [ 131.570616][ T6950] ====================================================== [ 131.577623][ T6950] WARNING: possible circular locking dependency detected [ 131.584703][ T6950] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 131.591781][ T6950] ------------------------------------------------------ [ 131.598768][ T6950] syz.0.226/6950 is trying to acquire lock: [ 131.604648][ T6950] ffff88807987ed20 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 131.613531][ T6950] [ 131.613531][ T6950] but task is already holding lock: [ 131.620871][ T6950] ffff888026582670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 131.630102][ T6950] [ 131.630102][ T6950] which lock already depends on the new lock. [ 131.630102][ T6950] [ 131.640510][ T6950] [ 131.640510][ T6950] the existing dependency chain (in reverse order) is: [ 131.649516][ T6950] [ 131.649516][ T6950] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 131.657312][ T6950] __mutex_lock+0x19b/0xa60 [ 131.662326][ T6950] blk_mq_init_sched+0x42b/0x640 [ 131.667773][ T6950] elevator_init_mq+0x2cd/0x420 [ 131.673122][ T6950] add_disk_fwnode+0x113/0x1300 [ 131.678475][ T6950] sd_probe+0xa86/0x1000 [ 131.683213][ T6950] really_probe+0x23e/0xa90 [ 131.688221][ T6950] __driver_probe_device+0x1de/0x440 [ 131.694007][ T6950] driver_probe_device+0x4c/0x1b0 [ 131.699531][ T6950] __device_attach_driver+0x1df/0x310 [ 131.705403][ T6950] bus_for_each_drv+0x157/0x1e0 [ 131.710751][ T6950] __device_attach_async_helper+0x1d3/0x290 [ 131.717150][ T6950] async_run_entry_fn+0x9c/0x530 [ 131.722613][ T6950] process_one_work+0x9c5/0x1ba0 [ 131.728050][ T6950] worker_thread+0x6c8/0xf00 [ 131.733145][ T6950] kthread+0x2c1/0x3a0 [ 131.737732][ T6950] ret_from_fork+0x45/0x80 [ 131.742650][ T6950] ret_from_fork_asm+0x1a/0x30 [ 131.747918][ T6950] [ 131.747918][ T6950] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 131.756753][ T6950] blk_queue_enter+0x50f/0x640 [ 131.762026][ T6950] blk_mq_alloc_request+0x59b/0x950 [ 131.767747][ T6950] scsi_execute_cmd+0x1da/0xf40 [ 131.773113][ T6950] read_capacity_16+0x213/0xe10 [ 131.778469][ T6950] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 131.784798][ T6950] sd_probe+0x904/0x1000 [ 131.789538][ T6950] really_probe+0x23e/0xa90 [ 131.794541][ T6950] __driver_probe_device+0x1de/0x440 [ 131.800331][ T6950] driver_probe_device+0x4c/0x1b0 [ 131.805857][ T6950] __device_attach_driver+0x1df/0x310 [ 131.811730][ T6950] bus_for_each_drv+0x157/0x1e0 [ 131.817081][ T6950] __device_attach_async_helper+0x1d3/0x290 [ 131.823482][ T6950] async_run_entry_fn+0x9c/0x530 [ 131.828937][ T6950] process_one_work+0x9c5/0x1ba0 [ 131.834375][ T6950] worker_thread+0x6c8/0xf00 [ 131.839465][ T6950] kthread+0x2c1/0x3a0 [ 131.844036][ T6950] ret_from_fork+0x45/0x80 [ 131.848963][ T6950] ret_from_fork_asm+0x1a/0x30 [ 131.854234][ T6950] [ 131.854234][ T6950] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 131.861857][ T6950] __mutex_lock+0x19b/0xa60 [ 131.866875][ T6950] loop_reconfigure_limits+0x407/0x8c0 [ 131.872836][ T6950] lo_ioctl+0x901/0x18b0 [ 131.877578][ T6950] blkdev_ioctl+0x276/0x6d0 [ 131.882586][ T6950] __x64_sys_ioctl+0x190/0x200 [ 131.887855][ T6950] do_syscall_64+0xcd/0x250 [ 131.892876][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.899291][ T6950] [ 131.899291][ T6950] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 131.907879][ T6950] blk_mq_submit_bio+0x1fb6/0x24c0 [ 131.913496][ T6950] __submit_bio+0x384/0x540 [ 131.918859][ T6950] submit_bio_noacct_nocheck+0x698/0xd70 [ 131.925003][ T6950] submit_bio_noacct+0x93a/0x1e20 [ 131.930536][ T6950] mpage_readahead+0x41d/0x590 [ 131.935987][ T6950] read_pages+0x1a8/0xdc0 [ 131.940821][ T6950] page_cache_ra_unbounded+0x3dc/0x750 [ 131.946799][ T6950] force_page_cache_ra+0x24b/0x340 [ 131.952412][ T6950] page_cache_sync_ra+0x110/0x9c0 [ 131.957942][ T6950] filemap_get_pages+0xd7b/0x1be0 [ 131.963486][ T6950] filemap_read+0x3ca/0xd70 [ 131.968513][ T6950] blkdev_read_iter+0x187/0x480 [ 131.973873][ T6950] vfs_read+0x87f/0xbe0 [ 131.978531][ T6950] ksys_read+0x12b/0x250 [ 131.983274][ T6950] do_syscall_64+0xcd/0x250 [ 131.988285][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.994686][ T6950] [ 131.994686][ T6950] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 132.003176][ T6950] down_read+0x9a/0x330 [ 132.007834][ T6950] filemap_fault+0x62c/0x2820 [ 132.013012][ T6950] __do_fault+0x10a/0x490 [ 132.017859][ T6950] do_pte_missing+0xebd/0x3e00 [ 132.023125][ T6950] __handle_mm_fault+0x103c/0x2a40 [ 132.028738][ T6950] handle_mm_fault+0x3fa/0xaa0 [ 132.034001][ T6950] __get_user_pages+0x8d9/0x3b50 [ 132.039445][ T6950] populate_vma_page_range+0x27f/0x3a0 [ 132.045442][ T6950] __mm_populate+0x1d6/0x380 [ 132.050534][ T6950] do_mlock+0x40a/0x7d0 [ 132.055195][ T6950] __x64_sys_mlock+0x59/0x80 [ 132.060308][ T6950] do_syscall_64+0xcd/0x250 [ 132.065328][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.071737][ T6950] [ 132.071737][ T6950] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 132.079295][ T6950] __lock_acquire+0x249e/0x3c40 [ 132.084650][ T6950] lock_acquire.part.0+0x11b/0x380 [ 132.090261][ T6950] __might_fault+0x11b/0x190 [ 132.095361][ T6950] _copy_from_user+0x29/0xd0 [ 132.100460][ T6950] __blk_trace_setup+0xa8/0x180 [ 132.105815][ T6950] blk_trace_setup+0x47/0x70 [ 132.110914][ T6950] sg_ioctl+0x65e/0x2750 [ 132.115661][ T6950] __x64_sys_ioctl+0x190/0x200 [ 132.120936][ T6950] do_syscall_64+0xcd/0x250 [ 132.125951][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.132349][ T6950] [ 132.132349][ T6950] other info that might help us debug this: [ 132.132349][ T6950] [ 132.142553][ T6950] Chain exists of: [ 132.142553][ T6950] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 132.142553][ T6950] [ 132.156867][ T6950] Possible unsafe locking scenario: [ 132.156867][ T6950] [ 132.164293][ T6950] CPU0 CPU1 [ 132.169635][ T6950] ---- ---- [ 132.174974][ T6950] lock(&q->debugfs_mutex); [ 132.179540][ T6950] lock(&q->q_usage_counter(queue)#50); [ 132.187693][ T6950] lock(&q->debugfs_mutex); [ 132.194790][ T6950] rlock(&mm->mmap_lock); [ 132.199183][ T6950] [ 132.199183][ T6950] *** DEADLOCK *** [ 132.199183][ T6950] [ 132.207323][ T6950] 1 lock held by syz.0.226/6950: [ 132.212242][ T6950] #0: ffff888026582670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 132.221881][ T6950] [ 132.221881][ T6950] stack backtrace: [ 132.227742][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.0.226 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 132.238832][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 132.248879][ T6950] Call Trace: [ 132.252152][ T6950] [ 132.255068][ T6950] dump_stack_lvl+0x116/0x1f0 [ 132.259731][ T6950] print_circular_bug+0x419/0x5d0 [ 132.264734][ T6950] check_noncircular+0x31a/0x400 [ 132.269651][ T6950] ? __pfx_check_noncircular+0x10/0x10 [ 132.275093][ T6950] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 132.281086][ T6950] ? lockdep_lock+0xc6/0x200 [ 132.285657][ T6950] ? __pfx_lockdep_lock+0x10/0x10 [ 132.290663][ T6950] ? find_held_lock+0x2d/0x110 [ 132.295412][ T6950] __lock_acquire+0x249e/0x3c40 [ 132.300245][ T6950] ? __pfx___lock_acquire+0x10/0x10 [ 132.305438][ T6950] lock_acquire.part.0+0x11b/0x380 [ 132.310527][ T6950] ? __might_fault+0xe3/0x190 [ 132.315187][ T6950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 132.320796][ T6950] ? rcu_is_watching+0x12/0xc0 [ 132.325540][ T6950] ? trace_lock_acquire+0x14e/0x1f0 [ 132.330721][ T6950] ? __might_fault+0xe3/0x190 [ 132.335385][ T6950] ? lock_acquire+0x2f/0xb0 [ 132.339864][ T6950] ? __might_fault+0xe3/0x190 [ 132.344525][ T6950] ? __might_fault+0xe3/0x190 [ 132.349181][ T6950] __might_fault+0x11b/0x190 [ 132.353755][ T6950] ? __might_fault+0xe3/0x190 [ 132.358427][ T6950] _copy_from_user+0x29/0xd0 [ 132.362995][ T6950] __blk_trace_setup+0xa8/0x180 [ 132.367826][ T6950] ? __pfx___blk_trace_setup+0x10/0x10 [ 132.373279][ T6950] ? do_vfs_ioctl+0x513/0x1990 [ 132.378046][ T6950] blk_trace_setup+0x47/0x70 [ 132.382630][ T6950] sg_ioctl+0x65e/0x2750 [ 132.386861][ T6950] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 132.393366][ T6950] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 132.400210][ T6950] ? __pfx_sg_ioctl+0x10/0x10 [ 132.404870][ T6950] ? __pfx_lock_release+0x10/0x10 [ 132.409879][ T6950] ? selinux_file_ioctl+0x180/0x270 [ 132.415081][ T6950] ? selinux_file_ioctl+0xb4/0x270 [ 132.420171][ T6950] ? __pfx_sg_ioctl+0x10/0x10 [ 132.424844][ T6950] __x64_sys_ioctl+0x190/0x200 [ 132.429589][ T6950] do_syscall_64+0xcd/0x250 [ 132.434078][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.439957][ T6950] RIP: 0033:0x7f5170985d29 [ 132.444346][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.463943][ T6950] RSP: 002b:00007f5171750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.472349][ T6950] RAX: ffffffffffffffda RBX: 00007f5170b75fa0 RCX: 00007f5170985d29 [ 132.480308][ T6950] RDX: 00000000200006c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 132.488260][ T6950] RBP: 00007f5170a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 132.496213][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.504162][ T6950] R13: 0000000000000000 R14: 00007f5170b75fa0 R15: 00007ffef8a165b8 [ 132.512120][ T6950] [ 132.518648][ T29] audit: type=1400 audit(1737261216.160:352): avc: denied { ioctl } for pid=6949 comm="syz.0.226" path="/dev/sg0" dev="devtmpfs" ino=732 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.572174][ T29] audit: type=1400 audit(1737261216.200:353): avc: denied { ioctl } for pid=6946 comm="syz.1.225" path="pid:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.596686][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.642858][ T6950] FAULT_INJECTION: forcing a failure. [ 132.642858][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 132.667907][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.0.226 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 132.678519][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 132.688573][ T6950] Call Trace: [ 132.691854][ T6950] [ 132.694783][ T6950] dump_stack_lvl+0x16c/0x1f0 [ 132.699444][ T6950] should_fail_ex+0x497/0x5b0 [ 132.704118][ T6950] ? fs_reclaim_acquire+0xae/0x150 [ 132.709225][ T6950] should_failslab+0xc2/0x120 [ 132.713897][ T6950] __kmalloc_noprof+0xcb/0x510 [ 132.718642][ T6950] ? d_absolute_path+0x137/0x1b0 [ 132.723564][ T6950] ? rcu_is_watching+0x12/0xc0 [ 132.728322][ T6950] tomoyo_encode2+0x100/0x3e0 [ 132.732996][ T6950] tomoyo_encode+0x29/0x50 [ 132.737420][ T6950] tomoyo_realpath_from_path+0x19d/0x720 [ 132.743067][ T6950] tomoyo_path_number_perm+0x248/0x590 [ 132.748504][ T6950] ? tomoyo_path_number_perm+0x235/0x590 [ 132.754118][ T6950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.760076][ T6950] ? rcu_is_watching+0x12/0xc0 [ 132.764832][ T6950] ? preempt_count_add+0x76/0x150 [ 132.769849][ T6950] ? __pfx_lock_release+0x10/0x10 [ 132.774857][ T6950] ? trace_lock_acquire+0x14e/0x1f0 [ 132.780048][ T6950] ? __fget_files+0x40/0x3a0 [ 132.784623][ T6950] ? lock_acquire+0x2f/0xb0 [ 132.789110][ T6950] ? __fget_files+0x40/0x3a0 [ 132.793686][ T6950] ? __fget_files+0x206/0x3a0 [ 132.798351][ T6950] security_file_ioctl+0x9b/0x240 [ 132.803378][ T6950] __x64_sys_ioctl+0xb7/0x200 [ 132.808046][ T6950] do_syscall_64+0xcd/0x250 [ 132.812538][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.818419][ T6950] RIP: 0033:0x7f5170985d29 [ 132.822814][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.842422][ T6950] RSP: 002b:00007f5171750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.850828][ T6950] RAX: ffffffffffffffda RBX: 00007f5170b75fa0 RCX: 00007f5170985d29 [ 132.858787][ T6950] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 [ 132.866746][ T6950] RBP: 00007f5171750090 R08: 0000000000000000 R09: 0000000000000000 [ 132.874702][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.882653][ T6950] R13: 0000000000000000 R14: 00007f5170b75fa0 R15: 00007ffef8a165b8 [ 132.890613][ T6950] [ 132.898470][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.901520][ T6950] ERROR: Out of memory at tomoyo_realpath_from_path.