last executing test programs: 34.34301847s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='tcp_probe\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400100006000000050000000010000010dfe05b7e7e952074993ca9f312b75b4704427fae3abb80fe91bd615d6ca0d5065ca19a8e3a91ee537810c3a814704c15ef592d72bf0bf6aed0b5190e4f31d2bfe9a70612f656d37f6d7a2fe5576ff98fba052a8e8675741a07971aa15f46b2387c47b4e47a54b54ceeb6047b582e1efafb4b52b7f85881d1d69d0861bda9c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 32.738081222s ago: executing program 4 (id=6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/44, 0x2c) (fail_nth: 1) 32.200420515s ago: executing program 4 (id=7): syz_emit_vhci(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}]}]}, @chandef_params]}, 0x3c}}, 0x0) (async, rerun: 64) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101a40) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x414d6714bf78e135}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x68, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e21, 0x7, @empty, 0x436}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x4, @private1}]}, &(0x7f0000000180)=0x10) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) sendfile(r8, r6, 0x0, 0x7ffff000) splice(r7, 0x0, r6, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x7e29, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000280)) r10 = io_uring_setup(0x2f64, &(0x7f0000000340)={0x0, 0x1aeb, 0x0, 0x2, 0x315, 0x0, r9}) syz_io_uring_setup(0x60cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000040), &(0x7f00000005c0)) io_uring_enter(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$qrtr(r5, &(0x7f0000000040), 0xc) (async) fchdir(r5) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r12, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) (async) dup2(r11, r5) 31.484508203s ago: executing program 4 (id=9): r0 = socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d75696e6b0000"], 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="1005a729c9"], 0x7) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="17d69b7e619b680968af55c6c79831e4e4bf", 0x12}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002200)='nv\x00', 0x3) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x1e0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r7, &(0x7f0000002380)=""/129, 0x18) getdents(r7, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="14", @ANYRESHEX=r2, @ANYBLOB="ad43000000f45400000006"], 0x14}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/44, 0x2c) 17.171566203s ago: executing program 0 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x900050, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61f07072616973652c646f6e745f686173682c65756964", @ANYRESDEC, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB=',\x00']) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000000)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd_index=0x2, 0x0, 0x0, 0x2, 0x0, 0x1, {0x0, r5, r1}}) r6 = syz_io_uring_setup(0x2334, &(0x7f0000000140)={0x0, 0x422c, 0x100, 0x3, 0x2ba}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000780)={&(0x7f0000001000), 0x0, 0x3}, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000007c0)=[0x1, 0x3], 0x2) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 17.17086902s ago: executing program 2 (id=36): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000300002000e00000aad2c8ef2313654a6198a894865700bebed056e12877bbebad8566c6a7435704e8dbfcf60789aded4e59053dcf", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) init_module(&(0x7f0000000280)='}&\x00', 0x3, &(0x7f00000002c0)='\x00') dup(r4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x0, 0x200003, @loopback}, 0x1c) ioctl$sock_ifreq(r6, 0x8927, &(0x7f00000001c0)={'wlan1\x00', @ifru_map={0xfffffffffffffffb, 0x79, 0x6e00, 0x4, 0x3, 0x81}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) getrlimit(0x8, &(0x7f0000000180)) 15.670845977s ago: executing program 2 (id=38): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4ea, 0xffff0000, 0x0, 0x10, 0xffffffffffffffff, 0x98d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="711230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2020000, &(0x7f0000000180)={[{@verity_require}, {@nfs_export_off}, {@verity_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) syz_open_pts(0xffffffffffffffff, 0x0) 14.157260227s ago: executing program 2 (id=40): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000280)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffff7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000001180)) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x48b, 0x0, 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000021c0)={0x1, 0x5, {0x200, @struct={0x1, 0x7fff}, 0x0, 0x6, 0xafc, 0x3, 0x7f, 0x8, 0xa0, @usage=0x100000001, 0x80, 0x7, [0x5, 0x7f, 0xac, 0x8, 0xfffffffffffff801, 0x4d]}, {0xffffffffffffffff, @struct={0x6835e151, 0x2}, 0x0, 0x5, 0xff, 0x4, 0x30f3, 0x80000000, 0x96, @usage=0x101, 0x4, 0xffffffff, [0x1, 0x1, 0x8000000000000001, 0x95, 0x5aa, 0x5]}, {0x0, @struct={0x3, 0x1}, 0x0, 0x3, 0x100000001, 0x7e26, 0x3, 0xa, 0x20, @usage=0x1, 0x1, 0x4, [0xcb04, 0x4, 0x9, 0x2, 0xfffffffffffffffb, 0x9]}, {0x0, 0xc2d, 0xe9}}) r9 = socket$inet_icmp(0x2, 0x2, 0x1) open_by_handle_at(r9, &(0x7f0000001680)=@FILEID_BTRFS_WITHOUT_PARENT={0x28}, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000b000600050001080200070014fc0b77ed75e43bdb31e83b0fb886cd1462a34a7b3a0300c6483ea9e6e56a209c652d01dc6797d2703c636a1ff5b3198655131bf0938be50000000000000000"], 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8704d00490001000608040006000400025d0400028006000d070800060005000100050002040400000004000e0603000900051005040005000500077f550400bd1b0800010502000400028a04000600750cdebc73933276a91fac517f020c3b9213581b51167e085fd0e4ea16"], 0x52) 13.816262998s ago: executing program 0 (id=41): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)="3bfdac32"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 13.574509501s ago: executing program 3 (id=43): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004900), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4], 0x240}}, 0x0) 13.202599431s ago: executing program 1 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004900), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4], 0x240}}, 0x0) (fail_nth: 1) 12.632454445s ago: executing program 0 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000018444fe15cf8bf9bf2be2cd33f3da69084000000000100000000000095000000e90aa2000000008bc5238dcb962377cd5f785f3d7cc7c5a57920abfeaf7965009b52f20bcd5c13fed8726199f6891a30d195d33c3c876470d6d2d31748189bc468bcfc6a10268089c7b32e63c4bfa58125042ea290c953be1da30da9dcc6a5a9edaaacebcb94c61654396130fbbc451b3539f39e9b58efa6dd2fee9715e69ea87fbaa00e963396867a96c36e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f0000000240)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r8, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x46020000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 12.626872856s ago: executing program 3 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000800000000b000000ff03000052000200", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000000d00"/25], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x690957c5d351644, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async) setxattr$incfs_id(0x0, &(0x7f0000000200), &(0x7f0000000240)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000410000000501000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000911d00000000ea59400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000100"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) syz_open_procfs$pagemap(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x5) (async, rerun: 32) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async, rerun: 32) bind$inet(r2, 0x0, 0x0) (async, rerun: 32) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x64, 0x0}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.464830075s ago: executing program 1 (id=47): ioperm(0x0, 0x3, 0x595627c2) lremovexattr(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) 11.943267342s ago: executing program 3 (id=48): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000001400010000000000000003000000000000de0000db8ece59e409edcb4e51b800000000000000812a189841e23e06a7c564989b378cf06a0921c194cc27cd7c2e43ed6e5c545ed7a56077d55411c2b139e2a4c8c1a0005068d9157d38bcdb74926a4c000000000000000000000000000000cebfa6b2e4074298b812189437b2cffe31d37bb7981773c6930fb9c419368e4fe70d35b07ce96a792cb662607719ea870812eb29f0566019bef298c37783097caa5fac600da2e31f85929d0a413d39c52d"], 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000400)={@void, @val={0x0, 0x3, 0x0, 0xffff}, @ipv4=@dccp={{0x5, 0x4, 0x1, 0x2, 0xde, 0x65, 0x0, 0x4, 0x21, 0x0, @loopback, @loopback}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x3, "4f7513", 0x80, "5e2edf"}, "d4b4450dce1def95b4a5d9515b6ea2b636c8180c6daa1ffe486de8c563511c07e13ae1c53c15c1aa59cc6e1a4a71768dd51d7d1da8f271dd5270e39cae06283cf2bee3385bbb8598fea2c4fe387a75cadd3f4b0dde88961c4763d49e385a9501eb3537027da8686290187d989037f97c6f5ae72d6de514f2fb853431cd005948e5da41b31a18c71a858b3207bdf7921017e9b61a4f575b926c5dbc02bafdb39e1b5711fad5030fbfc0b1fb00377468f8532a0860ddcf9ddb292e"}}}, 0xe8) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000700)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000001c0)={0x7, 'vlan0\x00', {0x3}, 0xb}) getsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000011080004400000000f0900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x148, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb23}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3378}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1719}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 10.898291442s ago: executing program 0 (id=49): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000300002000e00000aad2c8ef2313654a6198a894865700bebed056e12877bbebad8566c6a7435704e8dbfcf60789aded4e59053dcf", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) init_module(&(0x7f0000000280)='}&\x00', 0x3, &(0x7f00000002c0)='\x00') dup(r4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x0, 0x200003, @loopback}, 0x1c) ioctl$sock_ifreq(r6, 0x8927, &(0x7f00000001c0)={'wlan1\x00', @ifru_map={0xfffffffffffffffb, 0x79, 0x6e00, 0x4, 0x3, 0x81}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) getrlimit(0x8, &(0x7f0000000180)) 9.358139172s ago: executing program 0 (id=50): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000c20000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x3}, {}]}, @func, @union={0x7, 0x5, 0x0, 0x5, 0x1, 0x100, [{0xf, 0x2, 0x7f}, {0x7, 0x3, 0x6}, {0x1, 0x3, 0x7}, {0xe, 0x1, 0x1}, {0x1, 0x5, 0xa0}]}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) socket$tipc(0x1e, 0x2, 0x0) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000480), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.934955147s ago: executing program 2 (id=51): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008", @ANYRES32], 0x1c4}}, 0x0) 8.796442534s ago: executing program 3 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) poll(0x0, 0x0, 0xe2) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2000000000000000840000000200000006000080"], 0x68}], 0x1, 0x4044040) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)="38f8609d87a60a5a9f61ff279b8c31fd755b0e5e86d40fd2453742873ad5a5dbc6775fd3890625fd55e3f508407fa4b42784d30ed443fd02058ef8161b0bd8e5a379c410a7a2ed01638a0c3a0000000000000000c0820d31972913379d9fcc1f434379cda70b539d0087ae423edc", 0x6e}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0600}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080028bd70000800000010000000080006000b00000008000800060064a0da9c1aafd24f000008000700090000006343095ff8285abfacfd53018fd016bee50164f6d5b1a0450349"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r8, 0x40046104, &(0x7f0000000240)) 8.70837004s ago: executing program 1 (id=53): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}, 0x0) read$dsp(r0, &(0x7f0000000440)=""/171, 0xab) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x19, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5d}]}, 0x28}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x9000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120110034ed635400b042165113c01020301090240000140ff40000904100603f93252080a2401b4f203020102052405fffb49e0"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r4, 0x8, 0xe6, &(0x7f0000000100)=""/230) 6.234690917s ago: executing program 3 (id=54): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000300002000e00000aad2c8ef2313654a6198a894865700bebed056e12877bbebad8566c6a7435704e8dbfcf60789aded4e59053dcf", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) init_module(&(0x7f0000000280)='}&\x00', 0x3, &(0x7f00000002c0)='\x00') dup(r4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x0, 0x200003, @loopback}, 0x1c) ioctl$sock_ifreq(r6, 0x8927, &(0x7f00000001c0)={'wlan1\x00', @ifru_map={0xfffffffffffffffb, 0x79, 0x6e00, 0x4, 0x3, 0x81}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) getrlimit(0x8, &(0x7f0000000180)) 5.811658634s ago: executing program 2 (id=55): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/223, 0xdf}], 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000441000/0x4000)=nil, 0x4000}, 0x7}) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000000000000084000a"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) fsync(r0) 3.767257613s ago: executing program 1 (id=56): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 2.045227422s ago: executing program 3 (id=57): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f00000004c0)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000300)={r2}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) socket$inet(0x2, 0x0, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) timer_create(0x0, 0x0, &(0x7f0000000240)) (async) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) (async) close(r8) socket$inet6_udp(0xa, 0x2, 0x0) 1.914032233s ago: executing program 1 (id=58): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb6, &(0x7f0000000280)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() fsetxattr$trusted_overlay_origin(r0, &(0x7f0000001200), 0x0, 0x0, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) umount2(0x0, 0x0) r3 = geteuid() getgroups(0x8, &(0x7f0000000040)=[0xee00, 0xee00, 0x0, 0xee00, 0xee01, 0xee00, 0xee01, 0x0]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, r3, r4}, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000180), &(0x7f0000000400)) 1.190080589s ago: executing program 0 (id=59): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040400"], 0x11) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3500000000000000a700", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 92.930213ms ago: executing program 1 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a9"], 0x8, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10100}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d7e, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000900)=ANY=[@ANYRESHEX], 0x1, 0x0) 0s ago: executing program 2 (id=61): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ptrace$getenv(0x4201, r1, 0x9, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @remote}, {0x6, @remote}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'gretap0\x00'}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x7, 0x5) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x4000000}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000200)=0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 97.648655][ T940] cfg80211: failed to load regulatory.db [ 100.470452][ T30] audit: type=1400 audit(1726655517.834:88): avc: denied { mounton } for pid=5211 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 100.482234][ T5211] cgroup: Unknown subsys name 'net' [ 100.493489][ T30] audit: type=1400 audit(1726655517.834:89): avc: denied { mount } for pid=5211 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.521051][ T30] audit: type=1400 audit(1726655517.874:90): avc: denied { unmount } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.742974][ T5211] cgroup: Unknown subsys name 'rlimit' [ 100.943119][ T30] audit: type=1400 audit(1726655518.304:91): avc: denied { setattr } for pid=5211 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.966601][ T30] audit: type=1400 audit(1726655518.304:92): avc: denied { create } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.990384][ T30] audit: type=1400 audit(1726655518.304:93): avc: denied { write } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.032215][ T30] audit: type=1400 audit(1726655518.314:94): avc: denied { read } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.052983][ T30] audit: type=1400 audit(1726655518.354:95): avc: denied { read } for pid=4885 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 101.074099][ T30] audit: type=1400 audit(1726655518.354:96): avc: denied { mounton } for pid=5211 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 101.099077][ T30] audit: type=1400 audit(1726655518.354:97): avc: denied { mount } for pid=5211 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 101.147849][ T5216] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 103.026136][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.294845][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 106.294868][ T30] audit: type=1400 audit(1726655523.654:102): avc: denied { execmem } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 107.462167][ T30] audit: type=1400 audit(1726655524.824:103): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.526008][ T30] audit: type=1400 audit(1726655524.854:104): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.557478][ T30] audit: type=1400 audit(1726655524.854:105): avc: denied { create } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.579913][ T30] audit: type=1400 audit(1726655524.854:106): avc: denied { create } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.600573][ T30] audit: type=1400 audit(1726655524.854:108): avc: denied { read write } for pid=5226 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.625633][ T30] audit: type=1400 audit(1726655524.854:107): avc: denied { read write } for pid=5223 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.650481][ T30] audit: type=1400 audit(1726655524.854:109): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.749634][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.751524][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.766980][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.767826][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.778001][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.790331][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.799426][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.799713][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.807177][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.815616][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.822918][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.829121][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.839026][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.848244][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.851903][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.864194][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.871871][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.872528][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.880672][ T30] audit: type=1400 audit(1726655524.854:110): avc: denied { open } for pid=5226 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.889253][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.910714][ T30] audit: type=1400 audit(1726655524.894:111): avc: denied { ioctl } for pid=5226 comm="syz-executor" path="socket:[4109]" dev="sockfs" ino=4109 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.917142][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.943615][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.950098][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.957904][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.963870][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.972035][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.977629][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.985094][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.991236][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.019179][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.029694][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.961252][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 109.088372][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 109.177233][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 109.321892][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 109.580742][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.588144][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.595819][ T5223] bridge_slave_0: entered allmulticast mode [ 109.604296][ T5223] bridge_slave_0: entered promiscuous mode [ 109.614200][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.621791][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.629215][ T5226] bridge_slave_0: entered allmulticast mode [ 109.637774][ T5226] bridge_slave_0: entered promiscuous mode [ 109.646152][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 109.680062][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.687390][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.694614][ T5225] bridge_slave_0: entered allmulticast mode [ 109.704108][ T5225] bridge_slave_0: entered promiscuous mode [ 109.751004][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.758419][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.766051][ T5223] bridge_slave_1: entered allmulticast mode [ 109.773807][ T5223] bridge_slave_1: entered promiscuous mode [ 109.782240][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.789781][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.797256][ T5226] bridge_slave_1: entered allmulticast mode [ 109.805067][ T5226] bridge_slave_1: entered promiscuous mode [ 109.822575][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.829943][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.837727][ T5225] bridge_slave_1: entered allmulticast mode [ 109.845519][ T5225] bridge_slave_1: entered promiscuous mode [ 109.967778][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.978842][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.986904][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.994163][ T5227] bridge_slave_0: entered allmulticast mode [ 110.002286][ T5227] bridge_slave_0: entered promiscuous mode [ 110.047201][ T5231] Bluetooth: hci0: command tx timeout [ 110.081179][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.111420][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.118757][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.126045][ T5227] bridge_slave_1: entered allmulticast mode [ 110.132154][ T5235] Bluetooth: hci3: command tx timeout [ 110.137959][ T5242] Bluetooth: hci1: command tx timeout [ 110.138002][ T5229] Bluetooth: hci4: command tx timeout [ 110.144134][ T5231] Bluetooth: hci2: command tx timeout [ 110.151300][ T5227] bridge_slave_1: entered promiscuous mode [ 110.166916][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.181352][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.277855][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.314756][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.358735][ T5225] team0: Port device team_slave_0 added [ 110.372267][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.432165][ T5225] team0: Port device team_slave_1 added [ 110.462322][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.497868][ T5223] team0: Port device team_slave_0 added [ 110.532451][ T5226] team0: Port device team_slave_0 added [ 110.544213][ T5226] team0: Port device team_slave_1 added [ 110.612245][ T5223] team0: Port device team_slave_1 added [ 110.643670][ T5227] team0: Port device team_slave_0 added [ 110.657082][ T5227] team0: Port device team_slave_1 added [ 110.702490][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.712436][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.720829][ T5224] bridge_slave_0: entered allmulticast mode [ 110.729535][ T5224] bridge_slave_0: entered promiscuous mode [ 110.740181][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.747532][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.754988][ T5224] bridge_slave_1: entered allmulticast mode [ 110.763104][ T5224] bridge_slave_1: entered promiscuous mode [ 110.773260][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.780952][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.807113][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.840393][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.847595][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.873705][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.924987][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.932534][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.959458][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.013294][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.020421][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.047292][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.060129][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.067580][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.093962][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.106528][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.113515][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.140021][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.154770][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.162489][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.189150][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.201590][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.209871][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.236089][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.344327][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.360879][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.501022][ T5223] hsr_slave_0: entered promiscuous mode [ 111.509153][ T5223] hsr_slave_1: entered promiscuous mode [ 111.526822][ T5225] hsr_slave_0: entered promiscuous mode [ 111.534092][ T5225] hsr_slave_1: entered promiscuous mode [ 111.541368][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.549495][ T5225] Cannot create hsr debugfs directory [ 111.586986][ T5227] hsr_slave_0: entered promiscuous mode [ 111.593882][ T5227] hsr_slave_1: entered promiscuous mode [ 111.601064][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.613743][ T5227] Cannot create hsr debugfs directory [ 111.688589][ T5226] hsr_slave_0: entered promiscuous mode [ 111.695445][ T5226] hsr_slave_1: entered promiscuous mode [ 111.703626][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.711342][ T5226] Cannot create hsr debugfs directory [ 111.769264][ T5224] team0: Port device team_slave_0 added [ 111.843940][ T5224] team0: Port device team_slave_1 added [ 112.024449][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.031946][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.060180][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.074906][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.082727][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.109000][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.126490][ T5231] Bluetooth: hci0: command tx timeout [ 112.206567][ T5229] Bluetooth: hci2: command tx timeout [ 112.206602][ T5242] Bluetooth: hci1: command tx timeout [ 112.212193][ T5231] Bluetooth: hci4: command tx timeout [ 112.217560][ T5235] Bluetooth: hci3: command tx timeout [ 112.462874][ T5224] hsr_slave_0: entered promiscuous mode [ 112.471854][ T5224] hsr_slave_1: entered promiscuous mode [ 112.478936][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.487619][ T5224] Cannot create hsr debugfs directory [ 112.809342][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.853656][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.868011][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.916428][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.040159][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.062847][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.085683][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.100952][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.279378][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.291952][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.349967][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.384906][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.574015][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.605283][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.619760][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.631989][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.648363][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.763718][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.838675][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.846309][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.873296][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.929805][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.937028][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.978772][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.001741][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.047031][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.057676][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.098322][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.153671][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.161764][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.173066][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.180306][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.208991][ T5231] Bluetooth: hci0: command tx timeout [ 114.286486][ T5231] Bluetooth: hci1: command tx timeout [ 114.286564][ T5242] Bluetooth: hci3: command tx timeout [ 114.291941][ T5231] Bluetooth: hci4: command tx timeout [ 114.298200][ T5235] Bluetooth: hci2: command tx timeout [ 114.439557][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.583023][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 114.583047][ T30] audit: type=1400 audit(1726655531.944:116): avc: denied { sys_module } for pid=5225 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.714758][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.762608][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.813346][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.820702][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.854318][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.910277][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.917600][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.020775][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.028104][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.053649][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.060889][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.185163][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.228254][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.244045][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.431095][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.551899][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.559239][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.653799][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.661196][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.719739][ T5225] veth0_vlan: entered promiscuous mode [ 115.935125][ T5225] veth1_vlan: entered promiscuous mode [ 116.207373][ T5223] veth0_vlan: entered promiscuous mode [ 116.226584][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.240231][ T5225] veth0_macvtap: entered promiscuous mode [ 116.286835][ T5231] Bluetooth: hci0: command tx timeout [ 116.291173][ T5225] veth1_macvtap: entered promiscuous mode [ 116.323309][ T5223] veth1_vlan: entered promiscuous mode [ 116.366899][ T5229] Bluetooth: hci3: command tx timeout [ 116.372489][ T5229] Bluetooth: hci2: command tx timeout [ 116.378425][ T5229] Bluetooth: hci1: command tx timeout [ 116.383934][ T5231] Bluetooth: hci4: command tx timeout [ 116.444708][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.524165][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.557860][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.651853][ T5226] veth0_vlan: entered promiscuous mode [ 116.668498][ T5223] veth0_macvtap: entered promiscuous mode [ 116.685507][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.700795][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.710009][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.719455][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.772933][ T5223] veth1_macvtap: entered promiscuous mode [ 116.791052][ T5226] veth1_vlan: entered promiscuous mode [ 116.855541][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.953845][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.967083][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.985596][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.000015][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.011140][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.025231][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.152431][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.161969][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.173679][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.183615][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.218422][ T2513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.218617][ T5227] veth0_vlan: entered promiscuous mode [ 117.233616][ T2513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.277284][ T5226] veth0_macvtap: entered promiscuous mode [ 117.355212][ T5226] veth1_macvtap: entered promiscuous mode [ 117.428125][ T5227] veth1_vlan: entered promiscuous mode [ 117.460171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.485216][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.519936][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.531486][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.546073][ T30] audit: type=1400 audit(1726655534.904:117): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.dVNOsH/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 117.565910][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.591499][ T30] audit: type=1400 audit(1726655534.904:118): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.602691][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.622509][ T30] audit: type=1400 audit(1726655534.914:119): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.dVNOsH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.627923][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.663331][ T30] audit: type=1400 audit(1726655534.914:120): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.700333][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.711918][ T30] audit: type=1400 audit(1726655534.954:121): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.731909][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.731933][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.731957][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.734756][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.761616][ T30] audit: type=1400 audit(1726655535.024:122): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.809787][ T30] audit: type=1400 audit(1726655535.024:123): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.883656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.889698][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.895890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.916761][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.925533][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.935277][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.042258][ T30] audit: type=1400 audit(1726655535.394:124): avc: denied { read write } for pid=5225 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.106985][ T30] audit: type=1400 audit(1726655535.404:125): avc: denied { open } for pid=5225 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.184377][ T5308] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.184473][ T5224] veth0_vlan: entered promiscuous mode [ 118.224661][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.255555][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.262580][ T5227] veth0_macvtap: entered promiscuous mode [ 118.334716][ T5227] veth1_macvtap: entered promiscuous mode [ 118.421998][ T5224] veth1_vlan: entered promiscuous mode [ 118.572187][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.598503][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.601852][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.656041][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.695267][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.710251][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.721608][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.732712][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.766804][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.940975][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.976187][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.994130][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.026621][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.045757][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.089275][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.099801][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.110975][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.147692][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.363633][ T940] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.726357][ T5224] veth0_macvtap: entered promiscuous mode [ 119.744505][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.757452][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.778723][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.792634][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.812786][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 119.824518][ T940] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 119.833280][ T940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.843988][ T940] usb 1-1: config 0 has no interfaces? [ 119.854357][ T940] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 119.863793][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.873869][ T940] usb 1-1: Product: syz [ 119.884344][ T940] usb 1-1: Manufacturer: syz [ 119.889963][ T940] usb 1-1: SerialNumber: syz [ 119.907865][ T940] usb 1-1: config 0 descriptor?? [ 119.919125][ T5224] veth1_macvtap: entered promiscuous mode [ 120.171043][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.197956][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 120.197980][ T30] audit: type=1400 audit(1726655537.564:148): avc: denied { getopt } for pid=5307 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.236280][ T9] usb 1-1: USB disconnect, device number 2 [ 120.265127][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.305978][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.331715][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.343388][ T30] audit: type=1400 audit(1726655537.694:149): avc: denied { mounton } for pid=5317 comm="syz.4.6" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.343929][ T5318] FAULT_INJECTION: forcing a failure. [ 120.343929][ T5318] name failslab, interval 1, probability 0, space 0, times 1 [ 120.378634][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.379017][ T30] audit: type=1400 audit(1726655537.714:150): avc: denied { mount } for pid=5317 comm="syz.4.6" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.415514][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.421264][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.4.6 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 120.435450][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.445543][ T5318] Call Trace: [ 120.448842][ T5318] [ 120.451810][ T5318] dump_stack_lvl+0x16c/0x1f0 [ 120.456534][ T5318] should_fail_ex+0x497/0x5b0 [ 120.461257][ T5318] ? fs_reclaim_acquire+0xae/0x160 [ 120.466428][ T5318] should_failslab+0xc2/0x120 [ 120.471154][ T5318] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 120.476665][ T5318] ? getname_flags.part.0+0x4c/0x550 [ 120.482003][ T5318] getname_flags.part.0+0x4c/0x550 [ 120.487201][ T5318] getname_flags+0x93/0xf0 [ 120.491653][ T5318] user_path_at+0x24/0x60 [ 120.496117][ T5318] path_listxattr+0x99/0x160 [ 120.500767][ T5318] ? ksys_write+0x1ab/0x260 [ 120.505307][ T5318] ? __pfx_path_listxattr+0x10/0x10 [ 120.510559][ T5318] do_syscall_64+0xcd/0x250 [ 120.515098][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.521031][ T5318] RIP: 0033:0x7f774777def9 [ 120.525481][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.545131][ T5318] RSP: 002b:00007f7748535038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 120.553594][ T5318] RAX: ffffffffffffffda RBX: 00007f7747935f80 RCX: 00007f774777def9 [ 120.561613][ T5318] RDX: 000000000000002c RSI: 00000000200000c0 RDI: 0000000020000040 [ 120.569712][ T5318] RBP: 00007f7748535090 R08: 0000000000000000 R09: 0000000000000000 [ 120.577715][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.585732][ T5318] R13: 0000000000000000 R14: 00007f7747935f80 R15: 00007fff113265d8 [ 120.593751][ T5318] [ 120.597318][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.608132][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.624417][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.709654][ T30] audit: type=1400 audit(1726655538.074:151): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.772318][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.812381][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.835914][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.876404][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.895968][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.921809][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.925339][ T30] audit: type=1400 audit(1726655538.284:152): avc: denied { create } for pid=5319 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.943599][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.965098][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.980008][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.995401][ T30] audit: type=1400 audit(1726655538.354:153): avc: denied { read } for pid=5319 comm="syz.3.4" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.048485][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.084056][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.110630][ T30] audit: type=1400 audit(1726655538.354:154): avc: denied { open } for pid=5319 comm="syz.3.4" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.116478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.211308][ T30] audit: type=1400 audit(1726655538.394:155): avc: denied { ioctl } for pid=5319 comm="syz.3.4" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.252623][ T30] audit: type=1400 audit(1726655538.394:156): avc: denied { set_context_mgr } for pid=5319 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 121.331304][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.366453][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.396362][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.434132][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.462955][ T2528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.474941][ T2528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.706502][ T30] audit: type=1400 audit(1726655539.054:157): avc: denied { read } for pid=5332 comm="syz.3.10" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.128586][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.539460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.744171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.326330][ T5346] FAULT_INJECTION: forcing a failure. [ 123.326330][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 123.345570][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.3.12 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 123.355821][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 123.365929][ T5346] Call Trace: [ 123.369252][ T5346] [ 123.372225][ T5346] dump_stack_lvl+0x16c/0x1f0 [ 123.376954][ T5346] should_fail_ex+0x497/0x5b0 [ 123.381677][ T5346] ? fs_reclaim_acquire+0xae/0x160 [ 123.386833][ T5346] should_failslab+0xc2/0x120 [ 123.391541][ T5346] __kmalloc_noprof+0xcb/0x400 [ 123.396344][ T5346] ? __pfx_lock_acquire+0x10/0x10 [ 123.401415][ T5346] tomoyo_realpath_from_path+0xb9/0x720 [ 123.407002][ T5346] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 123.412763][ T5346] ? tomoyo_profile+0x47/0x60 [ 123.417528][ T5346] tomoyo_path_number_perm+0x245/0x590 [ 123.423026][ T5346] ? tomoyo_path_number_perm+0x232/0x590 [ 123.428700][ T5346] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.434767][ T5346] ? __fget_files+0x244/0x3f0 [ 123.439479][ T5346] security_file_ioctl+0x9b/0x240 [ 123.444556][ T5346] __x64_sys_ioctl+0xbb/0x210 [ 123.449265][ T5346] do_syscall_64+0xcd/0x250 [ 123.453803][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.459738][ T5346] RIP: 0033:0x7fd1a417def9 [ 123.464358][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.484171][ T5346] RSP: 002b:00007fd1a5011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.492621][ T5346] RAX: ffffffffffffffda RBX: 00007fd1a4335f80 RCX: 00007fd1a417def9 [ 123.500705][ T5346] RDX: 0000000020000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 123.508697][ T5346] RBP: 00007fd1a5011090 R08: 0000000000000000 R09: 0000000000000000 [ 123.516687][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.524679][ T5346] R13: 0000000000000000 R14: 00007fd1a4335f80 R15: 00007ffe96e84978 [ 123.532781][ T5346] [ 123.555973][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.646880][ T5346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.075661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.689886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.742160][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 125.742185][ T30] audit: type=1400 audit(1726655543.104:165): avc: denied { write } for pid=5331 comm="syz.4.9" path="socket:[6619]" dev="sockfs" ino=6619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.772315][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.772348][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.872888][ T5354] FAULT_INJECTION: forcing a failure. [ 125.872888][ T5354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.886479][ T30] audit: type=1400 audit(1726655543.164:166): avc: denied { create } for pid=5353 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.946826][ T30] audit: type=1400 audit(1726655543.224:167): avc: denied { map_read map_write } for pid=5353 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.996572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.005422][ T5354] CPU: 1 UID: 0 PID: 5354 Comm: syz.1.14 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 126.015726][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.025826][ T5354] Call Trace: [ 126.029154][ T5354] [ 126.032225][ T5354] dump_stack_lvl+0x16c/0x1f0 [ 126.036978][ T5354] should_fail_ex+0x497/0x5b0 [ 126.041728][ T5354] _copy_from_user+0x30/0xf0 [ 126.046352][ T5354] __sys_bpf+0x21c/0x49c0 [ 126.050805][ T5354] ? ksys_write+0x21c/0x260 [ 126.055334][ T5354] ? reacquire_held_locks+0x480/0x4c0 [ 126.060930][ T5354] ? __pfx___sys_bpf+0x10/0x10 [ 126.065718][ T5354] ? vfs_write+0x14d/0x1140 [ 126.070251][ T5354] ? __mutex_unlock_slowpath+0x164/0x650 [ 126.075935][ T5354] ? fput+0x30/0x390 [ 126.079944][ T5354] ? ksys_write+0x1ab/0x260 [ 126.084463][ T5354] ? __pfx_ksys_write+0x10/0x10 [ 126.089374][ T5354] __x64_sys_bpf+0x78/0xc0 [ 126.093900][ T5354] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.099138][ T5354] do_syscall_64+0xcd/0x250 [ 126.103674][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.109696][ T5354] RIP: 0033:0x7f378eb7def9 [ 126.114180][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.133839][ T5354] RSP: 002b:00007f378fa0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.142285][ T5354] RAX: ffffffffffffffda RBX: 00007f378ed35f80 RCX: 00007f378eb7def9 [ 126.150283][ T5354] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000002 [ 126.158281][ T5354] RBP: 00007f378fa0c090 R08: 0000000000000000 R09: 0000000000000000 [ 126.166270][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.174296][ T5354] R13: 0000000000000000 R14: 00007f378ed35f80 R15: 00007ffeafbd7248 [ 126.182306][ T5354] [ 126.196637][ T30] audit: type=1400 audit(1726655543.354:168): avc: denied { mounton } for pid=5331 comm="syz.4.9" path="/3/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 126.439096][ T30] audit: type=1400 audit(1726655543.804:169): avc: denied { ioctl } for pid=5357 comm="syz.3.16" path="socket:[7726]" dev="sockfs" ino=7726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.518436][ T5360] FAULT_INJECTION: forcing a failure. [ 126.518436][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 126.531698][ T5360] CPU: 1 UID: 0 PID: 5360 Comm: syz.2.3 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 126.541919][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.551988][ T5360] Call Trace: [ 126.555288][ T5360] [ 126.558241][ T5360] dump_stack_lvl+0x16c/0x1f0 [ 126.563204][ T5360] should_fail_ex+0x497/0x5b0 [ 126.567907][ T5360] ? fs_reclaim_acquire+0xae/0x160 [ 126.573047][ T5360] should_failslab+0xc2/0x120 [ 126.577750][ T5360] __kmalloc_noprof+0xcb/0x400 [ 126.582525][ T5360] ? __pfx_lock_acquire+0x10/0x10 [ 126.587582][ T5360] tomoyo_realpath_from_path+0xb9/0x720 [ 126.593160][ T5360] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.598905][ T5360] ? tomoyo_profile+0x47/0x60 [ 126.603617][ T5360] tomoyo_path_number_perm+0x245/0x590 [ 126.609101][ T5360] ? tomoyo_path_number_perm+0x232/0x590 [ 126.614758][ T5360] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.620801][ T5360] ? __fget_files+0x244/0x3f0 [ 126.625507][ T5360] security_file_ioctl+0x9b/0x240 [ 126.630564][ T5360] __x64_sys_ioctl+0xbb/0x210 [ 126.635272][ T5360] do_syscall_64+0xcd/0x250 [ 126.639824][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.645747][ T5360] RIP: 0033:0x7f885057def9 [ 126.650204][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.669830][ T5360] RSP: 002b:00007f885141a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.678258][ T5360] RAX: ffffffffffffffda RBX: 00007f8850735f80 RCX: 00007f885057def9 [ 126.686239][ T5360] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000003 [ 126.694237][ T5360] RBP: 00007f885141a090 R08: 0000000000000000 R09: 0000000000000000 [ 126.702217][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.710195][ T5360] R13: 0000000000000000 R14: 00007f8850735f80 R15: 00007fff8a932698 [ 126.718193][ T5360] [ 126.724881][ T5360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.830685][ T30] audit: type=1400 audit(1726655544.114:170): avc: denied { create } for pid=5357 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.916524][ T30] audit: type=1400 audit(1726655544.114:171): avc: denied { connect } for pid=5357 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.055378][ T30] audit: type=1400 audit(1726655544.174:172): avc: denied { prog_run } for pid=5357 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.178912][ T30] audit: type=1400 audit(1726655544.454:173): avc: denied { create } for pid=5365 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.238080][ T30] audit: type=1400 audit(1726655544.484:174): avc: denied { read write } for pid=5365 comm="syz.0.17" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.266127][ T5372] FAULT_INJECTION: forcing a failure. [ 127.266127][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 127.317223][ T5369] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.324616][ T5372] CPU: 1 UID: 0 PID: 5372 Comm: syz.2.18 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 127.339296][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.349423][ T5372] Call Trace: [ 127.352739][ T5372] [ 127.355710][ T5372] dump_stack_lvl+0x16c/0x1f0 [ 127.360460][ T5372] should_fail_ex+0x497/0x5b0 [ 127.365214][ T5372] ? fs_reclaim_acquire+0xae/0x160 [ 127.370402][ T5372] should_failslab+0xc2/0x120 [ 127.375154][ T5372] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 127.380609][ T5372] ? __fget_files+0x244/0x3f0 [ 127.385348][ T5372] ? prepare_creds+0x2e/0x750 [ 127.390106][ T5372] prepare_creds+0x2e/0x750 [ 127.394693][ T5372] do_faccessat+0x4a8/0xae0 [ 127.399254][ T5372] ? __pfx_do_faccessat+0x10/0x10 [ 127.404319][ T5372] do_syscall_64+0xcd/0x250 [ 127.408869][ T5372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.414828][ T5372] RIP: 0033:0x7f885057def9 [ 127.419282][ T5372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.438950][ T5372] RSP: 002b:00007f885141a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 127.447424][ T5372] RAX: ffffffffffffffda RBX: 00007f8850735f80 RCX: 00007f885057def9 [ 127.455445][ T5372] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 127.463473][ T5372] RBP: 00007f885141a090 R08: 0000000000000000 R09: 0000000000000000 [ 127.471494][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.479530][ T5372] R13: 0000000000000000 R14: 00007f8850735f80 R15: 00007fff8a932698 [ 127.487557][ T5372] [ 127.515066][ T5276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.750645][ T5276] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.798058][ T5276] usb 2-1: config 64 has an invalid interface number: 16 but max is 0 [ 127.814239][ T5276] usb 2-1: config 64 has no interface number 0 [ 127.854895][ T5276] usb 2-1: config 64 interface 16 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.134750][ T5276] usb 2-1: config 64 interface 16 altsetting 6 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.146465][ T5276] usb 2-1: config 64 interface 16 altsetting 6 endpoint 0x8F has invalid maxpacket 57417, setting to 1024 [ 128.158477][ T5276] usb 2-1: config 64 interface 16 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.174899][ T5276] usb 2-1: config 64 interface 16 has no altsetting 0 [ 128.509172][ T5276] usb 2-1: string descriptor 0 read error: -22 [ 128.532543][ T5276] usb 2-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=3c.11 [ 128.545577][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.439188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.535200][ T5389] FAULT_INJECTION: forcing a failure. [ 129.535200][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 129.572942][ T5276] rc_core: IR keymap rc-xbox-dvd not found [ 129.589429][ T5276] Registered IR keymap rc-empty [ 129.603379][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.0.22 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 129.613589][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.623677][ T5389] Call Trace: [ 129.626966][ T5389] [ 129.629906][ T5389] dump_stack_lvl+0x16c/0x1f0 [ 129.634624][ T5389] should_fail_ex+0x497/0x5b0 [ 129.639342][ T5389] ? fs_reclaim_acquire+0xae/0x160 [ 129.644484][ T5389] should_failslab+0xc2/0x120 [ 129.649188][ T5389] __kmalloc_noprof+0xcb/0x400 [ 129.654000][ T5389] ? __pfx_lock_acquire+0x10/0x10 [ 129.659065][ T5389] tomoyo_realpath_from_path+0xb9/0x720 [ 129.664643][ T5389] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 129.670414][ T5389] ? tomoyo_profile+0x47/0x60 [ 129.675223][ T5389] tomoyo_path_number_perm+0x245/0x590 [ 129.680716][ T5389] ? tomoyo_path_number_perm+0x232/0x590 [ 129.686375][ T5389] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.692418][ T5389] ? __fget_files+0x244/0x3f0 [ 129.697131][ T5389] security_file_ioctl+0x9b/0x240 [ 129.702192][ T5389] __x64_sys_ioctl+0xbb/0x210 [ 129.706991][ T5389] do_syscall_64+0xcd/0x250 [ 129.711538][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.717462][ T5389] RIP: 0033:0x7f41ffd7def9 [ 129.721888][ T5389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.741532][ T5389] RSP: 002b:00007f4200b35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.749963][ T5389] RAX: ffffffffffffffda RBX: 00007f41fff35f80 RCX: 00007f41ffd7def9 [ 129.757947][ T5389] RDX: 0000000020000000 RSI: 0000000000008b36 RDI: 0000000000000004 [ 129.765930][ T5389] RBP: 00007f4200b35090 R08: 0000000000000000 R09: 0000000000000000 [ 129.773920][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.781901][ T5389] R13: 0000000000000000 R14: 00007f41fff35f80 R15: 00007ffe19f56418 [ 129.789898][ T5389] [ 129.813628][ T5276] rc rc0: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:64.16/rc/rc0 [ 129.836697][ T5389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.838359][ T5276] input: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:64.16/rc/rc0/input5 [ 130.162045][ T5389] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.207369][ C0] xbox_remote 2-1:64.16: xbox_remote_irq_in: usb_submit_urb()=-19 [ 130.218501][ T5276] usb 2-1: USB disconnect, device number 2 [ 130.629864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 130.639869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.883826][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 130.883878][ T30] audit: type=1400 audit(1726655548.234:194): avc: denied { ioctl } for pid=5393 comm="syz.3.24" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.936694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.228840][ T5410] FAULT_INJECTION: forcing a failure. [ 132.228840][ T5410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.242130][ T5410] CPU: 1 UID: 0 PID: 5410 Comm: syz.1.27 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 132.252333][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 132.262441][ T5410] Call Trace: [ 132.265760][ T5410] [ 132.268728][ T5410] dump_stack_lvl+0x16c/0x1f0 [ 132.273477][ T5410] should_fail_ex+0x497/0x5b0 [ 132.278223][ T5410] _copy_from_user+0x30/0xf0 [ 132.282893][ T5410] ucma_write+0x129/0x330 [ 132.287277][ T5410] ? __pfx_ucma_write+0x10/0x10 [ 132.292214][ T5410] ? bpf_lsm_file_permission+0x9/0x10 [ 132.297648][ T5410] ? security_file_permission+0x71/0x210 [ 132.303440][ T5410] ? __pfx_ucma_write+0x10/0x10 [ 132.308350][ T5410] vfs_write+0x28e/0x1140 [ 132.312744][ T5410] ? __pfx_vfs_write+0x10/0x10 [ 132.317570][ T5410] ? __fget_files+0x244/0x3f0 [ 132.322305][ T5410] ? __fget_light+0x173/0x210 [ 132.327040][ T5410] ksys_write+0x1f8/0x260 [ 132.331426][ T5410] ? __pfx_ksys_write+0x10/0x10 [ 132.336342][ T5410] do_syscall_64+0xcd/0x250 [ 132.340919][ T5410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.346983][ T5410] RIP: 0033:0x7f378eb7def9 [ 132.351533][ T5410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.371213][ T5410] RSP: 002b:00007f378f9ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.379689][ T5410] RAX: ffffffffffffffda RBX: 00007f378ed36130 RCX: 00007f378eb7def9 [ 132.387790][ T5410] RDX: 0000000000000048 RSI: 0000000020000d40 RDI: 0000000000000008 [ 132.395805][ T5410] RBP: 00007f378f9ca090 R08: 0000000000000000 R09: 0000000000000000 [ 132.403830][ T5410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.411857][ T5410] R13: 0000000000000000 R14: 00007f378ed36130 R15: 00007ffeafbd7248 [ 132.419894][ T5410] [ 133.059348][ T5407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.515097][ T30] audit: type=1400 audit(1726655550.864:195): avc: denied { create } for pid=5402 comm="syz.0.25" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.238980][ T30] audit: type=1400 audit(1726655550.874:196): avc: denied { ioctl } for pid=5402 comm="syz.0.25" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7818 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.754534][ T30] audit: type=1400 audit(1726655552.114:197): avc: denied { read } for pid=5424 comm="syz.0.31" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.921046][ T30] audit: type=1400 audit(1726655552.114:198): avc: denied { open } for pid=5424 comm="syz.0.31" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.117148][ T30] audit: type=1400 audit(1726655552.264:199): avc: denied { ioctl } for pid=5424 comm="syz.0.31" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.322374][ T30] audit: type=1400 audit(1726655552.384:200): avc: denied { create } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.475965][ T30] audit: type=1400 audit(1726655552.414:201): avc: denied { bind } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.634859][ T30] audit: type=1400 audit(1726655552.424:202): avc: denied { listen } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.766154][ T30] audit: type=1400 audit(1726655552.434:203): avc: denied { connect } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.901617][ T30] audit: type=1400 audit(1726655552.464:204): avc: denied { read } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.998873][ T30] audit: type=1400 audit(1726655552.574:205): avc: denied { shutdown } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.171393][ T30] audit: type=1400 audit(1726655552.874:206): avc: denied { write } for pid=5421 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.337984][ T30] audit: type=1400 audit(1726655552.884:207): avc: denied { open } for pid=5434 comm="syz.0.33" path="/dev/ptyq4" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 137.339792][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.372847][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.386121][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.397952][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.407016][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.414541][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.556365][ T30] audit: type=1400 audit(1726655552.924:208): avc: denied { ioctl } for pid=5434 comm="syz.0.33" path="/dev/ptyq4" dev="devtmpfs" ino=125 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 137.628058][ T30] audit: type=1400 audit(1726655553.674:209): avc: denied { sys_module } for pid=5442 comm="syz.2.36" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.945286][ T30] audit: type=1400 audit(1726655554.664:210): avc: denied { create } for pid=5439 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.978909][ T30] audit: type=1400 audit(1726655554.694:211): avc: denied { getopt } for pid=5439 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.731444][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.750978][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.816836][ T30] audit: type=1400 audit(1726655554.834:212): avc: denied { mounton } for pid=5446 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 138.876082][ T5382] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.977047][ T30] audit: type=1400 audit(1726655554.964:213): avc: denied { map } for pid=5439 comm="syz.0.35" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.163794][ T5382] usb 4-1: device descriptor read/all, error -71 [ 139.229164][ T5463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.419064][ T5471] FAULT_INJECTION: forcing a failure. [ 139.419064][ T5471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.455884][ T5471] CPU: 1 UID: 0 PID: 5471 Comm: syz.1.42 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 139.466149][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 139.476308][ T5471] Call Trace: [ 139.479605][ T5471] [ 139.482544][ T5471] dump_stack_lvl+0x16c/0x1f0 [ 139.487257][ T5471] should_fail_ex+0x497/0x5b0 [ 139.491993][ T5471] _copy_from_user+0x30/0xf0 [ 139.497313][ T5471] __sys_bpf+0x21c/0x49c0 [ 139.501660][ T5471] ? ksys_write+0x21c/0x260 [ 139.506198][ T5471] ? reacquire_held_locks+0x480/0x4c0 [ 139.511638][ T5471] ? __pfx___sys_bpf+0x10/0x10 [ 139.516445][ T5471] ? vfs_write+0x14d/0x1140 [ 139.521002][ T5471] ? __mutex_unlock_slowpath+0x164/0x650 [ 139.526691][ T5471] ? fput+0x30/0x390 [ 139.530655][ T5471] ? ksys_write+0x1ab/0x260 [ 139.535208][ T5471] ? __pfx_ksys_write+0x10/0x10 [ 139.540128][ T5471] __x64_sys_bpf+0x78/0xc0 [ 139.544583][ T5471] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.549827][ T5471] do_syscall_64+0xcd/0x250 [ 139.554369][ T5471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.560306][ T5471] RIP: 0033:0x7f378eb7def9 [ 139.564740][ T5471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.584373][ T5471] RSP: 002b:00007f378fa0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.592820][ T5471] RAX: ffffffffffffffda RBX: 00007f378ed35f80 RCX: 00007f378eb7def9 [ 139.600810][ T5471] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005 [ 139.608798][ T5471] RBP: 00007f378fa0c090 R08: 0000000000000000 R09: 0000000000000000 [ 139.616787][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.624797][ T5471] R13: 0000000000000000 R14: 00007f378ed35f80 R15: 00007ffeafbd7248 [ 139.632820][ T5471] [ 139.664070][ T5231] Bluetooth: hci5: command tx timeout [ 139.804910][ T2536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.943294][ T5478] FAULT_INJECTION: forcing a failure. [ 139.943294][ T5478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.989792][ T5478] CPU: 1 UID: 0 PID: 5478 Comm: syz.1.44 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 140.000028][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.010143][ T5478] Call Trace: [ 140.013436][ T5478] [ 140.016382][ T5478] dump_stack_lvl+0x16c/0x1f0 [ 140.021116][ T5478] should_fail_ex+0x497/0x5b0 [ 140.025862][ T5478] _copy_from_user+0x30/0xf0 [ 140.030508][ T5478] copy_msghdr_from_user+0x99/0x160 [ 140.035759][ T5478] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.041612][ T5478] ? __pfx___lock_acquire+0x10/0x10 [ 140.046852][ T5478] ___sys_sendmsg+0xff/0x1e0 [ 140.051491][ T5478] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.056747][ T5478] ? find_held_lock+0x2d/0x110 [ 140.061546][ T5478] ? ksys_write+0x21c/0x260 [ 140.066088][ T5478] ? __fget_light+0x173/0x210 [ 140.070808][ T5478] __sys_sendmsg+0x117/0x1f0 [ 140.075444][ T5478] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.080611][ T5478] do_syscall_64+0xcd/0x250 [ 140.085160][ T5478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.091093][ T5478] RIP: 0033:0x7f378eb7def9 [ 140.095526][ T5478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.115162][ T5478] RSP: 002b:00007f378fa0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.123594][ T5478] RAX: ffffffffffffffda RBX: 00007f378ed35f80 RCX: 00007f378eb7def9 [ 140.131754][ T5478] RDX: 0000000000000000 RSI: 0000000020000b80 RDI: 0000000000000006 [ 140.139738][ T5478] RBP: 00007f378fa0c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.147726][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.155741][ T5478] R13: 0000000000000000 R14: 00007f378ed35f80 R15: 00007ffeafbd7248 [ 140.163759][ T5478] [ 140.236775][ T2536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.879786][ T2536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.934379][ T5487] overlayfs: missing 'lowerdir' [ 141.369496][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 141.369545][ T30] audit: type=1400 audit(1726655558.714:223): avc: denied { getopt } for pid=5486 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.476777][ T30] audit: type=1400 audit(1726655558.724:224): avc: denied { ioctl } for pid=5486 comm="syz.0.45" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.757569][ T5231] Bluetooth: hci5: command tx timeout [ 141.838053][ T2536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.175969][ T5279] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.376419][ T30] audit: type=1400 audit(1726655559.734:225): avc: denied { ioctl } for pid=5492 comm="syz.3.48" path="socket:[6981]" dev="sockfs" ino=6981 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.585240][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 143.618083][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.658887][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.678756][ T30] audit: type=1400 audit(1726655561.044:226): avc: denied { write } for pid=5492 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.685966][ T5279] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 143.759355][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5493 comm=syz.3.48 [ 143.806107][ T5231] Bluetooth: hci5: command tx timeout [ 143.822517][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.891757][ T30] audit: type=1400 audit(1726655561.234:227): avc: denied { setopt } for pid=5500 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.954528][ T5279] usb 2-1: config 0 descriptor?? [ 144.009830][ T30] audit: type=1400 audit(1726655561.274:228): avc: denied { write } for pid=5500 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.091542][ T30] audit: type=1400 audit(1726655561.274:229): avc: denied { name_connect } for pid=5500 comm="syz.0.50" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 144.166869][ T5279] usb 2-1: can't set config #0, error -71 [ 144.217978][ T5279] usb 2-1: USB disconnect, device number 3 [ 144.286459][ T5446] chnl_net:caif_netlink_parms(): no params data found [ 144.391198][ T30] audit: type=1400 audit(1726655561.754:230): avc: denied { search } for pid=4885 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.519923][ T30] audit: type=1400 audit(1726655561.754:231): avc: denied { read } for pid=4885 comm="dhcpcd" name="n68" dev="tmpfs" ino=1688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.658968][ T5514] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.696010][ T5231] Bluetooth: hci5: command tx timeout [ 146.771594][ T30] audit: type=1400 audit(1726655561.754:232): avc: denied { open } for pid=4885 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.787399][ T2536] bridge_slave_1: left allmulticast mode [ 146.796415][ T30] audit: type=1400 audit(1726655561.754:233): avc: denied { getattr } for pid=4885 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.806407][ T5509] netlink: 432 bytes leftover after parsing attributes in process `syz.2.51'. [ 146.837826][ T30] audit: type=1400 audit(1726655562.014:234): avc: denied { create } for pid=5507 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.866527][ T2536] bridge_slave_1: left promiscuous mode [ 146.884915][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.906536][ T30] audit: type=1400 audit(1726655562.024:235): avc: denied { write } for pid=5507 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.980523][ T2536] bridge_slave_0: left allmulticast mode [ 146.993328][ T2536] bridge_slave_0: left promiscuous mode [ 147.005082][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.296209][ T5277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.496136][ T30] audit: type=1400 audit(1726655564.754:236): avc: denied { read } for pid=5521 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.544553][ T5277] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.564579][ T5277] usb 2-1: config 64 has an invalid interface number: 16 but max is 0 [ 147.584101][ T30] audit: type=1400 audit(1726655564.754:237): avc: denied { open } for pid=5521 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.609296][ T5277] usb 2-1: config 64 has no interface number 0 [ 147.615536][ T5277] usb 2-1: config 64 interface 16 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.692409][ T5277] usb 2-1: config 64 interface 16 altsetting 6 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.703664][ T5277] usb 2-1: config 64 interface 16 altsetting 6 endpoint 0x8F has invalid maxpacket 57417, setting to 1024 [ 147.715120][ T5277] usb 2-1: config 64 interface 16 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 147.728438][ T5277] usb 2-1: config 64 interface 16 has no altsetting 0 [ 147.741725][ T5277] usb 2-1: string descriptor 0 read error: -22 [ 147.753508][ T5277] usb 2-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=3c.11 [ 147.762739][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.837375][ T30] audit: type=1400 audit(1726655564.754:238): avc: denied { getattr } for pid=5521 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.087567][ T5277] rc_core: IR keymap rc-xbox-dvd not found [ 148.093423][ T5277] Registered IR keymap rc-empty [ 148.162950][ T5277] rc rc0: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:64.16/rc/rc0 [ 148.256353][ T5277] input: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:64.16/rc/rc0/input6 [ 148.399197][ C0] xbox_remote 2-1:64.16: xbox_remote_irq_in: usb_submit_urb()=-19 [ 148.459674][ T5277] usb 2-1: USB disconnect, device number 4 [ 149.286104][ T30] audit: type=1400 audit(1726655566.644:239): avc: denied { write } for pid=5519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.333000][ T30] audit: type=1400 audit(1726655566.644:240): avc: denied { add_name } for pid=5519 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.433872][ T30] audit: type=1400 audit(1726655566.644:241): avc: denied { create } for pid=5519 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.162646][ T2536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.238536][ T2536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.299919][ T2536] bond0 (unregistering): Released all slaves [ 152.404382][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 152.404406][ T30] audit: type=1400 audit(1726655569.114:249): avc: denied { setattr } for pid=5548 comm="syz.1.58" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 152.930761][ T5231] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 153.279789][ T30] audit: type=1326 audit(1726655570.644:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885057def9 code=0x0 [ 154.625842][ C1] sched: RT throttling activated [ 258.325810][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 258.332849][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5545/2:b..l [ 258.341266][ C0] rcu: (detected by 0, t=10502 jiffies, g=13513, q=595 ncpus=2) [ 258.349030][ C0] task:syz.3.57 state:R running task stack:25936 pid:5545 tgid:5542 ppid:5226 flags:0x00004002 [ 258.361877][ C0] Call Trace: [ 258.365196][ C0] [ 258.368173][ C0] __schedule+0xe37/0x5490 [ 258.372669][ C0] ? __lock_acquire+0xb41/0x3cb0 [ 258.377687][ C0] ? __pfx___schedule+0x10/0x10 [ 258.382606][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 258.387884][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 258.393174][ C0] preempt_schedule_irq+0x51/0x90 [ 258.398278][ C0] irqentry_exit+0x36/0x90 [ 258.402745][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.408810][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 258.415638][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 258.435652][ C0] RSP: 0018:ffffc900037df300 EFLAGS: 00000246 [ 258.442222][ C0] RAX: 0000000000000000 RBX: ffffea000168da74 RCX: ffffffff81bf290c [ 258.450243][ C0] RDX: ffff88802bb59e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 258.458295][ C0] RBP: ffffea000168da40 R08: 0000000000000001 R09: fffff940002d1b4e [ 258.466320][ C0] R10: ffffea000168da77 R11: 0000000000000000 R12: 0000000000000001 [ 258.474333][ C0] R13: 0000000000000001 R14: ffffea000168da40 R15: dffffc0000000000 [ 258.482362][ C0] ? page_ref_add_unless.constprop.0+0x31c/0x390 [ 258.488784][ C0] page_ref_add_unless.constprop.0+0x31c/0x390 [ 258.495013][ C0] find_lock_entries+0x1bd/0xc10 [ 258.500029][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 258.505558][ C0] ? __pfx___might_resched+0x10/0x10 [ 258.510893][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 258.517028][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 258.523437][ C0] shmem_undo_range+0x217/0x1160 [ 258.528482][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 258.533929][ C0] ? locks_dispose_list+0x19d/0x250 [ 258.539198][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 258.544467][ C0] ? __fput+0x348/0xb60 [ 258.548805][ C0] ? mark_lock+0xb5/0xc60 [ 258.553201][ C0] ? hlock_class+0x4e/0x130 [ 258.557758][ C0] ? mark_lock+0xb5/0xc60 [ 258.562183][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 258.567443][ C0] ? hlock_class+0x4e/0x130 [ 258.571999][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 258.577085][ C0] ? percpu_counter_add_batch+0xb5/0x1e0 [ 258.582784][ C0] shmem_evict_inode+0x3a3/0xba0 [ 258.587794][ C0] ? find_held_lock+0x2d/0x110 [ 258.592616][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 258.598140][ C0] ? evict+0x3c8/0x970 [ 258.602265][ C0] ? __pfx_lock_release+0x10/0x10 [ 258.607381][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 258.612910][ C0] evict+0x409/0x970 [ 258.616871][ C0] ? __pfx_evict+0x10/0x10 [ 258.621374][ C0] iput.part.0+0x5cf/0x820 [ 258.625851][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 258.631601][ C0] iput+0x62/0x80 [ 258.635254][ C0] dentry_unlink_inode+0x29c/0x480 [ 258.640388][ C0] __dentry_kill+0x1d0/0x600 [ 258.645001][ C0] dput.part.0+0x4b1/0x9b0 [ 258.649443][ C0] dput+0x1f/0x30 [ 258.653100][ C0] __fput+0x513/0xb60 [ 258.657110][ C0] task_work_run+0x14e/0x250 [ 258.661744][ C0] ? __pfx_task_work_run+0x10/0x10 [ 258.666929][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 258.672189][ C0] do_exit+0xaa3/0x2bb0 [ 258.676415][ C0] ? get_signal+0x8f2/0x2770 [ 258.681055][ C0] ? __pfx_do_exit+0x10/0x10 [ 258.685700][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 258.690772][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.696202][ C0] do_group_exit+0xd3/0x2a0 [ 258.700768][ C0] get_signal+0x25fb/0x2770 [ 258.705339][ C0] ? __pfx_get_signal+0x10/0x10 [ 258.710265][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 258.715885][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 258.722110][ C0] ? trace_irq_enable.constprop.0+0x36/0x130 [ 258.728170][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 258.733946][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 258.739474][ C0] RIP: 0033:0x7fd1a404daf0 [ 258.743931][ C0] RSP: 002b:00007fd1a4ff0060 EFLAGS: 00000202 [ 258.750049][ C0] RAX: 0000000020000000 RBX: 00007fd1a4336058 RCX: 00007fd1a41f0b76 [ 258.758062][ C0] RDX: 0000000000000000 RSI: 0000000000b36000 RDI: 0000000020000000 [ 258.766081][ C0] RBP: 00007fd1a41f0b76 R08: ffffffffffffffff R09: 0000000000000000 [ 258.774094][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 258.782113][ C0] R13: 0000000000000000 R14: 00007fd1a4336058 R15: 00007ffe96e84978 [ 258.790155][ C0] [ 258.793226][ C0] rcu: rcu_preempt kthread starved for 10542 jiffies! g13513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 258.804471][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 258.814473][ C0] rcu: RCU grace-period kthread stack dump: [ 258.820391][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 258.832187][ C0] Call Trace: [ 258.835508][ C0] [ 258.838481][ C0] __schedule+0xe37/0x5490 [ 258.842966][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 258.848250][ C0] ? __pfx___schedule+0x10/0x10 [ 258.853206][ C0] ? schedule+0x298/0x350 [ 258.857599][ C0] ? __pfx_lock_release+0x10/0x10 [ 258.862686][ C0] ? __pfx___mod_timer+0x10/0x10 [ 258.867690][ C0] ? lock_acquire+0x1b1/0x560 [ 258.872433][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 258.877961][ C0] schedule+0xe7/0x350 [ 258.882097][ C0] schedule_timeout+0x136/0x2a0 [ 258.887010][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 258.892444][ C0] ? __pfx_process_timeout+0x10/0x10 [ 258.897795][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 258.903666][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 258.909229][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 258.914066][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 258.919409][ C0] ? rcu_gp_init+0xc82/0x1630 [ 258.924152][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 258.929421][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.935295][ C0] rcu_gp_kthread+0x271/0x380 [ 258.940036][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.945306][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.950580][ C0] ? __kthread_parkme+0x148/0x220 [ 258.955665][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.961019][ C0] kthread+0x2c1/0x3a0 [ 258.965188][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.970448][ C0] ? __pfx_kthread+0x10/0x10 [ 258.975094][ C0] ret_from_fork+0x45/0x80 [ 258.979579][ C0] ? __pfx_kthread+0x10/0x10 [ 258.984224][ C0] ret_from_fork_asm+0x1a/0x30 [ 258.989073][ C0] [ 258.992127][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 258.998505][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 259.008615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 259.018794][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 259.024140][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 78 a2 eb 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 56 a4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.044252][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 259.050380][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b181979 [ 259.058435][ C0] RDX: 0000000000000001 RSI: ffff8880212ad800 RDI: ffff8880212ad864 [ 259.066449][ C0] RBP: ffff8880212ad864 R08: 0000000000000001 R09: ffffed1017106fd9 [ 259.074464][ C0] R10: ffff8880b8837ecb R11: 0000000000000000 R12: ffff88801ffd1800 [ 259.082495][ C0] R13: ffffffff8e9faa20 R14: 0000000000000000 R15: 0000000000000000 [ 259.090526][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 259.099515][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.106179][ C0] CR2: 0000000020009030 CR3: 0000000033d9a000 CR4: 00000000003526f0 [ 259.114196][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.122276][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.130295][ C0] Call Trace: [ 259.133610][ C0] [ 259.136491][ C0] ? show_regs+0x8c/0xa0 [ 259.140805][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 259.147193][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 259.152464][ C0] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 259.158008][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 259.163705][ C0] ? __asan_memcpy+0x3c/0x60 [ 259.168360][ C0] ? __asan_memcpy+0x3c/0x60 [ 259.173035][ C0] ? update_process_times+0x175/0x220 [ 259.178455][ C0] ? __pfx_update_process_times+0x10/0x10 [ 259.184221][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 259.189739][ C0] ? update_wall_time+0x1c/0x40 [ 259.194655][ C0] ? tick_nohz_handler+0x376/0x530 [ 259.199827][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 259.205340][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 259.210862][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 259.216817][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 259.222969][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 259.228205][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 259.234433][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 259.240345][ C0] [ 259.243311][ C0] [ 259.246281][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.252524][ C0] ? ct_kernel_exit+0x139/0x190 [ 259.257431][ C0] ? acpi_safe_halt+0x1a/0x20 [ 259.262163][ C0] acpi_idle_enter+0xc5/0x160 [ 259.266906][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 259.271986][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 259.277859][ C0] cpuidle_enter+0x4e/0xa0 [ 259.282330][ C0] do_idle+0x313/0x3f0 [ 259.286472][ C0] ? __pfx_do_idle+0x10/0x10 [ 259.291139][ C0] cpu_startup_entry+0x4f/0x60 [ 259.295965][ C0] rest_init+0x16b/0x2b0 [ 259.300267][ C0] ? acpi_subsystem_init+0x133/0x180 [ 259.305607][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 259.311239][ C0] start_kernel+0x3e4/0x4d0 [ 259.315813][ C0] x86_64_start_reservations+0x18/0x30 [ 259.321435][ C0] x86_64_start_kernel+0xb2/0xc0 [ 259.326451][ C0] common_startup_64+0x13e/0x148 [ 259.331461][ C0]