last executing test programs: 11.224765206s ago: executing program 0 (id=395): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) connect$ax25(r3, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 10.085823339s ago: executing program 4 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3b92d6ab06a1ddd343e8a426c1a34425fd1f4d238a6e838fe5b36afbfc1703cd", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002980)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000580)=""/143, 0x8f}, {&(0x7f0000001680)=""/88, 0x58}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x8, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002800)=""/148, 0x94}, {&(0x7f00000028c0)=""/1, 0x1}], 0x2, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}], 0x2, 0x60, &(0x7f0000002a00)={0x77359400}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r12, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000007c0)="0a7674959226e0c98f242717acfe8e001712ab97734a1089def786c02ea230a104d2b2f37eab187c79f0663f83e8fe6c", 0x0, 0x30}) ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r13 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) r14 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) stat(&(0x7f0000004f40)='./file0\x00', &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005000)='./file0\x00', &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r14, &(0x7f00000066c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000002a40)="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", 0x2000, &(0x7f0000005880)={&(0x7f0000004a40)={0x50, 0x0, 0x3, {0x7, 0x29, 0x9, 0x8c0, 0x9, 0x5, 0x9, 0xfffff094}}, &(0x7f0000004ac0)={0x18, 0x0, 0x7, {0x7}}, &(0x7f0000004b00)={0x18, 0x0, 0x9, {0xf89}}, &(0x7f0000004b40)={0x18, 0xffffffffffffffda, 0x5, {0x5}}, &(0x7f0000004b80)={0x18, 0x6e518a341d1ecdb8, 0x0, {0xffff}}, &(0x7f0000004bc0)={0x28, 0x0, 0x6, {{0x806, 0x3, 0x1, r8}}}, &(0x7f0000004c00)={0x60, 0x0, 0x8001, {{0x8, 0xf22f, 0x800, 0x2, 0x3, 0x7, 0xcee8, 0x8}}}, &(0x7f0000004c80)={0x18}, &(0x7f0000004cc0)=ANY=[@ANYBLOB="00000000000000040401000000000000262b00"], &(0x7f0000004d00)={0x20, 0x0, 0x5, {0x0, 0x19}}, &(0x7f0000004d40)={0x78, 0x0, 0x1, {0x2, 0x8, 0x0, {0x5, 0x7, 0x80, 0x8, 0x7fff, 0x2, 0xa, 0x3, 0x2, 0x4000, 0x1, r6, r10, 0x80, 0x3}}}, &(0x7f0000004dc0)={0x90, 0x0, 0x81, {0x0, 0x0, 0x8, 0x1, 0x4, 0x6, {0x1, 0x8001, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x5c, 0x6, 0x8000, 0x0, 0x7, r4, r10, 0x8}}}, &(0x7f0000004e80)=ANY=[@ANYBLOB="a000000000000000080000000000000005000000000000000100000000000000000000000180ffff030000000000000009000000000000000f000000040000002f6465762f6370752f232f6d73720000060000000000000001000000000000000400000000011e00217b2d250000000004000000000000009458a5050000000000000000740d00000100000000000000ac0e0000000000000000000009000000"], &(0x7f00000050c0)={0x6a0, 0x0, 0x9, [{{0x5, 0x2, 0x3, 0x101, 0x7fffffff, 0xfffffffe, {0x6, 0xa5c6, 0x6, 0xb, 0xa, 0x2, 0x3, 0x9, 0x4, 0xd000, 0x6, r9, r5, 0x1, 0x9}}, {0x2, 0x8, 0x18, 0x7, '/dev/infiniband/rdma_cm\x00'}}, {{0x1, 0x1, 0x6, 0x6, 0x80, 0x20000000, {0x2, 0x8d, 0x1, 0x5, 0x5, 0xe, 0x9, 0x4, 0x8, 0xc000, 0xe3, r9, r7}}, {0x4, 0x4, 0x18, 0x2800, '/dev/infiniband/rdma_cm\x00'}}, {{0x0, 0x2, 0x1000, 0x10, 0x7, 0x9, {0x6, 0x6, 0x2, 0x1, 0x5ce0, 0xb, 0x10001, 0x5, 0x6, 0x1000, 0x10, r15, r10, 0x8, 0x4800}}, {0x6, 0x0, 0x18, 0x4, '/dev/infiniband/rdma_cm\x00'}}, {{0x3, 0x1, 0x5, 0x206, 0x4, 0x80, {0x1, 0x3, 0x219, 0x9, 0x6332, 0x1, 0x6, 0xa, 0x1, 0x1000, 0x4, r9, r16, 0x8, 0x4}}, {0x6, 0xb59, 0x5, 0x6, '--]\\{'}}, {{0x1, 0x3, 0xfffffffffffffffa, 0x2, 0x6, 0x6, {0x2, 0x9, 0x7, 0xfffffffffffffff9, 0x3, 0x7c00, 0x4, 0x6, 0x1ff, 0xa000, 0x9, r6, r7, 0x1000, 0x80}}, {0x2, 0x1, 0xf, 0x0, '/dev/cpu/#/msr\x00'}}, {{0x3, 0x1, 0x1, 0x1, 0x3, 0x2, {0x3, 0x4, 0x8, 0x575e, 0x0, 0x100000000, 0xe, 0x82, 0xffff8000, 0x4000, 0x0, r9, r7, 0x2, 0x6}}, {0x4, 0x1, 0x3, 0x58, '.[^'}}, {{0x2, 0x2, 0x5, 0x8, 0x3, 0x8, {0x5, 0x902e, 0x3, 0x8, 0x8, 0x7, 0xf, 0xffff8000, 0x6, 0x1000, 0x5, r6, r5, 0xc, 0x86}}, {0x0, 0x7fff, 0x18, 0x8e41, '/dev/infiniband/rdma_cm\x00'}}, {{0x4, 0x2, 0xebc8, 0x9, 0x3044, 0x35, {0x2, 0x6, 0x88, 0x1, 0x3, 0x5, 0x5, 0x3, 0x7ff, 0x2000, 0x5, r9, r5, 0x6, 0x4}}, {0x6, 0x2, 0x18, 0x8, '/dev/infiniband/rdma_cm\x00'}}, {{0x1, 0x1, 0xffffffff80000000, 0x24, 0x72e, 0x1ee, {0x4, 0x0, 0x7, 0x6, 0x1, 0x7f, 0x6, 0x3, 0xbb80978b, 0xa000, 0x5, r4, r10, 0x1}}, {0x0, 0x9, 0x0, 0x1}}, {{0x5, 0x2, 0x8001, 0xd8, 0x7, 0x6, {0x4, 0x2, 0x7, 0x9, 0x1, 0x3, 0x0, 0x6, 0x9e99, 0x8000, 0x3ff, r9, r5, 0x0, 0x3}}, {0x3, 0x8, 0x8, 0x6, '/{\xe8--)+@'}}]}, &(0x7f0000005780)={0xa0, 0x0, 0x18, {{0x0, 0x2, 0x4, 0x6, 0x2, 0x6, {0x3, 0x6, 0x6b, 0x7, 0xddd, 0x2, 0x4, 0x0, 0x1, 0x1000, 0xfffffffe, r6, r17, 0xff, 0x400}}, {0x0, 0x1}}}, &(0x7f0000005840)={0x20, 0xfffffffffffffff5, 0x9, {0x80, 0x4, 0x2, 0x5}}}) move_mount(r14, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r14, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005900)=""/152, 0x98}, {&(0x7f00000059c0)=""/222, 0xde}, {&(0x7f0000005ac0)=""/32, 0x20}, {&(0x7f0000008700)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/44, 0x2c}, {&(0x7f0000005b40)=""/242, 0xf2}], 0x6) 9.459285943s ago: executing program 0 (id=404): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r0], 0x1, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 9.186813646s ago: executing program 4 (id=407): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xc, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000008007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x37) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000300)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6, 0x5}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="9de0eb84026d52ab5924ef1ac83f657fc485fe8f129906be75dacb46664269b04119d50809c1e8e63792502dd936b568c5428a9776f0050482f42b9b9c9bbac69aa7a6c383c6f5634e9826070064c5f61b6edc710437de1d4dcc4ff2193a040d482cef1b4638b6d6dab2e6ca2f1007672641430700da0eac6b7370cc2ab5d9dff419e23db585ced4d61ddcf7d560797a71df36af2ba32206160ec2c02294efee2ab8fb0ddabbab24ba7fe6944c0e1fd749493d6857109353557965620b89da4bbfb5361e92d5f9466c0d791682e2292951f378c4379e63a74f6f16877819162aa1f4fc406242db80b6e5"], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000000) 7.014676113s ago: executing program 3 (id=410): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000003600)={0x10}, 0x10) 6.260837376s ago: executing program 1 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000000000000002480000", @ANYRES32=r1, @ANYBLOB='\v*'], 0x20}}, 0x0) 6.225651538s ago: executing program 3 (id=412): accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x147040, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 6.008752971s ago: executing program 1 (id=414): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) connect$ax25(r3, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 5.918282967s ago: executing program 3 (id=416): syz_emit_ethernet(0xf4, &(0x7f0000000040)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0xd4, '-', "8a3178140e1f78d0f24f53dea158102d4aabea287494f9ee6a9f50dcbae14e23f58bfdfd3beed7ade4076b3822e34ead925c4666643509a86f191ad81f62da410a2ae862340b2b34fc61ce57baad634b307fd5837825bd53764a51a7381e9b4f96ef733821b1ee813eee597c7f2e3d7b4a9b83e1f5e9d07956ae6b3482058ac0a6aa4378e6eef60d022266e2486f963a0a794df907ba5c2cc6f6c91c7c7c096be38ecee0c3f65fc623888e9615b345f0978f30faa30cc52d22b1f940bb9060da7e5bf8ea5ef06c9715ffa3048e5d0b5c69412f70a88e7515d5c093923fbfe6"}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ac}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x2000}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.820139123s ago: executing program 3 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r1, &(0x7f0000000540)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fe) utimes(0x0, &(0x7f0000001080)={{}, {0x0, 0xea60}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 0'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_emit_ethernet(0x84, &(0x7f0000000200)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x6]}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd(0xfffffffe) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x3, 0xeeef0000, 0x2000, &(0x7f0000009000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.692482871s ago: executing program 2 (id=418): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r0], 0x1, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 4.576955541s ago: executing program 2 (id=419): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000001200)=""/158, 0x9e}], 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.944342927s ago: executing program 4 (id=420): memfd_create(0x0, 0x2) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000200)=""/177) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0xbc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESHEX=r3], 0x58}}, 0x4000010) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cramfs\x00', 0x2008006, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0x1000}}, 0x1006) 3.594295189s ago: executing program 2 (id=421): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0xffff, 0x5, 0x75]}, 0xa) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x2, 0x0, @time={0x3, 0x1200}, {}, {}, @raw32={[0x2600]}}], 0x1c) 3.472716083s ago: executing program 0 (id=422): io_setup(0x4, &(0x7f00000001c0)=0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002200)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0x1a0, r2, 0x0, 0x0, 0x1, 0x0, 0x1, r2}]) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000010000000c232d3e223d42"], 0x10, r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="00a53547da1914b9336e9b45f125a200000000000000b702000014000000b70300000000000085002b3822950000bf09c2d2c4f7d0000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000e99519231990e026399e078ebe0000000000007ab589f17e35c909f6f18e76ff1f22d808a26b9613290f5a12085c63890b768e1b62a1a50a01544d56d2e12908355fa14fa7c5e7a7306a8be0cf7715a614b63fb6fd85"], &(0x7f0000000440)='GPL\x00', 0xe4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x100001, 0x8, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, r7], &(0x7f0000000b40), 0x10, 0x40000, @void, @value}, 0x94) 3.453238875s ago: executing program 1 (id=423): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) accept4$inet6(r0, 0x0, 0x0, 0x40800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$clear(0x7, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000140)={0xffff8000, 'syz0\x00'}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@lli}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r9}, 0x20) 3.383422025s ago: executing program 2 (id=424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000000080)) socket$isdn_base(0x22, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000300)=""/249}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000680), &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x6, 0x1}) 2.284319823s ago: executing program 1 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvfrom(r0, &(0x7f0000000000)=""/32, 0x20, 0x40000000, &(0x7f0000000080)=@generic={0x11, "19eabd10d9dd36e096ec5004118f1d37d90c5abe42b9fa366bee043f649d9f254eea97b06d6f4402ab2af8b2dc64d3ffbe5329fca352aef35235bb4a8c44d665c9cac876eba913f3fcbe4cc45a35fc9c927a50e2a24b2e1e510461041d2c8a72debbb7c91d0d76b03e613ab21ee9ac7dbbd860779dfff21c432d921c946d"}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 2.168668988s ago: executing program 2 (id=426): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x21, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) (fail_nth: 1) 2.137696388s ago: executing program 4 (id=427): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff3}, {0xe}, {0x1, 0x9}}}, 0x24}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r6, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.031318404s ago: executing program 1 (id=428): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r1], 0x20}}, 0x0) 1.22833814s ago: executing program 3 (id=429): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8282, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0xffff, 0x4, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x2000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x100000000}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x40, 0x7, 0x4, 0x1, 0x2, 0x0, [{0x0, 0x8, 0x5, '\x00', 0x800}, {0xa248, 0x8001, 0x7, '\x00', 0x88}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$FIONREAD(r0, 0x5411, &(0x7f0000000140)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1}, 0x18) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="14937dfd6c49", 0x6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="428cef", 0x3}], 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x1060, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x5}, 0x1, 0xc3, 0x8, 0x1000, 0x16, 'syz0\x00', "b782f959d157c9419ebc3f0f13927f413288b2934e684a7d9a43b199b9bb085b", "0d9d2b9c7082714d8373e73641223d00ce53121487d2634be8b973f55d0d7d44", [{0x1, 0x4, {0x0, 0x4}}, {0x2, 0x9, {0x3, 0x4}}, {0x7fb, 0x4, {0x0, 0x8}}, {0x9, 0x1, {0x3, 0x7f}}, {0x0, 0x9, {0x3, 0xffffff3e}}, {0x4000, 0x1, {0x3, 0x4}}, {0xe730, 0x1, {0x3, 0xfffffc00}}, {0xc2, 0xea, {0x3, 0x8}}, {0x1000, 0x4, {0x0, 0x2}}, {0x1, 0xbd12, {0x0, 0xfffffffd}}, {0x3, 0x0, {0x3, 0x3}}, {0x5, 0x4, {0x3, 0x7fffffff}}, {0x5, 0x4, {0x2, 0x3}}, {0x7f, 0x1, {0x2, 0x3ff}}, {0x4, 0x4, {0x3, 0x9}}, {0xfffb, 0xb69, {0x2, 0x23}}, {0xd1fe, 0x2, {0x0, 0x4}}, {0x4, 0xe6, {0x3, 0x3}}, {0x1, 0x5, {0x1, 0x8}}, {0x7fff, 0x4, {0x0, 0x8}}, {0x800, 0x6, {0x3, 0x2}}, {0x100, 0x7, {0x3, 0x7}}, {0x4, 0x4, {0x2, 0xa}}, {0x3, 0xffff, {0x1, 0xb}}, {0x1, 0x9, {0x3, 0x7ff}}, {0x0, 0x7, {0x2, 0x7}}, {0x200, 0x9, {0x0, 0x2}}, {0x7, 0x4, {0x1, 0x3759}}, {0x6, 0x9, {0x3, 0x3}}, {0x2, 0x6, {0x3, 0x80000000}}, {0x40, 0x5717, {0x0, 0xb}}, {0x8, 0x6, {0x1, 0x1}}, {0x0, 0x6, {0x3, 0x5}}, {0x9, 0x5, {0x0, 0xa}}, {0x6, 0xe6, {0x1, 0x3}}, {0x0, 0x400, {0x2, 0x2c}}, {0xd4b9, 0xaf0, {0x0, 0x5}}, {0xfff7, 0x9, {0x0, 0x7}}, {0xfff7, 0x5, {0x0, 0x3}}, {0x2, 0x800, {0x460da15980ec778a, 0xd}}]}}}, {{0x254, 0x1, {{0x1, 0xfff}, 0x6, 0x27, 0x3, 0xfff, 0x27, 'syz0\x00', "de2599f2c20344cc7b644eb9ddd1d5ab879a5ec49130e18b32d4787bf0212b4d", "4e4bc9237101656563b46518afd8a09f14db091c5e76e1a282024634f7e9e816", [{0xfc8f, 0x9, {0x0, 0xfa9b}}, {0x1, 0x1000, {0x3, 0x2}}, {0x4, 0x400, {0x1, 0x7}}, {0x3, 0x6, {0x1, 0x7ef}}, {0x200, 0x8, {0x0, 0x7}}, {0x0, 0x1, {0x2, 0x7}}, {0xfe8, 0x761b, {0x2, 0x6}}, {0x9, 0xd, {0x2, 0x200}}, {0x9, 0x0, {0x1, 0x1}}, {0x6, 0x0, {0x1, 0xb}}, {0x1, 0x8, {0x2, 0x8}}, {0xd2c, 0x81, {0x3, 0x4}}, {0x9, 0x7, {0x2, 0x4}}, {0x9, 0x2, {0x2, 0x1000}}, {0x3, 0x8e9, {0x3, 0x8}}, {0x4, 0x76e, {0x1, 0xfdb6}}, {0x7f, 0x1, {0x1, 0x8}}, {0x1, 0x5, {0x1, 0x2}}, {0xa, 0x6, {0x3, 0x5}}, {0x8000, 0x4, {0x0, 0x14}}, {0x8001, 0x7d1, {0x2, 0x1}}, {0xe9, 0x0, {0x3, 0x8000}}, {0x3, 0x40b, {0x1}}, {0x8, 0x2, {0x1, 0x5}}, {0x3, 0x0, {0x2, 0x7fffffff}}, {0x4, 0xff, {0x2, 0x8}}, {0x5bce, 0xe, {0x1, 0x7fff}}, {0xf, 0x6}, {0x5bb3, 0xffff, {0x0, 0x9}}, {0x2, 0x2, {0x2, 0xe}}, {0x4, 0xff, {0x0, 0x40}}, {0xfff, 0xfff7, {0x0, 0x6}}, {0x2, 0x2, {0x0, 0x9}}, {0x3, 0xcf13, {0x1, 0x8f89}}, {0x1d9a, 0x9, {0x0, 0xf1960000}}, {0xb5, 0x0, {0x2, 0x4}}, {0x40, 0x6, {0x2, 0x5}}, {0x40, 0x14c, {0x2, 0x7fff}}, {0x1000, 0x6, {0x3, 0x9}}, {0x8, 0x7ae9, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x1, 0x2, 0x8000, 0x1cff, 0x1f, 'syz1\x00', "44a5fcafe55d30bd1f89a18128262ada61d61c6eb9ce2869423bafe1dfd058ba", "c57f6832be41d2d7301028511f5400ccaf2ffb13190f083f648df0c0245f12d3", [{0x8, 0xc97a, {0x2, 0x1ff}}, {0x8, 0x3, {0x3, 0x100}}, {0x3, 0x0, {0x3, 0x5}}, {0x1, 0x8c0, {0x2, 0xfffffffe}}, {0x4480, 0x8, {0x0, 0x6}}, {0x3, 0x81, {0x3, 0x3}}, {0x3, 0xfffc, {0x3, 0xbd8}}, {0x6, 0xf, {0x2, 0x3}}, {0x6, 0x7, {0x3, 0x3}}, {0x5, 0x8, {0x2, 0x39}}, {0x7, 0x40, {0x3, 0x1000}}, {0x4, 0x2, {0x1, 0x6}}, {0x7fff, 0x2, {0x0, 0x9}}, {0x996a, 0xc000, {0x0, 0x3}}, {0x1, 0x1, {0x3, 0x10000}}, {0x7, 0x1, {0x3, 0x8}}, {0x0, 0xd, {0x1, 0x1}}, {0x40, 0x3, {0x3, 0x2}}, {0x0, 0x1, {0x2, 0xfffffff6}}, {0x6bad, 0x4, {0x0, 0x401}}, {0x5, 0x7fff, {0x3, 0x10}}, {0xffff, 0x8, {0x2, 0x6}}, {0x4, 0x5, {0x0, 0xfffffffe}}, {0xde, 0x9, {0x2, 0xaa6}}, {0x1, 0x6}, {0x8000, 0x6, {0x1, 0x5}}, {0x1, 0x47, {0x0, 0x4}}, {0x3, 0xa7, {0x1, 0xffffffff}}, {0x8, 0x8, {0x2, 0x7}}, {0x7, 0x7, {0x3, 0x7}}, {0x6, 0xb, {0x3, 0xfff}}, {0x62, 0x3, {0x2, 0x40}}, {0x1, 0x1, {0x1, 0x7fff}}, {0x3ed, 0x9, {0x1, 0x5}}, {0x5, 0x514, {0x1}}, {0xb, 0x3b, {0x2, 0x1}}, {0x8, 0x5, {0x1}}, {0x4, 0x2, {0x3, 0xf}}, {0x1, 0x8903, {0x3, 0x200}}, {0x6, 0x53c, {0x2, 0x5db7}}]}}}, {{0x254, 0x1, {{0x2, 0x837f}, 0xd, 0x3, 0x0, 0x6c, 0x1a, 'syz1\x00', "6e2db16e3034d88ccf052bd7c7868d263c1ec5fe1765e46d43dffd4f8ed7a776", "2a53736562c5d26595cb0f73ed2816a0d6df98e24926a6ab8d42cb964694b529", [{0x400, 0x0, {0x979033e5a18a74a}}, {0x1, 0xfffc, {0x0, 0xf8}}, {0x2, 0x1, {0x1, 0x4b000000}}, {0x0, 0x1, {0x3, 0x2}}, {0x0, 0xdf, {0x1}}, {0x7, 0x2, {0x3, 0x6}}, {0x7f, 0x2, {0x2}}, {0x3, 0x6, {0x0, 0x10}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x9, 0x7f, {0x2, 0x6}}, {0x2, 0x6a, {0x3}}, {0x4, 0x100, {0x3, 0x9}}, {0xff, 0xffff, {0x3, 0x800}}, {0x0, 0x7, {0x3, 0x8}}, {0x50, 0x81, {0x2, 0x1ff}}, {0xd, 0x8, {0x0, 0x4}}, {0x81, 0xaf, {0x2, 0x913}}, {0x401, 0x8000, {0x2, 0x6}}, {0x9a2, 0x9, {0x2, 0x86d}}, {0x80, 0x0, {0x3, 0x1}}, {0x5, 0x1, {0x1, 0x9}}, {0x7, 0x1000, {0x2, 0xfffffff8}}, {0xa0a0, 0xf, {0x2, 0x7}}, {0x0, 0x4, {0x3, 0x80}}, {0x6, 0xc1, {0x0, 0x5}}, {0x8, 0x40, {0x2, 0xa}}, {0x63fe, 0x9, {0x3, 0x3ff}}, {0x7, 0x3, {0x2, 0x6}}, {0x9, 0xfff9}, {0x7, 0x0, {0x3, 0xf}}, {0x400, 0x4, {0x3, 0x3}}, {0x6, 0x6, {0x3, 0x9}}, {0x80, 0x9, {0x2, 0x5b}}, {0x5, 0x0, {0x2, 0x9}}, {0xfffe, 0x6, {0x1, 0xffffffff}}, {0x5, 0x9, {0x3, 0x6}}, {0x8001, 0x5, {0x2, 0x1}}, {0x10, 0x0, {0x0, 0x6}}, {0x7f, 0x0, {0x1}}, {0xfff8, 0x2, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x5, 0x6, 0x8, 0x1, 0x1d, 'syz0\x00', "0ce50f9308c0eb051c3e74be45ee5e64b7582c651e12dc6d4144a847532559b3", "1447f4444f93233309bfc00abde8cf10a09a9d5979f7a8e84f7c4024f2e5fbea", [{0x0, 0xffff, {0x0, 0x7ff}}, {0x4, 0x4, {0x3, 0xa7}}, {0x3, 0x83, {0x2, 0x32ec}}, {0x13, 0x5db, {0x1, 0x80000001}}, {0x48, 0x0, {0x2, 0x47}}, {0x1000, 0x400, {0x3, 0x1}}, {0x7, 0x9, {0x3, 0x4}}, {0x401, 0x6, {0x1, 0x5}}, {0x9a, 0x7, {0x3, 0x10000}}, {0xe04, 0x8, {0x3, 0x2}}, {0x8, 0x5, {0x2, 0x2}}, {0x6592, 0x9, {0x2, 0x8}}, {0x3, 0x5, {0x2, 0x40}}, {0x8, 0x8, {0x3, 0x5}}, {0x4, 0x0, {0x2, 0x8000}}, {0x6, 0x7, {0x1, 0x5}}, {0x5, 0x3ff, {0x3, 0x4}}, {0xc281, 0x7, {0x3, 0x8}}, {0x2, 0x9, {0x3, 0x8471}}, {0x4, 0x6, {0x2}}, {0x7271, 0xff, {0x3, 0x6}}, {0x4, 0x4, {0x0, 0xbd}}, {0x7, 0x5}, {0x1, 0x3, {0x3, 0x7}}, {0x650, 0x2, {0x1, 0x1000}}, {0x4, 0x200, {0x0, 0xfffffff0}}, {0x7, 0x7f2e, {0x3, 0x8}}, {0x0, 0x1cbb, {0x3, 0x1}}, {0x2b56, 0x0, {0x1, 0x6}}, {0xb, 0x8001, {0x0, 0x40}}, {0x5, 0x1, {0x0, 0x1df3}}, {0x4, 0x1, {0x2, 0x7}}, {0xb312, 0x4, {0x3, 0xff4}}, {0x9, 0x7ff, {0x2, 0xfffffff8}}, {0x1e79, 0x0, {0x1, 0x1}}, {0x7, 0x9131, {0x2, 0x1}}, {0x4, 0x9}, {0x69d1, 0x7, {0x1, 0x5}}, {0xfffc, 0x3, {0x1, 0x5}}, {0xdfd1, 0x5, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x12}, 0x8f, 0x2, 0xe4, 0xa, 0x1d, 'syz0\x00', "c89561f911669a4bd46c97e1f41ac0d89aae872d0aefbde82c930b3bfddd0f93", "ee0645dcceef2ca3bfdc21a9baf49016ed7920242fbba8cf4b9a9d7b71fa810d", [{0xa1f, 0x6, {0x1, 0x8}}, {0x4, 0x400, {0x1, 0x4}}, {0xa7, 0x7, {0x3, 0x7}}, {0xffff, 0xfff7, {0x1, 0x3e62}}, {0xe, 0x2, {0x0, 0x1}}, {0x400, 0x24, {0x1, 0x6}}, {0x0, 0x10, {0x0, 0x800}}, {0x81, 0x1, {0x1, 0x6}}, {0xd27, 0x4, {0x3, 0x7}}, {0xd, 0x10, {0x1, 0xff}}, {0x2, 0x2, {0x2, 0x7}}, {0xfffd, 0x8, {0x3, 0x9}}, {0x7d20, 0x35e, {0x1, 0x7fff}}, {0xb, 0x7, {0x1, 0x80000001}}, {0x8000, 0x8, {0x1, 0x5}}, {0x5, 0x5, {0x0, 0x4}}, {0x0, 0x0, {0x3, 0x1}}, {0x6999, 0x693b, {0x1, 0x6}}, {0x9, 0x7, {0x3, 0x9419}}, {0xe000, 0x9, {0x1, 0x5aa9fd9a}}, {0xb, 0x7, {0x2, 0xfffffffb}}, {0x8, 0x1, {0x1, 0x1ff}}, {0x5, 0x7fff, {0x0, 0x3}}, {0x0, 0x0, {0x1, 0x10000}}, {0x100, 0xe, {0x3, 0x20000000}}, {0x5, 0x2af, {0x0, 0x9}}, {0xaa, 0x7, {0x1, 0x9}}, {0x3, 0x3, {0x2, 0x3ff}}, {0x4, 0xffff, {0x2, 0xd}}, {0x9, 0x1, {0x1, 0x7}}, {0x2, 0x7, {0x3, 0x7}}, {0x66d, 0x0, {0x2, 0x5}}, {0x5, 0x6, {0x2}}, {0xffff, 0x1}, {0xfffc, 0x9, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0x2}}, {0x8, 0x400, {0x2, 0x6}}, {0x8000, 0x2, {0x2}}, {0x5, 0x6, {0x1, 0xea4bec1b}}, {0x4, 0x5, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x9, 0xd, 0x9, 0x0, 0xa, 'syz0\x00', "d806a2be7363e1bcff7e4d61b762aa08fa23516191cfe97f8cd0f41935d21d55", "b36734bb7cab132b1432e2e46382ffed0bfac72fcdb62e01e2688d82ac6dfbec", [{0x5, 0x6, {0x0, 0x4}}, {0x9, 0x3ff, {0x3, 0x3cc8}}, {0x5, 0x5, {0x2}}, {0x24, 0x7f, {0x0, 0x1c000000}}, {0x1, 0x92, {0x2, 0xfffffffa}}, {0x8, 0x100, {0x0, 0x4}}, {0x1000, 0xfa0b, {0x0, 0x8}}, {0x4, 0x8, {0x3, 0x67}}, {0xfffa, 0x4, {0x3, 0x8}}, {0xab, 0xf200, {0x1, 0x6}}, {0xf551, 0x5, {0x3, 0x8}}, {0x9, 0x2, {0x2, 0x9}}, {0x8, 0x2, {0x3, 0x9}}, {0x10, 0xfc01, {0x1, 0xb2f0}}, {0xfff7, 0x40, {0x1, 0xd}}, {0xff80, 0x8, {0x1, 0x8}}, {0x4, 0x7fff, {0x0, 0x6}}, {0x1, 0xa, {0x0, 0x8000}}, {0xfff1, 0x8e36, {0x2, 0x8001}}, {0x1, 0x0, {0x2, 0x7}}, {0x101, 0x7, {0x3, 0x6}}, {0x7, 0x400, {0x1, 0x401}}, {0x5, 0x9, {0x2, 0x8}}, {0x8ab3, 0x5, {0x2, 0x1}}, {0x8, 0xe, {0x3, 0x3}}, {0x5, 0x6, {0x0, 0x1}}, {0x4, 0x501, {0x0, 0x9}}, {0x9, 0x4}, {0xfc01, 0x2, {0x0, 0x81}}, {0x9, 0x2, {0x1, 0x9}}, {0x6, 0x8001, {0x1, 0x8}}, {0x424e, 0x8, {0x0, 0x81}}, {0x4, 0x7, {0x1, 0x40}}, {0x1, 0x6000}, {0x7, 0x1, {0x3, 0x4}}, {0x9, 0x84, {0x3, 0x73}}, {0x10, 0xfffc, {0x1, 0x95}}, {0x3, 0x8000, {0x0, 0x101}}, {0x3, 0x2, {0x0, 0x1}}, {0x3, 0x7, {0x2, 0xffffffd4}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) 1.227920418s ago: executing program 4 (id=430): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) accept4$inet6(r0, 0x0, 0x0, 0x40800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$clear(0x7, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000140)={0xffff8000, 'syz0\x00'}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = getpid() rt_tgsigqueueinfo(r7, 0x0, 0x33, &(0x7f0000000080)={0x4, 0x0, 0x3}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@lli}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000200), &(0x7f00000003c0)=r10}, 0x20) 1.037387479s ago: executing program 2 (id=431): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000001200)=""/158, 0x9e}], 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 855.927332ms ago: executing program 0 (id=432): pipe(&(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 414.093114ms ago: executing program 0 (id=433): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r0], 0x1, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 287.419265ms ago: executing program 4 (id=434): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc05c5340, &(0x7f0000000040)) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) 50.797665ms ago: executing program 1 (id=435): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="02df00000a0002"], 0x34}}, 0x0) (fail_nth: 7) 34.917331ms ago: executing program 0 (id=436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000440), 0x80880) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=437): r0 = creat(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x2a26}, 0x0) sendfile(r0, r1, 0x0, 0xd344) kernel console output (not intermixed with test programs): 33] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.454411][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.467370][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.481287][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.493236][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.504187][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.529500][ T5830] veth0_vlan: entered promiscuous mode [ 59.547360][ T5841] veth0_vlan: entered promiscuous mode [ 59.558953][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.567796][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.577026][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.585814][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.607287][ T5840] veth0_macvtap: entered promiscuous mode [ 59.624116][ T5830] veth1_vlan: entered promiscuous mode [ 59.643734][ T5840] veth1_macvtap: entered promiscuous mode [ 59.658275][ T5841] veth1_vlan: entered promiscuous mode [ 59.716822][ T5830] veth0_macvtap: entered promiscuous mode [ 59.737795][ T5841] veth0_macvtap: entered promiscuous mode [ 59.769430][ T5841] veth1_macvtap: entered promiscuous mode [ 59.781566][ T5830] veth1_macvtap: entered promiscuous mode [ 59.799707][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.810366][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.820653][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.833367][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.844598][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.854634][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.862471][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.870340][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.883897][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.896795][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.907642][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.918657][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.960094][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.969169][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.979859][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.989114][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.001181][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.010095][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.021148][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.037794][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.048554][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.059415][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.069294][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.079913][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091327][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.111493][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.125355][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.136673][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.147394][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.157390][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.168057][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.179206][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.193875][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.204525][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.214704][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.225193][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.235138][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.245765][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.255596][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.266396][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.277628][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.298442][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.306525][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.316699][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.316712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.333095][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.342020][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.367581][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.375678][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.394098][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.411772][ T29] audit: type=1400 audit(1732010755.326:112): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/root/syzkaller.JHDYMf/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.419033][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.447268][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.452970][ T29] audit: type=1400 audit(1732010755.326:113): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.459030][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.487832][ T29] audit: type=1400 audit(1732010755.326:114): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/root/syzkaller.JHDYMf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.490044][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.516076][ T29] audit: type=1400 audit(1732010755.326:115): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.548042][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.552875][ T29] audit: type=1400 audit(1732010755.326:116): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/root/syzkaller.JHDYMf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.558745][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.592117][ T29] audit: type=1400 audit(1732010755.336:117): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/root/syzkaller.JHDYMf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.595997][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.623325][ T29] audit: type=1400 audit(1732010755.336:118): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.641926][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.670580][ T29] audit: type=1400 audit(1732010755.586:120): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.699147][ T29] audit: type=1400 audit(1732010755.586:119): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.729980][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.736735][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.739497][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.763456][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.772485][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.930328][ T5910] binder: 5909:5910 ioctl ae01 0 returned -22 [ 60.934246][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.949080][ T5910] binder_alloc: 5909: binder_install_single_page failed to insert page at offset 0 with -14 [ 60.990221][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.112127][ T5916] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.153177][ T5832] Bluetooth: hci0: command tx timeout [ 61.169356][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.182664][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.201926][ T5917] @: renamed from vlan0 (while UP) [ 61.231843][ T5832] Bluetooth: hci2: command tx timeout [ 61.245823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.252326][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.259194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.282980][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.298246][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.312261][ T5832] Bluetooth: hci1: command tx timeout [ 61.318150][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.328597][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.335891][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392216][ T5832] Bluetooth: hci3: command tx timeout [ 61.472495][ T5832] Bluetooth: hci4: command tx timeout [ 61.559704][ T5925] Cannot find add_set index 0 as target [ 61.651980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.676531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.766331][ T5918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.778947][ T5918] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.953239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.976849][ T5918] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.983878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.016640][ T5918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.022960][ T5918] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.030998][ T5918] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.037819][ T5918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.044098][ T5918] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.052963][ T5918] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.062209][ T5918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.068222][ T5918] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.084172][ T5918] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.091260][ T5918] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 62.097456][ T5918] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 62.105468][ T5918] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 62.111975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.189335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.189639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.291402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.506897][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.594675][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.731675][ T5878] usb 1-1: device descriptor read/64, error -71 [ 62.790715][ T5945] trusted_key: syz.4.9 sent an empty control message without MSG_MORE. [ 62.972353][ T5878] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 63.111780][ T5878] usb 1-1: device descriptor read/64, error -71 [ 63.232434][ T5878] usb usb1-port1: attempt power cycle [ 63.311940][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.444704][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 63.444720][ T29] audit: type=1400 audit(1732010758.366:178): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 63.610640][ T5878] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 63.793292][ T5963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.861938][ T29] audit: type=1400 audit(1732010758.656:179): avc: denied { create } for pid=5956 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.884061][ T29] audit: type=1400 audit(1732010758.656:180): avc: denied { ioctl } for pid=5956 comm="syz.3.12" path="socket:[7510]" dev="sockfs" ino=7510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.893276][ T5878] usb 1-1: device descriptor read/8, error -71 [ 63.911855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.929547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.940210][ T29] audit: type=1400 audit(1732010758.856:181): avc: denied { read } for pid=5953 comm="syz.4.11" path="socket:[8864]" dev="sockfs" ino=8864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.111799][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.117994][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.124177][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.131068][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.406067][ T29] audit: type=1400 audit(1732010759.326:182): avc: denied { create } for pid=5967 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.427326][ T1202] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.476193][ T29] audit: type=1400 audit(1732010759.386:183): avc: denied { ioctl } for pid=5967 comm="syz.0.16" path="socket:[7519]" dev="sockfs" ino=7519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.495009][ T5973] fuse: Bad value for 'fd' [ 64.520935][ T29] audit: type=1400 audit(1732010759.416:184): avc: denied { create } for pid=5972 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.544343][ T29] audit: type=1400 audit(1732010759.416:185): avc: denied { read write } for pid=5972 comm="syz.1.17" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.571713][ T29] audit: type=1400 audit(1732010759.416:186): avc: denied { open } for pid=5972 comm="syz.1.17" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.715221][ T29] audit: type=1400 audit(1732010759.486:187): avc: denied { create } for pid=5967 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.775157][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.839617][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 65.851143][ T1202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.863653][ T1202] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.873051][ T1202] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 66.020248][ T1202] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 66.466931][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.522036][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 66.528756][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.535630][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.588663][ T1202] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 66.600146][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.637596][ T1202] hub 5-1:1.0: bad descriptor, ignoring hub [ 66.681738][ T5878] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 66.719557][ T1202] hub 5-1:1.0: probe with driver hub failed with error -5 [ 66.727879][ T1202] cdc_wdm 5-1:1.0: skipping garbage [ 66.734892][ T1202] cdc_wdm 5-1:1.0: skipping garbage [ 66.745526][ T1202] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 66.753087][ T1202] cdc_wdm 5-1:1.0: Unknown control protocol [ 66.867195][ T5878] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.895197][ T5878] usb 1-1: config 179 has no interface number 0 [ 66.929684][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 66.952385][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 67.084049][ T5878] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 67.261912][ T5878] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.278671][ T5878] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.298709][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.322494][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 3781 [ 67.338848][ T5987] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 67.432403][ T5907] usb 5-1: USB disconnect, device number 2 [ 67.644023][ T1202] usb 1-1: USB disconnect, device number 6 [ 67.789673][ T6002] binder: 6001:6002 ioctl 80106720 20000240 returned -22 [ 67.823814][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.861935][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.385130][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 68.462270][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 68.462313][ T29] audit: type=1400 audit(1732010763.376:197): avc: denied { getopt } for pid=6001 comm="syz.3.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.470819][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.592480][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.598723][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.599595][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.613140][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.628043][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.640350][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 68.652490][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 68.671825][ T5907] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 68.681606][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.703531][ T29] audit: type=1400 audit(1732010763.626:198): avc: denied { ioctl } for pid=6006 comm="syz.2.25" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.809819][ T6007] input: syz0 as /devices/virtual/input/input5 [ 69.007767][ T5907] usb 5-1: can't set config #1, error -71 [ 69.037267][ T29] audit: type=1400 audit(1732010763.956:199): avc: denied { create } for pid=6014 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.213186][ T29] audit: type=1400 audit(1732010764.136:200): avc: denied { ioctl } for pid=6012 comm="syz.3.27" path="socket:[7570]" dev="sockfs" ino=7570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.237693][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.387149][ T6009] hfsplus: unable to find HFS+ superblock [ 69.396452][ T5907] usb 5-1: USB disconnect, device number 3 [ 69.443280][ T29] audit: type=1400 audit(1732010764.166:201): avc: denied { create } for pid=6012 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.742592][ T29] audit: type=1400 audit(1732010764.256:202): avc: denied { mounton } for pid=6006 comm="syz.2.25" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.873564][ T29] audit: type=1400 audit(1732010764.276:203): avc: denied { map } for pid=6014 comm="syz.4.28" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.962629][ T29] audit: type=1400 audit(1732010764.316:204): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2732 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.058407][ T29] audit: type=1400 audit(1732010764.316:205): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2732 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.092594][ T29] audit: type=1400 audit(1732010764.316:206): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2732 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.489753][ T6041] x_tables: duplicate underflow at hook 3 [ 71.626006][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.637328][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.871788][ T5878] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.901712][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.978768][ T5878] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 72.143267][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.218476][ T6060] Zero length message leads to an empty skb [ 72.724742][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 73.437307][ T6081] mmap: syz.1.42 (6081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.534201][ T6081] binder_alloc: binder_alloc_mmap_handler: 6080 20ffc000-20ffd000 already mapped failed -16 [ 73.598014][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 73.598032][ T29] audit: type=1400 audit(1732010768.516:237): avc: denied { name_bind } for pid=6083 comm="syz.2.41" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.625993][ T29] audit: type=1400 audit(1732010768.516:238): avc: denied { node_bind } for pid=6083 comm="syz.2.41" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.646891][ T29] audit: type=1400 audit(1732010768.526:239): avc: denied { mount } for pid=6080 comm="syz.1.42" name="/" dev="autofs" ino=7754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 73.648633][ T6081] overlayfs: missing 'lowerdir' [ 73.669295][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.669615][ T29] audit: type=1400 audit(1732010768.576:240): avc: denied { mounton } for pid=6080 comm="syz.1.42" path="/11/file1/bus/file1" dev="autofs" ino=7757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 73.772806][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.942258][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 74.001983][ T5913] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 74.011348][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.080323][ T5913] usb 5-1: config 0 descriptor?? [ 74.082794][ T29] audit: type=1400 audit(1732010768.996:241): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 74.105873][ T29] audit: type=1400 audit(1732010769.006:242): avc: denied { create } for pid=6111 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.109167][ T5913] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 74.128392][ T29] audit: type=1400 audit(1732010769.006:243): avc: denied { getopt } for pid=6111 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.142040][ T5878] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 74.161323][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.162852][ T5878] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 74.218809][ T29] audit: type=1400 audit(1732010769.136:244): avc: denied { create } for pid=6116 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.355233][ T29] audit: type=1400 audit(1732010769.276:245): avc: denied { write } for pid=6116 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.436736][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 74.472679][ T6121] FAULT_INJECTION: forcing a failure. [ 74.472679][ T6121] name failslab, interval 1, probability 0, space 0, times 0 [ 74.506464][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.1.46 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 74.516761][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.527013][ T6121] Call Trace: [ 74.530300][ T6121] [ 74.533254][ T6121] dump_stack_lvl+0x16c/0x1f0 [ 74.537970][ T6121] should_fail_ex+0x497/0x5b0 [ 74.542681][ T6121] ? fs_reclaim_acquire+0xae/0x150 [ 74.547853][ T6121] should_failslab+0xc2/0x120 [ 74.552596][ T6121] kmem_cache_alloc_node_noprof+0x71/0x310 [ 74.558633][ T6121] ? __alloc_skb+0x2b1/0x380 [ 74.563354][ T6121] __alloc_skb+0x2b1/0x380 [ 74.567787][ T6121] ? __pfx___alloc_skb+0x10/0x10 [ 74.572960][ T6121] netlink_ack+0x164/0xb90 [ 74.577398][ T6121] ? __mutex_trylock_common+0xea/0x250 [ 74.582867][ T6121] netlink_rcv_skb+0x348/0x440 [ 74.587640][ T6121] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 74.593292][ T6121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.598585][ T6121] ? __mutex_lock+0x1a6/0x9c0 [ 74.603261][ T6121] ? netlink_deliver_tap+0x1ae/0xd90 [ 74.609664][ T6121] crypto_netlink_rcv+0x2a/0x40 [ 74.609774][ T6121] netlink_unicast+0x53c/0x7f0 [ 74.619564][ T6121] ? __pfx_netlink_unicast+0x10/0x10 [ 74.619605][ T6121] netlink_sendmsg+0x8b8/0xd70 [ 74.619635][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.634956][ T6121] __sys_sendto+0x488/0x4f0 [ 74.639491][ T6121] ? __pfx___sys_sendto+0x10/0x10 [ 74.644557][ T6121] ? reacquire_held_locks+0x20b/0x4c0 [ 74.649952][ T6121] ? do_user_addr_fault+0xdc7/0x13f0 [ 74.655506][ T6121] __x64_sys_sendto+0xe0/0x1c0 [ 74.660361][ T6121] ? do_syscall_64+0x91/0x250 [ 74.665051][ T6121] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.670380][ T6121] do_syscall_64+0xcd/0x250 [ 74.674922][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.681064][ T6121] RIP: 0033:0x7fa20a5805ec [ 74.685503][ T6121] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 74.705255][ T6121] RSP: 002b:00007fa2089d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 74.713702][ T6121] RAX: ffffffffffffffda RBX: 00007fa2089d3fc0 RCX: 00007fa20a5805ec [ 74.721683][ T6121] RDX: 0000000000000020 RSI: 00007fa2089d4010 RDI: 0000000000000003 [ 74.729677][ T6121] RBP: 0000000000000000 R08: 00007fa2089d3f14 R09: 000000000000000c [ 74.737679][ T6121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 74.745664][ T6121] R13: 00007fa2089d3f68 R14: 00007fa2089d4010 R15: 0000000000000000 [ 74.753952][ T6121] [ 74.757107][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.791710][ T29] audit: type=1400 audit(1732010769.526:246): avc: denied { bind } for pid=6111 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.883476][ T6131] netlink: 140 bytes leftover after parsing attributes in process `syz.4.43'. [ 74.928781][ T1202] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.028276][ T5913] gspca_nw80x: reg_w err -110 [ 75.033482][ T5913] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 75.106028][ T5913] usb 5-1: USB disconnect, device number 4 [ 75.217402][ T1202] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.232702][ T1202] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 75.240534][ T1202] usb 4-1: can't read configurations, error -71 [ 76.191721][ T5878] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 76.191751][ T5878] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 76.424518][ T6181] 9pnet_fd: Insufficient options for proto=fd [ 76.703027][ T965] cfg80211: failed to load regulatory.db [ 77.860120][ T6195] ceph: No mds server is up or the cluster is laggy [ 77.877468][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 77.885837][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 78.271805][ T5878] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 78.278591][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.284800][ T5878] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 78.686579][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 78.686595][ T29] audit: type=1400 audit(1732010773.606:267): avc: denied { lock } for pid=6203 comm="syz.0.56" path="socket:[9375]" dev="sockfs" ino=9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.418337][ T6212] overlayfs: failed to resolve './file1': -2 [ 79.460679][ T6212] ======================================================= [ 79.460679][ T6212] WARNING: The mand mount option has been deprecated and [ 79.460679][ T6212] and is ignored by this kernel. Remove the mand [ 79.460679][ T6212] option from the mount to silence this warning. [ 79.460679][ T6212] ======================================================= [ 79.506403][ T6212] overlayfs: missing 'lowerdir' [ 79.536637][ T29] audit: type=1400 audit(1732010774.376:268): avc: denied { remount } for pid=6209 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.364844][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.395767][ T5878] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 80.402279][ T5878] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 80.714731][ T29] audit: type=1400 audit(1732010775.636:269): avc: denied { write } for pid=6222 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.734993][ T29] audit: type=1400 audit(1732010775.656:270): avc: denied { write } for pid=6222 comm="syz.2.61" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.736885][ T6223] xt_TCPMSS: Only works on TCP SYN packets [ 81.013796][ T5878] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.123190][ T29] audit: type=1400 audit(1732010776.046:271): avc: denied { write } for pid=6234 comm="syz.2.66" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.281735][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.325989][ T6218] ax25_connect(): syz.1.59 uses autobind, please contact jreuter@yaina.de [ 81.338244][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.348962][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 81.357152][ T5878] usb 2-1: can't read configurations, error -71 [ 81.412010][ T6238] usb usb8: usbfs: process 6238 (syz.2.66) did not claim interface 0 before use [ 82.322072][ T29] audit: type=1400 audit(1732010777.216:272): avc: denied { shutdown } for pid=6225 comm="syz.4.64" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.342785][ T29] audit: type=1400 audit(1732010777.216:273): avc: denied { read } for pid=6225 comm="syz.4.64" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.695798][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 82.702968][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.713716][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.722659][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 82.738166][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.748255][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.756680][ T5913] usb 4-1: Product: syz [ 82.760881][ T5913] usb 4-1: Manufacturer: syz [ 82.765552][ T5913] usb 4-1: SerialNumber: syz [ 82.783792][ T5913] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 82.790875][ T5913] cdc_ncm 4-1:1.0: bind() failure [ 84.854790][ T9] usb 4-1: USB disconnect, device number 4 [ 84.984508][ T29] audit: type=1400 audit(1732010779.906:274): avc: denied { read } for pid=6266 comm="syz.0.73" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 85.033964][ T29] audit: type=1400 audit(1732010779.906:275): avc: denied { open } for pid=6266 comm="syz.0.73" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 85.076082][ T29] audit: type=1400 audit(1732010779.956:276): avc: denied { open } for pid=6264 comm="syz.1.74" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.104266][ T6268] macvlan2: entered allmulticast mode [ 85.110137][ T6268] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 85.130493][ T6268] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 85.311759][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.352112][ T6258] xt_addrtype: ipv6 does not support BROADCAST matching [ 85.492753][ T29] audit: type=1400 audit(1732010780.416:277): avc: denied { write } for pid=6273 comm="syz.3.76" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 85.806129][ T29] audit: type=1400 audit(1732010780.446:278): avc: denied { create } for pid=6273 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.839097][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.844882][ T29] audit: type=1400 audit(1732010780.506:279): avc: denied { listen } for pid=6253 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.863118][ T5907] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 85.870580][ T29] audit: type=1400 audit(1732010780.516:280): avc: denied { accept } for pid=6253 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.928681][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.948368][ T5907] usb 1-1: config 0 descriptor?? [ 86.160667][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.184170][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.211891][ T5875] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.372974][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.391836][ T5913] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 86.408136][ T5907] elecom 0003:056E:00E6.0001: unknown main item tag 0xd [ 86.416147][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 86.428275][ T5907] elecom 0003:056E:00E6.0001: unexpected long global item [ 86.436049][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 86.447985][ T5907] elecom 0003:056E:00E6.0001: probe with driver elecom failed with error -22 [ 86.461034][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 86.495923][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 86.508821][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.524965][ T5875] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 86.534614][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.544030][ T5875] usb 3-1: Product: syz [ 86.549251][ T5875] usb 3-1: Manufacturer: syz [ 86.555013][ T5875] usb 3-1: SerialNumber: syz [ 86.563709][ T5913] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.573127][ T5875] usb 3-1: config 0 descriptor?? [ 86.579587][ T6281] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.590733][ T5875] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 86.613220][ T5913] usb 4-1: config 179 has no interface number 0 [ 86.619557][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 86.632037][ T5907] usb 1-1: USB disconnect, device number 7 [ 86.638165][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 86.650609][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.665855][ T5913] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 86.679913][ T5913] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 86.709046][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.739142][ T6283] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.817769][ T6281] netlink: 'syz.2.78': attribute type 2 has an invalid length. [ 86.826328][ T6281] netlink: 766 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.846269][ T5913] usb 3-1: USB disconnect, device number 2 [ 87.020939][ T5875] usb 4-1: USB disconnect, device number 5 [ 87.076767][ T5907] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 87.186341][ T29] audit: type=1400 audit(1732010782.106:281): avc: denied { mount } for pid=6292 comm="syz.4.81" name="/" dev="hugetlbfs" ino=9740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.278913][ T29] audit: type=1400 audit(1732010782.196:282): avc: denied { ioctl } for pid=6288 comm="syz.0.80" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.609296][ T6289] ax25_connect(): syz.0.80 uses autobind, please contact jreuter@yaina.de [ 87.678072][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.759004][ T29] audit: type=1400 audit(1732010782.666:283): avc: denied { read write } for pid=6296 comm="syz.1.82" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.836361][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 87.844872][ T5907] usb 1-1: can't read configurations, error -71 [ 89.422430][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.552508][ T1202] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.818234][ T5878] usb 2-1: config 3 has an invalid interface number: 142 but max is 2 [ 89.827481][ T5878] usb 2-1: config 3 has an invalid interface number: 186 but max is 2 [ 89.841771][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 89.850501][ T1202] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.852438][ T5878] usb 2-1: config 3 has an invalid interface number: 95 but max is 2 [ 89.862534][ T1202] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.884397][ T1202] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 89.905265][ T1202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.914575][ T5878] usb 2-1: config 3 has no interface number 0 [ 89.914869][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.932164][ T1202] usb 3-1: Product: syz [ 89.936640][ T1202] usb 3-1: Manufacturer: syz [ 89.941510][ T1202] usb 3-1: SerialNumber: syz [ 90.539877][ T1202] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 90.546805][ T1202] cdc_ncm 3-1:1.0: bind() failure [ 90.596352][ T5878] usb 2-1: config 3 has no interface number 1 [ 90.610648][ T5878] usb 2-1: config 3 has no interface number 2 [ 90.618565][ T5878] usb 2-1: config 3 interface 142 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 90.635286][ T5878] usb 2-1: config 3 interface 142 altsetting 155 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 90.647913][ T5878] usb 2-1: config 3 interface 142 altsetting 155 has a duplicate endpoint with address 0xD, skipping [ 90.660751][ T5878] usb 2-1: config 3 interface 142 altsetting 155 has a duplicate endpoint with address 0x3, skipping [ 90.674911][ T5878] usb 2-1: config 3 interface 142 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 16 [ 90.685199][ T5878] usb 2-1: config 3 interface 142 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 90.699159][ T5878] usb 2-1: config 3 interface 142 altsetting 155 endpoint 0x4 has invalid maxpacket 848, setting to 64 [ 90.794562][ T5878] usb 2-1: config 3 interface 186 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 90.835898][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 90.861222][ T5878] usb 2-1: config 3 interface 95 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 90.981721][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 90.992869][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 91.006278][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has an endpoint descriptor with address 0x72, changing to 0x2 [ 91.979168][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 91.992013][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 92.002790][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x8F, skipping [ 92.013768][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 92.305718][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 92.321988][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 92.333386][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 92.344465][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 92.356018][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 92.367016][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 92.377878][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 92.388896][ T5878] usb 2-1: config 3 interface 95 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 92.402336][ T5878] usb 2-1: config 3 interface 142 has no altsetting 0 [ 92.421502][ T5878] usb 2-1: config 3 interface 186 has no altsetting 0 [ 92.428692][ T5878] usb 2-1: config 3 interface 95 has no altsetting 0 [ 92.563718][ T5878] usb 2-1: string descriptor 0 read error: -71 [ 92.571142][ T5878] usb 2-1: New USB device found, idVendor=2001, idProduct=3c1c, bcdDevice=c2.58 [ 92.581375][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.624373][ T5878] usb 2-1: can't set config #3, error -71 [ 92.637605][ T5875] usb 3-1: USB disconnect, device number 3 [ 92.646057][ T5878] usb 2-1: USB disconnect, device number 4 [ 92.652853][ T6350] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.94'. [ 92.675817][ T6350] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 92.945532][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 93.271737][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 93.271755][ T29] audit: type=1400 audit(1732010788.136:287): avc: denied { create } for pid=6353 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.304544][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.362835][ T29] audit: type=1400 audit(1732010788.146:288): avc: denied { write } for pid=6353 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.468990][ T29] audit: type=1400 audit(1732010788.146:289): avc: denied { nlmsg_read } for pid=6353 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.514021][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 93.666481][ T44] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 93.829058][ T44] usb 4-1: config 0 has no interface number 0 [ 94.160078][ T29] audit: type=1400 audit(1732010789.076:290): avc: denied { read } for pid=6369 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.431993][ T5907] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 94.635027][ T6370] ax25_connect(): syz.2.99 uses autobind, please contact jreuter@yaina.de [ 94.681365][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.720421][ T5907] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 94.754632][ T5907] usb 3-1: can't read configurations, error -71 [ 94.879564][ T44] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 94.888754][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.898465][ T44] usb 4-1: Product: syz [ 94.902846][ T44] usb 4-1: Manufacturer: syz [ 94.907546][ T44] usb 4-1: SerialNumber: syz [ 94.915109][ T44] usb 4-1: config 0 descriptor?? [ 95.132333][ T44] usb 4-1: USB disconnect, device number 6 [ 95.202654][ T6364] netlink: 188 bytes leftover after parsing attributes in process `syz.0.96'. [ 95.322537][ T29] audit: type=1400 audit(1732010790.246:291): avc: denied { bind } for pid=6377 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.360991][ T29] audit: type=1400 audit(1732010790.276:292): avc: denied { map } for pid=6377 comm="syz.1.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.391908][ T29] audit: type=1400 audit(1732010790.306:293): avc: denied { execute } for pid=6377 comm="syz.1.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.450053][ T6381] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.786098][ T29] audit: type=1400 audit(1732010790.706:294): avc: denied { mount } for pid=6377 comm="syz.1.102" name="/" dev="gadgetfs" ino=9973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 96.032109][ T29] audit: type=1400 audit(1732010790.886:295): avc: denied { connect } for pid=6394 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.032153][ T29] audit: type=1400 audit(1732010790.896:296): avc: denied { write } for pid=6394 comm="syz.3.107" path="socket:[9977]" dev="sockfs" ino=9977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.791667][ T44] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 96.810192][ T6406] netlink: 'syz.4.111': attribute type 4 has an invalid length. [ 96.810221][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 97.011277][ T6403] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 97.133312][ T44] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 97.142941][ T44] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 97.151117][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 97.169806][ T44] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 97.181938][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 97.220647][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.509950][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 97.728134][ T44] usb 2-1: string descriptor 0 read error: -22 [ 97.755601][ T44] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 97.771338][ T6430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.864179][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.939620][ T44] usb 2-1: config 0 descriptor?? [ 97.988516][ T44] hub 2-1:0.0: bad descriptor, ignoring hub [ 98.009342][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 98.081796][ T44] hub 2-1:0.0: probe with driver hub failed with error -5 [ 98.134647][ T44] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 98.290029][ T44] usb 2-1: USB disconnect, device number 5 [ 98.487838][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 98.487854][ T29] audit: type=1400 audit(1732010793.406:304): avc: denied { create } for pid=6444 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.514766][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.242135][ T25] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 99.251254][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.262654][ T25] usb 3-1: config 0 descriptor?? [ 99.270881][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 99.502990][ T25] gp8psk: usb in 128 operation failed. [ 99.555467][ T29] audit: type=1400 audit(1732010794.446:305): avc: denied { ioctl } for pid=6455 comm="syz.1.121" path="socket:[10402]" dev="sockfs" ino=10402 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.580279][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.617020][ T6458] netlink: 116 bytes leftover after parsing attributes in process `syz.1.121'. [ 99.714544][ T25] gp8psk: usb in 137 operation failed. [ 99.714597][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.717265][ T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 99.717305][ T25] usb 3-1: media controller created [ 99.725174][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.770975][ T25] gp8psk_fe: Frontend attached [ 99.771426][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 99.782118][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 99.858656][ T25] gp8psk: usb in 138 operation failed. [ 99.858678][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 99.858691][ T25] gp8psk: found Genpix USB device pID = 203 (hex) [ 99.866467][ T25] usb 3-1: USB disconnect, device number 6 [ 100.026664][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 101.196364][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.353073][ T29] audit: type=1400 audit(1732010796.276:306): avc: denied { write } for pid=6478 comm="syz.0.126" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.472726][ T6479] block nbd0: NBD_DISCONNECT [ 101.493655][ T29] audit: type=1400 audit(1732010796.416:307): avc: denied { create } for pid=6478 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.527025][ T6479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6479 comm=syz.0.126 [ 101.568726][ T6478] block nbd0: Disconnected due to user request. [ 101.577298][ T6478] block nbd0: shutting down sockets [ 102.503889][ T6489] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.128'. [ 102.979347][ T29] audit: type=1400 audit(1732010797.896:308): avc: denied { connect } for pid=6481 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.002996][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.029321][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.092803][ T29] audit: type=1400 audit(1732010798.016:309): avc: denied { write } for pid=6481 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.112257][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.191737][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.879564][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 104.001676][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 104.002123][ T29] audit: type=1400 audit(1732010798.696:310): avc: denied { rename } for pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.008266][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.028986][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.030146][ T29] audit: type=1400 audit(1732010798.696:311): avc: denied { unlink } for pid=5184 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.040253][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.046212][ T29] audit: type=1400 audit(1732010798.696:312): avc: denied { create } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.117702][ T5907] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 104.126929][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.322156][ T5907] usb 4-1: config 0 descriptor?? [ 105.247294][ T5907] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 105.431810][ T5907] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 105.460280][ T5907] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5 [ 106.113020][ T29] audit: type=1400 audit(1732010801.026:313): avc: denied { ioctl } for pid=6526 comm="syz.1.140" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.162586][ T29] audit: type=1400 audit(1732010801.076:314): avc: denied { write } for pid=6525 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 106.637544][ T6541] NILFS (nullb0): couldn't find nilfs on the device [ 107.573440][ T6537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.614579][ T29] audit: type=1400 audit(1732010802.526:315): avc: denied { bind } for pid=6493 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.754581][ T29] audit: type=1400 audit(1732010802.536:316): avc: denied { write } for pid=6493 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.879053][ T29] audit: type=1400 audit(1732010802.796:317): avc: denied { getopt } for pid=6543 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.956978][ T6548] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 108.169601][ T1202] usb 4-1: USB disconnect, device number 7 [ 108.445642][ T29] audit: type=1400 audit(1732010802.956:318): avc: denied { setopt } for pid=6543 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.924222][ T29] audit: type=1400 audit(1732010803.806:319): avc: denied { create } for pid=6556 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.944083][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.678819][ T6565] netlink: 6516 bytes leftover after parsing attributes in process `syz.4.147'. [ 109.722436][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 109.722455][ T29] audit: type=1400 audit(1732010804.576:321): avc: denied { create } for pid=6563 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.912774][ T29] audit: type=1400 audit(1732010804.576:322): avc: denied { write } for pid=6563 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.956702][ T29] audit: type=1400 audit(1732010804.576:323): avc: denied { nlmsg_read } for pid=6563 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.978996][ T29] audit: type=1400 audit(1732010804.626:324): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.546920][ T29] audit: type=1400 audit(1732010805.456:325): avc: denied { create } for pid=6571 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.692722][ T29] audit: type=1400 audit(1732010805.576:326): avc: denied { write } for pid=6571 comm="syz.1.149" path="socket:[11525]" dev="sockfs" ino=11525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.715888][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.381754][ T5907] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 111.536210][ T5907] usb 4-1: device descriptor read/64, error -71 [ 111.912796][ T5907] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 111.933641][ T6602] syz.1.159 uses obsolete (PF_INET,SOCK_PACKET) [ 112.045745][ T29] audit: type=1400 audit(1732010806.966:327): avc: denied { sys_module } for pid=6600 comm="syz.1.159" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.082959][ T5907] usb 4-1: device descriptor read/64, error -71 [ 112.215025][ T5907] usb usb4-port1: attempt power cycle [ 112.326638][ T29] audit: type=1400 audit(1732010807.246:328): avc: denied { audit_write } for pid=6609 comm="syz.1.161" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.582510][ T5907] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 112.627367][ T5907] usb 4-1: device descriptor read/8, error -71 [ 113.299790][ T5907] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 113.435263][ T5907] usb 4-1: device descriptor read/8, error -71 [ 113.443721][ T29] audit: type=1400 audit(1732010808.356:329): avc: denied { setopt } for pid=6616 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.473591][ T29] audit: type=1400 audit(1732010808.366:330): avc: denied { bind } for pid=6616 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.655065][ T5907] usb usb4-port1: unable to enumerate USB device [ 114.326833][ T6629] SELinux: policydb magic number 0xf906ff8c does not match expected magic number 0xf97cff8c [ 114.351996][ T6629] SELinux: failed to load policy [ 115.074003][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 115.074018][ T29] audit: type=1800 audit(1732010809.996:332): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.169" name="/newroot/30/file0" dev="tmpfs" ino=183 res=0 errno=0 [ 115.103820][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.413535][ T29] audit: type=1400 audit(1732010810.306:333): avc: denied { shutdown } for pid=6656 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.433145][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.681716][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.709559][ T29] audit: type=1400 audit(1732010810.626:334): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.765418][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 115.854206][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 115.877716][ T5879] usb 2-1: config 11 has an invalid interface number: 109 but max is 0 [ 115.921623][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 115.973532][ T5878] usb 3-1: can't read configurations, error -61 [ 116.015036][ T5879] usb 2-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 116.106054][ T5879] usb 2-1: config 11 has no interface number 0 [ 116.160463][ T5879] usb 2-1: config 11 interface 109 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.264990][ T5879] usb 2-1: config 11 interface 109 has no altsetting 0 [ 116.332702][ T5879] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01af, bcdDevice=93.6d [ 116.341961][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.350013][ T5879] usb 2-1: Product: syz [ 116.354820][ T5879] usb 2-1: Manufacturer: Ó¿ [ 116.359355][ T5879] usb 2-1: SerialNumber: syz [ 116.432573][ T5878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.575414][ T6673] Bluetooth: MGMT ver 1.23 [ 116.979698][ T29] audit: type=1400 audit(1732010811.496:335): avc: denied { write } for pid=6665 comm="syz.3.175" path="socket:[10757]" dev="sockfs" ino=10757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.041832][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 117.052712][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.060534][ T5878] usb 3-1: can't read configurations, error -61 [ 117.087730][ T5878] usb usb3-port1: attempt power cycle [ 117.544049][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.644139][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 117.712436][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.731644][ T5878] usb 3-1: can't read configurations, error -61 [ 117.911758][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.086190][ T29] audit: type=1400 audit(1732010813.006:336): avc: denied { watch watch_reads } for pid=6680 comm="syz.2.179" path="/proc/144" dev="proc" ino=10770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.151655][ T5878] usb 3-1: device not accepting address 10, error -71 [ 118.159855][ T5878] usb usb3-port1: unable to enumerate USB device [ 118.206557][ T5879] ftdi_sio 2-1:11.109: FTDI USB Serial Device converter detected [ 118.230983][ T5879] ftdi_sio ttyUSB0: unknown device type: 0x936d [ 118.239749][ T5879] usb 2-1: USB disconnect, device number 6 [ 118.252656][ T5879] ftdi_sio 2-1:11.109: device disconnected [ 118.299639][ T29] audit: type=1400 audit(1732010813.216:337): avc: denied { setopt } for pid=6685 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.537173][ T6688] FAULT_INJECTION: forcing a failure. [ 118.537173][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 118.555948][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.0.181 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 118.566233][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 118.576299][ T6688] Call Trace: [ 118.579574][ T6688] [ 118.582675][ T6688] dump_stack_lvl+0x16c/0x1f0 [ 118.587358][ T6688] should_fail_ex+0x497/0x5b0 [ 118.592042][ T6688] ? fs_reclaim_acquire+0xae/0x150 [ 118.597148][ T6688] should_failslab+0xc2/0x120 [ 118.601824][ T6688] __kmalloc_cache_noprof+0x6b/0x300 [ 118.607101][ T6688] ? copy_mount_options+0x55/0x190 [ 118.612207][ T6688] ? _copy_from_user+0x59/0xd0 [ 118.616964][ T6688] copy_mount_options+0x55/0x190 [ 118.621897][ T6688] __x64_sys_mount+0x1ad/0x320 [ 118.626655][ T6688] ? __pfx___x64_sys_mount+0x10/0x10 [ 118.631945][ T6688] do_syscall_64+0xcd/0x250 [ 118.636447][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.642348][ T6688] RIP: 0033:0x7f958577e759 [ 118.646762][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.666367][ T6688] RSP: 002b:00007f9583bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.674781][ T6688] RAX: ffffffffffffffda RBX: 00007f9585935f80 RCX: 00007f958577e759 [ 118.682744][ T6688] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 118.690704][ T6688] RBP: 00007f9583bf6090 R08: 0000000020000580 R09: 0000000000000000 [ 118.698668][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.706628][ T6688] R13: 0000000000000000 R14: 00007f9585935f80 R15: 00007fff5a4f8898 [ 118.714599][ T6688] [ 118.718524][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.785435][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.794807][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.801971][ T6707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.837397][ T29] audit: type=1400 audit(1732010814.686:338): avc: denied { append } for pid=6699 comm="syz.0.184" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.918907][ T29] audit: type=1400 audit(1732010815.836:339): avc: denied { read } for pid=6714 comm="syz.4.190" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.011802][ T29] audit: type=1400 audit(1732010815.836:340): avc: denied { open } for pid=6714 comm="syz.4.190" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.121937][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.178264][ T6720] befs: (nbd3): No write support. Marking filesystem read-only [ 122.190383][ T6720] syz.3.191: attempt to access beyond end of device [ 122.190383][ T6720] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 122.205310][ T6720] befs: (nbd3): unable to read superblock [ 122.214522][ T29] audit: type=1400 audit(1732010817.066:341): avc: denied { ioctl } for pid=6717 comm="syz.3.191" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 122.373475][ T29] audit: type=1400 audit(1732010817.086:342): avc: denied { mounton } for pid=6717 comm="syz.3.191" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.397101][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.422053][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 122.433100][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 122.440716][ T5875] usb 2-1: can't read configurations, error -61 [ 122.577820][ T29] audit: type=1400 audit(1732010817.406:343): avc: denied { read } for pid=6714 comm="syz.4.190" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.610499][ T6731] Bluetooth: MGMT ver 1.23 [ 122.641213][ T5875] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.652761][ T6734] FAULT_INJECTION: forcing a failure. [ 122.652761][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 122.677059][ T29] audit: type=1400 audit(1732010817.406:344): avc: denied { open } for pid=6714 comm="syz.4.190" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.693074][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.0.194 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 122.711119][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 122.721170][ T6734] Call Trace: [ 122.724442][ T6734] [ 122.727362][ T6734] dump_stack_lvl+0x16c/0x1f0 [ 122.732044][ T6734] should_fail_ex+0x497/0x5b0 [ 122.736736][ T6734] ? fs_reclaim_acquire+0xae/0x150 [ 122.741862][ T6734] should_failslab+0xc2/0x120 [ 122.746546][ T6734] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 122.752875][ T6734] ? vfs_parse_fs_string+0xc4/0x150 [ 122.758070][ T6734] kmemdup_nul+0x49/0xf0 [ 122.762308][ T6734] vfs_parse_fs_string+0xc4/0x150 [ 122.767327][ T6734] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 122.772960][ T6734] ? ovl_next_opt+0x143/0x1c0 [ 122.777636][ T6734] ? __pfx_ovl_next_opt+0x10/0x10 [ 122.782653][ T6734] vfs_parse_monolithic_sep+0x175/0x1f0 [ 122.788220][ T6734] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 122.794732][ T6734] ? alloc_fs_context+0x59b/0x9c0 [ 122.799756][ T6734] path_mount+0x149f/0x1f20 [ 122.804259][ T6734] ? kmem_cache_free+0x152/0x4b0 [ 122.809189][ T6734] ? __pfx_path_mount+0x10/0x10 [ 122.814051][ T6734] ? putname+0x13c/0x180 [ 122.818292][ T6734] __x64_sys_mount+0x294/0x320 [ 122.823050][ T6734] ? __pfx___x64_sys_mount+0x10/0x10 [ 122.828333][ T6734] do_syscall_64+0xcd/0x250 [ 122.832838][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.838730][ T6734] RIP: 0033:0x7f958577e759 [ 122.843145][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.862747][ T6734] RSP: 002b:00007f9583bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.871155][ T6734] RAX: ffffffffffffffda RBX: 00007f9585935f80 RCX: 00007f958577e759 [ 122.879117][ T6734] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 122.887165][ T6734] RBP: 00007f9583bf6090 R08: 0000000020000080 R09: 0000000000000000 [ 122.895130][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.903090][ T6734] R13: 0000000000000000 R14: 00007f9585935f80 R15: 00007fff5a4f8898 [ 122.911061][ T6734] [ 122.914125][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.171640][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 123.180843][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 123.188595][ T5875] usb 2-1: can't read configurations, error -61 [ 123.205438][ T5875] usb usb2-port1: attempt power cycle [ 124.197931][ T29] audit: type=1400 audit(1732010819.116:345): avc: denied { watch watch_reads } for pid=6751 comm="syz.1.201" path="/36" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.942182][ T5875] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 125.439847][ T5875] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.512966][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 125.520986][ T5875] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 125.535577][ T5875] usb 2-1: can't read configurations, error -22 [ 125.543706][ T5875] usb usb2-port1: unable to enumerate USB device [ 126.101643][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.265926][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.293297][ T5875] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 126.321640][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 109, changing to 10 [ 126.351796][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 42584, setting to 1024 [ 126.381697][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.411646][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.451480][ T6781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.493733][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.501387][ T5875] usb 4-1: invalid MIDI out EP 0 [ 126.640629][ T5875] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 127.150112][ T44] usb 4-1: USB disconnect, device number 12 [ 128.303028][ T6265] udevd[6265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.970190][ T6833] xt_nat: multiple ranges no longer supported [ 129.014564][ T6835] binder: 6834:6835 ioctl 80106720 20000240 returned -22 [ 129.196148][ T6838] xt_nat: multiple ranges no longer supported [ 129.420907][ T6824] FAULT_INJECTION: forcing a failure. [ 129.420907][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.642176][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.3.219 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 129.652481][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 129.662550][ T6824] Call Trace: [ 129.665830][ T6824] [ 129.668762][ T6824] dump_stack_lvl+0x16c/0x1f0 [ 129.673471][ T6824] should_fail_ex+0x497/0x5b0 [ 129.678174][ T6824] strncpy_from_user+0x3b/0x2c0 [ 129.683140][ T6824] getname_flags.part.0+0x8f/0x550 [ 129.688266][ T6824] getname+0x8d/0xe0 [ 129.692180][ T6824] do_sys_openat2+0x104/0x1e0 [ 129.696870][ T6824] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.702088][ T6824] ? __fget_files+0x206/0x3a0 [ 129.706785][ T6824] __x64_sys_openat+0x175/0x210 [ 129.711659][ T6824] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.717047][ T6824] ? ksys_write+0x1ba/0x250 [ 129.721571][ T6824] do_syscall_64+0xcd/0x250 [ 129.726087][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.731975][ T6824] RIP: 0033:0x7f2687d7d0f0 [ 129.736393][ T6824] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 129.756008][ T6824] RSP: 002b:00007f2688b6ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 129.764420][ T6824] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2687d7d0f0 [ 129.772383][ T6824] RDX: 0000000000000002 RSI: 00007f2688b6ac10 RDI: 00000000ffffff9c [ 129.780345][ T6824] RBP: 00007f2688b6ac10 R08: 0000000000000000 R09: 00007f2688b6a986 [ 129.788307][ T6824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 129.796268][ T6824] R13: 0000000000000000 R14: 00007f2687f35f80 R15: 00007fff731d97f8 [ 129.804272][ T6824] [ 129.807322][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.945114][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 130.613544][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.832940][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 130.840447][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.858673][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.869103][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 130.886970][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 130.947635][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.105540][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.655963][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 131.666595][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 131.680872][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 131.689515][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 131.700632][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 131.720105][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.922668][ T29] audit: type=1400 audit(1732010826.836:346): avc: denied { connect } for pid=6877 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.151965][ T965] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 132.226182][ T29] audit: type=1400 audit(1732010827.146:347): avc: denied { setattr } for pid=6885 comm="syz.3.235" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.304826][ T29] audit: type=1400 audit(1732010827.146:348): avc: denied { write } for pid=6885 comm="syz.3.235" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.335042][ T29] audit: type=1400 audit(1732010827.146:349): avc: denied { open } for pid=6885 comm="syz.3.235" path="/46/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.361854][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.375507][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.385833][ T965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.402317][ T965] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 132.407931][ T6843] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 132.411477][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.479658][ T965] usb 5-1: config 0 descriptor?? [ 132.724628][ T29] audit: type=1400 audit(1732010827.626:350): avc: denied { mount } for pid=6875 comm="syz.4.232" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.983383][ T965] a4tech 0003:09DA:022B.0003: item fetching failed at offset 5/7 [ 133.021843][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031163][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074148][ T965] a4tech 0003:09DA:022B.0003: parse failed [ 133.080196][ T965] a4tech 0003:09DA:022B.0003: probe with driver a4tech failed with error -22 [ 133.124819][ T5879] usb 3-1: USB disconnect, device number 11 [ 134.348486][ T29] audit: type=1400 audit(1732010829.266:351): avc: denied { read write } for pid=6899 comm="syz.0.238" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.372027][ T965] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 134.433308][ T29] audit: type=1400 audit(1732010829.266:352): avc: denied { open } for pid=6899 comm="syz.0.238" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.494812][ T6876] syz.4.232 (6876): drop_caches: 2 [ 134.498350][ T5907] usb 5-1: USB disconnect, device number 6 [ 134.563551][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.576757][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.576781][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.576795][ T965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 134.576816][ T965] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 134.576830][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.578155][ T965] usb 3-1: config 0 descriptor?? [ 134.678145][ T29] audit: type=1400 audit(1732010829.596:353): avc: denied { sqpoll } for pid=6916 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.906974][ T6906] syz.2.239 (6906): drop_caches: 2 [ 134.956119][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.244'. [ 134.962426][ T29] audit: type=1400 audit(1732010829.886:354): avc: denied { ioctl } for pid=6921 comm="syz.3.244" path="socket:[12249]" dev="sockfs" ino=12249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.962786][ T29] audit: type=1400 audit(1732010829.886:355): avc: denied { write } for pid=6921 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.282080][ T6925] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 135.484211][ T965] a4tech 0003:09DA:022B.0004: item fetching failed at offset 5/7 [ 135.485931][ T965] a4tech 0003:09DA:022B.0004: parse failed [ 135.486202][ T965] a4tech 0003:09DA:022B.0004: probe with driver a4tech failed with error -22 [ 136.498792][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.246'. [ 136.549158][ T6935] process 'syz.3.247' launched './file0' with NULL argv: empty string added [ 136.588699][ T5879] usb 3-1: USB disconnect, device number 12 [ 137.517099][ T6945] binder: 6942:6945 ioctl 80106720 20000240 returned -22 [ 138.186114][ T6964] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 140.106902][ T965] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 140.317748][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.330737][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.341610][ T965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.354626][ T965] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 140.363848][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.422588][ T965] usb 3-1: config 0 descriptor?? [ 140.464342][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 140.464358][ T29] audit: type=1400 audit(1732010835.376:359): avc: denied { bind } for pid=6974 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.035420][ T6968] syz.2.255 (6968): drop_caches: 2 [ 141.835939][ T29] audit: type=1326 audit(1732010836.756:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 141.866159][ T29] audit: type=1326 audit(1732010836.786:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 141.938130][ T29] audit: type=1326 audit(1732010836.786:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 141.979713][ T965] a4tech 0003:09DA:022B.0005: item fetching failed at offset 5/7 [ 142.000932][ T965] a4tech 0003:09DA:022B.0005: parse failed [ 142.034860][ T965] a4tech 0003:09DA:022B.0005: probe with driver a4tech failed with error -22 [ 142.051266][ T29] audit: type=1326 audit(1732010836.786:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 142.303834][ T29] audit: type=1326 audit(1732010836.786:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 142.413612][ T965] usb 3-1: USB disconnect, device number 13 [ 142.604803][ T29] audit: type=1326 audit(1732010836.816:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 142.661742][ T29] audit: type=1326 audit(1732010836.816:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 142.684958][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.696683][ T29] audit: type=1326 audit(1732010836.816:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 142.721149][ T29] audit: type=1326 audit(1732010836.816:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f958577e759 code=0x7ffc0000 [ 144.437306][ T7028] usb usb8: usbfs: process 7028 (syz.4.272) did not claim interface 0 before use [ 145.799498][ T7044] pim6reg: entered allmulticast mode [ 145.871710][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 145.871726][ T29] audit: type=1400 audit(1732010840.776:376): avc: denied { create } for pid=7043 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.962008][ T29] audit: type=1400 audit(1732010840.786:377): avc: denied { getopt } for pid=7043 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.191780][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.328217][ T7054] binder: 7053:7054 ioctl 80106720 20000240 returned -22 [ 146.409336][ T5875] usb 2-1: device descriptor read/64, error -71 [ 146.954285][ T5875] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.239132][ T5875] usb 2-1: device descriptor read/64, error -71 [ 147.687517][ T5875] usb usb2-port1: attempt power cycle [ 148.100023][ T29] audit: type=1400 audit(1732010842.966:378): avc: denied { getopt } for pid=7079 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.365112][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.483185][ T5875] usb 2-1: device descriptor read/8, error -71 [ 148.928188][ T29] audit: type=1400 audit(1732010843.836:379): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 148.948420][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.996223][ T7092] binder: 7091:7092 ioctl 80106720 20000240 returned -22 [ 150.914809][ T29] audit: type=1400 audit(1732010845.836:380): avc: denied { getopt } for pid=7087 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.697515][ T7135] netlink: 277 bytes leftover after parsing attributes in process `syz.3.303'. [ 153.734860][ T29] audit: type=1400 audit(1732010848.656:381): avc: denied { read } for pid=7137 comm="syz.2.304" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.812736][ T29] audit: type=1400 audit(1732010848.656:382): avc: denied { open } for pid=7137 comm="syz.2.304" path="/dev/ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.851640][ T29] audit: type=1400 audit(1732010848.686:383): avc: denied { ioctl } for pid=7137 comm="syz.2.304" path="/dev/ppp" dev="devtmpfs" ino=713 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.950010][ T7147] binder: 7143:7147 ioctl 80106720 20000240 returned -22 [ 153.976266][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 153.990228][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 154.265909][ T7154] netlink: ct family unspecified [ 154.271357][ T7154] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.632136][ T965] libceph: connect (1)[c::]:6789 error -101 [ 154.638399][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 155.554725][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 155.561661][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 155.666832][ T7140] ceph: No mds server is up or the cluster is laggy [ 155.909000][ T7172] FAULT_INJECTION: forcing a failure. [ 155.909000][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 155.962174][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.4.314 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 155.972452][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 155.982525][ T7172] Call Trace: [ 155.985804][ T7172] [ 155.988726][ T7172] dump_stack_lvl+0x16c/0x1f0 [ 155.993408][ T7172] should_fail_ex+0x497/0x5b0 [ 155.998083][ T7172] ? fs_reclaim_acquire+0xae/0x150 [ 156.003192][ T7172] should_failslab+0xc2/0x120 [ 156.007871][ T7172] __kmalloc_noprof+0xcb/0x400 [ 156.012636][ T7172] ? __d_alloc+0x31/0xaa0 [ 156.016966][ T7172] __d_alloc+0x63f/0xaa0 [ 156.021210][ T7172] ? mark_lock+0xb5/0xc60 [ 156.025536][ T7172] d_alloc+0x4a/0x1e0 [ 156.029515][ T7172] d_alloc_parallel+0xe9/0x12b0 [ 156.034369][ T7172] ? __d_lookup+0x25c/0x4a0 [ 156.038877][ T7172] ? trace_lock_acquire+0x14a/0x1d0 [ 156.044081][ T7172] ? __pfx_d_alloc_parallel+0x10/0x10 [ 156.049479][ T7172] ? __d_lookup+0x266/0x4a0 [ 156.054007][ T7172] lookup_open.isra.0+0xab5/0x14c0 [ 156.059123][ T7172] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 156.064664][ T7172] ? rcu_is_watching+0x12/0xc0 [ 156.069429][ T7172] ? lock_acquire+0x2f/0xb0 [ 156.073941][ T7172] ? path_openat+0x153e/0x2d60 [ 156.078706][ T7172] ? __pfx_down_write+0x10/0x10 [ 156.083563][ T7172] ? mnt_get_write_access+0x20c/0x300 [ 156.088939][ T7172] path_openat+0x904/0x2d60 [ 156.093448][ T7172] ? __pfx_path_openat+0x10/0x10 [ 156.098381][ T7172] ? __pfx___lock_acquire+0x10/0x10 [ 156.103578][ T7172] do_filp_open+0x20c/0x470 [ 156.108081][ T7172] ? __pfx_do_filp_open+0x10/0x10 [ 156.113103][ T7172] ? find_held_lock+0x2d/0x110 [ 156.117880][ T7172] ? _raw_spin_unlock+0x28/0x50 [ 156.122727][ T7172] ? alloc_fd+0x41f/0x760 [ 156.127067][ T7172] do_sys_openat2+0x17a/0x1e0 [ 156.131773][ T7172] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.136979][ T7172] ? __fget_files+0x206/0x3a0 [ 156.141661][ T7172] __x64_sys_creat+0xcd/0x120 [ 156.146339][ T7172] ? __pfx___x64_sys_creat+0x10/0x10 [ 156.151621][ T7172] ? __pfx_ksys_write+0x10/0x10 [ 156.156468][ T7172] ? do_syscall_64+0x91/0x250 [ 156.161147][ T7172] do_syscall_64+0xcd/0x250 [ 156.165654][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.171577][ T7172] RIP: 0033:0x7f7c6e37e759 [ 156.175988][ T7172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.195596][ T7172] RSP: 002b:00007f7c6f163038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 156.204028][ T7172] RAX: ffffffffffffffda RBX: 00007f7c6e535f80 RCX: 00007f7c6e37e759 [ 156.211993][ T7172] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000020000dc0 [ 156.219988][ T7172] RBP: 00007f7c6f163090 R08: 0000000000000000 R09: 0000000000000000 [ 156.227957][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.235926][ T7172] R13: 0000000000000000 R14: 00007f7c6e535f80 R15: 00007ffd966342e8 [ 156.243905][ T7172] [ 156.710945][ T7177] nbd: must specify a device to reconfigure [ 156.739583][ T29] audit: type=1400 audit(1732010851.656:384): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 156.982800][ T29] audit: type=1400 audit(1732010851.886:385): avc: denied { ioctl } for pid=7173 comm="syz.3.316" path="socket:[13714]" dev="sockfs" ino=13714 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.030342][ T25] libceph: connect (1)[c::]:6789 error -101 [ 157.539583][ T29] audit: type=1400 audit(1732010851.906:386): avc: denied { create } for pid=7173 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 157.990863][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 158.074893][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.321'. [ 158.846560][ T29] audit: type=1400 audit(1732010853.766:387): avc: denied { write } for pid=7210 comm="syz.0.327" name="fdinfo" dev="proc" ino=13743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.870383][ T29] audit: type=1400 audit(1732010853.766:388): avc: denied { add_name } for pid=7210 comm="syz.0.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 158.870580][ T29] audit: type=1400 audit(1732010853.766:389): avc: denied { create } for pid=7210 comm="syz.0.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 158.942994][ T7217] fuse: Bad value for 'fd' [ 159.184860][ T29] audit: type=1400 audit(1732010853.766:390): avc: denied { associate } for pid=7210 comm="syz.0.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.452935][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 160.022789][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 160.036880][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.054200][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.143187][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 160.188188][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 160.329246][ T7237] netlink: 'syz.2.334': attribute type 16 has an invalid length. [ 160.338453][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 160.358814][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.367088][ T7237] netlink: 'syz.2.334': attribute type 3 has an invalid length. [ 160.396871][ T25] hub 2-1:1.0: bad descriptor, ignoring hub [ 160.403292][ T7237] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.334'. [ 160.440497][ T25] hub 2-1:1.0: probe with driver hub failed with error -5 [ 160.496402][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 160.509295][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 160.538374][ T29] audit: type=1400 audit(1732010855.456:391): avc: denied { setopt } for pid=7215 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.614515][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 160.628710][ T7245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7245 comm=syz.0.335 [ 160.657329][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 160.951200][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 160.964589][ T25] usb 2-1: USB disconnect, device number 15 [ 160.992631][ T7245] netlink: 'syz.0.335': attribute type 11 has an invalid length. [ 161.000548][ T7245] netlink: 'syz.0.335': attribute type 13 has an invalid length. [ 161.077251][ T7245] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.086546][ T7245] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.095315][ T7245] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.104126][ T7245] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.138126][ T7245] vxlan0: entered promiscuous mode [ 162.014497][ T5875] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.203794][ T5907] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.660174][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 162.667763][ T7268] netlink: 'syz.2.343': attribute type 12 has an invalid length. [ 162.755662][ T5875] usb 2-1: device descriptor read/all, error -71 [ 163.298508][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.309835][ T5907] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 163.442529][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.676303][ T5907] usb 5-1: config 0 descriptor?? [ 165.022013][ T5907] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 165.087948][ T965] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 165.126677][ T5907] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 165.197243][ T5907] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -38 [ 166.062314][ T965] usb 3-1: device descriptor read/all, error -71 [ 166.177912][ T25] usb 5-1: USB disconnect, device number 7 [ 167.093135][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 168.345184][ T29] audit: type=1326 audit(1732010863.226:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 168.590492][ T29] audit: type=1326 audit(1732010863.226:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 168.638826][ T29] audit: type=1326 audit(1732010863.226:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 168.816684][ T7352] xt_HMARK: proto mask must be zero with L3 mode [ 169.122450][ T29] audit: type=1326 audit(1732010863.226:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.175834][ T29] audit: type=1326 audit(1732010863.226:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.288392][ T29] audit: type=1326 audit(1732010863.226:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.592769][ T25] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 169.736217][ T29] audit: type=1326 audit(1732010863.226:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.821014][ T29] audit: type=1326 audit(1732010863.226:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.841985][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.862688][ T25] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 169.887293][ T25] usb 1-1: config 179 has no interface number 0 [ 169.890028][ T29] audit: type=1326 audit(1732010863.226:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 169.911678][ T25] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.955060][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.989733][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.027166][ T29] audit: type=1326 audit(1732010863.236:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2687d7e759 code=0x7fc00000 [ 170.271433][ T44] usb 1-1: USB disconnect, device number 10 [ 170.431695][ T5878] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 170.776973][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.821822][ T5878] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.829437][ T5878] usb 5-1: can't read configurations, error -71 [ 172.795978][ T7431] xt_hashlimit: size too large, truncated to 1048576 [ 172.802945][ T5875] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.102706][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 173.198620][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.653362][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.681717][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 173.701271][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 173.738398][ T5875] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.772097][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.800844][ T5875] hub 1-1:1.0: bad descriptor, ignoring hub [ 173.806865][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 173.806876][ T29] audit: type=1400 audit(1732010868.716:462): avc: denied { ioctl } for pid=7421 comm="syz.0.384" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.837598][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.853733][ T5875] hub 1-1:1.0: probe with driver hub failed with error -5 [ 173.867533][ T5875] cdc_wdm 1-1:1.0: skipping garbage [ 173.881577][ T5875] cdc_wdm 1-1:1.0: skipping garbage [ 173.890944][ T29] audit: type=1400 audit(1732010868.806:463): avc: denied { read write } for pid=5840 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.899434][ T5875] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 173.932392][ T7435] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 173.968528][ T29] audit: type=1400 audit(1732010868.836:464): avc: denied { open } for pid=5840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.995903][ T5875] cdc_wdm 1-1:1.0: Unknown control protocol [ 174.071440][ T5875] usb 1-1: USB disconnect, device number 11 [ 174.166006][ T29] audit: type=1400 audit(1732010868.846:465): avc: denied { ioctl } for pid=5840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.207824][ T29] audit: type=1400 audit(1732010868.886:466): avc: denied { append } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.237893][ T29] audit: type=1400 audit(1732010868.916:467): avc: denied { write } for pid=7421 comm="syz.0.384" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 175.171646][ T44] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 175.181151][ T29] audit: type=1400 audit(1732010868.996:468): avc: denied { create } for pid=7437 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 175.214716][ T29] audit: type=1400 audit(1732010869.016:469): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 175.251279][ T29] audit: type=1400 audit(1732010869.016:470): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.372041][ T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.389931][ T44] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 175.402734][ T29] audit: type=1400 audit(1732010869.016:471): avc: denied { open } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.624371][ T44] usb 5-1: config 179 has no interface number 0 [ 175.631084][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 175.645185][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 175.656513][ T44] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 175.670205][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.731013][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.799268][ T7449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 175.806067][ T7449] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.864083][ T7451] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 175.870639][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.892573][ T7442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.145596][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 176.267884][ T7449] vhci_hcd vhci_hcd.0: Device attached [ 176.313385][ T44] vhci_hcd: vhci_device speed not set [ 176.333055][ T7457] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 176.339700][ T7457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.379540][ T7451] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 176.379791][ T25] usb 5-1: USB disconnect, device number 10 [ 176.386180][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.401227][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 176.422067][ T7457] vhci_hcd vhci_hcd.0: Device attached [ 176.423387][ T44] usb 33-2: new full-speed USB device number 2 using vhci_hcd [ 176.454844][ T7461] vhci_hcd: connection closed [ 176.470174][ T7458] vhci_hcd: connection closed [ 176.487435][ T7455] vhci_hcd: connection reset by peer [ 176.498756][ T7453] vhci_hcd: connection closed [ 176.499197][ T12] vhci_hcd: stop threads [ 176.510912][ T12] vhci_hcd: release socket [ 176.529835][ T12] vhci_hcd: disconnect device [ 176.548124][ T12] vhci_hcd: stop threads [ 176.558126][ T12] vhci_hcd: release socket [ 176.565082][ T12] vhci_hcd: disconnect device [ 176.591581][ T12] vhci_hcd: stop threads [ 176.615745][ T12] vhci_hcd: release socket [ 176.640716][ T12] vhci_hcd: disconnect device [ 176.691618][ T12] vhci_hcd: stop threads [ 176.709723][ T12] vhci_hcd: release socket [ 176.714651][ T12] vhci_hcd: disconnect device [ 176.974255][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.761777][ T25] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 178.002293][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.027371][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 178.042565][ T25] usb 1-1: can't read configurations, error -71 [ 178.422228][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.521792][ T7502] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.403'. [ 178.551059][ T7501] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.403'. [ 178.593206][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 178.633352][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.699846][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 178.748068][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 178.835239][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 178.850419][ T5879] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.870980][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.944962][ T5879] hub 4-1:1.0: bad descriptor, ignoring hub [ 178.945731][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 178.945745][ T29] audit: type=1400 audit(1732010873.866:529): avc: denied { write } for pid=7503 comm="syz.0.404" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.990752][ T5879] hub 4-1:1.0: probe with driver hub failed with error -5 [ 179.011448][ T5879] cdc_wdm 4-1:1.0: skipping garbage [ 179.029775][ T5879] cdc_wdm 4-1:1.0: skipping garbage [ 179.047987][ T5879] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 179.065793][ T5879] cdc_wdm 4-1:1.0: Unknown control protocol [ 179.101119][ T29] audit: type=1400 audit(1732010873.876:530): avc: denied { read } for pid=7505 comm="syz.1.405" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.167431][ T29] audit: type=1400 audit(1732010873.876:531): avc: denied { open } for pid=7505 comm="syz.1.405" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.239342][ T29] audit: type=1400 audit(1732010874.016:532): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 179.267079][ T29] audit: type=1400 audit(1732010874.076:533): avc: denied { create } for pid=7508 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.267307][ T7506] binder: 7505:7506 ioctl c0306201 0 returned -14 [ 179.294707][ T29] audit: type=1400 audit(1732010874.186:534): avc: denied { ioctl } for pid=7505 comm="syz.1.405" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.514717][ T29] audit: type=1400 audit(1732010874.256:535): avc: denied { name_bind } for pid=7505 comm="syz.1.405" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 179.622052][ T5875] usb 4-1: USB disconnect, device number 13 [ 180.125814][ T29] audit: type=1400 audit(1732010874.256:536): avc: denied { node_bind } for pid=7505 comm="syz.1.405" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.292055][ T7519] overlayfs: missing 'lowerdir' [ 180.299743][ T29] audit: type=1400 audit(1732010875.216:537): avc: denied { write } for pid=7518 comm="syz.2.408" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.530439][ T7521] usb usb8: usbfs: process 7521 (syz.2.408) did not claim interface 0 before use [ 180.611723][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.832355][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 180.925780][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.050263][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.079283][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 181.170140][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 181.190779][ T5875] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.207880][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.261033][ T5875] usb 4-1: can't set config #1, error -71 [ 181.379065][ T5875] usb 4-1: USB disconnect, device number 14 [ 181.543405][ T44] vhci_hcd: vhci_device speed not set [ 182.011851][ T29] audit: type=1400 audit(1732010876.906:538): avc: denied { write } for pid=7527 comm="syz.3.410" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.089567][ T7530] team_slave_0: entered allmulticast mode [ 182.592649][ T25] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 183.610252][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.646741][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 183.711026][ T25] usb 2-1: can't read configurations, error -71 [ 183.826035][ T7552] overlayfs: missing 'lowerdir' [ 184.141652][ T7554] usb usb8: usbfs: process 7554 (syz.2.419) did not claim interface 0 before use [ 185.322434][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 185.322449][ T29] audit: type=1400 audit(1732010880.246:549): avc: denied { setopt } for pid=7559 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.628714][ T7566] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 185.632363][ T29] audit: type=1400 audit(1732010880.366:550): avc: denied { read } for pid=7559 comm="syz.0.422" path="socket:[15484]" dev="sockfs" ino=15484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.752220][ T7566] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.422'. [ 186.049047][ T29] audit: type=1400 audit(1732010880.906:551): avc: denied { read } for pid=7567 comm="syz.2.424" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.081622][ T29] audit: type=1400 audit(1732010880.906:552): avc: denied { open } for pid=7567 comm="syz.2.424" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.106416][ T29] audit: type=1400 audit(1732010880.906:553): avc: denied { ioctl } for pid=7567 comm="syz.2.424" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.131358][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.139368][ T29] audit: type=1400 audit(1732010880.966:554): avc: denied { create } for pid=7571 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.158576][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.164965][ T29] audit: type=1400 audit(1732010881.026:555): avc: denied { bind } for pid=7571 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.210524][ T29] audit: type=1400 audit(1732010881.126:556): avc: denied { ioctl } for pid=7576 comm="syz.4.427" path="socket:[14527]" dev="sockfs" ino=14527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.214262][ T7577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.698606][ T29] audit: type=1400 audit(1732010881.616:557): avc: denied { mount } for pid=7578 comm="syz.2.426" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.726315][ T29] audit: type=1400 audit(1732010881.646:558): avc: denied { remount } for pid=7578 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.800423][ T7582] FAULT_INJECTION: forcing a failure. [ 186.800423][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 186.844635][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.2.426 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 186.854906][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.864955][ T7582] Call Trace: [ 186.868223][ T7582] [ 186.871141][ T7582] dump_stack_lvl+0x16c/0x1f0 [ 186.875825][ T7582] should_fail_ex+0x497/0x5b0 [ 186.880495][ T7582] ? fs_reclaim_acquire+0xae/0x150 [ 186.885593][ T7582] should_failslab+0xc2/0x120 [ 186.890259][ T7582] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 186.895622][ T7582] ? getname_flags.part.0+0x4c/0x550 [ 186.900892][ T7582] ? fput+0x67/0x440 [ 186.904799][ T7582] getname_flags.part.0+0x4c/0x550 [ 186.909937][ T7582] ? __pfx_ksys_write+0x10/0x10 [ 186.914823][ T7582] getname_flags+0x93/0xf0 [ 186.919273][ T7582] __x64_sys_unlinkat+0xe4/0x130 [ 186.924226][ T7582] do_syscall_64+0xcd/0x250 [ 186.928746][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.934657][ T7582] RIP: 0033:0x7ff4d457e759 [ 186.939104][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.958744][ T7582] RSP: 002b:00007ff4d541f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 186.967164][ T7582] RAX: ffffffffffffffda RBX: 00007ff4d4736058 RCX: 00007ff4d457e759 [ 186.975132][ T7582] RDX: 0000000000000200 RSI: 0000000020000140 RDI: 0000000000000008 [ 186.983090][ T7582] RBP: 00007ff4d541f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.991071][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.999029][ T7582] R13: 0000000000000000 R14: 00007ff4d4736058 R15: 00007ffe6323f268 [ 187.007009][ T7582] [ 187.744032][ T7592] overlayfs: missing 'lowerdir' [ 188.087950][ T7596] usb usb8: usbfs: process 7596 (syz.2.431) did not claim interface 0 before use [ 188.307714][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 188.316792][ T7604] FAULT_INJECTION: forcing a failure. [ 188.316792][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.316846][ T7604] [ 188.316854][ T7604] ====================================================== [ 188.316860][ T7604] WARNING: possible circular locking dependency detected [ 188.316867][ T7604] 6.12.0-syzkaller-00239-gc6d64479d609 #0 Not tainted [ 188.316877][ T7604] ------------------------------------------------------ [ 188.316883][ T7604] syz.1.435/7604 is trying to acquire lock: [ 188.316894][ T7604] ffffffff8e1a6098 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 188.316955][ T7604] [ 188.316955][ T7604] but task is already holding lock: [ 188.316960][ T7604] ffff8880b863eed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 188.316999][ T7604] [ 188.316999][ T7604] which lock already depends on the new lock. [ 188.316999][ T7604] [ 188.317005][ T7604] [ 188.317005][ T7604] the existing dependency chain (in reverse order) is: [ 188.317010][ T7604] [ 188.317010][ T7604] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 188.317033][ T7604] _raw_spin_lock_nested+0x31/0x40 [ 188.317053][ T7604] raw_spin_rq_lock_nested+0x29/0x130 [ 188.317073][ T7604] task_rq_lock+0xcf/0x3b0 [ 188.317089][ T7604] cgroup_move_task+0x82/0x250 [ 188.317114][ T7604] css_set_move_task+0x288/0x5f0 [ 188.317138][ T7604] cgroup_post_fork+0x1c6/0x910 [ 188.317156][ T7604] copy_process+0x51a5/0x8cb0 [ 188.317178][ T7604] kernel_clone+0xfd/0x960 [ 188.317203][ T7604] user_mode_thread+0xb4/0xf0 [ 188.317224][ T7604] rest_init+0x23/0x2b0 [ 188.317240][ T7604] start_kernel+0x3e4/0x4d0 [ 188.317259][ T7604] x86_64_start_reservations+0x18/0x30 [ 188.317279][ T7604] x86_64_start_kernel+0xb2/0xc0 [ 188.317297][ T7604] common_startup_64+0x13e/0x148 [ 188.317318][ T7604] [ 188.317318][ T7604] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 188.317341][ T7604] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.317361][ T7604] try_to_wake_up+0xa1/0x14f0 [ 188.317378][ T7604] up+0x79/0xb0 [ 188.317404][ T7604] __up_console_sem+0x47/0xe0 [ 188.317421][ T7604] console_unlock+0x1dc/0x210 [ 188.317445][ T7604] vprintk_emit+0x424/0x6f0 [ 188.317464][ T7604] vprintk+0x7f/0xa0 [ 188.317485][ T7604] _printk+0xc8/0x100 [ 188.317504][ T7604] show_trace_log_lvl+0x1b7/0x3d0 [ 188.317520][ T7604] dump_stack_lvl+0x16c/0x1f0 [ 188.317544][ T7604] should_fail_ex+0x497/0x5b0 [ 188.317571][ T7604] should_failslab+0xc2/0x120 [ 188.317593][ T7604] kmem_cache_alloc_node_noprof+0x71/0x310 [ 188.317615][ T7604] __alloc_skb+0x2b1/0x380 [ 188.317643][ T7604] netlink_ack+0x164/0xb90 [ 188.317664][ T7604] netlink_rcv_skb+0x348/0x440 [ 188.317687][ T7604] crypto_netlink_rcv+0x2a/0x40 [ 188.317708][ T7604] netlink_unicast+0x53c/0x7f0 [ 188.317730][ T7604] netlink_sendmsg+0x8b8/0xd70 [ 188.317752][ T7604] __sys_sendto+0x488/0x4f0 [ 188.317776][ T7604] __x64_sys_sendto+0xe0/0x1c0 [ 188.317800][ T7604] do_syscall_64+0xcd/0x250 [ 188.317825][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.317848][ T7604] [ 188.317848][ T7604] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 188.317871][ T7604] __lock_acquire+0x250b/0x3ce0 [ 188.317887][ T7604] lock_acquire.part.0+0x11b/0x380 [ 188.317904][ T7604] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.317924][ T7604] down_trylock+0x12/0x70 [ 188.317950][ T7604] __down_trylock_console_sem+0x40/0x140 [ 188.317968][ T7604] vprintk_emit+0x3ec/0x6f0 [ 188.317988][ T7604] vprintk+0x7f/0xa0 [ 188.318009][ T7604] _printk+0xc8/0x100 [ 188.318024][ T7604] should_fail_ex+0x46c/0x5b0 [ 188.318049][ T7604] strncpy_from_user+0x3b/0x2c0 [ 188.318072][ T7604] strncpy_from_user_nofault+0x7f/0x180 [ 188.318095][ T7604] bpf_probe_read_user_str+0x26/0x70 [ 188.318116][ T7604] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 188.318130][ T7604] bpf_trace_run4+0x245/0x5a0 [ 188.318153][ T7604] __bpf_trace_sched_switch+0x13e/0x190 [ 188.318172][ T7604] __traceiter_sched_switch+0x6c/0xc0 [ 188.318189][ T7604] __schedule+0x19b0/0x5740 [ 188.318208][ T7604] preempt_schedule_common+0x44/0xc0 [ 188.318233][ T7604] preempt_schedule_thunk+0x1a/0x30 [ 188.318252][ T7604] vprintk_emit+0x458/0x6f0 [ 188.318275][ T7604] vprintk+0x7f/0xa0 [ 188.318296][ T7604] _printk+0xc8/0x100 [ 188.318311][ T7604] __nla_validate_parse+0x753/0x2880 [ 188.318332][ T7604] __nla_parse+0x40/0x60 [ 188.318350][ T7604] rtnl_fdb_add+0x13c/0xa70 [ 188.318374][ T7604] rtnetlink_rcv_msg+0x3c7/0xea0 [ 188.318407][ T7604] netlink_rcv_skb+0x16b/0x440 [ 188.318430][ T7604] netlink_unicast+0x53c/0x7f0 [ 188.318452][ T7604] netlink_sendmsg+0x8b8/0xd70 [ 188.318475][ T7604] ____sys_sendmsg+0xaaf/0xc90 [ 188.318496][ T7604] ___sys_sendmsg+0x135/0x1e0 [ 188.318512][ T7604] __sys_sendmsg+0x16e/0x220 [ 188.318527][ T7604] do_syscall_64+0xcd/0x250 [ 188.318550][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.318573][ T7604] [ 188.318573][ T7604] other info that might help us debug this: [ 188.318573][ T7604] [ 188.318578][ T7604] Chain exists of: [ 188.318578][ T7604] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 188.318578][ T7604] [ 188.318604][ T7604] Possible unsafe locking scenario: [ 188.318604][ T7604] [ 188.318608][ T7604] CPU0 CPU1 [ 188.318613][ T7604] ---- ---- [ 188.318617][ T7604] lock(&rq->__lock); [ 188.318628][ T7604] lock(&p->pi_lock); [ 188.318639][ T7604] lock(&rq->__lock); [ 188.318650][ T7604] lock((console_sem).lock); [ 188.318661][ T7604] [ 188.318661][ T7604] *** DEADLOCK *** [ 188.318661][ T7604] [ 188.318665][ T7604] 3 locks held by syz.1.435/7604: [ 188.318676][ T7604] #0: ffffffff8fee6528 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 188.318725][ T7604] #1: ffff8880b863eed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 188.318768][ T7604] #2: ffffffff8e1b8540 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 188.318815][ T7604] [ 188.318815][ T7604] stack backtrace: [ 188.318821][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.1.435 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 188.318846][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 188.318857][ T7604] Call Trace: [ 188.318862][ T7604] [ 188.318872][ T7604] dump_stack_lvl+0x116/0x1f0 [ 188.318898][ T7604] print_circular_bug+0x41c/0x610 [ 188.318927][ T7604] check_noncircular+0x31a/0x400 [ 188.318958][ T7604] ? __pfx_check_noncircular+0x10/0x10 [ 188.318985][ T7604] ? __pfx_format_decode+0x10/0x10 [ 188.319008][ T7604] ? lockdep_lock+0xc6/0x200 [ 188.319031][ T7604] ? __pfx_lockdep_lock+0x10/0x10 [ 188.319056][ T7604] __lock_acquire+0x250b/0x3ce0 [ 188.319079][ T7604] ? __pfx___lock_acquire+0x10/0x10 [ 188.319098][ T7604] ? vprintk_store+0x22a/0xb70 [ 188.319120][ T7604] lock_acquire.part.0+0x11b/0x380 [ 188.319139][ T7604] ? down_trylock+0x12/0x70 [ 188.319165][ T7604] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 188.319183][ T7604] ? rcu_is_watching+0x12/0xc0 [ 188.319206][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 188.319229][ T7604] ? down_trylock+0x12/0x70 [ 188.319254][ T7604] ? lock_acquire+0x2f/0xb0 [ 188.319271][ T7604] ? down_trylock+0x12/0x70 [ 188.319295][ T7604] ? vprintk+0x7f/0xa0 [ 188.319318][ T7604] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.319339][ T7604] ? down_trylock+0x12/0x70 [ 188.319366][ T7604] down_trylock+0x12/0x70 [ 188.319390][ T7604] __down_trylock_console_sem+0x40/0x140 [ 188.319415][ T7604] vprintk_emit+0x3ec/0x6f0 [ 188.319438][ T7604] ? __pfx_vprintk_emit+0x10/0x10 [ 188.319460][ T7604] ? __lock_acquire+0xbdd/0x3ce0 [ 188.319480][ T7604] vprintk+0x7f/0xa0 [ 188.319502][ T7604] _printk+0xc8/0x100 [ 188.319519][ T7604] ? __pfx__printk+0x10/0x10 [ 188.319536][ T7604] ? ___ratelimit+0x24c/0x570 [ 188.319560][ T7604] ? __pfx_mark_lock+0x10/0x10 [ 188.319576][ T7604] ? desc_read+0x299/0x350 [ 188.319592][ T7604] ? __pfx____ratelimit+0x10/0x10 [ 188.319618][ T7604] should_fail_ex+0x46c/0x5b0 [ 188.319645][ T7604] strncpy_from_user+0x3b/0x2c0 [ 188.319672][ T7604] strncpy_from_user_nofault+0x7f/0x180 [ 188.319697][ T7604] bpf_probe_read_user_str+0x26/0x70 [ 188.319719][ T7604] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 188.319734][ T7604] bpf_trace_run4+0x245/0x5a0 [ 188.319759][ T7604] ? __pfx_bpf_trace_run4+0x10/0x10 [ 188.319786][ T7604] ? __pfx_lock_release+0x10/0x10 [ 188.319803][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 188.319828][ T7604] __bpf_trace_sched_switch+0x13e/0x190 [ 188.319849][ T7604] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 188.319869][ T7604] ? psi_group_change+0x6dc/0xd20 [ 188.319891][ T7604] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 188.319922][ T7604] __traceiter_sched_switch+0x6c/0xc0 [ 188.319941][ T7604] __schedule+0x19b0/0x5740 [ 188.319963][ T7604] ? __pfx__prb_read_valid+0x10/0x10 [ 188.319987][ T7604] ? __pfx___schedule+0x10/0x10 [ 188.320011][ T7604] ? __up_console_sem+0x8f/0xe0 [ 188.320029][ T7604] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.320053][ T7604] ? preempt_schedule_thunk+0x1a/0x30 [ 188.320072][ T7604] preempt_schedule_common+0x44/0xc0 [ 188.320096][ T7604] preempt_schedule_thunk+0x1a/0x30 [ 188.320116][ T7604] ? vprintk_emit+0x445/0x6f0 [ 188.320138][ T7604] ? vprintk_emit+0x453/0x6f0 [ 188.320159][ T7604] vprintk_emit+0x458/0x6f0 [ 188.320181][ T7604] ? __pfx_vprintk_emit+0x10/0x10 [ 188.320204][ T7604] ? __pfx_lock_release+0x10/0x10 [ 188.320221][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 188.320246][ T7604] vprintk+0x7f/0xa0 [ 188.320268][ T7604] _printk+0xc8/0x100 [ 188.320285][ T7604] ? __pfx__printk+0x10/0x10 [ 188.320302][ T7604] ? ___ratelimit+0x24c/0x570 [ 188.320326][ T7604] ? __pfx____ratelimit+0x10/0x10 [ 188.320350][ T7604] ? __nla_validate_parse+0x66e/0x2880 [ 188.320372][ T7604] __nla_validate_parse+0x753/0x2880 [ 188.320408][ T7604] ? __pfx___nla_validate_parse+0x10/0x10 [ 188.320432][ T7604] ? lock_acquire.part.0+0x11b/0x380 [ 188.320453][ T7604] __nla_parse+0x40/0x60 [ 188.320475][ T7604] rtnl_fdb_add+0x13c/0xa70 [ 188.320501][ T7604] ? trace_contention_end+0xea/0x140 [ 188.320521][ T7604] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 188.320556][ T7604] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 188.320582][ T7604] rtnetlink_rcv_msg+0x3c7/0xea0 [ 188.320610][ T7604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.320642][ T7604] netlink_rcv_skb+0x16b/0x440 [ 188.320667][ T7604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.320695][ T7604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.320725][ T7604] ? rcu_is_watching+0x12/0xc0 [ 188.320750][ T7604] netlink_unicast+0x53c/0x7f0 [ 188.320776][ T7604] ? __pfx_netlink_unicast+0x10/0x10 [ 188.320803][ T7604] netlink_sendmsg+0x8b8/0xd70 [ 188.320828][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.320857][ T7604] ____sys_sendmsg+0xaaf/0xc90 [ 188.320878][ T7604] ? copy_msghdr_from_user+0x10b/0x160 [ 188.320896][ T7604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.320925][ T7604] ___sys_sendmsg+0x135/0x1e0 [ 188.320943][ T7604] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.320966][ T7604] ? __pfx_lock_release+0x10/0x10 [ 188.320983][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 188.321010][ T7604] ? __fget_files+0x206/0x3a0 [ 188.321032][ T7604] __sys_sendmsg+0x16e/0x220 [ 188.321050][ T7604] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.321076][ T7604] do_syscall_64+0xcd/0x250 [ 188.321101][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.321125][ T7604] RIP: 0033:0x7fa20a57e759 [ 188.321144][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.321162][ T7604] RSP: 002b:00007fa20b2a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.321183][ T7604] RAX: ffffffffffffffda RBX: 00007fa20a735f80 RCX: 00007fa20a57e759 [ 188.321197][ T7604] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 188.321209][ T7604] RBP: 00007fa20b2a2090 R08: 0000000000000000 R09: 0000000000000000 [ 188.321221][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.321233][ T7604] R13: 0000000000000000 R14: 00007fa20a735f80 R15: 00007fff0925a3c8 [ 188.321252][ T7604] [ 189.500069][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.1.435 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 189.510286][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 189.520315][ T7604] Call Trace: [ 189.523571][ T7604] [ 189.526484][ T7604] dump_stack_lvl+0x116/0x1f0 [ 189.531153][ T7604] should_fail_ex+0x497/0x5b0 [ 189.535812][ T7604] strncpy_from_user+0x3b/0x2c0 [ 189.540642][ T7604] strncpy_from_user_nofault+0x7f/0x180 [ 189.546185][ T7604] bpf_probe_read_user_str+0x26/0x70 [ 189.551477][ T7604] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 189.556918][ T7604] bpf_trace_run4+0x245/0x5a0 [ 189.561576][ T7604] ? __pfx_bpf_trace_run4+0x10/0x10 [ 189.566755][ T7604] ? __pfx_lock_release+0x10/0x10 [ 189.571752][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 189.576927][ T7604] __bpf_trace_sched_switch+0x13e/0x190 [ 189.582447][ T7604] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 189.588495][ T7604] ? psi_group_change+0x6dc/0xd20 [ 189.593501][ T7604] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 189.600156][ T7604] __traceiter_sched_switch+0x6c/0xc0 [ 189.605499][ T7604] __schedule+0x19b0/0x5740 [ 189.609994][ T7604] ? __pfx__prb_read_valid+0x10/0x10 [ 189.615264][ T7604] ? __pfx___schedule+0x10/0x10 [ 189.620102][ T7604] ? __up_console_sem+0x8f/0xe0 [ 189.624933][ T7604] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.630118][ T7604] ? preempt_schedule_thunk+0x1a/0x30 [ 189.635489][ T7604] preempt_schedule_common+0x44/0xc0 [ 189.640771][ T7604] preempt_schedule_thunk+0x1a/0x30 [ 189.645988][ T7604] ? vprintk_emit+0x445/0x6f0 [ 189.650818][ T7604] ? vprintk_emit+0x453/0x6f0 [ 189.655473][ T7604] vprintk_emit+0x458/0x6f0 [ 189.659953][ T7604] ? __pfx_vprintk_emit+0x10/0x10 [ 189.664955][ T7604] ? __pfx_lock_release+0x10/0x10 [ 189.669951][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 189.675127][ T7604] vprintk+0x7f/0xa0 [ 189.678998][ T7604] _printk+0xc8/0x100 [ 189.682966][ T7604] ? __pfx__printk+0x10/0x10 [ 189.687528][ T7604] ? ___ratelimit+0x24c/0x570 [ 189.692185][ T7604] ? __pfx____ratelimit+0x10/0x10 [ 189.697185][ T7604] ? __nla_validate_parse+0x66e/0x2880 [ 189.702618][ T7604] __nla_validate_parse+0x753/0x2880 [ 189.707881][ T7604] ? __pfx___nla_validate_parse+0x10/0x10 [ 189.713579][ T7604] ? lock_acquire.part.0+0x11b/0x380 [ 189.718840][ T7604] __nla_parse+0x40/0x60 [ 189.723064][ T7604] rtnl_fdb_add+0x13c/0xa70 [ 189.727545][ T7604] ? trace_contention_end+0xea/0x140 [ 189.732802][ T7604] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 189.737806][ T7604] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 189.742807][ T7604] rtnetlink_rcv_msg+0x3c7/0xea0 [ 189.747729][ T7604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.753167][ T7604] netlink_rcv_skb+0x16b/0x440 [ 189.757909][ T7604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.763365][ T7604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.768632][ T7604] ? rcu_is_watching+0x12/0xc0 [ 189.773386][ T7604] netlink_unicast+0x53c/0x7f0 [ 189.778128][ T7604] ? __pfx_netlink_unicast+0x10/0x10 [ 189.783394][ T7604] netlink_sendmsg+0x8b8/0xd70 [ 189.788141][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.793405][ T7604] ____sys_sendmsg+0xaaf/0xc90 [ 189.798143][ T7604] ? copy_msghdr_from_user+0x10b/0x160 [ 189.803572][ T7604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.808835][ T7604] ___sys_sendmsg+0x135/0x1e0 [ 189.813494][ T7604] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.818668][ T7604] ? __pfx_lock_release+0x10/0x10 [ 189.823661][ T7604] ? trace_lock_acquire+0x14a/0x1d0 [ 189.828846][ T7604] ? __fget_files+0x206/0x3a0 [ 189.833496][ T7604] __sys_sendmsg+0x16e/0x220 [ 189.838056][ T7604] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.843142][ T7604] do_syscall_64+0xcd/0x250 [ 189.847621][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.853490][ T7604] RIP: 0033:0x7fa20a57e759 [ 189.857887][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.877464][ T7604] RSP: 002b:00007fa20b2a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.885882][ T7604] RAX: ffffffffffffffda RBX: 00007fa20a735f80 RCX: 00007fa20a57e759 [ 189.893846][ T7604] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 189.901797][ T7604] RBP: 00007fa20b2a2090 R08: 0000000000000000 R09: 0000000000000000 [ 189.909742][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.917687][ T7604] R13: 0000000000000000 R14: 00007fa20a735f80 R15: 00007fff0925a3c8 [ 189.925638][ T7604] [ 189.928840][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.434623][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.440951][ T1297] ieee802154 phy1 wpan1: encryption failed: -22