last executing test programs: 14.846985447s ago: executing program 3 (id=4151): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xa1, &(0x7f0000000000), &(0x7f0000000080)=0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) r7 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x4400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f00000000c0)={0x1, 0xffffffffffffff71, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_cqring_wait\x00'}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (fail_nth: 1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000003c0)={{0x20, 0x5}, {0x4, 0x8}, 0x400, 0x0, 0x5}) 14.350151387s ago: executing program 3 (id=4152): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x241, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x2900004, &(0x7f0000000240)=ANY=[]) read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000008c0)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x1409d89}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0x18) bind(r0, &(0x7f00000002c0)=@caif=@rfm={0x25, 0x6, "f57f93f1752a8919df9843666879f6ad"}, 0x80) syz_fuse_handle_req(r1, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_open(&(0x7f0000000000)=']-\x00', 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={r5}, 0x8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x2) 14.293127925s ago: executing program 1 (id=4153): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r3) setresgid(0x0, 0x0, 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) socket(0x1, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000912da4700c6274eee0b4600334306d5ae8be5455e84b3bcea04b1cef71d96c9a579e52db1640fecd680a2a7687aee06004ec6e4f4967a4d2781468bbd61530f00d3a3a26962e9a82cf6e6aa73a9216e9d29517088dbadf7e05b207027ae9174ae11e461b88ed9046130baeddb8774677dcc6424966a8b69957516dc827443d299ee2f995ed49b25ef8ae2709af198d9853f1471b689383dc7e"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39ddbb1edb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a634b93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939db52812e07795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b59895e0309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a10100000000000000c9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670e31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167a9f5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63db66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce985a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90a6e865225f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853b8b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd0900a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09ac0090609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227d9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89732c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d1700000000000000f65d0eb4b7b077f1b4d3c5254753ddc9d5861fca4ec4205af1c89fa638b00342ff5f5994fc1f042d1b4a0000000000000070035394b646baa4ba26f70c2c2fe2bc501ecc19f538fdeb7485b73a72a3cba6c50721ce39a0dba3757fcfdb20f40fc9f7fb5d0b6100000000000000005bc7aff2c5b266f8276c6a6eebeae26b7410b7b506f7518ef70721f4315b04f1c35d5c5ab58d6d78682c21821d8e0648feddf5734daba6e219ddc4708f0de8032515fdd2825334e43786d58caeaaee3bdfcfc7e27d90f26de71d00417b23910b4f2c06d21313a73fdb069482241e09d49d37d91a43a08812df97700683e828735af95018960271e49d61fb985e088d079ee30b347952dc5ba725047cef9b0065fed61cf2a4336bd8b3dea27ab071fc2cea404b8d39b798aef5739327b0f02add98cb77ad6c6fc582798a8e5b0e7baf898efaff86d859932b903881253c3457a86fb5ff849bb51959d3d16cba8e59bc854be0509d12d800000000000000000000000000f82401ebba7ada9d9531161825cc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000002500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYRESOCT=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) 14.247082121s ago: executing program 0 (id=4154): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010140)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x7, 0x8}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)='6', 0x1, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006480)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) unshare(0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [{}, {0x20, '\xf2'}, {0x20, '!\x82,{'}, {0x20, '['}, {0x20, 'n\x8f\x10G\x8a\xf9\xec8'}]}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000640)}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket(0xa, 0x40000000002, 0x0) sendmsg$netlink(r3, 0x0, 0x8000) ioprio_get$uid(0x3, 0x0) 13.163732889s ago: executing program 4 (id=4157): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="180100002020642500000000002020207b3af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7039e204f398500000000000085000000018bd41b3a118065e3716ed6e48c060000008efb872ad9ead8e6dfcab45ec035119686e4dc84e6d9d804e844b5695df922a5675a4329edf68dd59ada0cd51dce68c7498985c81c026851728eacc7b8b90357ba6736b0407095108a76efce8b39494489cb2a796ad75f44e0d5bb082878be4c886e23720d2bd320d3291f924519815900"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x5, 0x2, 0xc}], 0x10, 0x454}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000340)=r1) socket$inet6(0xa, 0x3, 0x20) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x4000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000500)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) pipe(&(0x7f0000000000)) 12.872776158s ago: executing program 0 (id=4158): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x2100, 0x101) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x7, 0xff}}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x7c}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000000)="4dcdc7c6223e00000000ffff80f3", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r14, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r14, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004091}, 0x4000) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 12.853666408s ago: executing program 4 (id=4159): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010102, @empty}, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400004000008000240000000000800054000000000080003"], 0x9c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) epoll_create(0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 12.773665825s ago: executing program 1 (id=4160): socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4", 0xb3}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) epoll_create(0x1) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)="b89888414f7b4cc9fac9464185b8ec", 0xf) flistxattr(r4, &(0x7f0000000380)=""/42, 0x2a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a00010400000000000000000a000000000000000800010000002000"], 0x20}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x12, 0x610, 0x0, 0x202, 0x240, 0x2e8, 0x2e8, 0x240, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r6 = syz_open_pts(r1, 0x0) r7 = dup3(r6, r1, 0x0) ioctl$TIOCSETD(r7, 0x541b, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12.403467502s ago: executing program 2 (id=4161): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0x0]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setresgid(r2, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff09, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)=0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000300)=0x1329) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2036) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 9.49718014s ago: executing program 3 (id=4162): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 7.584675761s ago: executing program 4 (id=4163): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fdb76635"}]}}, 0x0}, 0x0) 7.560422269s ago: executing program 1 (id=4164): ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0xfb4873df2c4acf5e) syz_open_procfs$namespace(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x80000) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc0185879, &(0x7f0000000180)={@id={0x3fffffff, 0x0, @auto="ffee8e00001900"}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002140)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 6.442470461s ago: executing program 1 (id=4165): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r6) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x9}, @sadb_x_nat_t_type={0x1}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 6.356325761s ago: executing program 2 (id=4166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x144, 0x2b8, 0x182, 0x144, 0x0, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xdc, 0x144, 0x0, {0x0, 0x1800}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x374) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010004bb537f90a7ef25a8bffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800800010067747000300002800800030004000000080004000100000014000800fc010000000000000000000000000000050005"], 0x5c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89", 0x40, 0x0, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000040)=0x4, r0, &(0x7f0000000080)=0x1ec, 0x4, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44055}, 0x1000c000) 5.135389244s ago: executing program 2 (id=4167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000700)=""/102400, 0x19000}], 0x1, 0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x4fabbfc110b6c292, &(0x7f0000019700)={0x7, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty, 0x9}}, 0x24) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x4605, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x4a, 0x0, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x358, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x358, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x1, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x60}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x31) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, &(0x7f0000000080)) 5.128713187s ago: executing program 4 (id=4168): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0xd29, 0xfffffffa, 0x100}, 0xc) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{}, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f0000000a40)=r3, 0x4) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000020000190be8048113410700000000000000000000a00000000009f707050000000000000080017004e0f4e24090c5c7146e5d383bec6ae81c07a50ed13c41d6e02daa7000000da7722ab0883300c2f38f7914a3fc591ff27a3ad3c145a1dea1d2d18e05402c39c0a06f6efc39a67b5fb392de89a17cf9d34543ab564d90506c7356aea1d85f3a1b53d9db4edb0c1f05bc8e683000000"], 0x24}}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000080)={[{@dyn}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x2020) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x3}}}, 0x24}}, 0x0) 5.073689575s ago: executing program 1 (id=4169): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="180100002020642500000000002020207b3af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7039e204f398500000000000085000000018bd41b3a118065e3716ed6e48c060000008efb872ad9ead8e6dfcab45ec035119686e4dc84e6d9d804e844b5695df922a5675a4329edf68dd59ada0cd51dce68c7498985c81c026851728eacc7b8b90357ba6736b0407095108a76efce8b39494489cb2a796ad75f44e0d5bb082878be4c886e23720d2bd320d3291f924519815900"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x5, 0x2, 0xc}], 0x10, 0x454}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000340)=r1) socket$inet6(0xa, 0x3, 0x20) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x4000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000500)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) pipe(&(0x7f0000000000)) 5.058440341s ago: executing program 3 (id=4170): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) 5.029931342s ago: executing program 0 (id=4171): socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008f9000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ff1ec608402000d3a332010203010902120001000000040904"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) fadvise64(r3, 0x1f00, 0x0, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x10240) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f00000004c0)="19ef41ce531552a7a8668819cb3eb5e29253dd1d1ed808ced7a6afa44b6501ef8e6e3ac6ef6ecf93de", 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="1c002c800800"], 0x38}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.024478174s ago: executing program 3 (id=4172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) close_range(0xffffffffffffffff, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r5 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0x8ef, 0x0, 0x2, 0x2}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r4, 0x0, 0x8000000d) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xa21, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4051}, 0x40000) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESDEC=r2, @ANYRES32=r5], 0x6c}}, 0x0) epoll_wait(r6, &(0x7f0000000040), 0x0, 0x4) write$UHID_DESTROY(r4, &(0x7f00000003c0), 0x4) 2.818221534s ago: executing program 1 (id=4173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) getrusage(0xffffffffffffffff, &(0x7f0000000340)) 2.602821966s ago: executing program 3 (id=4174): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000900ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) r7 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r9}, 0x10) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0xa0000001}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) read(0xffffffffffffffff, &(0x7f0000000000)=""/9, 0x67) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000140)=0x7) 2.12695091s ago: executing program 4 (id=4175): socket$kcm(0x1e, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000c00)="3197ddfe488691e8318570a3c5b6596b0cfbb05bfb706c2c426ca3e6339a7a6f1fe0b29813c6a1c88fe26be216b01be7146b178cd2a0480cedde8440052a1af248fd38478893b1ec3460c4ef7c18a49354008ffed1ca603f6b872449c97ec77d2fa9aaf4e77a8a61b3cf0ea2035b7406727f45b87c054d141c54c2f46c0db4de3a9caadee04849dc3cf348cf03c636b6f128dd5d04aec25cd4073cf5b618eea2d1df7d5f46135c28d3e3990c8f980d550076ec5ed887b5db7279f7dd7db55b66b430783947a113a743c2e73095bc2f42e679573be393299564ab218f9227f46e4c813623b85143a566d53cb6602a179ea807b840c0a7a0ecc9be2b", 0xfb}, {&(0x7f0000000a80)="63d58ab13798ebd32d00c8327ab36817e719f789d1d3ce5f22d5af591d90720118fc9c6b709ef171d975dbb95a27755dc1a7dd6d1ec22a9cc8ceff6b171bf7ac9f7d2e8267adafa29ac60f28cbd9b4476e2c625bd212d81da9b399d1a3f0d7b9e600f75f1a5c129c4f7b42fed08c75a549cc88eb8da3a46929ac9481d451622aac58a9c69647186a455002bcc317df47ef561304152e6d28eaad98eb7d3e1ca9b9d9a8ad3815582d5a5ee38df981", 0xae}, {&(0x7f0000000d00)="e05f73308df95fe1df55eebbc4ae818cff99ee692fa95e7e5688deacf5d32f778aed208367fba0ed22d8cdc6d9e1d06d776e128c57a1481ada28e20ca077bb0b6eb7f0d17c3990e737390253cf020704d0c5ada287b196f9378308fa469bbee5c662dae9d0d1f85d98bd376fb8941bcd1575c4262c3d49406fbc93595f522f83b4cfa159f822ed378f567b119e50f7f9ed589d74773e88308e87609c5f3080f3dc975c573941b260eb0b3014790e9c439fc440591b986906da380a7469a63025f3fca7bb16cd7ec892e7e5e50427f01468ac3b83a16a4632b88eff63", 0xdc}, {&(0x7f0000000e00)="11c0c3c05268e76076322e86fdc841f93a38534b4c9ec11e151e0e5ddbf956c13d0eda37ac0adfb96dc6e508d6c2ff256b0b8a0968170784c094af6390be1f2288fe7edea7e535f7739baa4ad21902880db22698ff63b0457d2916209dc9a017865f9f4c6f900563a5efe265d7c2b9665ddd4e3450179095b8ba1ad20ee2", 0x7e}, {&(0x7f0000000e80)="0547b20b7b0e67726bb07be578fbf6249af7da143171e5a0a15aa4670475c35eb38fcc0009c067dfa41ade23ec86479dcf3505c5114965939e64923272c86896a2f511dd351edf75f94cb2e6130d93567d8dcff5430d6eb2281d85e4", 0x5c}, {&(0x7f0000000f00)="b53b299613277abb3fb534569be76abf2dc25e6d46ad88a6f3a34b420d5b61e898f2d6cbfeae3e32143123a51b5a96a1fc40432b6e010b8127865bfa60b110af269d93265e24bb6ad2aff0b14db2b33dc2346ef494bea62f34afc4b5954c6849f1f4f718ad0c813131541583b5f3e9cc7a31c51526c04f7a4775576d61b161f2de20b63cc66c8c9af21514945fb9735af12e0cd861c8be60c1897cdbe735b09546bc517ec1497671750ea8d697bc63f410f6f4b0e2b5da8dbdfa4a5d70b9a7738012bb7a4210d15e07786e217e48d5e23accc61b23a152da420786267e9aa792b554c00781ffa2309ccda0b7623579cd385c4f9899", 0xf5}, {&(0x7f0000000380)="16f80147f882d1f35ab858779fc73b6a076f5f8d3e78975e", 0x18}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000001100)="11acdc0b6114c792b33cf5129af7005983b8505f44d96d7b3b35b3bda90229c9aecd2e5f9adc52cfaac5e8fccb026c7f601cac670d4e78d312de32070a6391de711e66948ab89beb0465048e7880f014bcb2cd777a61554c85b3109b8f2c23d7930831120c5fa2051ba5d56f88692e29f74967e50e656ed403576e3ad0696019898f484c08705c064552d138be58ca2896f35d51aab2c0a141f33ee6d7c0fb788870b7daeb5d27a0", 0xa8}], 0x9}, 0x4080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8500000011000000350000000000002085000000a00000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f5369ec7122178602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00356ffebfb19a34268335648e1f822de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbd775d9c07d8d591a4d8c60ff000000b78863e629b3b200000000000000000000000000008b00000000449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e20b911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee21f581d124216e8bd9b1855f77138e438bdc037865f0db98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4bd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd969a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c71a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd86a24f18c0f2be0b5a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e45770990b8aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0ddc6006748002a280264a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7e1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61816146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x1415}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x15, &(0x7f0000000b40)=ANY=[@ANYRES16=r8, @ANYRES16=r5, @ANYBLOB="0000004000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f84977ffffffb703000008000000b7040000010010008500000082000000180100002020692500000000002020207b1af8ff00000000bfa1008edbe3a40007010000f8ffffffb702000008000000b7030000710c0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000180)={r9}) 1.940744011s ago: executing program 2 (id=4176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) unshare(0x22020600) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0xee00, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route(r3, 0x0, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.524682336s ago: executing program 0 (id=4177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x144, 0x2b8, 0x182, 0x144, 0x0, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xdc, 0x144, 0x0, {0x0, 0x1800}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x374) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010004bb537f90a7ef25a8bffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800800010067747000300002800800030004000000080004000100000014000800fc010000000000000000000000000000050005"], 0x5c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89", 0x40, 0x0, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000040)=0x4, r0, &(0x7f0000000080)=0x1ec, 0x4, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44055}, 0x1000c000) 943.243271ms ago: executing program 4 (id=4178): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r2, 0x0, 0x0) 627.783219ms ago: executing program 0 (id=4179): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fdb76635"}]}}, 0x0}, 0x0) 474.748611ms ago: executing program 2 (id=4180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x69a7, &(0x7f0000000200)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}) (async, rerun: 32) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = io_uring_setup(0x735c, &(0x7f0000000080)={0x0, 0xd744, 0x0, 0x0, 0x33e}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000200)=0x3, 0x4) read$char_usb(r5, &(0x7f0000000080)=""/139, 0x8b) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000000c0)) 271.598177ms ago: executing program 2 (id=4181): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb2, 0x2e}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x341}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20040008) writev(r3, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) timer_create(0x8, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=4182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd19, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000005c0), 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000ca849ef5d20f8283306315ab1500000000000087080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb70382f6cfda59000008000000b704000000000000850000008200b68fd861786329ad0000d27c42fb1e9f600e954025a2acac9d1a187d"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, &(0x7f00000002c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000001080), 0x20101, r6}, 0x38) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 00007f8316916130 RCX: 00007f8316779e79 [ 1377.414846][T18516] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1377.422808][T18516] RBP: 00007f83174bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.430767][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.438727][T18516] R13: 0000000000000000 R14: 00007f8316916130 R15: 00007ffedbc2c1c8 [ 1377.446693][T18516] [ 1377.452604][ T29] audit: type=1326 audit(1724710149.758:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1377.476418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.494516][T18521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1377.521851][T18521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1377.524293][T18244] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.554077][T18521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1377.560665][ T29] audit: type=1326 audit(1724710149.758:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1377.618587][T18518] netlink: 'syz.2.3642': attribute type 4 has an invalid length. [ 1377.646276][T18521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1377.654452][T18521] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1377.677695][T18521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1377.725186][ T29] audit: type=1326 audit(1724710149.758:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1377.817148][ T29] audit: type=1326 audit(1724710149.758:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1378.025049][ T29] audit: type=1326 audit(1724710149.758:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1378.059758][ T29] audit: type=1326 audit(1724710149.758:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1379.084523][ T29] audit: type=1326 audit(1724710149.758:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.1.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1379.172212][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1379.293450][T18244] bridge_slave_1: left allmulticast mode [ 1379.313822][T18244] bridge_slave_1: left promiscuous mode [ 1379.340328][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.384355][T18244] bridge_slave_0: left allmulticast mode [ 1379.439054][T18244] bridge_slave_0: left promiscuous mode [ 1379.463699][T18244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.747870][T12155] Bluetooth: hci4: command tx timeout [ 1380.401478][T18548] x_tables: duplicate underflow at hook 2 [ 1380.620966][T18244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.816846][T12155] Bluetooth: hci4: command tx timeout [ 1383.593305][T18244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.734816][T18244] bond0 (unregistering): Released all slaves [ 1383.951342][T12155] Bluetooth: hci4: command tx timeout [ 1384.000961][T18548] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1384.069044][T18548] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1384.279233][T18566] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:0 [ 1384.361017][T18519] chnl_net:caif_netlink_parms(): no params data found [ 1384.385314][T18574] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1384.394848][T18574] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1384.472577][T18574] blktrace: Concurrent blktraces are not allowed on loop3 [ 1384.918054][T18244] hsr_slave_0: left promiscuous mode [ 1384.955636][T18244] hsr_slave_1: left promiscuous mode [ 1385.003893][T18244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.058622][T18244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.116853][T18244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.152269][T18244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.317130][T18244] veth1_macvtap: left promiscuous mode [ 1385.324414][T18244] veth0_macvtap: left promiscuous mode [ 1385.344100][T18244] veth1_vlan: left promiscuous mode [ 1385.364476][T18244] veth0_vlan: left promiscuous mode [ 1385.370385][T18587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1385.845742][T18593] ubi0: attaching mtd0 [ 1385.852109][T18593] ubi0: scanning is finished [ 1385.856835][T18593] ubi0: empty MTD device detected [ 1385.905930][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1385.905951][ T29] audit: type=1400 audit(1724710158.608:893): avc: denied { ioctl } for pid=18591 comm="syz.4.3659" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1385.958324][T18593] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1385.965837][T18593] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1385.974192][T18593] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1385.981235][T18593] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1385.988619][T18593] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1385.995387][T18593] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1386.003442][T18593] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1854402337 [ 1386.013487][T18593] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1386.049373][T12155] Bluetooth: hci4: command tx timeout [ 1386.056734][T18598] ubi0: background thread "ubi_bgt0d" started, PID 18598 [ 1386.711471][T18609] netlink: 81772 bytes leftover after parsing attributes in process `syz.4.3663'. [ 1387.320436][ T941] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1388.051588][ T29] audit: type=1400 audit(1724710160.478:894): avc: denied { bind } for pid=18616 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1388.655791][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 1388.678779][ T941] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1388.695658][T18628] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1388.705375][ T941] usb 2-1: config 0 has no interface number 0 [ 1388.712246][ T941] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.723667][T18628] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1388.732838][ T941] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.753042][ T941] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1388.767101][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.794255][T18628] blktrace: Concurrent blktraces are not allowed on loop3 [ 1388.808105][ T941] usb 2-1: config 0 descriptor?? [ 1388.982822][T18244] team0 (unregistering): Port device team_slave_1 removed [ 1389.064162][T18244] team0 (unregistering): Port device team_slave_0 removed [ 1389.235798][ T941] usbhid 2-1:0.1: can't add hid device: -71 [ 1389.250256][ T941] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1389.282799][ T941] usb 2-1: USB disconnect, device number 57 [ 1389.415049][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3668'. [ 1389.672224][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3669'. [ 1390.088019][ T29] audit: type=1400 audit(1724710162.848:895): avc: denied { write } for pid=18635 comm="syz.1.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1390.270973][T18519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.285981][T18519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.293642][T18519] bridge_slave_0: entered allmulticast mode [ 1390.308111][T18519] bridge_slave_0: entered promiscuous mode [ 1390.317848][T18519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.325157][T18519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.333979][T18519] bridge_slave_1: entered allmulticast mode [ 1390.343477][T18519] bridge_slave_1: entered promiscuous mode [ 1390.578464][T18636] workqueue: name exceeds WQ_NAME_LEN. Truncating to: <Ê“^VÆ0ƶ`ú†íºæ2|×Ç } Î¹C| [ 1390.595486][T18519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.674279][T18519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.780556][ T29] audit: type=1400 audit(1724710163.548:896): avc: denied { create } for pid=18643 comm="syz.4.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1391.389202][ T29] audit: type=1400 audit(1724710163.658:897): avc: denied { bind } for pid=18643 comm="syz.4.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1391.564738][T18519] team0: Port device team_slave_0 added [ 1391.631569][T18519] team0: Port device team_slave_1 added [ 1391.651429][T18650] netlink: 81772 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1391.820722][T18519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.842496][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.945632][T18519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.167429][T18519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.015026][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.172834][T18519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.765732][T18519] hsr_slave_0: entered promiscuous mode [ 1393.794591][ T29] audit: type=1400 audit(1724710166.498:898): avc: denied { ioctl } for pid=18664 comm="syz.2.3679" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1393.830690][T18519] hsr_slave_1: entered promiscuous mode [ 1393.874683][T18519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1393.937194][T18519] Cannot create hsr debugfs directory [ 1395.256266][T18667] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1395.325298][T18667] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1395.719591][T18667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1395.739121][T18667] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1395.903542][ T29] audit: type=1400 audit(1724710168.668:899): avc: denied { getopt } for pid=18693 comm="syz.2.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1396.438917][ T29] audit: type=1400 audit(1724710168.828:900): avc: denied { ioctl } for pid=18693 comm="syz.2.3682" path="socket:[64356]" dev="sockfs" ino=64356 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1396.837680][T18667] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1396.874522][T18667] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1397.497436][ T29] audit: type=1400 audit(1724710170.268:901): avc: denied { setopt } for pid=18712 comm="syz.1.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1398.302261][T18718] netlink: 81772 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1398.654323][T18723] FAULT_INJECTION: forcing a failure. [ 1398.654323][T18723] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.697673][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.4.3688 Not tainted 6.11.0-rc5-syzkaller #0 [ 1398.706752][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1398.716828][T18723] Call Trace: [ 1398.720121][T18723] [ 1398.723063][T18723] dump_stack_lvl+0x16c/0x1f0 [ 1398.727772][T18723] should_fail_ex+0x497/0x5b0 [ 1398.732470][T18723] ? fs_reclaim_acquire+0xae/0x160 [ 1398.737606][T18723] should_failslab+0xc2/0x120 [ 1398.742311][T18723] __kmalloc_noprof+0xcb/0x400 [ 1398.747106][T18723] ? hlock_class+0x4e/0x130 [ 1398.751638][T18723] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1398.758784][T18723] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1398.764282][T18723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1398.770382][T18723] ? __radix_tree_lookup+0x21f/0x2c0 [ 1398.775695][T18723] genl_rcv_msg+0x565/0x800 [ 1398.780231][T18723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1398.785289][T18723] ? __pfx___lock_acquire+0x10/0x10 [ 1398.790512][T18723] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 1398.796608][T18723] ? __pfx_devlink_nl_port_get_doit+0x10/0x10 [ 1398.802699][T18723] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 1398.808451][T18723] netlink_rcv_skb+0x16b/0x440 [ 1398.813243][T18723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1398.818299][T18723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1398.823613][T18723] ? down_read+0xc9/0x330 [ 1398.827960][T18723] ? __pfx_down_read+0x10/0x10 [ 1398.832740][T18723] ? netlink_deliver_tap+0x1ae/0xd90 [ 1398.838049][T18723] genl_rcv+0x28/0x40 [ 1398.842071][T18723] netlink_unicast+0x53c/0x7f0 [ 1398.846866][T18723] ? __pfx_netlink_unicast+0x10/0x10 [ 1398.852181][T18723] netlink_sendmsg+0x8b8/0xd70 [ 1398.856974][T18723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.862284][T18723] ? __import_iovec+0x1fd/0x6e0 [ 1398.867157][T18723] ____sys_sendmsg+0xab5/0xc90 [ 1398.871954][T18723] ? copy_msghdr_from_user+0x10b/0x160 [ 1398.877437][T18723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1398.882757][T18723] ? find_held_lock+0x2d/0x110 [ 1398.887553][T18723] ? __pfx___lock_acquire+0x10/0x10 [ 1398.892776][T18723] ___sys_sendmsg+0x135/0x1e0 [ 1398.897478][T18723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.902701][T18723] ? ksys_write+0x21c/0x260 [ 1398.907223][T18723] ? __fget_light+0x173/0x210 [ 1398.911931][T18723] __sys_sendmsg+0x117/0x1f0 [ 1398.916547][T18723] ? __pfx___sys_sendmsg+0x10/0x10 [ 1398.921693][T18723] do_syscall_64+0xcd/0x250 [ 1398.926234][T18723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.932157][T18723] RIP: 0033:0x7f8316779e79 [ 1398.936594][T18723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1398.940934][T18519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1398.956206][T18723] RSP: 002b:00007f83174fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.956236][T18723] RAX: ffffffffffffffda RBX: 00007f8316915f80 RCX: 00007f8316779e79 [ 1398.956253][T18723] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1398.956269][T18723] RBP: 00007f83174fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.956285][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.956300][T18723] R13: 0000000000000000 R14: 00007f8316915f80 R15: 00007ffedbc2c1c8 [ 1398.956321][T18723] [ 1400.926544][T18519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1401.241643][T18519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1401.369668][T18519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1401.743158][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1401.819907][T18519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.133076][T18519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.961553][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.968738][ T8940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.051685][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.058997][ T8940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.319965][T18778] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1403.474422][ T29] audit: type=1400 audit(1724710176.238:902): avc: denied { getopt } for pid=18772 comm="syz.0.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1403.530570][T18777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3698'. [ 1403.605155][T18788] netlink: 81772 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1404.048541][ T29] audit: type=1400 audit(1724710176.798:903): avc: denied { audit_write } for pid=18793 comm="syz.4.3701" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1404.121371][T18799] input: syz1 as /devices/virtual/input/input62 [ 1404.156198][ T29] audit: type=1107 audit(1724710176.818:904): pid=18793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1404.577878][T18519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.975174][T18519] veth0_vlan: entered promiscuous mode [ 1405.949129][T18519] veth1_vlan: entered promiscuous mode [ 1406.110379][T18519] veth0_macvtap: entered promiscuous mode [ 1406.173105][T18519] veth1_macvtap: entered promiscuous mode [ 1406.298408][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.333386][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.364675][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.416666][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.423264][ T29] audit: type=1326 audit(1724710179.108:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ff00000 [ 1406.458253][T18833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1406.464768][T18833] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.474281][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.515831][T18833] audit: backlog limit exceeded [ 1406.525787][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.525815][ T29] audit: type=1326 audit(1724710179.108:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ff00000 [ 1406.536214][ T47] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1406.583707][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.596093][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.629508][T18519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.699689][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.701408][ T29] audit: type=1326 audit(1724710179.108:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ff00000 [ 1406.775841][T18840] overlayfs: failed to resolve './file1': -2 [ 1406.804151][ T29] audit: type=1326 audit(1724710179.118:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ff00000 [ 1406.814221][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.846440][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1406.897558][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1406.942744][ T47] usb 2-1: config 0 has no interface number 0 [ 1406.950854][ T47] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.962331][ T47] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.976058][ T47] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1407.033018][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.042965][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.091138][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.128230][ T47] usb 2-1: config 0 descriptor?? [ 1407.135334][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.218582][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.241960][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.253053][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.463076][T18519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.602594][ T47] usbhid 2-1:0.1: can't add hid device: -71 [ 1407.623578][ T47] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1407.642521][T18853] netlink: 81772 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1407.671335][ T47] usb 2-1: USB disconnect, device number 58 [ 1407.697893][T18519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.735437][T18519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.778055][T18519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.804786][T18519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.188994][T18861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1408.203218][T16231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.244947][T16231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.386004][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.401772][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.544101][T18866] sp0: Synchronizing with TNC [ 1410.240695][T18897] netlink: 81772 bytes leftover after parsing attributes in process `syz.4.3721'. [ 1410.342505][T18902] loop7: detected capacity change from 0 to 16384 [ 1410.871832][T18911] FAULT_INJECTION: forcing a failure. [ 1410.871832][T18911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.286866][T18911] CPU: 1 UID: 0 PID: 18911 Comm: syz.3.3725 Not tainted 6.11.0-rc5-syzkaller #0 [ 1411.295949][T18911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1411.306025][T18911] Call Trace: [ 1411.309324][T18911] [ 1411.312265][T18911] dump_stack_lvl+0x16c/0x1f0 [ 1411.316970][T18911] should_fail_ex+0x497/0x5b0 [ 1411.321686][T18911] _copy_from_user+0x30/0xf0 [ 1411.326401][T18911] copy_msghdr_from_user+0x99/0x160 [ 1411.331622][T18911] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1411.337452][T18911] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1411.342856][T18911] ___sys_recvmsg+0xdc/0x1a0 [ 1411.347470][T18911] ? __pfx____sys_recvmsg+0x10/0x10 [ 1411.352686][T18911] ? rcu_is_watching+0x12/0xc0 [ 1411.357487][T18911] ? __fget_light+0x173/0x210 [ 1411.362204][T18911] do_recvmmsg+0x2ba/0x750 [ 1411.366652][T18911] ? __pfx_do_recvmmsg+0x10/0x10 [ 1411.371611][T18911] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1411.377458][T18911] ? __switch_to+0x749/0x1180 [ 1411.382166][T18911] ? __schedule+0xe3f/0x5490 [ 1411.386871][T18911] ? __mutex_unlock_slowpath+0x164/0x650 [ 1411.392540][T18911] ? __pfx___schedule+0x10/0x10 [ 1411.397414][T18911] __x64_sys_recvmmsg+0x239/0x290 [ 1411.402461][T18911] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1411.408013][T18911] do_syscall_64+0xcd/0x250 [ 1411.412564][T18911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.418492][T18911] RIP: 0033:0x7f1cabb79e79 [ 1411.422929][T18911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.442570][T18911] RSP: 002b:00007f1caca11038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1411.451097][T18911] RAX: ffffffffffffffda RBX: 00007f1cabd15f80 RCX: 00007f1cabb79e79 [ 1411.459097][T18911] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 [ 1411.467096][T18911] RBP: 00007f1caca11090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.475185][T18911] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 1411.483182][T18911] R13: 0000000000000000 R14: 00007f1cabd15f80 R15: 00007ffe96dfa838 [ 1411.491185][T18911] [ 1411.549870][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 1411.549888][ T29] audit: type=1326 audit(1724710184.318:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.027441][ T29] audit: type=1326 audit(1724710184.358:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.332517][ T29] audit: type=1326 audit(1724710184.358:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.366505][ T29] audit: type=1326 audit(1724710184.368:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.447366][ T29] audit: type=1326 audit(1724710184.368:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.568198][ T29] audit: type=1326 audit(1724710184.368:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.771609][T18918] binder: 18916:18918 ioctl 400c620e 20000380 returned -22 [ 1412.943636][ T29] audit: type=1326 audit(1724710184.508:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1412.987651][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1413.033904][T18931] netlink: 'syz.0.3729': attribute type 7 has an invalid length. [ 1413.033940][ T29] audit: type=1326 audit(1724710184.638:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1413.089016][T18931] netlink: 'syz.0.3729': attribute type 8 has an invalid length. [ 1413.132083][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1413.153297][ T29] audit: type=1326 audit(1724710184.648:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1413.234118][ T29] audit: type=1326 audit(1724710184.648:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x7ffc0000 [ 1414.837963][T18950] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1414.846946][T18950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1415.369616][T13781] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1416.297427][T12330] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1416.777651][T12330] usb 4-1: Using ep0 maxpacket: 8 [ 1416.915793][T12330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.144794][T12330] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1417.336683][T12330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1417.546494][T12330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1419.407250][T12330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1420.736731][T12330] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1420.746112][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1420.755781][T12330] usb 4-1: Product: syz [ 1420.760029][T12330] usb 4-1: Manufacturer: syz [ 1420.764643][T12330] usb 4-1: SerialNumber: syz [ 1420.777658][T12330] usb 4-1: config 0 descriptor?? [ 1420.782979][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1420.782998][ T29] audit: type=1326 audit(1724710451.537:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1420.915022][ T29] audit: type=1326 audit(1724710451.537:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.031220][T13781] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1421.066512][T13781] usb 3-1: can't read configurations, error -71 [ 1421.091293][ T29] audit: type=1326 audit(1724710451.537:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.179342][T12330] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1421.188143][T12330] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1421.210479][T12330] usb 4-1: USB disconnect, device number 56 [ 1421.236906][ T29] audit: type=1326 audit(1724710451.537:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.314359][ T29] audit: type=1326 audit(1724710451.537:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.445974][ T29] audit: type=1326 audit(1724710451.537:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.579530][ T29] audit: type=1326 audit(1724710451.537:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.628037][ T29] audit: type=1326 audit(1724710451.537:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.686520][ T29] audit: type=1326 audit(1724710451.537:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1421.816911][ T29] audit: type=1326 audit(1724710451.537:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0979e79 code=0x7ff00000 [ 1422.075426][T18981] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1422.107585][T18981] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1422.240937][T18981] blktrace: Concurrent blktraces are not allowed on loop3 [ 1423.667682][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.682706][T18999] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1423.762030][T19001] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3754'. [ 1425.565279][T19019] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1426.350709][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1426.370674][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1426.370693][ T29] audit: type=1400 audit(1724710456.897:1234): avc: denied { sqpoll } for pid=19013 comm="syz.4.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1426.928674][T16164] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1427.036278][ T29] audit: type=1400 audit(1724710457.777:1235): avc: denied { watch_reads } for pid=19033 comm="syz.4.3763" path="/212" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1427.057669][T19034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1427.113831][T19034] caif0: entered allmulticast mode [ 1427.120351][T16164] usb 2-1: Using ep0 maxpacket: 32 [ 1427.128580][T16164] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1427.144503][T16164] usb 2-1: config 0 has no interface number 0 [ 1427.152987][T19034] caif0 (unregistering): left allmulticast mode [ 1427.162042][T16164] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.191795][T16164] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.202537][T16164] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1427.212224][T16164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.225214][T16164] usb 2-1: config 0 descriptor?? [ 1427.286591][ T941] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1428.111504][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 1428.117658][T16164] usbhid 2-1:0.1: can't add hid device: -71 [ 1428.123840][T16164] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1428.141468][T16164] usb 2-1: USB disconnect, device number 59 [ 1428.293568][ T941] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1428.307834][ T941] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1428.317082][ T941] usb 3-1: Product: syz [ 1428.323147][ T941] usb 3-1: Manufacturer: syz [ 1428.335751][ T941] usb 3-1: SerialNumber: syz [ 1429.294653][ T941] usb 3-1: config 0 descriptor?? [ 1429.379370][ T941] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1429.467534][ T941] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1429.481303][ T941] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1429.512005][ T941] usb 3-1: USB disconnect, device number 54 [ 1429.622415][T19056] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3768'. [ 1430.299842][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1432.843113][T19095] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1432.854482][T19095] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1433.061909][T19095] blktrace: Concurrent blktraces are not allowed on loop3 [ 1434.041653][ T29] audit: type=1400 audit(1724710464.807:1236): avc: denied { ioctl } for pid=19103 comm="syz.4.3780" path="socket:[66714]" dev="sockfs" ino=66714 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1436.095561][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1436.916035][T19135] FAULT_INJECTION: forcing a failure. [ 1436.916035][T19135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.936996][T19135] CPU: 1 UID: 0 PID: 19135 Comm: syz.0.3789 Not tainted 6.11.0-rc5-syzkaller #0 [ 1436.946071][T19135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1436.956241][T19135] Call Trace: [ 1436.959542][T19135] [ 1436.962482][T19135] dump_stack_lvl+0x16c/0x1f0 [ 1436.967190][T19135] should_fail_ex+0x497/0x5b0 [ 1436.971901][T19135] _copy_from_user+0x30/0xf0 [ 1436.976525][T19135] kstrtouint_from_user+0xd7/0x1c0 [ 1436.981667][T19135] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1436.987416][T19135] ? __pfx_lock_acquire+0x10/0x10 [ 1436.992467][T19135] proc_fail_nth_write+0x84/0x260 [ 1436.997519][T19135] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1437.003147][T19135] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1437.008779][T19135] vfs_write+0x29a/0x1140 [ 1437.013107][T19135] ? __fdget_pos+0xeb/0x180 [ 1437.017609][T19135] ? __pfx_vfs_write+0x10/0x10 [ 1437.022372][T19135] ? __pfx___mutex_lock+0x10/0x10 [ 1437.027403][T19135] ? __fget_files+0x256/0x400 [ 1437.032085][T19135] ksys_write+0x12f/0x260 [ 1437.036417][T19135] ? __pfx_ksys_write+0x10/0x10 [ 1437.041275][T19135] do_syscall_64+0xcd/0x250 [ 1437.045789][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.051690][T19135] RIP: 0033:0x7f7ea4b7895f [ 1437.056093][T19135] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1437.075696][T19135] RSP: 002b:00007f7ea5879030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1437.084110][T19135] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ea4b7895f [ 1437.092103][T19135] RDX: 0000000000000001 RSI: 00007f7ea58790a0 RDI: 0000000000000003 [ 1437.100088][T19135] RBP: 00007f7ea5879090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.108055][T19135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1437.116016][T19135] R13: 0000000000000000 R14: 00007f7ea4d15f80 R15: 00007ffeb46aa598 [ 1437.123986][T19135] [ 1437.279971][T19145] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1437.311549][T19145] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1437.364875][T19145] blktrace: Concurrent blktraces are not allowed on loop3 [ 1437.726558][T16164] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1437.929137][T16164] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1437.947165][T16164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1437.989073][T16164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1438.011431][T19157] @: renamed from vlan0 (while UP) [ 1438.024472][T16164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1438.058671][T16164] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1438.086410][T16164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.159335][T16164] usb 1-1: config 0 descriptor?? [ 1438.165439][T19148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1438.328037][T19160] pim6reg1: entered allmulticast mode [ 1440.302667][T16164] plantronics 0003:047F:FFFF.005A: unknown main item tag 0xd [ 1440.324191][T16164] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 1440.348967][T16164] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1441.435689][T19172] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3799'. [ 1442.256498][T16164] usb 1-1: reset high-speed USB device number 56 using dummy_hcd [ 1443.959830][T19202] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3807'. [ 1443.995343][T19202] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1444.066171][T19202] blktrace: Concurrent blktraces are not allowed on loop3 [ 1444.301233][ T29] audit: type=1400 audit(1724710475.067:1237): avc: denied { write } for pid=19209 comm="syz.1.3810" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1444.362077][T19210] 9pnet_fd: Insufficient options for proto=fd [ 1445.518630][T19226] Bluetooth: MGMT ver 1.23 [ 1445.533039][ T29] audit: type=1400 audit(1724710476.297:1238): avc: denied { getopt } for pid=19224 comm="syz.0.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1445.553908][T19226] netlink: 'syz.0.3814': attribute type 32 has an invalid length. [ 1445.755678][T19229] FAULT_INJECTION: forcing a failure. [ 1445.755678][T19229] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.772939][T19229] CPU: 0 UID: 0 PID: 19229 Comm: syz.0.3815 Not tainted 6.11.0-rc5-syzkaller #0 [ 1445.781993][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1445.792059][T19229] Call Trace: [ 1445.795358][T19229] [ 1445.798308][T19229] dump_stack_lvl+0x16c/0x1f0 [ 1445.803095][T19229] should_fail_ex+0x497/0x5b0 [ 1445.807803][T19229] ? fs_reclaim_acquire+0xae/0x160 [ 1445.812932][T19229] should_failslab+0xc2/0x120 [ 1445.817619][T19229] __kmalloc_noprof+0xcb/0x400 [ 1445.822389][T19229] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1445.829515][T19229] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1445.834987][T19229] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1445.841079][T19229] ? security_capable+0x98/0xd0 [ 1445.845951][T19229] genl_rcv_msg+0x565/0x800 [ 1445.850506][T19229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1445.855595][T19229] ? __pfx___lock_acquire+0x10/0x10 [ 1445.860837][T19229] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1445.866131][T19229] netlink_rcv_skb+0x16b/0x440 [ 1445.870913][T19229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1445.875948][T19229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1445.881239][T19229] ? down_read+0xc9/0x330 [ 1445.885573][T19229] ? __pfx_down_read+0x10/0x10 [ 1445.890336][T19229] ? rcu_is_watching+0x12/0xc0 [ 1445.895104][T19229] genl_rcv+0x28/0x40 [ 1445.899106][T19229] netlink_unicast+0x53c/0x7f0 [ 1445.903882][T19229] ? __pfx_netlink_unicast+0x10/0x10 [ 1445.909170][T19229] netlink_sendmsg+0x8b8/0xd70 [ 1445.913942][T19229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.919237][T19229] ? __import_iovec+0x1fd/0x6e0 [ 1445.924146][T19229] ____sys_sendmsg+0xab5/0xc90 [ 1445.928915][T19229] ? copy_msghdr_from_user+0x10b/0x160 [ 1445.934371][T19229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1445.939682][T19229] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 1445.946276][T19229] ___sys_sendmsg+0x135/0x1e0 [ 1445.950963][T19229] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.956171][T19229] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1445.961998][T19229] ? lockdep_hardirqs_on+0x7c/0x110 [ 1445.967208][T19229] ? __fget_light+0x173/0x210 [ 1445.971923][T19229] __sys_sendmsg+0x117/0x1f0 [ 1445.976529][T19229] ? __pfx___sys_sendmsg+0x10/0x10 [ 1445.981669][T19229] do_syscall_64+0xcd/0x250 [ 1445.986190][T19229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.992092][T19229] RIP: 0033:0x7f7ea4b79e79 [ 1445.996505][T19229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1446.016113][T19229] RSP: 002b:00007f7ea5879038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.024529][T19229] RAX: ffffffffffffffda RBX: 00007f7ea4d15f80 RCX: 00007f7ea4b79e79 [ 1446.032511][T19229] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1446.040503][T19229] RBP: 00007f7ea5879090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.048482][T19229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.056449][T19229] R13: 0000000000000000 R14: 00007f7ea4d15f80 R15: 00007ffeb46aa598 [ 1446.064430][T19229] [ 1446.218955][T12330] usb 1-1: USB disconnect, device number 56 [ 1449.023694][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1449.663353][T19256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=19256 comm=syz.1.3822 [ 1450.053710][ T941] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1450.836629][ T29] audit: type=1804 audit(1724710481.587:1239): pid=19265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3825" name="/newroot/19/bus/file0" dev="overlay" ino=126 res=1 errno=0 [ 1450.936523][ T941] usb 5-1: Using ep0 maxpacket: 32 [ 1451.417077][ T941] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1451.428314][ T941] usb 5-1: config 0 has no interface number 0 [ 1451.436096][ T941] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.447477][ T941] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.457647][ T941] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1451.881497][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.944509][ T941] usb 5-1: config 0 descriptor?? [ 1452.009940][ T941] usb 5-1: can't set config #0, error -71 [ 1452.032481][ T941] usb 5-1: USB disconnect, device number 51 [ 1452.055856][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 1452.332877][T19286] sctp: [Deprecated]: syz.1.3830 (pid 19286) Use of int in max_burst socket option. [ 1452.332877][T19286] Use struct sctp_assoc_value instead [ 1452.359004][T13781] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1452.374902][ T29] audit: type=1400 audit(1724710483.137:1240): avc: denied { create } for pid=19283 comm="syz.3.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1452.404862][ T29] audit: type=1400 audit(1724710483.137:1241): avc: denied { write } for pid=19283 comm="syz.3.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1452.573940][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1452.603475][T13781] usb 1-1: config index 0 descriptor too short (expected 65323, got 119) [ 1452.879575][T13781] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.000425][T13781] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1453.272641][T13781] usb 1-1: config 1 has no interface number 1 [ 1453.291745][T13781] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1453.315953][T13781] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1453.345835][T13781] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1453.361006][T13781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.395778][T13781] usb 1-1: Product: syz [ 1453.416026][T19298] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1453.417900][T13781] usb 1-1: Manufacturer: syz [ 1453.431320][T13781] usb 1-1: SerialNumber: syz [ 1458.687462][T13781] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1459.506865][T13781] usb 1-1: USB disconnect, device number 57 [ 1459.704775][T19318] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3838'. [ 1460.556517][T12330] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1462.377809][T12330] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1462.396954][T12330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1462.722697][T12330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1462.734510][T12330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1462.756533][T12330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1462.765620][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.786019][T19343] lo: entered promiscuous mode [ 1462.794003][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1462.825516][T19343] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 1462.846809][T12330] usb 3-1: config 0 descriptor?? [ 1462.875502][T19343] netlink: 9292 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1462.885507][T12330] usb 3-1: can't set config #0, error -71 [ 1462.896550][T19343] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1462.916837][T12330] usb 3-1: USB disconnect, device number 55 [ 1463.397490][T19353] FAULT_INJECTION: forcing a failure. [ 1463.397490][T19353] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.427664][T19353] CPU: 0 UID: 0 PID: 19353 Comm: syz.3.3849 Not tainted 6.11.0-rc5-syzkaller #0 [ 1463.436834][T19353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1463.446914][T19353] Call Trace: [ 1463.450220][T19353] [ 1463.453166][T19353] dump_stack_lvl+0x16c/0x1f0 [ 1463.457863][T19353] should_fail_ex+0x497/0x5b0 [ 1463.462553][T19353] ? fs_reclaim_acquire+0xae/0x160 [ 1463.467673][T19353] should_failslab+0xc2/0x120 [ 1463.472453][T19353] __kmalloc_noprof+0xcb/0x400 [ 1463.477228][T19353] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1463.484357][T19353] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1463.489838][T19353] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1463.495925][T19353] ? ns_capable+0xd7/0x110 [ 1463.500363][T19353] genl_rcv_msg+0x565/0x800 [ 1463.504881][T19353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1463.509918][T19353] ? __pfx___lock_acquire+0x10/0x10 [ 1463.515125][T19353] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1463.520510][T19353] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1463.526328][T19353] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1463.531803][T19353] netlink_rcv_skb+0x16b/0x440 [ 1463.536585][T19353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1463.541633][T19353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1463.546933][T19353] ? down_read+0xc9/0x330 [ 1463.551265][T19353] ? __pfx_down_read+0x10/0x10 [ 1463.556035][T19353] ? netlink_deliver_tap+0x1ae/0xd90 [ 1463.561344][T19353] genl_rcv+0x28/0x40 [ 1463.565341][T19353] netlink_unicast+0x53c/0x7f0 [ 1463.570120][T19353] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.575418][T19353] netlink_sendmsg+0x8b8/0xd70 [ 1463.580282][T19353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.585578][T19353] ? __import_iovec+0x1fd/0x6e0 [ 1463.590439][T19353] ____sys_sendmsg+0xab5/0xc90 [ 1463.595219][T19353] ? copy_msghdr_from_user+0x10b/0x160 [ 1463.600725][T19353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.606023][T19353] ? find_held_lock+0x2d/0x110 [ 1463.610800][T19353] ? __pfx___lock_acquire+0x10/0x10 [ 1463.616009][T19353] ___sys_sendmsg+0x135/0x1e0 [ 1463.620698][T19353] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.625904][T19353] ? ksys_write+0x21c/0x260 [ 1463.630415][T19353] ? __fget_light+0x173/0x210 [ 1463.635108][T19353] __sys_sendmsg+0x117/0x1f0 [ 1463.639711][T19353] ? __pfx___sys_sendmsg+0x10/0x10 [ 1463.644838][T19353] do_syscall_64+0xcd/0x250 [ 1463.649356][T19353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.655255][T19353] RIP: 0033:0x7f1cabb79e79 [ 1463.659676][T19353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.679295][T19353] RSP: 002b:00007f1caca11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.687720][T19353] RAX: ffffffffffffffda RBX: 00007f1cabd15f80 RCX: 00007f1cabb79e79 [ 1463.695702][T19353] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003 [ 1463.703678][T19353] RBP: 00007f1caca11090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.711657][T19353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.719638][T19353] R13: 0000000000000000 R14: 00007f1cabd15f80 R15: 00007ffe96dfa838 [ 1463.727619][T19353] [ 1464.840190][T12330] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1465.104990][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1465.196437][T12330] usb 3-1: Using ep0 maxpacket: 32 [ 1465.203457][T19370] caif0: entered allmulticast mode [ 1465.212399][T12330] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1465.231104][T12330] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1465.272783][T19370] caif0 (unregistering): left allmulticast mode [ 1465.284386][T12330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1465.300595][T12330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1465.313266][T12330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1465.329199][T12330] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1465.362199][T12330] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1465.362238][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.365122][T12330] usb 3-1: config 0 descriptor?? [ 1465.633523][T19378] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1465.639852][T19359] binder: 19358:19359 ioctl 40046205 0 returned -22 [ 1471.077806][T12330] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1471.160636][T16164] usb 3-1: USB disconnect, device number 56 [ 1471.169699][T16164] usblp0: removed [ 1471.598501][ T29] audit: type=1400 audit(1724710502.357:1242): avc: denied { getopt } for pid=19401 comm="syz.0.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1471.642308][T19405] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1471.651876][T19405] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1471.734134][T19405] blktrace: Concurrent blktraces are not allowed on loop3 [ 1471.797308][ T29] audit: type=1400 audit(1724710502.567:1243): avc: denied { bind } for pid=19406 comm="syz.4.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1471.866710][ T29] audit: type=1400 audit(1724710502.587:1244): avc: denied { name_bind } for pid=19406 comm="syz.4.3863" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1471.903006][ T29] audit: type=1400 audit(1724710502.587:1245): avc: denied { node_bind } for pid=19406 comm="syz.4.3863" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1471.928067][ T29] audit: type=1400 audit(1724710502.587:1246): avc: denied { listen } for pid=19406 comm="syz.4.3863" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1472.094805][T19413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.193054][ T29] audit: type=1400 audit(1724710502.957:1247): avc: denied { getopt } for pid=19412 comm="syz.4.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1473.201915][ T29] audit: type=1400 audit(1724710503.967:1248): avc: denied { wake_alarm } for pid=19421 comm="syz.1.3873" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1473.247286][T19426] FAULT_INJECTION: forcing a failure. [ 1473.247286][T19426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.276533][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1473.292216][T19426] CPU: 1 UID: 0 PID: 19426 Comm: syz.1.3873 Not tainted 6.11.0-rc5-syzkaller #0 [ 1473.301288][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1473.311369][T19426] Call Trace: [ 1473.314658][T19426] [ 1473.317592][T19426] dump_stack_lvl+0x16c/0x1f0 [ 1473.322263][T19426] should_fail_ex+0x497/0x5b0 [ 1473.326932][T19426] _copy_from_user+0x30/0xf0 [ 1473.331539][T19426] get_timespec64+0x8c/0x240 [ 1473.336123][T19426] ? __pfx_get_timespec64+0x10/0x10 [ 1473.341413][T19426] ? __mutex_unlock_slowpath+0x164/0x650 [ 1473.347041][T19426] get_itimerspec64+0x1e/0x60 [ 1473.351709][T19426] __x64_sys_timer_settime+0x17e/0x2c0 [ 1473.357159][T19426] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1473.363215][T19426] ? ksys_write+0x1ab/0x260 [ 1473.367717][T19426] do_syscall_64+0xcd/0x250 [ 1473.372223][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.378108][T19426] RIP: 0033:0x7fdbd0979e79 [ 1473.382507][T19426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.402189][T19426] RSP: 002b:00007fdbd173c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1473.410590][T19426] RAX: ffffffffffffffda RBX: 00007fdbd0b16058 RCX: 00007fdbd0979e79 [ 1473.418550][T19426] RDX: 0000000020000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 1473.426508][T19426] RBP: 00007fdbd173c090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.434466][T19426] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 1473.442425][T19426] R13: 0000000000000001 R14: 00007fdbd0b16058 R15: 00007ffc28585668 [ 1473.450412][T19426] [ 1473.755458][T19437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1473.956054][T19444] overlayfs: failed to resolve './file1': -2 [ 1473.982790][T16164] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 1474.003530][T16164] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 1474.040448][T16164] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1474.204315][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 1476.095455][T19464] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3884'. [ 1476.104939][T19464] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1476.165611][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1476.174987][T19464] blktrace: Concurrent blktraces are not allowed on loop3 [ 1476.307977][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1476.756507][T19471] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3886'. [ 1477.375674][T19476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1480.425123][ T29] audit: type=1326 audit(1724710511.187:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.474828][ T29] audit: type=1326 audit(1724710511.197:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.543960][ T29] audit: type=1326 audit(1724710511.207:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.600397][T19514] xt_HMARK: spi-set and port-set can't be combined [ 1480.600699][ T29] audit: type=1326 audit(1724710511.207:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.637145][ T29] audit: type=1326 audit(1724710511.207:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.684165][ T29] audit: type=1326 audit(1724710511.207:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ea4b79a7b code=0x7ffc0000 [ 1480.725106][ T29] audit: type=1326 audit(1724710511.207:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.751757][T16164] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1480.786196][ T29] audit: type=1326 audit(1724710511.217:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.835859][ T29] audit: type=1326 audit(1724710511.217:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1480.939275][ T941] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1480.982592][T16164] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1480.998795][ T29] audit: type=1326 audit(1724710511.217:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b79e79 code=0x7ffc0000 [ 1481.022346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.061253][T16164] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1481.085137][T16164] usb 2-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 1481.106743][T16164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.130632][T16164] usb 2-1: Product: syz [ 1481.135595][T16164] usb 2-1: Manufacturer: syz [ 1481.143532][T16164] usb 2-1: SerialNumber: syz [ 1481.176878][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 1481.210941][ T941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.251935][ T941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1481.305793][ T941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1481.331170][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.339362][ T941] usb 4-1: Product: syz [ 1481.346751][ T941] usb 4-1: Manufacturer: syz [ 1481.351565][ T941] usb 4-1: SerialNumber: syz [ 1481.659720][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1483.375426][ T941] usb 4-1: cannot find UAC_HEADER [ 1483.442346][ T941] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1483.502612][ T941] usb 4-1: USB disconnect, device number 57 [ 1483.564472][T13781] usb 2-1: USB disconnect, device number 60 [ 1485.106583][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.275398][T19568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3917'. [ 1485.293492][T19568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19568 comm=syz.4.3917 [ 1485.345416][T19567] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1485.409171][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1485.934405][T19575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.961808][T19575] batadv_slave_0: entered allmulticast mode [ 1486.035833][T18521] Bluetooth: hci5: sending frame failed (-49) [ 1486.049138][T12155] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 1486.405227][ T941] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1488.815340][ T941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.470634][ T941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1489.758116][ T941] usb 2-1: string descriptor 0 read error: -71 [ 1489.936501][ T941] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1489.945567][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1490.046628][ T941] usb 2-1: can't set config #1, error -71 [ 1490.069239][ T941] usb 2-1: USB disconnect, device number 61 [ 1490.942988][T19603] FAULT_INJECTION: forcing a failure. [ 1490.942988][T19603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.956193][T19603] CPU: 1 UID: 0 PID: 19603 Comm: syz.4.3924 Not tainted 6.11.0-rc5-syzkaller #0 [ 1490.965241][T19603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1490.975404][T19603] Call Trace: [ 1490.978700][T19603] [ 1490.981648][T19603] dump_stack_lvl+0x16c/0x1f0 [ 1490.986348][T19603] should_fail_ex+0x497/0x5b0 [ 1490.991045][T19603] _copy_to_user+0x30/0xc0 [ 1490.995493][T19603] simple_read_from_buffer+0xd0/0x160 [ 1491.000889][T19603] proc_fail_nth_read+0x19e/0x280 [ 1491.005931][T19603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1491.011503][T19603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1491.017088][T19603] vfs_read+0x1d4/0xbd0 [ 1491.021293][T19603] ? __fdget_pos+0xeb/0x180 [ 1491.025825][T19603] ? __pfx_vfs_read+0x10/0x10 [ 1491.030530][T19603] ? __pfx___mutex_lock+0x10/0x10 [ 1491.035568][T19603] ? __fget_files+0x256/0x400 [ 1491.040266][T19603] ksys_read+0x12f/0x260 [ 1491.044507][T19603] ? __pfx_ksys_read+0x10/0x10 [ 1491.049274][T19603] do_syscall_64+0xcd/0x250 [ 1491.053963][T19603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.059861][T19603] RIP: 0033:0x7f83167788bc [ 1491.064274][T19603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1491.083971][T19603] RSP: 002b:00007f83174bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1491.092391][T19603] RAX: ffffffffffffffda RBX: 00007f8316916130 RCX: 00007f83167788bc [ 1491.100364][T19603] RDX: 000000000000000f RSI: 00007f83174bb0a0 RDI: 0000000000000006 [ 1491.108338][T19603] RBP: 00007f83174bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.116310][T19603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.124282][T19603] R13: 0000000000000000 R14: 00007f8316916130 R15: 00007ffedbc2c1c8 [ 1491.132254][T19603] [ 1491.234884][T19607] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 1491.467629][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.474973][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.609085][T19620] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1491.618817][T19615] wg2: entered promiscuous mode [ 1491.625126][T19615] wg2: entered allmulticast mode [ 1491.636484][ T941] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1491.855867][ T941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1491.958842][ T941] usb 5-1: string descriptor 0 read error: -22 [ 1491.969952][ T941] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1491.993535][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.027958][T19623] Bluetooth: MGMT ver 1.23 [ 1492.355213][ T941] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1492.430276][ T941] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1492.444640][ T941] dib0700: firmware download failed at 7 with -22 [ 1492.462513][ T941] usb 5-1: USB disconnect, device number 52 [ 1493.042336][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1495.193642][ T2543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.718725][ T941] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1495.972225][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 1496.553675][ T941] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1496.583176][T19661] ipvlan0: entered allmulticast mode [ 1496.598776][ T941] usb 1-1: config 0 has no interface number 0 [ 1496.620715][T19661] veth0_vlan: entered allmulticast mode [ 1496.641192][ T941] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.703157][ T941] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.754311][ T941] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1496.759470][T19670] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3946'. [ 1496.779539][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.805562][ T941] usb 1-1: config 0 descriptor?? [ 1497.595233][ T941] uclogic 0003:28BD:0094.005C: pen parameters not found [ 1497.619511][ T941] uclogic 0003:28BD:0094.005C: interface is invalid, ignoring [ 1497.722338][T19684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1498.339421][ T941] usb 1-1: USB disconnect, device number 58 [ 1498.592441][T19686] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3948'. [ 1498.605550][T19686] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1499.592197][T19686] blktrace: Concurrent blktraces are not allowed on loop3 [ 1499.779377][T19700] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3954'. [ 1499.796713][T19700] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1499.825161][T19700] blktrace: Concurrent blktraces are not allowed on loop3 [ 1499.868317][T19702] netlink: 81772 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1501.120342][T19710] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3958'. [ 1501.566619][T13781] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1502.043370][T19722] vivid-001: ================= START STATUS ================= [ 1502.056042][T19722] vivid-001: Radio HW Seek Mode: Bounded [ 1502.221107][T13781] usb 2-1: Using ep0 maxpacket: 8 [ 1502.221961][T19722] vivid-001: Radio Programmable HW Seek: [ 1502.228464][T13781] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1502.245736][T13781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1502.255840][T19722] false [ 1502.255930][T19722] vivid-001: RDS Rx I/O Mode: [ 1502.258740][T13781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1502.258780][T13781] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1502.258846][T13781] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1502.258880][T13781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.566744][T19722] Block I/O [ 1502.570162][T19722] vivid-001: Generate RBDS Instead of RDS: false [ 1502.586251][T19722] vivid-001: RDS Reception: true [ 1502.586474][T13781] usb 2-1: GET_CAPABILITIES returned 0 [ 1502.609948][T19722] vivid-001: RDS Program Type: 0 inactive [ 1502.616476][T13781] usbtmc 2-1:16.0: can't read capabilities [ 1503.447825][T19722] vivid-001: RDS PS Name: inactive [ 1503.509620][T13781] usb 2-1: USB disconnect, device number 62 [ 1503.515639][T19722] vivid-001: RDS Radio Text: inactive [ 1503.547683][T19722] vivid-001: RDS Traffic Announcement: false inactive [ 1503.554721][T19722] vivid-001: RDS Traffic Program: false inactive [ 1503.566115][T19722] vivid-001: RDS Music: false inactive [ 1503.576449][T19722] vivid-001: ================== END STATUS ================== [ 1503.697614][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1503.697632][ T29] audit: type=1326 audit(1724710534.467:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.3965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x0 [ 1503.813748][T19742] sp0: Synchronizing with TNC [ 1503.988547][T19744] netlink: 81772 bytes leftover after parsing attributes in process `syz.2.3967'. [ 1504.087260][ T941] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1504.356437][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 1504.365136][ T941] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1504.374702][ T941] usb 4-1: config 0 has no interface number 0 [ 1504.385127][ T941] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.396629][ T941] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.197967][ T941] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1505.207246][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.228151][ T941] usb 4-1: config 0 descriptor?? [ 1506.592796][T19759] Bluetooth: (null): Invalid header checksum [ 1511.702633][ T941] uclogic 0003:28BD:0094.005D: pen parameters not found [ 1511.741953][ T941] uclogic 0003:28BD:0094.005D: interface is invalid, ignoring [ 1511.779673][ T941] usb 4-1: USB disconnect, device number 58 [ 1511.819644][T19763] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1515.136435][ T29] audit: type=1400 audit(1724710545.447:1269): avc: denied { create } for pid=19775 comm="syz.2.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1515.198112][ T29] audit: type=1400 audit(1724710545.447:1270): avc: denied { sys_admin } for pid=19775 comm="syz.2.3977" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1515.232301][T19785] netlink: 81772 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1516.397935][T18521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1516.409703][T18521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1516.422334][T18521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1516.430943][T18521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1516.446794][T18521] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1516.454033][T18521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1517.530778][ T8923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.232929][T19815] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1518.245528][ T8923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.546529][T18521] Bluetooth: hci5: command tx timeout [ 1519.151808][ T8923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.963407][T16164] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1520.038821][ T8923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.161285][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1520.969796][T18521] Bluetooth: hci5: command tx timeout [ 1520.991830][T16164] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1521.012016][T16164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.426179][T19843] overlay: ./file0 is not a directory [ 1521.489768][T19839] veth0_vlan: entered allmulticast mode [ 1521.968500][ T29] audit: type=1400 audit(1724710552.177:1271): avc: denied { mounton } for pid=19837 comm="syz.4.3992" path="/265/file0" dev="tmpfs" ino=1442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1522.027312][T16164] usb 2-1: Product: syz [ 1522.104432][T16164] usb 2-1: Manufacturer: syz [ 1522.135342][T16164] usb 2-1: SerialNumber: syz [ 1522.177274][T16164] usb 2-1: config 0 descriptor?? [ 1522.217146][T16164] usb 2-1: can't set config #0, error -71 [ 1522.276812][T16164] usb 2-1: USB disconnect, device number 63 [ 1523.964154][T18521] Bluetooth: hci5: command tx timeout [ 1524.188092][T19788] chnl_net:caif_netlink_parms(): no params data found [ 1524.224171][ T8923] bridge_slave_1: left allmulticast mode [ 1524.240241][ T8923] bridge_slave_1: left promiscuous mode [ 1524.256744][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.461098][ T8923] bridge_slave_0: left allmulticast mode [ 1524.540885][ T8923] bridge_slave_0: left promiscuous mode [ 1524.563704][T19860] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1524.566031][T19865] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1524.578512][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.589675][T19860] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1524.631307][T19860] blktrace: Concurrent blktraces are not allowed on loop3 [ 1525.976508][T18521] Bluetooth: hci5: command tx timeout [ 1527.015875][T19883] FAULT_INJECTION: forcing a failure. [ 1527.015875][T19883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.029911][T19883] CPU: 0 UID: 0 PID: 19883 Comm: syz.4.4003 Not tainted 6.11.0-rc5-syzkaller #0 [ 1527.038974][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1527.049043][T19883] Call Trace: [ 1527.052330][T19883] [ 1527.055260][T19883] dump_stack_lvl+0x16c/0x1f0 [ 1527.059953][T19883] should_fail_ex+0x497/0x5b0 [ 1527.064640][T19883] _copy_from_user+0x30/0xf0 [ 1527.069245][T19883] memdup_user+0x71/0xd0 [ 1527.073498][T19883] strndup_user+0x78/0xe0 [ 1527.077838][T19883] __x64_sys_mount+0x138/0x320 [ 1527.082614][T19883] ? __pfx___x64_sys_mount+0x10/0x10 [ 1527.087940][T19883] do_syscall_64+0xcd/0x250 [ 1527.092459][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.098358][T19883] RIP: 0033:0x7f8316779e79 [ 1527.102771][T19883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.122392][T19883] RSP: 002b:00007f83174fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1527.130827][T19883] RAX: ffffffffffffffda RBX: 00007f8316915f80 RCX: 00007f8316779e79 [ 1527.138804][T19883] RDX: 0000000020000000 RSI: 00000000200006c0 RDI: 0000000000000000 [ 1527.146782][T19883] RBP: 00007f83174fd090 R08: 0000000020000700 R09: 0000000000000000 [ 1527.154771][T19883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.162750][T19883] R13: 0000000000000000 R14: 00007f8316915f80 R15: 00007ffedbc2c1c8 [ 1527.170728][T19883] [ 1527.173781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.230998][ T8923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.249399][ T8923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.273797][ T8923] bond0 (unregistering): Released all slaves [ 1527.636415][T16164] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1527.693701][T19788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.713015][T19788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.722264][T19788] bridge_slave_0: entered allmulticast mode [ 1527.739632][T19788] bridge_slave_0: entered promiscuous mode [ 1527.808081][T19896] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1527.817833][T19896] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1527.858461][T19788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.887831][T16164] usb 5-1: Using ep0 maxpacket: 8 [ 1527.889094][T19896] blktrace: Concurrent blktraces are not allowed on loop3 [ 1527.903157][T19788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.922872][T16164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.926841][T19788] bridge_slave_1: entered allmulticast mode [ 1527.958450][T16164] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1527.965366][T19788] bridge_slave_1: entered promiscuous mode [ 1527.988030][T16164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.007044][T16164] usb 5-1: Product: syz [ 1528.012079][T16164] usb 5-1: Manufacturer: syz [ 1528.021696][T16164] usb 5-1: SerialNumber: syz [ 1528.059670][T16164] usb 5-1: config 0 descriptor?? [ 1528.075845][T16164] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1528.132679][T19788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.175717][T19788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.364888][ T29] audit: type=1326 audit(1724710559.127:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19884 comm="syz.4.4004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8316779e79 code=0x0 [ 1528.534220][ T8923] hsr_slave_0: left promiscuous mode [ 1528.544227][ T8923] hsr_slave_1: left promiscuous mode [ 1528.593970][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.612010][T16164] gspca_t613: unknown sensor 0000 [ 1528.623928][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.631543][T16164] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 1528.655106][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.668769][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.757169][ T8923] veth1_macvtap: left promiscuous mode [ 1528.766058][ T8923] veth0_macvtap: left promiscuous mode [ 1528.773496][ T8923] veth1_vlan: left promiscuous mode [ 1528.779276][ T8923] veth0_vlan: left promiscuous mode [ 1530.238654][T13781] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1530.407687][T16164] usb 5-1: USB disconnect, device number 53 [ 1530.593845][T19919] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4014'. [ 1530.768514][T13781] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1531.320468][T13781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1531.373855][T13781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1531.415487][T13781] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1531.439237][T13781] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1531.453528][T13781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.487397][T13781] usb 3-1: config 0 descriptor?? [ 1531.498798][T19910] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1532.251134][T13781] plantronics 0003:047F:FFFF.005E: unknown main item tag 0xd [ 1532.262169][T13781] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 1532.278559][T13781] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1532.358240][T16164] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1532.422375][ T8923] team0 (unregistering): Port device team_slave_1 removed [ 1532.487068][ T8923] team0 (unregistering): Port device team_slave_0 removed [ 1532.550924][T16164] usb 2-1: Using ep0 maxpacket: 32 [ 1532.562669][T16164] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1532.575175][T16164] usb 2-1: config 0 has no interface number 0 [ 1532.583674][T16164] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.595382][T16164] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.605998][T16164] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1532.616244][T16164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.642358][T16164] usb 2-1: config 0 descriptor?? [ 1532.924120][T19929] Bluetooth: hci1: Opcode 0x0c20 failed: -4 [ 1533.687435][T16164] uclogic 0003:28BD:0094.005F: pen parameters not found [ 1533.696262][T16164] uclogic 0003:28BD:0094.005F: interface is invalid, ignoring [ 1533.716687][T16164] usb 2-1: USB disconnect, device number 64 [ 1533.860634][T12330] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 1534.819758][T19941] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4019'. [ 1534.869323][T19941] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1534.927504][T19941] blktrace: Concurrent blktraces are not allowed on loop3 [ 1534.979619][T19788] team0: Port device team_slave_0 added [ 1534.993008][T19788] team0: Port device team_slave_1 added [ 1535.079798][T19916] hsr0: entered allmulticast mode [ 1535.090694][T19947] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1535.103611][T19947] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1535.119085][T19916] hsr_slave_0: entered allmulticast mode [ 1535.127422][T19916] hsr_slave_1: entered allmulticast mode [ 1535.184292][T19947] blktrace: Concurrent blktraces are not allowed on loop3 [ 1535.284650][T19788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.313308][T19788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.387803][T19788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.522062][T19788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.607430][T19788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.692873][ T5345] usb 3-1: USB disconnect, device number 57 [ 1535.754253][T19788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.944708][T19788] hsr_slave_0: entered promiscuous mode [ 1535.962545][T19788] hsr_slave_1: entered promiscuous mode [ 1536.001207][T19788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1536.005954][T19961] fuse: Unknown parameter '¬f_dkBùá.Vfd' [ 1536.035298][T19788] Cannot create hsr debugfs directory [ 1536.521255][ T8923] IPVS: stop unused estimator thread 0... [ 1536.636988][T16164] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1536.856549][T16164] usb 3-1: Using ep0 maxpacket: 32 [ 1536.878474][T16164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.903008][T16164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.935421][T16164] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1536.985550][T16164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.039514][T16164] usb 3-1: config 0 descriptor?? [ 1539.662640][T16164] ft260 0003:0403:6030.0060: item fetching failed at offset 0/2 [ 1539.671347][T16164] ft260 0003:0403:6030.0060: failed to parse HID [ 1539.678674][T16164] ft260 0003:0403:6030.0060: probe with driver ft260 failed with error -22 [ 1539.692537][T16164] usb 3-1: USB disconnect, device number 58 [ 1540.015695][T19993] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 1540.035404][T19993] team0: Device ipvlan1 failed to register rx_handler [ 1540.118826][ T29] audit: type=1326 audit(1724710570.877:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19996 comm="syz.2.4036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abbd79e79 code=0x0 [ 1540.192620][T19788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1540.220298][ T29] audit: type=1400 audit(1724710570.977:1274): avc: denied { listen } for pid=19992 comm="syz.4.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1540.254274][T19788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1540.292835][T19788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1540.320713][T19788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1540.527381][ T5345] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1540.610607][T20009] capability: warning: `syz.3.4039' uses 32-bit capabilities (legacy support in use) [ 1540.779524][ T5345] usb 3-1: Using ep0 maxpacket: 32 [ 1540.788371][T19788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.815869][ T5345] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 1540.852880][T19788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.860322][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.880908][ T5345] usb 3-1: Product: syz [ 1540.894170][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.901358][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.917149][ T5345] usb 3-1: Manufacturer: syz [ 1540.921791][ T5345] usb 3-1: SerialNumber: syz [ 1541.102819][ T5345] usb 3-1: config 0 descriptor?? [ 1541.103441][ T29] audit: type=1400 audit(1724710571.697:1275): avc: denied { execmem } for pid=20014 comm="syz.3.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1541.158500][ T5345] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 1541.296209][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.303562][T18553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.839554][T13781] usb 3-1: USB disconnect, device number 59 [ 1542.371341][ T29] audit: type=1400 audit(1724710573.137:1276): avc: denied { bind } for pid=20019 comm="syz.1.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1542.421462][T19788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.604934][T19788] veth0_vlan: entered promiscuous mode [ 1542.643080][T19788] veth1_vlan: entered promiscuous mode [ 1542.697282][ T29] audit: type=1400 audit(1724710573.467:1277): avc: denied { write } for pid=20037 comm="syz.1.4046" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1542.739367][ T29] audit: type=1400 audit(1724710573.497:1278): avc: denied { open } for pid=20037 comm="syz.1.4046" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1542.882992][T19788] veth0_macvtap: entered promiscuous mode [ 1542.977380][T19788] veth1_macvtap: entered promiscuous mode [ 1543.782112][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.850771][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.885142][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.902685][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'. [ 1543.906419][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.942414][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.977618][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.032298][T19788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.122690][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.142491][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.156315][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.171645][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.184502][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.202462][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.215114][T19788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1544.232079][T19788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.299069][T19788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.342627][T19788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.375774][T19788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.405751][T19788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.421558][T19788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.534303][ T8923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.559200][ T8923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.657111][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1545.685414][ T8940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.704510][ T8940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.204493][T20074] overlayfs: overlapping lowerdir path [ 1546.542317][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.613323][ T29] audit: type=1400 audit(1724710577.377:1279): avc: denied { create } for pid=20093 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1546.632809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.659886][T20096] netlink: 16128 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1546.953865][T20099] hsr0: entered promiscuous mode [ 1548.356591][ T47] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1548.480458][ T29] audit: type=1400 audit(1724710579.237:1280): avc: denied { map } for pid=20119 comm="syz.1.4069" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1548.503926][ C1] vkms_vblank_simulate: vblank timer overrun [ 1548.727733][ T47] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1548.737724][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.748812][ T47] usb 1-1: Product: syz [ 1548.754567][ T47] usb 1-1: Manufacturer: syz [ 1548.761259][ T47] usb 1-1: SerialNumber: syz [ 1548.771601][ T47] usb 1-1: config 0 descriptor?? [ 1550.447570][T20132] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1550.477614][ T29] audit: type=1400 audit(1724710581.217:1281): avc: denied { ioctl } for pid=20125 comm="syz.4.4071" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1550.502653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.771121][ T29] audit: type=1400 audit(1724710581.327:1282): avc: denied { recv } for pid=20124 comm="syz.2.4072" saddr=10.128.0.169 src=30006 daddr=10.128.1.193 dest=53092 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1550.799428][ T29] audit: type=1400 audit(1724710581.337:1283): avc: denied { read write } for pid=16179 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1550.803249][ T5345] usb 1-1: USB disconnect, device number 59 [ 1550.839263][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1550.848367][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1550.858110][T16164] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1550.863633][ T29] audit: type=1400 audit(1724710581.337:1284): avc: denied { open } for pid=16179 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1550.898548][ T29] audit: type=1400 audit(1724710581.337:1285): avc: denied { ioctl } for pid=16179 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1550.958155][ T29] audit: type=1400 audit(1724710581.347:1286): avc: denied { read } for pid=4655 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1552.514056][ T29] audit: type=1400 audit(1724710581.347:1287): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.535637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1552.618864][T16164] usb 5-1: device descriptor read/all, error -71 [ 1552.694039][ T29] audit: type=1400 audit(1724710581.347:1288): avc: denied { append } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1552.968282][ T29] audit: type=1400 audit(1724710581.347:1289): avc: denied { open } for pid=4655 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1552.992362][ T29] audit: type=1400 audit(1724710581.347:1290): avc: denied { getattr } for pid=4655 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1552.996497][ T47] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1553.015222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.064687][ T29] audit: type=1400 audit(1724710581.377:1291): avc: denied { prog_load } for pid=20127 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1553.083825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.387731][ T29] audit: type=1400 audit(1724710581.377:1292): avc: denied { bpf } for pid=20127 comm="syz.3.4073" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1553.432813][ T29] audit: type=1400 audit(1724710581.377:1293): avc: denied { perfmon } for pid=20127 comm="syz.3.4073" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1553.456306][ T29] audit: type=1400 audit(1724710581.377:1294): avc: denied { execmem } for pid=20127 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1553.482483][ T29] audit: type=1400 audit(1724710581.597:1295): avc: denied { prog_run } for pid=20127 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1553.545112][ T29] audit: type=1400 audit(1724710581.717:1296): avc: denied { create } for pid=20136 comm="syz.2.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1553.549420][ T47] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 1553.596956][ T47] usb 2-1: config 0 has no interfaces? [ 1553.723747][ T47] usb 2-1: string descriptor 0 read error: -22 [ 1553.742411][ T47] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1553.792872][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.832778][ T47] usb 2-1: config 0 descriptor?? [ 1554.236757][ T47] usb 2-1: USB disconnect, device number 65 [ 1555.468821][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1557.402701][T20216] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4096'. [ 1558.640189][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1558.640202][ T29] audit: type=1400 audit(1724710589.407:1368): avc: denied { create } for pid=20229 comm="syz.1.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1558.736660][ T29] audit: type=1400 audit(1724710589.447:1369): avc: denied { write } for pid=20229 comm="syz.1.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1558.830244][ T29] audit: type=1400 audit(1724710589.487:1370): avc: denied { create } for pid=20226 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1558.936620][ T29] audit: type=1400 audit(1724710589.657:1371): avc: denied { read } for pid=20231 comm="syz.4.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1559.266918][ T29] audit: type=1400 audit(1724710589.757:1372): avc: denied { bind } for pid=20226 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1559.926551][ T29] audit: type=1400 audit(1724710589.787:1373): avc: denied { connect } for pid=20226 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1561.439822][ T29] audit: type=1400 audit(1724710592.197:1374): avc: denied { create } for pid=20244 comm="syz.4.4105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1564.544408][ T29] audit: type=1400 audit(1724710592.297:1375): avc: denied { read write } for pid=20248 comm="syz.0.4106" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1564.596496][ T47] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1564.625915][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1564.665692][ T29] audit: type=1400 audit(1724710592.307:1376): avc: denied { open } for pid=20248 comm="syz.0.4106" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1564.746930][ T29] audit: type=1400 audit(1724710592.307:1377): avc: denied { mounton } for pid=20248 comm="syz.0.4106" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1564.803948][ T29] audit: type=1400 audit(1724710592.327:1378): avc: denied { mount } for pid=20248 comm="syz.0.4106" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1564.851222][ T29] audit: type=1400 audit(1724710595.567:1379): avc: denied { setopt } for pid=20258 comm="syz.3.4107" lport=107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1564.893167][ T29] audit: type=1400 audit(1724710595.647:1380): avc: denied { block_suspend } for pid=20261 comm="syz.2.4108" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1564.916437][ T29] audit: type=1326 audit(1724710595.647:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20261 comm="syz.2.4108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abbd79e79 code=0x0 [ 1565.070770][T20265] sp0: Synchronizing with TNC [ 1565.347976][ T29] audit: type=1400 audit(1724710596.087:1382): avc: denied { setopt } for pid=20271 comm="syz.3.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1565.433908][ T29] audit: type=1400 audit(1724710596.197:1383): avc: denied { accept } for pid=20259 comm="syz.4.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1565.876517][ T29] audit: type=1400 audit(1724710596.197:1384): avc: denied { write } for pid=20259 comm="syz.4.4109" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1566.002560][T16164] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1566.259293][T16164] usb 4-1: Using ep0 maxpacket: 32 [ 1566.278615][T16164] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1566.300498][T16164] usb 4-1: config 0 has no interface number 0 [ 1566.327803][T16164] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.345958][T16164] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.362133][T16164] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1566.371934][T16164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.423897][T16164] usb 4-1: config 0 descriptor?? [ 1566.447124][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1566.568493][ T47] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1566.698660][T20290] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1566.778670][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1566.787032][ T47] usb 1-1: config 0 has no interface number 0 [ 1566.799354][ T47] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.852996][ T47] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.899175][ T47] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1566.908832][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.922976][ T47] usb 1-1: config 0 descriptor?? [ 1567.042289][T16164] uclogic 0003:28BD:0094.0061: pen parameters not found [ 1567.075540][T16164] uclogic 0003:28BD:0094.0061: interface is invalid, ignoring [ 1567.142428][T16164] usb 4-1: USB disconnect, device number 59 [ 1567.589064][ T47] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0062/input/input65 [ 1567.662222][T20302] sp0: Synchronizing with TNC [ 1567.748083][ T47] holtek_kbd 0003:04D9:A055.0062: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 1567.814884][T20305] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1568.346668][T16164] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1568.742349][T16164] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1568.754245][T16164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.419928][T16164] usb 4-1: config 0 descriptor?? [ 1571.485556][T16164] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1571.607039][T16164] usb 4-1: USB disconnect, device number 60 [ 1572.129135][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1572.129177][ T29] audit: type=1400 audit(1724710602.897:1410): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44018 daddr=10.128.1.193 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1572.625211][ T944] usb 1-1: USB disconnect, device number 60 [ 1572.769732][T16164] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1572.996672][T16164] usb 2-1: Using ep0 maxpacket: 32 [ 1573.017197][ T47] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1573.026318][T16164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.062280][T16164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.073856][T16164] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1573.093373][T16164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.131903][T16164] usb 2-1: config 0 descriptor?? [ 1573.586526][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 1573.598505][ T944] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1573.628602][ T47] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1573.641626][ T47] usb 3-1: config 0 has no interface number 0 [ 1573.652856][ T47] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.673736][ T47] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.706553][ T47] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1573.718180][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.738605][ T47] usb 3-1: config 0 descriptor?? [ 1573.753694][ T29] audit: type=1400 audit(1724710604.517:1411): avc: denied { create } for pid=20321 comm="syz.0.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1573.790246][ T29] audit: type=1400 audit(1724710604.557:1412): avc: denied { bind } for pid=20321 comm="syz.0.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1573.827598][ T944] usb 5-1: Using ep0 maxpacket: 32 [ 1573.858639][ T944] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1573.873380][T16164] usbhid 2-1:0.0: can't add hid device: -71 [ 1573.883275][ T944] usb 5-1: config 0 has no interface number 0 [ 1573.895836][T16164] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1573.910143][ T944] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.932151][T16164] usb 2-1: USB disconnect, device number 66 [ 1573.940440][ T944] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.974223][ T944] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1574.013600][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.051543][ T944] usb 5-1: config 0 descriptor?? [ 1574.169744][ T29] audit: type=1400 audit(1724710604.937:1413): avc: denied { create } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1574.187794][T20354] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4137'. [ 1574.190697][ T29] audit: type=1400 audit(1724710604.937:1414): avc: denied { write } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1574.445596][ T47] uclogic 0003:28BD:0094.0063: pen parameters not found [ 1574.475812][ T47] uclogic 0003:28BD:0094.0063: interface is invalid, ignoring [ 1574.513416][ T47] usb 3-1: USB disconnect, device number 61 [ 1574.737586][ T29] audit: type=1400 audit(1724710604.937:1415): avc: denied { create } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1574.812894][ T29] audit: type=1400 audit(1724710604.937:1416): avc: denied { write } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1574.873843][ T29] audit: type=1400 audit(1724710604.937:1417): avc: denied { nlmsg_write } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1574.907985][ T29] audit: type=1400 audit(1724710605.047:1418): avc: denied { view } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1574.975712][ T29] audit: type=1400 audit(1724710605.167:1419): avc: denied { read } for pid=20353 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1575.244358][ T944] uclogic 0003:28BD:0094.0064: pen parameters not found [ 1575.283205][ T944] uclogic 0003:28BD:0094.0064: interface is invalid, ignoring [ 1575.295997][ T944] usb 5-1: USB disconnect, device number 56 [ 1577.269727][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1577.269748][ T29] audit: type=1400 audit(1724710608.027:1421): avc: denied { read } for pid=20376 comm="syz.1.4143" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1577.277925][T20381] openvswitch: netlink: Missing key (keys=80040, expected=2000) [ 1577.330459][ T29] audit: type=1400 audit(1724710608.027:1422): avc: denied { open } for pid=20376 comm="syz.1.4143" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1577.406061][ T29] audit: type=1400 audit(1724710608.067:1423): avc: denied { ioctl } for pid=20378 comm="syz.2.4145" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1577.559735][ T29] audit: type=1400 audit(1724710608.327:1424): avc: denied { write } for pid=20378 comm="syz.2.4145" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1578.482854][ T29] audit: type=1400 audit(1724710608.417:1425): avc: denied { create } for pid=20386 comm="syz.4.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1578.535603][ T29] audit: type=1400 audit(1724710608.647:1426): avc: denied { create } for pid=20376 comm="syz.1.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1578.555478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.596024][ T29] audit: type=1400 audit(1724710608.667:1427): avc: denied { sys_admin } for pid=20376 comm="syz.1.4143" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1578.713872][ T29] audit: type=1400 audit(1724710608.777:1428): avc: denied { execute } for pid=20376 comm="syz.1.4143" path=2F6D656D66643A25202864656C6574656429 dev="hugetlbfs" ino=72785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1578.741095][ T29] audit: type=1400 audit(1724710609.147:1429): avc: denied { write } for pid=20378 comm="syz.2.4145" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1578.746774][ T47] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1578.764745][ T29] audit: type=1400 audit(1724710609.167:1430): avc: denied { read } for pid=20378 comm="syz.2.4145" name="event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1579.006449][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 1579.014679][ T47] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1579.054833][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1579.065479][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1579.079181][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1579.092187][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1579.113137][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1579.124449][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.133538][T20405] FAULT_INJECTION: forcing a failure. [ 1579.133538][T20405] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.185208][T20405] CPU: 0 UID: 0 PID: 20405 Comm: syz.3.4151 Not tainted 6.11.0-rc5-syzkaller #0 [ 1579.194292][T20405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1579.204380][T20405] Call Trace: [ 1579.207671][T20405] [ 1579.210656][T20405] dump_stack_lvl+0x16c/0x1f0 [ 1579.215356][T20405] should_fail_ex+0x497/0x5b0 [ 1579.220053][T20405] ? fs_reclaim_acquire+0xae/0x160 [ 1579.225178][T20405] should_failslab+0xc2/0x120 [ 1579.229877][T20405] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1579.235718][T20405] ? __alloc_skb+0x2b1/0x380 [ 1579.240341][T20405] __alloc_skb+0x2b1/0x380 [ 1579.240372][T20405] ? __pfx___alloc_skb+0x10/0x10 [ 1579.249725][T20405] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1579.255727][T20405] netlink_alloc_large_skb+0x69/0x130 [ 1579.261113][T20405] netlink_sendmsg+0x689/0xd70 [ 1579.265904][T20405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.271327][T20405] sock_write_iter+0x50a/0x5c0 [ 1579.276116][T20405] ? __pfx_sock_write_iter+0x10/0x10 [ 1579.281431][T20405] ? __pfx_file_has_perm+0x10/0x10 [ 1579.286586][T20405] do_iter_readv_writev+0x531/0x800 [ 1579.291816][T20405] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1579.297760][T20405] ? selinux_file_permission+0x125/0x590 [ 1579.303484][T20405] ? security_file_permission+0x98/0xc0 [ 1579.309051][T20405] vfs_writev+0x36f/0xde0 [ 1579.313398][T20405] ? __pfx_vfs_writev+0x10/0x10 [ 1579.318264][T20405] ? __fget_files+0x24c/0x400 [ 1579.322966][T20405] ? do_writev+0x287/0x370 [ 1579.327403][T20405] do_writev+0x287/0x370 [ 1579.331663][T20405] ? __pfx_do_writev+0x10/0x10 [ 1579.336446][T20405] do_syscall_64+0xcd/0x250 [ 1579.340968][T20405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.346869][T20405] RIP: 0033:0x7f1cabb79e79 [ 1579.351298][T20405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.371018][T20405] RSP: 002b:00007f1caca11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1579.379449][T20405] RAX: ffffffffffffffda RBX: 00007f1cabd15f80 RCX: 00007f1cabb79e79 [ 1579.387457][T20405] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 000000000000000a [ 1579.395438][T20405] RBP: 00007f1caca11090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.403415][T20405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.411425][T20405] R13: 0000000000000000 R14: 00007f1cabd15f80 R15: 00007ffe96dfa838 [ 1579.419408][T20405] [ 1579.494217][ T47] usb 3-1: usb_control_msg returned -32 [ 1579.526691][ T47] usbtmc 3-1:16.0: can't read capabilities [ 1580.184775][T20414] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1580.195468][T20414] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1580.261126][T20414] blktrace: Concurrent blktraces are not allowed on loop3 [ 1580.376645][ T944] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1580.508282][T20418] fuse: Bad value for 'group_id' [ 1580.519737][T20418] fuse: Bad value for 'group_id' [ 1580.566444][ T944] usb 4-1: Using ep0 maxpacket: 32 [ 1580.590564][ T944] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1580.605403][ T944] usb 4-1: config 0 has no interface number 0 [ 1580.629017][ T944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.648093][ T944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.665889][ T944] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1580.691771][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.731497][ T944] usb 4-1: config 0 descriptor?? [ 1581.180566][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 1581.241450][T16164] usb 3-1: USB disconnect, device number 62 [ 1581.297262][T20434] xt_HMARK: spi-set and port-set can't be combined [ 1581.368401][ T944] uclogic 0003:28BD:0094.0065: pen parameters not found [ 1581.390650][ T944] uclogic 0003:28BD:0094.0065: interface is invalid, ignoring [ 1581.413795][ T944] usb 4-1: USB disconnect, device number 61 [ 1582.428467][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 1582.428493][ T29] audit: type=1400 audit(1724710613.197:1633): avc: denied { setopt } for pid=20437 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1583.778384][ T29] audit: type=1400 audit(1724710614.547:1634): avc: denied { connect } for pid=20437 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1584.497835][ T29] audit: type=1400 audit(1724710615.077:1635): avc: denied { create } for pid=20437 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1587.382839][ T29] audit: type=1400 audit(1724710618.147:1636): avc: denied { unmount } for pid=17979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1589.812180][ T29] audit: type=1400 audit(1724710620.577:1637): avc: denied { read } for pid=20460 comm="syz.2.4167" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1589.868034][ T29] audit: type=1400 audit(1724710620.577:1638): avc: denied { open } for pid=20460 comm="syz.2.4167" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1589.924759][ T29] audit: type=1400 audit(1724710620.607:1639): avc: denied { ioctl } for pid=20460 comm="syz.2.4167" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1589.978604][ T29] audit: type=1326 audit(1724710620.687:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.2.4167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4abbd79e79 code=0x0 [ 1590.152318][ T47] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1590.547828][T20480] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1590.637850][ T29] audit: type=1326 audit(1724710621.067:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabb79e79 code=0x7ffc0000 [ 1591.193948][ T29] audit: type=1326 audit(1724710621.067:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabb79e79 code=0x7ffc0000 [ 1591.223573][ T29] audit: type=1326 audit(1724710621.087:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cabb78810 code=0x7ffc0000 [ 1591.247770][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1591.258595][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1591.286466][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.304818][ T29] audit: type=1326 audit(1724710621.097:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabb79e79 code=0x7ffc0000 [ 1591.336535][ T47] usb 1-1: Product: syz [ 1591.344681][ T47] usb 1-1: Manufacturer: syz [ 1591.356892][ T47] usb 1-1: SerialNumber: syz [ 1591.377416][ T47] usb 1-1: config 0 descriptor?? [ 1591.394542][ T29] audit: type=1326 audit(1724710621.097:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabb79e79 code=0x7ffc0000 [ 1591.501313][ T29] audit: type=1326 audit(1724710621.117:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20474 comm="syz.3.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1cabb79e79 code=0x7ffc0000 [ 1591.752624][ T47] msi2500 1-1:0.0: Registered as swradio16 [ 1591.777854][ T47] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1591.879783][ T47] usb 1-1: USB disconnect, device number 61 [ 1593.911199][T20519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=20519 comm=syz.2.4181 [ 1594.025261][T20522] [ 1594.027601][T20522] ====================================================== [ 1594.034595][T20522] WARNING: possible circular locking dependency detected [ 1594.041593][T20522] 6.11.0-rc5-syzkaller #0 Not tainted [ 1594.046940][T20522] ------------------------------------------------------ [ 1594.053940][T20522] syz.0.4182/20522 is trying to acquire lock: [ 1594.059981][T20522] ffffffff8fa23768 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x121/0x1440 [ 1594.069273][T20522] [ 1594.069273][T20522] but task is already holding lock: [ 1594.076626][T20522] ffff88806710a050 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x101/0xa00 [ 1594.086755][T20522] [ 1594.086755][T20522] which lock already depends on the new lock. [ 1594.086755][T20522] [ 1594.097245][T20522] [ 1594.097245][T20522] the existing dependency chain (in reverse order) is: [ 1594.106253][T20522] [ 1594.106253][T20522] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 1594.114969][T20522] __mutex_lock+0x175/0x9c0 [ 1594.120021][T20522] smc_switch_to_fallback+0x2d/0xa00 [ 1594.125856][T20522] smc_sendmsg+0x13d/0x520 [ 1594.130821][T20522] __sys_sendto+0x47f/0x4e0 [ 1594.135865][T20522] __x64_sys_sendto+0xe0/0x1c0 [ 1594.141162][T20522] do_syscall_64+0xcd/0x250 [ 1594.146201][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.152624][T20522] [ 1594.152624][T20522] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1594.160281][T20522] lock_sock_nested+0x3a/0xf0 [ 1594.165492][T20522] sockopt_lock_sock+0x54/0x70 [ 1594.170782][T20522] do_ip_setsockopt+0x101/0x38b0 [ 1594.176259][T20522] ip_setsockopt+0x59/0xf0 [ 1594.181209][T20522] tcp_setsockopt+0xa4/0x100 [ 1594.186348][T20522] do_sock_setsockopt+0x222/0x480 [ 1594.191917][T20522] __sys_setsockopt+0x1a4/0x270 [ 1594.197311][T20522] __x64_sys_setsockopt+0xbd/0x160 [ 1594.202952][T20522] do_syscall_64+0xcd/0x250 [ 1594.207997][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.214415][T20522] [ 1594.214415][T20522] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 1594.221641][T20522] __lock_acquire+0x24ed/0x3cb0 [ 1594.227028][T20522] lock_acquire+0x1b1/0x560 [ 1594.232064][T20522] __mutex_lock+0x175/0x9c0 [ 1594.237104][T20522] ip_mroute_setsockopt+0x121/0x1440 [ 1594.242956][T20522] do_ip_setsockopt+0x2e8/0x38b0 [ 1594.248429][T20522] ip_setsockopt+0x59/0xf0 [ 1594.253371][T20522] tcp_setsockopt+0xa4/0x100 [ 1594.258494][T20522] smc_setsockopt+0x1b4/0xa00 [ 1594.263711][T20522] do_sock_setsockopt+0x222/0x480 [ 1594.269277][T20522] __sys_setsockopt+0x1a4/0x270 [ 1594.274659][T20522] __x64_sys_setsockopt+0xbd/0x160 [ 1594.280306][T20522] do_syscall_64+0xcd/0x250 [ 1594.285364][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.291791][T20522] [ 1594.291791][T20522] other info that might help us debug this: [ 1594.291791][T20522] [ 1594.302016][T20522] Chain exists of: [ 1594.302016][T20522] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1594.302016][T20522] [ 1594.315674][T20522] Possible unsafe locking scenario: [ 1594.315674][T20522] [ 1594.323117][T20522] CPU0 CPU1 [ 1594.328476][T20522] ---- ---- [ 1594.333836][T20522] lock(&smc->clcsock_release_lock); [ 1594.339212][T20522] lock(sk_lock-AF_INET); [ 1594.346148][T20522] lock(&smc->clcsock_release_lock); [ 1594.354035][T20522] lock(rtnl_mutex); [ 1594.358014][T20522] [ 1594.358014][T20522] *** DEADLOCK *** [ 1594.358014][T20522] [ 1594.366145][T20522] 1 lock held by syz.0.4182/20522: [ 1594.371258][T20522] #0: ffff88806710a050 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x101/0xa00 [ 1594.381832][T20522] [ 1594.381832][T20522] stack backtrace: [ 1594.387724][T20522] CPU: 1 UID: 0 PID: 20522 Comm: syz.0.4182 Not tainted 6.11.0-rc5-syzkaller #0 [ 1594.396751][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1594.406805][T20522] Call Trace: [ 1594.410085][T20522] [ 1594.413016][T20522] dump_stack_lvl+0x116/0x1f0 [ 1594.417703][T20522] check_noncircular+0x31a/0x400 [ 1594.422646][T20522] ? __pfx_check_noncircular+0x10/0x10 [ 1594.428111][T20522] ? hlock_class+0x4e/0x130 [ 1594.432633][T20522] ? lockdep_lock+0xc6/0x200 [ 1594.437224][T20522] ? __pfx_lockdep_lock+0x10/0x10 [ 1594.442249][T20522] __lock_acquire+0x24ed/0x3cb0 [ 1594.447108][T20522] ? __pfx___lock_acquire+0x10/0x10 [ 1594.452312][T20522] lock_acquire+0x1b1/0x560 [ 1594.456818][T20522] ? ip_mroute_setsockopt+0x121/0x1440 [ 1594.462375][T20522] ? __pfx_lock_acquire+0x10/0x10 [ 1594.467492][T20522] ? lock_acquire+0x1b1/0x560 [ 1594.472186][T20522] ? __pfx___might_resched+0x10/0x10 [ 1594.477493][T20522] ? hlock_class+0x4e/0x130 [ 1594.482014][T20522] __mutex_lock+0x175/0x9c0 [ 1594.486543][T20522] ? ip_mroute_setsockopt+0x121/0x1440 [ 1594.492019][T20522] ? __pfx_mark_lock+0x10/0x10 [ 1594.496797][T20522] ? register_lock_class+0xb1/0x1230 [ 1594.502093][T20522] ? ip_mroute_setsockopt+0x121/0x1440 [ 1594.507566][T20522] ? __pfx___mutex_lock+0x10/0x10 [ 1594.512607][T20522] ? ip_mroute_setsockopt+0x121/0x1440 [ 1594.518079][T20522] ? rtnl_lock+0x9/0x20 [ 1594.522242][T20522] ip_mroute_setsockopt+0x121/0x1440 [ 1594.527543][T20522] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1594.533273][T20522] ? __pfx___lock_acquire+0x10/0x10 [ 1594.538499][T20522] do_ip_setsockopt+0x2e8/0x38b0 [ 1594.543453][T20522] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1594.548837][T20522] ? rcu_is_watching+0x12/0xc0 [ 1594.553615][T20522] ? trace_contention_end+0xea/0x140 [ 1594.558907][T20522] ? __mutex_lock+0x1a6/0x9c0 [ 1594.563612][T20522] ? __lock_acquire+0xbdd/0x3cb0 [ 1594.568567][T20522] ? __pfx___mutex_lock+0x10/0x10 [ 1594.573623][T20522] ip_setsockopt+0x59/0xf0 [ 1594.578064][T20522] tcp_setsockopt+0xa4/0x100 [ 1594.582671][T20522] smc_setsockopt+0x1b4/0xa00 [ 1594.587362][T20522] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1594.593273][T20522] ? __pfx_smc_setsockopt+0x10/0x10 [ 1594.598487][T20522] ? selinux_socket_setsockopt+0x6a/0x80 [ 1594.604131][T20522] ? __pfx_smc_setsockopt+0x10/0x10 [ 1594.609345][T20522] do_sock_setsockopt+0x222/0x480 [ 1594.614382][T20522] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1594.619944][T20522] ? __fget_light+0x173/0x210 [ 1594.624635][T20522] __sys_setsockopt+0x1a4/0x270 [ 1594.629495][T20522] ? __pfx___sys_setsockopt+0x10/0x10 [ 1594.634872][T20522] ? xfd_validate_state+0x5d/0x180 [ 1594.640005][T20522] __x64_sys_setsockopt+0xbd/0x160 [ 1594.645203][T20522] ? do_syscall_64+0x91/0x250 [ 1594.649888][T20522] ? lockdep_hardirqs_on+0x7c/0x110 [ 1594.655443][T20522] do_syscall_64+0xcd/0x250 [ 1594.659979][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.665888][T20522] RIP: 0033:0x7f2fca979e79 [ 1594.670311][T20522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.689938][T20522] RSP: 002b:00007f2fcb68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1594.698356][T20522] RAX: ffffffffffffffda RBX: 00007f2fcab16058 RCX: 00007f2fca979e79 [ 1594.706328][T20522] RDX: 00000000000000cf RSI: 0000000000000000 RDI: 0000000000000005 [ 1594.714320][T20522] RBP: 00007f2fca9e793e R08: 0000000000000004 R09: 0000000000000000 [ 1594.722290][T20522] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000 [ 1594.730263][T20522] R13: 0000000000000000 R14: 00007f2fcab16058 R15: 00007ffd193415a8 [ 1594.738244][T20522] [ 1594.741327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.836692][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1594.836707][ T29] audit: type=1400 audit(1724710625.597:1696): avc: denied { wake_alarm } for pid=20517 comm="syz.2.4181" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1595.327147][ T29] audit: type=1400 audit(1724710625.887:1697): avc: denied { create } for pid=20520 comm="syz.0.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1