last executing test programs: 12m58.720131292s ago: executing program 2 (id=587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x28522000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000340)={0xc354, 0x1, [{0x1, 0x1}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12m55.03489117s ago: executing program 2 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 12m53.236238539s ago: executing program 2 (id=600): syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-avx\x00'}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/resume_offset', 0xa502, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x2, &(0x7f0000001680)=""/55, &(0x7f0000000000)=0x21) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000016c0)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0xc0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0xb2, &(0x7f0000000680)={@broadcast, @random="1704b45adbde", @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x20, 0x4, 0x1, 0x6, 0xf, 0x64, 0x2, 0x9, 0x8, 0x80, @remote, @multicast2, {[@ssrr={0x89, 0xb, 0xc7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x1, [{@local, 0xb18}, {@loopback, 0xfffffffb}, {@loopback, 0x400}, {@private=0xa010100, 0x82c4}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @lsrr={0x83, 0x17, 0x2f, [@remote, @remote, @remote, @loopback, @remote]}, @ssrr={0x89, 0x13, 0x72, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000140)) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000000b010800000000000000000300000808000240000000040900010073797a3000000000080003"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 12m52.487050254s ago: executing program 2 (id=605): r0 = io_uring_setup(0x3e0f, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x2, 0x1c4}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x7) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) listen(r3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, r3, 0x0) 12m48.028014224s ago: executing program 2 (id=617): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x20, 0x9, 0x4a, "c8f228ce72211c42845dd1bd798ac58d72fca0dc1cf1b2e3310ad1cb519d87e5a0ea150eb820a0546a1511f9a9b1f36f0ab287f0aba00addb7e85a350493fef43637ef3ef6664a4dde64"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m47.491604955s ago: executing program 2 (id=620): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 12m46.998896484s ago: executing program 32 (id=620): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 20.850398638s ago: executing program 1 (id=2131): syz_init_net_socket$ax25(0x3, 0x3, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000540)='(', &(0x7f0000000880)=""/231}, 0x20) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x6}}}}, 0x30}}, 0x0) 18.265054425s ago: executing program 1 (id=2135): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x9, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}, {0xb, 0x3, 0x4, 0x2, 0xfff, 0x122b4f22, 0x6}, {0x0, 0x1a3, 0x1, 0x1, 0xa4, 0x80000000, 0x7f}]}) syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f00000010c0)={0x2c, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000440), &(0x7f0000000540)}, 0x20) 15.164975751s ago: executing program 4 (id=2140): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xb, 0x200, {0xffffffffffffffff}, {}, 0x0, 0x5}) tkill(r0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1900) 13.339561383s ago: executing program 4 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) eventfd(0x3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32={[0x4000000, 0x0, 0xffffffbf]}}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) madvise(&(0x7f0000078000/0x4000)=nil, 0x4000, 0x17) syz_pidfd_open(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x840d, 0x0) 12.080057669s ago: executing program 4 (id=2146): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x419e7b85633f198b, &(0x7f0000000300)=0x100e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="fddc380174aec2aead59280c85e23d4e8a94583c07ce87c112a931a6c16d82235d7f0516ff0dd141cd0ad192787ea3a26920b50a70e4f8ade29e03"], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0', [{0x20, ',N\xbf\xc1M\xc5\x03\xb2yn\x9f\xf3\xda\x81\x11\x80`\xec\r\xaf\x00X\x84\xbdR\x16\x025\xaex\xc5\x92G8\xbb\x13\xf7\x9a\xb1\xe5\xca\x87\xe4\xcc\xee\xe0\x7fR+y5\xcf?@\xb2;\xc6\xeeGD\xef#\x94H\xed\xec\xb5\x00\x98\xcc\xf6\v[\xadMX\x85\xeaU\xe7\xed\xd5?\xb6\xccD7I\xe0\xd2\xddl%\xbd4\xd5\x98R\xad\xdcu\xb0wRZ\xccf\xf1\x8f\x05$Be\x9d\xf3 \x1d\xb3\x01\xe6\r\xd5\x0e0e\x16\xc6D\x83\x9d\xc2\xa4\xfe\x05y\xae\xe1k\x04\x00\x00\x00\vE\xd7\xec\xac\'\x93\xbdjJ69y\xa1t\xc6\xb6\xa2\xbd?A'}, {0x20, '\xdeN`D'}, {0x20, '\xf6\xbf|q\xcc\x9e\x9aR\xfaM5\xeb\xfa\x93$\x12ext\x14\x00\xbc\xf1\xc3\xbd |Q\xbe(}\x15{g\x11\xb6oQ\x83\x8d\xe3\x9c\x90\x18\xbbD$\x98'}, {0x20, '4U\xf2?\x86C\xe4\xaa\xe8]\xa4wT\x9dc@\xf0\xc1\xefwC\xce[\x1bN\x97i\xf6D)\x1c\x10\x8d\xda<\xf9\x12\xbe\xf8\xea\x00\xd5\x96O)\n\x8c\xbcj\xfc\xb7\xb4\x01\xa0\xdd\x9fB\xa0\xca\xea\x8e\xd4\xa9$\x12q\xeb\x87\x03\xe2q\x17\xb3\xe0_\a\x0e\x86\xce\x7f\xa5\x1d\xfe\xe2\xd4L\xdaz\x94\xdbH\x82\xe8\xadr\x9c\x98\xc7\x80\x80\x8e\r\x19\xcf\xc9\xec\xe4\x87\x8f\x9bH;E\x9a\x83r\xcc\x86\xfe\xb9\x1a|\xbe\x88\xc8\xa8~.'}, {0x20, 'trusted.overlay.upper\x00'}], 0xa, "98ffe8aad4600ffdee7f7b202931869cc0ebacd18510f0008697cfc47a9bb2364d0e71c2"}, 0x1a1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r6, &(0x7f0000000c00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa", 0x290) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) write$dsp(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 11.676103751s ago: executing program 1 (id=2148): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x1b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x9, 0x4, 0x70000, 0x6, {}, {0x3, 0xc, 0x6, 0x6, 0x34, 0x10, "3129d16b"}, 0x101, 0x2, {0x0}, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) r4 = semget(0x3, 0x3, 0x40) semctl$SETVAL(r4, 0x0, 0x10, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000100)='5\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = getpgid(r1) prlimit64(r9, 0x7, &(0x7f0000000180)={0x200, 0x100000001}, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00'}, 0x18) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00000000002992b09662bde852e86a6d9de59275539d6ea0475c0dd85b9ddec464716575c24702fdbf5aa2ba84bcc3c8903fa5ecc464d3750f1a1239278a7acc8f76dc10e00d0588dd63210ed6f59dcaba2e25284323733c87ffe73a64855939c16fceb5a2868b72aa7c3c71171d13fa2796c4d212e782dae1bf0bed8a9f3a30f02245e183a206b75516a972e6814c1846bc30d58c"], 0x34}}, 0x0) 11.624105512s ago: executing program 0 (id=2150): socket(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x88d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x22004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000030100800c"], 0x114}], 0x1}, 0x0) 10.855342745s ago: executing program 1 (id=2151): socket(0x23, 0xc0697e9ed3ed752a, 0xfffffffd) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x88d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000015c0)={0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(r3, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x22004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000030100800c"], 0x114}], 0x1}, 0x0) 10.38536331s ago: executing program 0 (id=2153): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x540b, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x5a) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r5], &(0x7f00000003c0)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='svcrdma_rq_post_err\x00', r6, 0x0, 0x8000000000002003}, 0x18) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000340)={0x1b, "5660359c32c2bcc42317afadf9ffed51000000b22e000001000000b506075c00"}) r8 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x991, &(0x7f0000000080)={0x0, 0xb708, 0x0, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd, 0x80000001, &(0x7f0000000280)=[{&(0x7f0000000480)="2fa84441f6b94dce8c7f9f4e4d3dea96eb424607b321c0cc05517f60c0cbfff14119f630135e8774b3e229fb217c40aeab3696415f2709044e313436154fbc760d82aff785aebfcb09a3e59c9f2181ef8bf0598c7f625624cc08f50ef358360e863f25a8c8a1b158d7e7a3225c750dc61f0ae1d861e5070cedcff7224f712cf6f5f9df6655b8057756787e516b8e7e22e2e71b5b9d5ef89a75c1cc17397c5f12fc753206e75cb08e70179e96ed076ed45dc56ecce4bccea4b710a335b913fe19894166782f98304fcf", 0xc9}, {&(0x7f0000000840)="44407037893e2fdc5145217ca699f9ee76c3bcd858aae78c838e866653e20fc34fe887cc9c528be41031cb867dcd18a480ffe176e7d53d6584bbab06efa7475bf9f49b20ea6069664de2cdef4aae8ee32ff99b16c46cc3a958c52887125af6682654d2f96d198d69625c0b0e53716ac166c6a7a1d92464710190696f44ea7798d6c7ab651ad9b4affa7a3133574371be3191f4738aa1f501184b5be3f0c72c39a399b74d71a9b682aa4e34e19e12d2b7b24a5b915d9aaaac0f03e97c3fe7e80c690f3f85c7b952ae7f2893730023d7fc547c4a35e31722fb406609e4e1ce2547d934c9b8e7043d5f632e5a5ec8322e19fcc9bee4a07867f0e88adfe27729b5f935950ed6e5ec511abfafa3cabd05a6365e25ceaf22eeae9a15a10fd5bf6f7ca1bb90cf9aee6d0962b51d6c9b845f453f7791da0e5f1bab694749bdb3f691bffb1b28e0b5d0a9a922d81760346f27ed05a38af86668d9c9e032c2e8c4c70ef333f3f907c7f4db0ad3180737ae741dfd5c0e248dab426a85d296c75d2030d2b744", 0x180}], 0x2, 0x1e, 0x0, {0x8001}}) io_uring_enter(r8, 0x381b, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) socket$xdp(0x2c, 0x3, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2711, @host}, 0x10) 8.264038957s ago: executing program 5 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000040000000000000000", 0x1c) 6.89584162s ago: executing program 5 (id=2156): syz_open_dev$video4linux(&(0x7f0000000f80), 0x1, 0x2100) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7613) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000002440)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000007160170f0008000300", @ANYRES32=r4], 0x24}}, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000280)=0x1) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$AUTOFS_IOC_READY(r5, 0xc1086201, 0x20001f00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000c, 0x110, r5, 0xd2a68000) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) madvise(&(0x7f00001ea000/0x2000)=nil, 0x2000, 0x12) socket(0x200000000000011, 0x2, 0x0) 6.895104928s ago: executing program 3 (id=2157): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="1b147160c98bc74bebe0435931e261fcff3d1863f7cf838c6b01b3b1c546d959f868767412270395441fd5d52f", 0x2d}, {&(0x7f0000000080)="6074d67d4d9b2a567be4022ea197f3e406f7b82ecc6db09e8c878a674799e432550556e844f6edb56e4ce720ea8a9a7b11bd8313e07e30453a255d15f7ecbbc80c0f60503ffe214130", 0x49}, {&(0x7f0000000100)="e5503d5109eed95eee85e47ffece5b77c78521451c722fc68dd10cd2f243c69628cb1bc1aa74fd9d0b24750978e823ac00d351688d8e2bc16aea0128c436552f14d004d9328dee0cdcf6aad76d8e73d0cedb72ba79cc02887d570f3c69f1e6b1695e008d586f0c99ac1cdf775c7ac1524eeaa05b4ffa560481dfa2eb7bd63b7a92342309f973b1387380dd4175c752249e3fd064704c155bb7c32d469af2a86ba8be3e15d1402f6d3b94e6ed5a392a479cd10a08eae83ea5707832c2a850223b9c9d9468606cce88706af7372d52ac6ae4d362", 0xd3}, {&(0x7f0000000200)="4fa1bb526ad61469ad816ca41dfe2583b03c5b0b0c24b1b266f4468928a4f0dc72f097b1caf577745bd7d1810ea52a3d88a919177e918352ae6e3925e1dd4d79ce312a756dd14eb3be4c70ab9f33decf6bfa63b5c52f63b46221b207856ffaea49b2f2042f4345da178752f6c7ad28c9ba061b608b139ba65cbd2db305ec2587a54d97ec5bd48bf733eb48abccf83cb28b99116f3a96b5161f627e981757272f9e82b587a3e542c9de704903d5c559c401113a18b24222c148083eea196a6d1f97216feb55ef1765f466f117b8de40306545e3feb2827b221389686e5da3a2216457eff71a7524310c5ccc27981fa1", 0xef}], 0x4, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_io_uring_complete(0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000003c0)=0x101, 0x4) process_madvise(r3, &(0x7f00000004c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="9a470f144c4a8aab4aca6f1a01bad645436ef97685804f", 0x17}, {&(0x7f0000000480)="e8d506a79a9edb14f958", 0xa}], 0x3, 0x4, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000500)={0x80000001, 0x5, 0x2}) symlinkat(&(0x7f0000000540)='./file0\x00', r3, &(0x7f0000000580)='./file0\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x26aed88e, 0x61}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2b}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6c}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x82}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040811}, 0x4000) io_uring_enter(r3, 0x1d45, 0xbc3, 0x1, &(0x7f0000000840)={[0x9aac]}, 0x8) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xee01, &(0x7f0000000880)={0x4, 0xffffffffffffffff, 0x99d, 0x7, 0x8, 0x8, 0x3, 0x6, 0x3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000a00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000b00)={&(0x7f0000000900), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x67fff66153e5dca2) syz_open_dev$MSR(&(0x7f0000000b40), 0xaa, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000b80)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x90) mkdir(&(0x7f0000000d40)='./file0\x00', 0x40) socket$inet(0x2, 0xa, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000d80)={0x5, @pix_mp={0xfffffffc, 0x9, 0x39565559, 0x7, 0xb, [{0x9, 0xdb}, {0x1, 0x80}, {0xa, 0x2}, {0x1000, 0x1}, {0xffffffff, 0xb}, {0xff, 0x5000}, {0x8, 0x173}, {0x7, 0x9}], 0x10, 0x3, 0x4, 0x2, 0x3}}) connect$nfc_raw(r3, &(0x7f0000000e80)={0x27, r8, 0xffffffffffffffff, 0x5}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008841}, 0x4000040) 6.892274001s ago: executing program 0 (id=2158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x7a2, 0x0, 0x4, r3, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket(0x15, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched_retired(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000800)=""/33, 0x21}, {&(0x7f0000000480)=""/50, 0x32}], 0x5}, 0x10}], 0x2, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000080), 0x2000011a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 6.28406858s ago: executing program 4 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) ioperm(0x0, 0x444, 0xb1f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r4, 0x48079000) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000100)=@attr_set_pmu={0x0, 0x1, 0x1, 0x0}) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x465f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r7, 0x4b47, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x48, 0x0, 0x6}]}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 6.075837875s ago: executing program 3 (id=2160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='\t\x00\x00', 0x3) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x2, 0x0, @multicast2, {0x10, 0x4, 0x1, 0x3, 0x263, 0x68, 0x1, 0x31, 0x29, 0x7, @local, @rand_addr=0x64010102, {[@end, @generic={0x44, 0x3, "90"}, @generic={0x7, 0x6, "e6d306c9"}, @ssrr={0x89, 0x1f, 0xb4, [@broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast1, @private=0xa010102]}]}}}}}}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/95) 5.974163063s ago: executing program 5 (id=2161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_tree(0xffffffffffffffff, 0x0, 0x1800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1453f46ba8afd9d75630e1acd1fcc0a6b7e75619a3dafff4959c1160e035fa49bf889a4d5638327c9b9bd6602825f9e4acbb78dd1d8673bd45c1", 0x3a}], 0x1}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x60, 0x2c}, 0x44004) 5.147826147s ago: executing program 3 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000090001002a09"], 0x34}, 0x1, 0x0, 0xf00000000000000}, 0x0) 4.715661612s ago: executing program 1 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x34, 0x0, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockname$netrom(r3, &(0x7f0000000000)={{0x3, @default}, [@null, @bcast, @bcast, @bcast, @bcast, @rose, @null, @default]}, &(0x7f0000000080)=0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.706340341s ago: executing program 5 (id=2164): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0", 0x57}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb85f9b8695ca5667526d5594901cd0605944936387c97d9ac91804b46657552fa7bbad707c25f5412e40774a8edced6ae721b6ce231cfeedd7d0000000000", 0x5f}, {&(0x7f0000000100)="cfc4a70042dd2be7b70213", 0xb}], 0x6, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17ef", 0xc4}], 0x1}}], 0x2, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04040a00f8e82e2a5a5872c25f"], 0xd) 4.415380109s ago: executing program 4 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x20, 0x9, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000200000040000000", @ANYRES16=r1, @ANYBLOB="4d17022bdc2d9a3e233b51000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x2], [], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000340)={r9}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) 4.217067461s ago: executing program 0 (id=2166): prctl$PR_GET_TIMERSLACK(0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x10043) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000380)={0x2, {0x2, 0x1ff, 0xffffff26, 0xffffffc0}}) close(r5) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x7], 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, 0x40) 3.102617998s ago: executing program 0 (id=2167): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24040080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xfbff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x5) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603e00000000000500000014000500200100000000000000000100000000001c00090008000000dfd4fa9403c3cf2e4a6dedd51c31d42518508f2f8186e81a5e9f8413659aa0189f86ebf469707b0ba908dbca7163b91a0136d31f856d49f21c40a7f01443e42fbacccc7573380e42d3a81a5591b0", @ANYRES32=r5, @ANYRES8=r3], 0x4c}}, 0x0) (fail_nth: 1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.056083591s ago: executing program 3 (id=2168): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) poll(&(0x7f0000000200)=[{r1, 0x210}], 0x1, 0x80) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x200c2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, @local}}}, 0x32) 3.055688973s ago: executing program 5 (id=2169): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x80, [0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38ed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xa0100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x0}, 0xffffffffffffff9f) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x102, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r3, 0x5}) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="64f3e35e64"]) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/../file0/file0/file0\x00', 0x0, 0x28, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000000200000007000000ff00000010000000", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000500000001000000000000000000000000000000000000009c34eb2674"], 0x50) utimensat(r6, &(0x7f0000000180)='./file0/../file0/file0\x00', 0x0, 0x100) 1.941603292s ago: executing program 1 (id=2170): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x80, [0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38ed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xa0100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x0}, 0xffffffffffffff9f) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x102, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r3, 0x5}) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="64f3e35e64"]) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/../file0/file0/file0\x00', 0x0, 0x28, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000000200000007000000ff00000010000000", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000500000001000000000000000000000000000000000000009c34eb2674"], 0x50) utimensat(r6, &(0x7f0000000180)='./file0/../file0/file0\x00', 0x0, 0x100) 1.336905605s ago: executing program 4 (id=2171): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x4000) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @empty, 0x2}, 0x1c) 632.215871ms ago: executing program 3 (id=2172): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) (fail_nth: 4) 165.028383ms ago: executing program 3 (id=2173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="489ddded42284d0200000003ffe000080b00002100000080000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705020e6fd1ecaa6b8669ea286f69150b8c000008001c0085000000a5fd00009500000000008b00"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000600000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000e38400000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000009562d1c89ecaf6305525b9e374491f63366f4907a4eb61ac4e14f3524a56ecaaf98277fcfa09249a44a158f2d3c4a9b3ed4daa02019c7e37abd225e1f4db396790c5197e15dd6c1db82d90346d37fed2d2ffcad5bcb4426657744ea7befbe1574ae66e20c988a046dcde9a16f62d11d86ee6a86eae579b12a764c1827d1a13a839d792de92888e3b3ef50e0cf46a7b2a33261d6fa57a6e23d9d581a90b9b4fd9b81af0c7e20754f5f2627fd8f4137a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) statx(0xffffffffffffffff, 0x0, 0x800, 0x80, 0x0) (async) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bcd) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async) r6 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122233132333435363738393a3b3c3d3e3f4000"/72], 0x48, 0xfffffffffffffff8) (async) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$instantiate(0xc, r6, 0x0, 0x0, r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec112d240000000d083fc04932152000010327bd7000ffdbdf2502000000000000001e000000080017004e20f37f4e20e24a6d2454a3b14d95ebc7224da277b93a2d237a399b5fb337069ca5642dc5abf571b991d6d4eff39aafd16c33ef4c1853e8ccc89036deadfa9930b2238a8a4aba15440269580000234fa088cf280212c05e4b3fc157f77c99eb"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) (async) inotify_init1(0x80000) 94.752252ms ago: executing program 5 (id=2174): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e40)=0xa3) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) r2 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x40) 0s ago: executing program 0 (id=2175): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x7e63def3f98af9a3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x125) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0x1, 0x2400c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r5, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) kernel console output (not intermixed with test programs): 86.240:24448): avc: denied { write } for pid=13951 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.344980][ T29] audit: type=1400 audit(1735547486.270:24449): avc: denied { module_request } for pid=13947 comm="syz.3.1838" kmod="net-pf-2-proto-262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 938.367573][ T29] audit: type=1400 audit(1735547486.330:24450): avc: denied { read } for pid=13951 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.388131][ T29] audit: type=1400 audit(1735547486.330:24451): avc: denied { read } for pid=13951 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.408717][ T29] audit: type=1400 audit(1735547486.340:24452): avc: denied { write } for pid=13951 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.429510][ T29] audit: type=1400 audit(1735547486.350:24453): avc: denied { create } for pid=13951 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.450374][ T29] audit: type=1400 audit(1735547486.360:24454): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 938.460021][ T9] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 938.471543][ T29] audit: type=1400 audit(1735547486.370:24455): avc: denied { read write } for pid=8876 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 938.870027][ T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 938.895146][ T9] usb 2-1: config 0 has no interface number 0 [ 939.060539][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 939.082616][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.112147][ T9] usb 2-1: Product: syz [ 939.141320][ T9] usb 2-1: Manufacturer: syz [ 939.180014][ T9] usb 2-1: SerialNumber: syz [ 939.320518][ T9] usb 2-1: config 0 descriptor?? [ 939.732240][ T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 939.740887][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 939.748830][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 939.757025][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 939.781027][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 940.176295][ T5868] usb 2-1: USB disconnect, device number 51 [ 940.207414][ T5868] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 940.248046][ T5868] keyspan 2-1:0.133: device disconnected [ 940.750007][ T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 940.970211][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.005977][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 941.010146][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 941.070185][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.109951][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.161614][T13981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 941.235944][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 941.897975][T13993] kvm: emulating exchange as write [ 943.993513][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 943.993525][ T29] audit: type=1400 audit(1735547492.000:24702): avc: denied { prog_load } for pid=14006 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 944.076623][ T29] audit: type=1400 audit(1735547492.010:24703): avc: denied { bpf } for pid=14006 comm="syz.4.1852" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 944.132559][ T29] audit: type=1400 audit(1735547492.340:24704): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 944.196866][ T29] audit: type=1400 audit(1735547492.470:24705): avc: denied { sys_module } for pid=13996 comm="syz.5.1850" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 944.272607][ T29] audit: type=1400 audit(1735547492.480:24706): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 944.801439][ T29] audit: type=1400 audit(1735547492.480:24707): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.888854][ T29] audit: type=1400 audit(1735547492.480:24708): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 945.072451][ T29] audit: type=1400 audit(1735547492.500:24709): avc: denied { module_request } for pid=13996 comm="syz.5.1850" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 945.410969][ T29] audit: type=1400 audit(1735547492.520:24710): avc: denied { read } for pid=14006 comm="syz.4.1852" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 945.435527][ T29] audit: type=1400 audit(1735547492.530:24711): avc: denied { read open } for pid=14006 comm="syz.4.1852" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 948.062396][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 948.189791][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 948.199041][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 948.250270][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'. [ 948.923112][ T5901] usb 1-1: USB disconnect, device number 52 [ 949.000251][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 949.000269][ T29] audit: type=1400 audit(1735547497.280:25004): avc: denied { search } for pid=14024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.127376][ T29] audit: type=1400 audit(1735547497.280:25005): avc: denied { read } for pid=14024 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.231527][ T29] audit: type=1400 audit(1735547497.320:25006): avc: denied { prog_load } for pid=14042 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.326292][ T29] audit: type=1400 audit(1735547497.320:25007): avc: denied { bpf } for pid=14042 comm="syz.1.1859" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 949.433022][ T29] audit: type=1400 audit(1735547497.320:25008): avc: denied { perfmon } for pid=14042 comm="syz.1.1859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 949.498114][T14024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 949.519125][T14043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 949.540067][T14024] audit: audit_lost=2655 audit_rate_limit=0 audit_backlog_limit=64 [ 949.547341][ T29] audit: type=1400 audit(1735547497.320:25009): avc: denied { read open } for pid=14024 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.548163][T14024] audit: backlog limit exceeded [ 952.396918][T14070] overlayfs: failed to clone upperpath [ 952.562619][T14073] overlayfs: conflicting lowerdir path [ 953.897907][T14091] ubi0: attaching mtd0 [ 953.902103][T14091] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 953.919319][T14091] x_tables: ip_tables: osf match: only valid for protocol 6 [ 954.329641][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 954.329652][ T29] audit: type=1400 audit(1735547502.170:25226): avc: denied { map_create } for pid=14074 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 954.355282][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.527393][ T29] audit: type=1400 audit(1735547502.180:25227): avc: denied { read } for pid=14074 comm="syz.5.1869" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 954.730130][ T29] audit: type=1400 audit(1735547502.180:25228): avc: denied { read open } for pid=14074 comm="syz.5.1869" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 954.754275][ T29] audit: type=1400 audit(1735547502.180:25229): avc: denied { ioctl } for pid=14074 comm="syz.5.1869" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 954.779125][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.785375][ T29] audit: type=1400 audit(1735547502.220:25230): avc: denied { ioctl } for pid=14074 comm="syz.5.1869" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 954.810648][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.818787][ T29] audit: type=1400 audit(1735547502.220:25231): avc: denied { mounton } for pid=14074 comm="syz.5.1869" path="/227/file0" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 954.841579][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.847741][ T29] audit: type=1400 audit(1735547502.220:25232): avc: denied { mount } for pid=14074 comm="syz.5.1869" name="/" dev="hugetlbfs" ino=42960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 954.871415][ T29] audit: type=1400 audit(1735547502.240:25233): avc: denied { read } for pid=14085 comm="syz.4.1871" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 954.892683][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.899304][ T29] audit: type=1400 audit(1735547502.250:25234): avc: denied { read open } for pid=14085 comm="syz.4.1871" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 954.923215][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.929714][ T29] audit: type=1400 audit(1735547502.250:25235): avc: denied { ioctl } for pid=14085 comm="syz.4.1871" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 954.984407][ T5820] Bluetooth: unknown link type 95 [ 954.989559][ T5820] Bluetooth: hci4: connection err: -111 [ 955.930122][ T5901] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 957.261395][T14107] vivid-001: disconnect [ 957.367177][ T5901] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.381784][ T5901] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 957.412707][ T5901] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 957.460040][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.515808][T14099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.793054][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 958.843465][T14128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.091756][T14107] vivid-001: reconnect [ 959.149991][ T5901] usb 6-1: USB disconnect, device number 30 [ 959.589958][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 959.589976][ T29] audit: type=1400 audit(1735547507.530:25665): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 959.653775][ T29] audit: type=1400 audit(1735547507.540:25666): avc: denied { read write open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 959.730047][ T29] audit: type=1400 audit(1735547507.540:25667): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 959.737494][T14130] kexec: Could not allocate control_code_buffer [ 959.800068][ T29] audit: type=1400 audit(1735547507.610:25668): avc: denied { write } for pid=14118 comm="syz.4.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 959.860057][ T29] audit: type=1400 audit(1735547507.620:25669): avc: denied { create } for pid=14119 comm="syz.5.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 959.900068][ T29] audit: type=1400 audit(1735547507.710:25670): avc: denied { mount } for pid=14120 comm="syz.3.1878" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 959.950043][ T29] audit: type=1400 audit(1735547508.190:25671): avc: denied { create } for pid=14136 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 959.990032][ T29] audit: type=1400 audit(1735547508.240:25672): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 960.033484][ T29] audit: type=1400 audit(1735547508.240:25673): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.079966][ T29] audit: type=1400 audit(1735547508.240:25674): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 961.180035][T14151] vivid-001: disconnect [ 963.199424][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.330793][ T8] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 964.475820][T14137] vivid-001: reconnect [ 964.809412][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 964.809452][ T29] audit: type=1400 audit(1735547512.880:25854): avc: denied { read } for pid=14175 comm="syz.4.1889" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 965.089813][ T29] audit: type=1400 audit(1735547512.880:25855): avc: denied { read open } for pid=14175 comm="syz.4.1889" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 965.113521][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.129784][ T29] audit: type=1400 audit(1735547512.890:25856): avc: denied { ioctl } for pid=14175 comm="syz.4.1889" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 965.154916][ T29] audit: type=1400 audit(1735547512.910:25857): avc: denied { read } for pid=14175 comm="syz.4.1889" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 965.177673][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.185645][ T29] audit: type=1400 audit(1735547512.910:25858): avc: denied { read open } for pid=14175 comm="syz.4.1889" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 965.209826][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.215969][ T29] audit: type=1400 audit(1735547513.360:25859): avc: denied { mounton } for pid=14181 comm="syz.3.1893" path="/463/file1" dev="tmpfs" ino=2548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 965.238926][ T29] audit: type=1400 audit(1735547513.360:25860): avc: denied { mount } for pid=14181 comm="syz.3.1893" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 965.261001][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.267367][ T29] audit: type=1400 audit(1735547513.400:25861): avc: denied { search } for pid=14166 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.288881][ T29] audit: type=1400 audit(1735547513.400:25862): avc: denied { read } for pid=14166 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 965.310878][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.317362][ T29] audit: type=1400 audit(1735547513.410:25863): avc: denied { read open } for pid=14166 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 965.778622][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.794705][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 965.812021][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.827664][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.173870][T14174] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 966.185401][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.482539][ T9] usb 6-1: USB disconnect, device number 31 [ 968.623387][T10231] udevd[10231]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.429256][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'. [ 969.555401][T14220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40345 sclass=netlink_route_socket pid=14220 comm=syz.0.1899 [ 969.892244][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 969.892261][ T29] audit: type=1400 audit(1735547518.180:26067): avc: denied { ioctl } for pid=14209 comm="syz.5.1898" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.907237][ T29] audit: type=1400 audit(1735547518.190:26068): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 969.915129][ T29] audit: type=1400 audit(1735547518.200:26069): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.915172][ T29] audit: type=1400 audit(1735547518.200:26070): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 969.915206][ T29] audit: type=1400 audit(1735547518.200:26071): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 969.915240][ T29] audit: type=1400 audit(1735547518.200:26072): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 969.962655][ T29] audit: type=1400 audit(1735547518.250:26073): avc: denied { ioctl } for pid=14209 comm="syz.5.1898" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 970.121649][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 970.330958][ T29] audit: type=1400 audit(1735547518.340:26074): avc: denied { create } for pid=14230 comm="syz.1.1902" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 970.423864][ T29] audit: type=1400 audit(1735547518.340:26075): avc: denied { map } for pid=14230 comm="syz.1.1902" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 970.475141][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 970.495977][ T9] usb 6-1: config 0 has no interface number 0 [ 970.527323][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.543673][ T29] audit: type=1400 audit(1735547518.340:26076): avc: denied { read write } for pid=14230 comm="syz.1.1902" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 970.579131][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.590764][ T9] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 970.600664][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.616119][ T9] usb 6-1: config 0 descriptor?? [ 970.786176][T14237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1905'. [ 972.378856][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.000E/input/input15 [ 973.288105][ T9] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 973.320123][ T9] usb 6-1: USB disconnect, device number 32 [ 975.000280][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 975.000297][ T29] audit: type=1400 audit(1735547523.290:26241): avc: denied { create } for pid=14261 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 975.071356][ T29] audit: type=1400 audit(1735547523.330:26242): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 975.095379][ T29] audit: type=1400 audit(1735547523.330:26243): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.139672][ T29] audit: type=1400 audit(1735547523.330:26244): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 975.167697][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 975.200432][ T29] audit: type=1400 audit(1735547523.330:26245): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 975.255623][ T29] audit: type=1400 audit(1735547523.330:26246): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 975.297106][ T29] audit: type=1400 audit(1735547523.350:26247): avc: denied { ioctl } for pid=14261 comm="syz.5.1912" path="socket:[44276]" dev="sockfs" ino=44276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 975.336339][ T29] audit: type=1400 audit(1735547523.400:26248): avc: denied { connect } for pid=14261 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 975.357083][ T29] audit: type=1400 audit(1735547523.410:26249): avc: denied { write } for pid=14261 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 975.473048][ T29] audit: type=1400 audit(1735547523.580:26250): avc: denied { read } for pid=14261 comm="syz.5.1912" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 980.110957][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 980.110977][ T29] audit: type=1400 audit(1735547527.840:26305): avc: denied { create } for pid=14280 comm="syz.5.1918" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 980.226917][ T29] audit: type=1400 audit(1735547527.850:26306): avc: denied { map } for pid=14280 comm="syz.5.1918" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 980.290096][ T29] audit: type=1400 audit(1735547527.860:26307): avc: denied { read write } for pid=14280 comm="syz.5.1918" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 980.339939][ T29] audit: type=1400 audit(1735547527.870:26308): avc: denied { map } for pid=14280 comm="syz.5.1918" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 980.422479][ T29] audit: type=1400 audit(1735547527.880:26309): avc: denied { read write } for pid=14280 comm="syz.5.1918" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 980.440716][T14276] kexec: Could not allocate control_code_buffer [ 980.472933][ T29] audit: type=1400 audit(1735547527.930:26310): avc: denied { create } for pid=14280 comm="syz.5.1918" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 981.150051][ T29] audit: type=1400 audit(1735547527.940:26311): avc: denied { create } for pid=14280 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 981.269981][ T29] audit: type=1400 audit(1735547527.950:26312): avc: denied { bind } for pid=14280 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 981.396915][ T29] audit: type=1400 audit(1735547527.960:26313): avc: denied { name_bind } for pid=14280 comm="syz.5.1918" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 981.481301][ T29] audit: type=1400 audit(1735547527.970:26314): avc: denied { node_bind } for pid=14280 comm="syz.5.1918" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 982.529553][ T25] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 983.451361][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1920'. [ 983.624504][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 983.635766][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 983.645716][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 983.743885][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.794671][T14294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 983.843494][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 983.873728][T14307] loop7: detected capacity change from 0 to 16384 [ 984.120427][T14311] loop7: detected capacity change from 16384 to 0 [ 985.400025][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 985.400049][ T29] audit: type=1400 audit(1735547533.040:26494): avc: denied { prog_load } for pid=14316 comm="syz.3.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 985.460015][ T29] audit: type=1400 audit(1735547533.040:26495): avc: denied { bpf } for pid=14316 comm="syz.3.1927" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 985.585655][ T29] audit: type=1400 audit(1735547533.060:26496): avc: denied { mounton } for pid=14316 comm="syz.3.1927" path="/474/file0" dev="tmpfs" ino=2611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 985.804661][ T29] audit: type=1400 audit(1735547533.060:26497): avc: denied { mount } for pid=14316 comm="syz.3.1927" name="/" dev="ramfs" ino=45142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 985.903354][ T29] audit: type=1400 audit(1735547533.240:26498): avc: denied { create } for pid=14312 comm="syz.4.1926" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 985.993705][ T29] audit: type=1400 audit(1735547533.240:26499): avc: denied { map } for pid=14312 comm="syz.4.1926" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 986.180486][ T29] audit: type=1400 audit(1735547533.240:26500): avc: denied { read write } for pid=14312 comm="syz.4.1926" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 986.331985][ T29] audit: type=1400 audit(1735547533.250:26501): avc: denied { map } for pid=14312 comm="syz.4.1926" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 986.608409][ T29] audit: type=1400 audit(1735547533.250:26502): avc: denied { read write } for pid=14312 comm="syz.4.1926" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 987.220075][ T29] audit: type=1400 audit(1735547533.280:26503): avc: denied { write } for pid=14312 comm="syz.4.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 987.926451][T14336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1928'. [ 990.267170][T14349] afs: Unknown parameter 'dóã^d' [ 990.563407][ T5868] usb 6-1: USB disconnect, device number 33 [ 990.910071][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 990.910089][ T29] audit: type=1400 audit(1735547538.970:26632): avc: denied { read write } for pid=14342 comm="syz.0.1931" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 991.020310][T14355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 991.026890][T14355] audit: audit_lost=2827 audit_rate_limit=0 audit_backlog_limit=64 [ 991.033617][T14354] audit: audit_backlog=65 > audit_backlog_limit=64 [ 991.034827][T14355] audit: backlog limit exceeded [ 991.051143][T14355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 991.058131][T14355] audit: audit_lost=2828 audit_rate_limit=0 audit_backlog_limit=64 [ 991.066103][T14355] audit: backlog limit exceeded [ 991.072331][T14355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 991.079952][T14355] audit: audit_lost=2829 audit_rate_limit=0 audit_backlog_limit=64 [ 994.428889][T14381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 994.449509][T14381] overlayfs: failed to set xattr on upper [ 994.455361][T14381] overlayfs: ...falling back to redirect_dir=nofollow. [ 994.462299][T14381] overlayfs: ...falling back to index=off. [ 994.468172][T14381] overlayfs: ...falling back to uuid=null. [ 994.476590][T14381] overlayfs: maximum fs stacking depth exceeded [ 994.696292][T14364] afs: Unknown parameter 'dóã^d' [ 995.866840][T14390] overlayfs: failed to resolve './file0': -2 [ 996.090028][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 996.090046][ T29] audit: type=1400 audit(1735547544.150:26925): avc: denied { mounton } for pid=14387 comm="syz.0.1941" path="/370/bus" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 996.132456][ T29] audit: type=1400 audit(1735547544.180:26926): avc: denied { execmem } for pid=14387 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 996.152182][ T29] audit: type=1400 audit(1735547544.200:26927): avc: denied { read write } for pid=14389 comm="syz.4.1943" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.175941][ T29] audit: type=1400 audit(1735547544.200:26928): avc: denied { read write open } for pid=14389 comm="syz.4.1943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.200833][ T29] audit: type=1400 audit(1735547544.200:26929): avc: denied { ioctl } for pid=14389 comm="syz.4.1943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.225962][ T29] audit: type=1400 audit(1735547544.200:26930): avc: denied { ioctl } for pid=14389 comm="syz.4.1943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.251091][ T29] audit: type=1400 audit(1735547544.230:26931): avc: denied { ioctl } for pid=14389 comm="syz.4.1943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.276232][ T29] audit: type=1400 audit(1735547544.230:26932): avc: denied { ioctl } for pid=14389 comm="syz.4.1943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.301687][ T29] audit: type=1400 audit(1735547544.360:26933): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 996.323864][ T29] audit: type=1400 audit(1735547544.360:26934): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.860009][ T8] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 997.308165][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.331819][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 997.344858][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 997.354082][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.387117][ T8] usb 5-1: config 0 descriptor?? [ 997.456851][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 997.990727][T14393] kexec: Could not allocate control_code_buffer [ 1000.262349][ T9] usb 5-1: USB disconnect, device number 57 [ 1001.099904][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 1001.099922][ T29] audit: type=1400 audit(1735547548.980:27148): avc: denied { create } for pid=14423 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1001.339977][ T29] audit: type=1400 audit(1735547548.990:27149): avc: denied { connect } for pid=14423 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1001.369953][ T29] audit: type=1400 audit(1735547549.000:27150): avc: denied { name_connect } for pid=14423 comm="syz.0.1950" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1001.420005][ T29] audit: type=1400 audit(1735547549.010:27151): avc: denied { setopt } for pid=14423 comm="syz.0.1950" faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1001.459950][ T29] audit: type=1400 audit(1735547549.220:27152): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1001.500013][ T29] audit: type=1400 audit(1735547549.220:27153): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.545577][ T29] audit: type=1400 audit(1735547549.220:27154): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1001.591294][ T29] audit: type=1400 audit(1735547549.220:27155): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1001.619615][ T29] audit: type=1400 audit(1735547549.220:27156): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1001.644741][ T29] audit: type=1400 audit(1735547549.620:27157): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.693128][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 1001.879518][T14433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63504 sclass=netlink_route_socket pid=14433 comm=syz.4.1953 [ 1004.036790][T14453] netlink: 'syz.5.1956': attribute type 1 has an invalid length. [ 1004.518369][T14451] overlayfs: failed to resolve './file0': -2 [ 1004.874531][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1005.084088][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.118497][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.159058][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1005.182642][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.217295][ T25] usb 5-1: config 0 descriptor?? [ 1005.736719][ T25] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 1005.780588][ T25] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1005.900045][ T25] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 1005.936980][ T25] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 1005.992850][ T25] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1006.116659][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 1006.116676][ T29] audit: type=1400 audit(1735547554.400:27659): avc: denied { search } for pid=14466 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.045515][T14447] kexec: Could not allocate control_code_buffer [ 1007.052162][ T29] audit: type=1400 audit(1735547554.440:27660): avc: denied { search } for pid=14466 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.121351][ T5901] usb 5-1: USB disconnect, device number 58 [ 1007.262458][ T29] audit: type=1400 audit(1735547554.440:27661): avc: denied { search } for pid=14466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.315373][ T5901] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 1007.390035][ T29] audit: type=1400 audit(1735547554.450:27662): avc: denied { search } for pid=14466 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.029964][ T29] audit: type=1400 audit(1735547554.570:27663): avc: denied { prog_load } for pid=14463 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.230665][ T29] audit: type=1400 audit(1735547554.580:27664): avc: denied { bpf } for pid=14463 comm="syz.3.1962" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.328943][ T29] audit: type=1400 audit(1735547554.590:27665): avc: denied { execmem } for pid=14463 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1008.430107][ T29] audit: type=1400 audit(1735547555.230:27666): avc: denied { create } for pid=14465 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1008.530535][ T29] audit: type=1400 audit(1735547555.240:27667): avc: denied { prog_load } for pid=14465 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.620051][ T29] audit: type=1400 audit(1735547555.250:27668): avc: denied { bpf } for pid=14465 comm="syz.5.1963" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1009.254220][ T5820] Bluetooth: unknown link type 95 [ 1009.259397][ T5820] Bluetooth: hci0: connection err: -111 [ 1011.131957][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 1011.131974][ T29] audit: type=1400 audit(1735547559.420:27834): avc: denied { read open } for pid=14495 comm="syz.5.1972" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1011.741945][ T29] audit: type=1400 audit(1735547559.480:27835): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.767227][ T29] audit: type=1400 audit(1735547559.480:27836): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.792950][ T29] audit: type=1400 audit(1735547559.590:27837): avc: denied { create } for pid=14495 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1011.813811][ T29] audit: type=1400 audit(1735547559.810:27838): avc: denied { write } for pid=14495 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1011.834574][ T29] audit: type=1400 audit(1735547559.910:27839): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.859350][ T29] audit: type=1400 audit(1735547559.910:27840): avc: denied { read write open } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.884723][ T29] audit: type=1400 audit(1735547559.920:27841): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.933704][ T29] audit: type=1400 audit(1735547560.020:27842): avc: denied { create } for pid=14513 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1011.953731][ T29] audit: type=1400 audit(1735547560.020:27843): avc: denied { connect } for pid=14513 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1013.344398][T14516] 9pnet_fd: p9_fd_create_tcp (14516): problem connecting socket to 127.0.0.1 [ 1013.718932][T14529] overlayfs: failed to resolve './file0': -2 [ 1013.754403][T14514] kexec: Could not allocate control_code_buffer [ 1015.098346][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'. [ 1015.232549][T14543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1015.239183][T14543] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1015.409769][T14543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1015.416048][T14543] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1015.595897][T14543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1015.602020][T14543] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1016.217416][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 1016.217435][ T29] audit: type=1400 audit(1735547564.330:28033): avc: denied { execmem } for pid=14547 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1016.272840][T14543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1016.278835][T14543] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1016.278889][ T29] audit: type=1400 audit(1735547564.420:28034): avc: denied { prog_load } for pid=14546 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1016.306137][ T29] audit: type=1400 audit(1735547564.420:28035): avc: denied { bpf } for pid=14546 comm="syz.3.1983" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1016.329651][ T29] audit: type=1400 audit(1735547564.420:28036): avc: denied { perfmon } for pid=14546 comm="syz.3.1983" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1016.351075][ T29] audit: type=1400 audit(1735547564.420:28037): avc: denied { perfmon } for pid=14546 comm="syz.3.1983" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1016.372372][ T29] audit: type=1400 audit(1735547564.420:28038): avc: denied { perfmon } for pid=14546 comm="syz.3.1983" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1016.393658][ T29] audit: type=1400 audit(1735547564.430:28039): avc: denied { read write } for pid=8876 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.418010][ T29] audit: type=1400 audit(1735547564.430:28040): avc: denied { read write open } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.443249][ T29] audit: type=1400 audit(1735547564.450:28041): avc: denied { ioctl } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1016.469138][ T29] audit: type=1400 audit(1735547564.460:28042): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1017.989072][T14564] hub 6-0:1.0: USB hub found [ 1018.707371][T14564] hub 6-0:1.0: 1 port detected [ 1019.117104][ T25] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1019.820043][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1019.838171][ T25] usb 6-1: device descriptor read/all, error -71 [ 1020.600144][ T5868] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1021.252634][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 1021.252652][ T29] audit: type=1400 audit(1735547569.480:28250): avc: denied { read write } for pid=14584 comm="syz.4.1993" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1021.315431][ T29] audit: type=1400 audit(1735547569.530:28251): avc: denied { create } for pid=14581 comm="syz.3.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1021.678263][ T5868] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1021.705119][ T29] audit: type=1400 audit(1735547569.540:28252): avc: denied { write } for pid=14581 comm="syz.3.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1021.726318][ T29] audit: type=1400 audit(1735547569.570:28253): avc: denied { ioctl } for pid=14579 comm="syz.1.1992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1021.727937][ T5868] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1021.751785][ T29] audit: type=1400 audit(1735547569.580:28254): avc: denied { search } for pid=14571 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.787242][ T29] audit: type=1400 audit(1735547569.580:28255): avc: denied { search } for pid=14571 comm="rm" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.809375][ T29] audit: type=1400 audit(1735547569.580:28256): avc: denied { search } for pid=14571 comm="rm" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.833341][ T29] audit: type=1400 audit(1735547569.600:28257): avc: denied { read write open } for pid=14584 comm="syz.4.1993" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1021.858917][ T29] audit: type=1400 audit(1735547569.640:28258): avc: denied { read } for pid=14584 comm="syz.4.1993" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1021.868283][ T5868] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1021.880553][ T29] audit: type=1400 audit(1735547569.640:28259): avc: denied { read open } for pid=14584 comm="syz.4.1993" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1021.962673][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.081792][T14580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.238994][ T5868] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1022.726045][T14600] atomic_op ffff8880495fd198 conn xmit_atomic 0000000000000000 [ 1022.747150][T14600] veth1_to_batadv: entered promiscuous mode [ 1022.753740][T14600] macsec1: entered promiscuous mode [ 1023.525620][ T8] usb 2-1: USB disconnect, device number 52 [ 1024.379795][T14603] afs: Unknown parameter 'dóã^d' [ 1024.614668][T14607] FAULT_INJECTION: forcing a failure. [ 1024.614668][T14607] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.656506][T14607] CPU: 1 UID: 0 PID: 14607 Comm: syz.4.1997 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1024.667369][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1024.677898][T14607] Call Trace: [ 1024.681189][T14607] [ 1024.684131][T14607] dump_stack_lvl+0x16c/0x1f0 [ 1024.688846][T14607] should_fail_ex+0x497/0x5b0 [ 1024.693561][T14607] ? fs_reclaim_acquire+0xae/0x150 [ 1024.698700][T14607] should_failslab+0xc2/0x120 [ 1024.703411][T14607] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1024.708817][T14607] ? vm_area_dup+0x21/0x2f0 [ 1024.713366][T14607] vm_area_dup+0x21/0x2f0 [ 1024.717736][T14607] __split_vma+0x181/0x1160 [ 1024.722291][T14607] ? vma_merge_existing_range+0x931/0x1fa0 [ 1024.728139][T14607] ? __pfx___split_vma+0x10/0x10 [ 1024.733126][T14607] vma_modify.constprop.0+0x2ed/0x3b0 [ 1024.738551][T14607] vma_modify_flags+0x209/0x2a0 [ 1024.743443][T14607] ? __pfx_vma_modify_flags+0x10/0x10 [ 1024.748857][T14607] ? mas_next_slot+0x12d3/0x21b0 [ 1024.753843][T14607] mlock_fixup+0x282/0xfc0 [ 1024.758317][T14607] apply_vma_lock_flags+0x262/0x390 [ 1024.763545][T14607] ? rcu_is_watching+0x12/0xc0 [ 1024.768351][T14607] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1024.774090][T14607] ? do_mlock+0x1b8/0x7d0 [ 1024.778470][T14607] ? lock_acquire+0x2f/0xb0 [ 1024.783019][T14607] ? do_mlock+0x1b8/0x7d0 [ 1024.787389][T14607] ? __pfx_down_write_killable+0x10/0x10 [ 1024.793084][T14607] ? __mutex_unlock_slowpath+0x164/0x690 [ 1024.798852][T14607] do_mlock+0x264/0x7d0 [ 1024.803050][T14607] ? __fget_files+0x206/0x3a0 [ 1024.807787][T14607] ? __pfx_do_mlock+0x10/0x10 [ 1024.812508][T14607] ? fput+0x67/0x440 [ 1024.816449][T14607] ? ksys_write+0x1ba/0x250 [ 1024.820989][T14607] ? __pfx_ksys_write+0x10/0x10 [ 1024.825881][T14607] __x64_sys_mlock+0x59/0x80 [ 1024.830533][T14607] do_syscall_64+0xcd/0x250 [ 1024.835078][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.841014][T14607] RIP: 0033:0x7fa20e585d29 [ 1024.845472][T14607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.865125][T14607] RSP: 002b:00007fa20f313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1024.873586][T14607] RAX: ffffffffffffffda RBX: 00007fa20e776080 RCX: 00007fa20e585d29 [ 1024.881589][T14607] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 1024.889592][T14607] RBP: 00007fa20f313090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.897595][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.905593][T14607] R13: 0000000000000000 R14: 00007fa20e776080 R15: 00007fffc268b778 [ 1024.913608][T14607] [ 1025.826611][T14634] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2001'. [ 1025.852403][T14635] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1025.950071][ T5866] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1026.051203][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2001'. [ 1026.148470][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.171954][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1026.207435][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1026.241622][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1026.279957][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1026.314551][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 1026.314569][ T29] audit: type=1400 audit(1735547574.600:28476): avc: denied { ioctl } for pid=14621 comm="syz.4.2003" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1026.348723][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.380181][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1026.400325][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1026.442459][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1026.457441][ T29] audit: type=1400 audit(1735547574.610:28477): avc: denied { ioctl } for pid=14621 comm="syz.4.2003" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1026.530131][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1026.590114][ T29] audit: type=1400 audit(1735547574.630:28478): avc: denied { ioctl } for pid=14621 comm="syz.4.2003" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1026.640039][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.647491][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1026.735153][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1026.747061][T14644] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1026.769930][ T29] audit: type=1400 audit(1735547574.640:28479): avc: denied { ioctl } for pid=14621 comm="syz.4.2003" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1026.851444][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1026.919959][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1026.970515][ T29] audit: type=1400 audit(1735547574.710:28480): avc: denied { sys_module } for pid=14620 comm="syz.5.2001" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1027.104020][ T29] audit: type=1400 audit(1735547574.710:28481): avc: denied { sys_module } for pid=14620 comm="syz.5.2001" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1027.125472][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 1027.150051][ T5866] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1027.159194][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.250630][ T29] audit: type=1400 audit(1735547574.710:28482): avc: denied { module_request } for pid=14620 comm="syz.5.2001" kmod="wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1027.357952][ T5866] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1027.402778][ T29] audit: type=1400 audit(1735547574.710:28483): avc: denied { module_request } for pid=14620 comm="syz.5.2001" kmod="wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1027.506822][ T29] audit: type=1400 audit(1735547574.720:28484): avc: denied { sys_module } for pid=14620 comm="syz.5.2001" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1027.614962][T14629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1027.700252][ T47] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1027.863885][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1027.900112][ T47] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1027.908425][ T47] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1027.921611][T14653] pimreg: entered allmulticast mode [ 1027.970078][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1027.979020][ T47] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1028.003013][T14629] pimreg: left allmulticast mode [ 1028.027051][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.079363][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1028.110051][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1028.163807][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1028.226353][ T47] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1028.237399][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.255685][ T47] usb 1-1: Product: syz [ 1028.264416][ T47] usb 1-1: Manufacturer: syz [ 1028.269114][ T47] usb 1-1: SerialNumber: syz [ 1028.285468][ T47] usb 1-1: config 0 descriptor?? [ 1028.324695][T14648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1028.357817][ T47] hub 1-1:0.0: bad descriptor, ignoring hub [ 1028.375840][ T47] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1028.386824][ T47] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 1028.469976][ T5866] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1028.650107][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 1028.677315][ T5866] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1028.871794][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2012'. [ 1029.209376][ T5866] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1029.218235][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1029.227268][ T5866] usb 6-1: config 1 has no interface number 0 [ 1029.247853][ T5866] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.259694][ T5866] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1029.274613][ T5866] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1029.285373][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.317385][ T25] usb 1-1: USB disconnect, device number 53 [ 1029.361723][ T5866] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1029.376645][ T9] usb 5-1: USB disconnect, device number 59 [ 1029.425650][T14661] ceph: No mds server is up or the cluster is laggy [ 1029.689718][ T5866] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1030.044999][T14676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2013'. [ 1030.765748][ T47] usb 6-1: USB disconnect, device number 36 [ 1030.773244][ T47] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1031.336505][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 1031.336520][ T29] audit: type=1400 audit(1735547579.620:28756): avc: denied { write } for pid=14687 comm="syz.3.2018" laddr=172.20.20.170 lport=52561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1031.489228][ T29] audit: type=1400 audit(1735547579.770:28757): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.608624][ T29] audit: type=1400 audit(1735547579.810:28758): avc: denied { read write open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.673490][ T29] audit: type=1400 audit(1735547579.810:28759): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.834150][ T29] audit: type=1400 audit(1735547580.120:28760): avc: denied { read write } for pid=8876 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.880293][ T29] audit: type=1400 audit(1735547580.160:28761): avc: denied { read write open } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.964965][ T29] audit: type=1400 audit(1735547580.160:28762): avc: denied { ioctl } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1032.050461][ T29] audit: type=1400 audit(1735547580.300:28763): avc: denied { create } for pid=14692 comm="syz.0.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1032.111067][ T29] audit: type=1400 audit(1735547580.350:28764): avc: denied { read write } for pid=14694 comm="syz.5.2021" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1032.137107][ T29] audit: type=1400 audit(1735547580.350:28765): avc: denied { read write open } for pid=14694 comm="syz.5.2021" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1033.069974][T14699] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 1033.283873][T14697] afs: Unknown parameter 'dóã^d' [ 1033.776148][ T5866] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1034.110019][T14701] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1034.145744][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.156930][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.167009][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1034.177435][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.222098][T14706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1034.239782][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.273011][T14701] usb 2-1: Using ep0 maxpacket: 8 [ 1034.288366][T14701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1034.350889][T14701] usb 2-1: config 2 has an invalid interface number: 96 but max is 0 [ 1034.359036][T14701] usb 2-1: config 2 has no interface number 0 [ 1034.365618][T14701] usb 2-1: config 2 interface 96 has no altsetting 0 [ 1034.421328][T14701] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 1034.433725][T14701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.479831][T14701] usb 2-1: Product: syz [ 1034.493499][T14701] usb 2-1: Manufacturer: syz [ 1034.511438][T14701] usb 2-1: SerialNumber: syz [ 1034.621839][T14706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.644734][T14706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.823692][T14701] flexcop_usb: set interface failed. [ 1034.829379][T14701] b2c2_flexcop_usb 2-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 1034.849681][T14701] usb 2-1: USB disconnect, device number 53 [ 1034.996799][ T5866] usb 1-1: USB disconnect, device number 54 [ 1035.564773][T14725] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1036.676256][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 1036.676295][ T29] audit: type=1400 audit(1735547584.450:28989): avc: denied { prog_load } for pid=14734 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1036.706484][ T29] audit: type=1400 audit(1735547584.460:28990): avc: denied { bpf } for pid=14734 comm="syz.5.2032" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.727651][ T29] audit: type=1400 audit(1735547584.470:28991): avc: denied { perfmon } for pid=14734 comm="syz.5.2032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.749071][ T29] audit: type=1400 audit(1735547584.470:28992): avc: denied { perfmon } for pid=14734 comm="syz.5.2032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.770261][ T29] audit: type=1400 audit(1735547584.480:28993): avc: denied { perfmon } for pid=14734 comm="syz.5.2032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.791461][ T29] audit: type=1400 audit(1735547584.490:28994): avc: denied { perfmon } for pid=14734 comm="syz.5.2032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.949160][ T29] audit: type=1400 audit(1735547584.500:28995): avc: denied { perfmon } for pid=14734 comm="syz.5.2032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.990023][ T29] audit: type=1400 audit(1735547584.500:28996): avc: denied { bpf } for pid=14734 comm="syz.5.2032" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1037.034955][ T29] audit: type=1400 audit(1735547584.510:28997): avc: denied { bpf } for pid=14734 comm="syz.5.2032" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1037.135550][ T29] audit: type=1400 audit(1735547584.520:28998): avc: denied { prog_run } for pid=14734 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1037.844491][T14747] vivid-001: disconnect [ 1037.960439][T14701] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1038.058918][T14755] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 1038.156185][T14701] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 1038.182741][T14701] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1038.207747][T14701] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1038.227120][T14701] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1038.247535][T14701] usb 2-1: Manufacturer: syz [ 1038.531810][T14701] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1038.554976][T14701] usb 2-1: USB disconnect, device number 54 [ 1040.394663][T14747] vivid-001: reconnect [ 1040.542014][T14769] kAFS: No cell specified [ 1040.657387][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 1041.705675][T14792] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 1041.762516][T14792] afs: Unknown parameter 'dóã^d' [ 1041.790173][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 1041.790229][ T29] audit: type=1400 audit(1735547589.990:29226): avc: denied { ioctl } for pid=14784 comm="syz.1.2048" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1041.821661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.021240][ T29] audit: type=1400 audit(1735547590.040:29227): avc: denied { mounton } for pid=14784 comm="syz.1.2048" path="/383/file0" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1042.044014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.180292][ T29] audit: type=1400 audit(1735547590.080:29228): avc: denied { map_create } for pid=14784 comm="syz.1.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1042.300003][ T29] audit: type=1400 audit(1735547590.280:29229): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.324242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.405282][T14797] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 1042.457835][ T29] audit: type=1400 audit(1735547590.280:29230): avc: denied { read write open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.484189][T14797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.565187][ T29] audit: type=1400 audit(1735547590.280:29231): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.597957][ T29] audit: type=1400 audit(1735547590.530:29232): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.622790][ T29] audit: type=1400 audit(1735547590.530:29233): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.648405][ T29] audit: type=1400 audit(1735547590.530:29234): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.750237][ T29] audit: type=1400 audit(1735547590.650:29235): avc: denied { create } for pid=14794 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1043.220340][ T8] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1043.392251][ T8] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1043.409966][ T8] usb 1-1: config 0 has no interface number 0 [ 1043.454151][ T8] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1043.481330][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.514597][ T8] usb 1-1: Product: syz [ 1043.523024][ T8] usb 1-1: Manufacturer: syz [ 1043.539226][ T8] usb 1-1: SerialNumber: syz [ 1043.567464][ T8] usb 1-1: config 0 descriptor?? [ 1043.621793][T14805] tipc: Enabled bearer , priority 0 [ 1043.746656][T14809] FAULT_INJECTION: forcing a failure. [ 1043.746656][T14809] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.759811][T14809] CPU: 1 UID: 0 PID: 14809 Comm: syz.1.2054 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1043.770605][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1043.780679][T14809] Call Trace: [ 1043.783966][T14809] [ 1043.786903][T14809] dump_stack_lvl+0x16c/0x1f0 [ 1043.791602][T14809] should_fail_ex+0x497/0x5b0 [ 1043.796313][T14809] should_failslab+0xc2/0x120 [ 1043.801015][T14809] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1043.807374][T14809] ? sidtab_sid2str_get+0x17a/0x680 [ 1043.812609][T14809] kmemdup_noprof+0x29/0x60 [ 1043.817133][T14809] sidtab_sid2str_get+0x17a/0x680 [ 1043.822189][T14809] sidtab_entry_to_string+0x33/0x110 [ 1043.827502][T14809] security_sid_to_context_core+0x35c/0x640 [ 1043.833423][T14809] avc_audit_post_callback+0x1ac/0x8c0 [ 1043.838907][T14809] ? audit_log_format+0xe9/0x130 [ 1043.843866][T14809] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1043.849869][T14809] ? skb_put+0x138/0x1b0 [ 1043.854126][T14809] ? audit_log_n_string+0x253/0x540 [ 1043.859347][T14809] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1043.865356][T14809] common_lsm_audit+0x33f/0x2250 [ 1043.870314][T14809] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1043.876302][T14809] ? __pfx_common_lsm_audit+0x10/0x10 [ 1043.881668][T14809] ? avc_update_node.isra.0+0x49d/0x800 [ 1043.887219][T14809] ? kmem_cache_free+0x152/0x4c0 [ 1043.892155][T14809] ? slow_avc_audit+0x17d/0x210 [ 1043.897007][T14809] slow_avc_audit+0x17d/0x210 [ 1043.901681][T14809] ? __pfx_slow_avc_audit+0x10/0x10 [ 1043.906878][T14809] ? avc_has_extended_perms+0x7c9/0xf70 [ 1043.912420][T14809] ? avc_denied+0x138/0x180 [ 1043.916921][T14809] ? avc_denied+0x141/0x180 [ 1043.921422][T14809] avc_has_extended_perms+0x9a1/0xf70 [ 1043.926801][T14809] ? find_held_lock+0x2d/0x110 [ 1043.931563][T14809] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1043.937452][T14809] ? tomoyo_path_number_perm+0x298/0x590 [ 1043.943079][T14809] ? __pfx_lock_release+0x10/0x10 [ 1043.948115][T14809] ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 1043.954448][T14809] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1043.961294][T14809] ? __pfx_lock_release+0x10/0x10 [ 1043.966322][T14809] ? selinux_file_ioctl+0x180/0x270 [ 1043.971510][T14809] selinux_file_ioctl+0x180/0x270 [ 1043.976534][T14809] security_file_ioctl+0xc6/0x240 [ 1043.981560][T14809] __x64_sys_ioctl+0xb7/0x200 [ 1043.986239][T14809] do_syscall_64+0xcd/0x250 [ 1043.990743][T14809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.996636][T14809] RIP: 0033:0x7fe0a6385d29 [ 1044.001053][T14809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.020659][T14809] RSP: 002b:00007fe0a7146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.029072][T14809] RAX: ffffffffffffffda RBX: 00007fe0a6575fa0 RCX: 00007fe0a6385d29 [ 1044.037036][T14809] RDX: 0000000020000000 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 1044.045001][T14809] RBP: 00007fe0a7146090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.052977][T14809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1044.060958][T14809] R13: 0000000000000000 R14: 00007fe0a6575fa0 R15: 00007ffdc12d3d68 [ 1044.068936][T14809] [ 1044.072017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.108481][ T8] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1044.146395][T14811] netlink: 'syz.3.2056': attribute type 5 has an invalid length. [ 1044.216025][ T8] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1044.267387][ T8] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1044.340216][ T8] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1044.424098][ T8] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1044.510013][ T5866] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1044.599762][ T8] usb 1-1: USB disconnect, device number 55 [ 1044.614881][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1044.627089][ T8] keyspan 1-1:0.133: device disconnected [ 1044.688983][ T9] tipc: Node number set to 817211887 [ 1044.701116][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 1044.951918][ T5866] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1044.971529][ T5866] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1044.994222][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 1045.003498][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.014618][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.028868][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1045.036501][ T5866] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1045.045994][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.063631][ T5866] usb 5-1: config 0 descriptor?? [ 1045.755435][ T5866] kye 0003:0458:0138.0011: unknown main item tag 0x0 [ 1045.762514][ T5866] kye 0003:0458:0138.0011: unknown main item tag 0x0 [ 1045.769248][ T5866] kye 0003:0458:0138.0011: unknown main item tag 0x0 [ 1045.776330][ T5866] kye 0003:0458:0138.0011: report_id 915 is invalid [ 1045.860121][T14827] overlayfs: workdir and upperdir must reside under the same mount [ 1045.869649][ T5866] kye 0003:0458:0138.0011: item 0 4 1 8 parsing failed [ 1045.879702][ T5866] kye 0003:0458:0138.0011: parse failed [ 1045.885572][ T5866] kye 0003:0458:0138.0011: probe with driver kye failed with error -22 [ 1046.000112][ T5866] usb 5-1: USB disconnect, device number 60 [ 1046.226271][T14831] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1046.992687][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 1046.992707][ T29] audit: type=1400 audit(1735547595.210:29507): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.120033][ T29] audit: type=1400 audit(1735547595.210:29508): avc: denied { read write open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.250059][ T29] audit: type=1400 audit(1735547595.210:29509): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.389976][ T29] audit: type=1400 audit(1735547595.360:29510): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.449410][ T29] audit: type=1400 audit(1735547595.360:29511): avc: denied { read write open } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.580102][ T29] audit: type=1400 audit(1735547595.360:29512): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.626384][ T29] audit: type=1400 audit(1735547595.440:29513): avc: denied { read write } for pid=14842 comm="syz.0.2064" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1047.659923][ T29] audit: type=1400 audit(1735547595.440:29514): avc: denied { read write open } for pid=14842 comm="syz.0.2064" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1047.665927][T14847] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 1047.726041][ T29] audit: type=1400 audit(1735547595.450:29515): avc: denied { ioctl } for pid=14842 comm="syz.0.2064" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1047.752288][ T29] audit: type=1400 audit(1735547595.450:29516): avc: denied { read } for pid=14842 comm="syz.0.2064" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1047.896497][T14847] afs: Unknown parameter 'dóã^d' [ 1048.730140][ T5900] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1048.855506][T14855] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1048.940035][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1049.016723][T14859] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 1049.029643][T14859] afs: Unknown parameter 'dóã^d' [ 1049.190140][ T5900] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1049.330165][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1049.446929][ T5900] usb usb2-port1: attempt power cycle [ 1049.820206][ T5900] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1049.845955][ T5900] usb 2-1: device descriptor read/8, error -71 [ 1049.852336][T14701] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1050.117348][ T5900] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1050.169723][T14701] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1050.423268][T14701] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1050.433329][T14701] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1050.442532][T14701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.667497][T14869] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1050.675045][ T5900] usb 2-1: device descriptor read/8, error -71 [ 1050.686112][T14701] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1050.790296][ T5900] usb usb2-port1: unable to enumerate USB device [ 1051.527147][T14701] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1051.693178][T14701] usb 6-1: device descriptor read/64, error -71 [ 1051.819977][ T5900] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1051.960097][T14701] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1051.990040][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1052.003358][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 1052.003374][ T29] audit: type=1400 audit(1735547600.290:29799): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.097883][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1052.100069][ T29] audit: type=1400 audit(1735547600.290:29800): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.131241][T14701] usb 6-1: device descriptor read/64, error -71 [ 1052.176621][ T5900] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1052.213211][ T29] audit: type=1400 audit(1735547600.330:29801): avc: denied { ioctl } for pid=14878 comm="syz.5.2074" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.231069][ T5900] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1052.265044][T14701] usb usb6-port1: attempt power cycle [ 1052.302249][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.309119][ T29] audit: type=1400 audit(1735547600.340:29802): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.349718][ T5900] usb 2-1: Product: syz [ 1052.367215][ T5900] usb 2-1: Manufacturer: syz [ 1052.389399][ T5900] usb 2-1: SerialNumber: syz [ 1052.427134][ T29] audit: type=1400 audit(1735547600.350:29803): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.529957][ T29] audit: type=1400 audit(1735547600.360:29804): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.620101][T14701] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1052.624424][ T29] audit: type=1400 audit(1735547600.370:29805): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.694328][T14701] usb 6-1: device descriptor read/8, error -71 [ 1052.729205][ T29] audit: type=1400 audit(1735547600.380:29806): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.832567][ T29] audit: type=1400 audit(1735547600.400:29807): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.883916][ T5900] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1052.906729][ T29] audit: type=1400 audit(1735547600.450:29808): avc: denied { ioctl } for pid=14886 comm="syz.1.2077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.977261][ T5900] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1052.994229][ T5900] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1053.004121][ T5900] usb 2-1: media controller created [ 1053.010107][T14701] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1053.032304][T14701] usb 6-1: device descriptor read/8, error -71 [ 1053.087911][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.166060][T14701] usb usb6-port1: unable to enumerate USB device [ 1053.208232][ T5900] zl10353_read_register: readreg error (reg=127, ret==0) [ 1053.312008][ T5900] usb 2-1: USB disconnect, device number 59 [ 1053.526434][T14701] usb 1-1: USB disconnect, device number 56 [ 1055.039725][T14904] netlink: zone id is out of range [ 1055.098388][T14904] netlink: zone id is out of range [ 1055.135166][T14904] netlink: zone id is out of range [ 1055.145978][T14904] netlink: zone id is out of range [ 1055.175731][T14904] netlink: zone id is out of range [ 1055.200064][T14904] netlink: zone id is out of range [ 1055.205331][T14904] netlink: zone id is out of range [ 1055.215474][T14904] netlink: zone id is out of range [ 1055.251114][T14904] netlink: zone id is out of range [ 1055.256276][T14904] netlink: zone id is out of range [ 1055.882303][T14924] FAULT_INJECTION: forcing a failure. [ 1055.882303][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.894997][T14924] CPU: 1 UID: 0 PID: 14924 Comm: syz.4.2088 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1055.905776][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1055.915851][T14924] Call Trace: [ 1055.919136][T14924] [ 1055.922063][T14924] dump_stack_lvl+0x16c/0x1f0 [ 1055.926745][T14924] should_fail_ex+0x497/0x5b0 [ 1055.931425][T14924] should_failslab+0xc2/0x120 [ 1055.936101][T14924] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1055.941466][T14924] ? __pfx_lock_release+0x10/0x10 [ 1055.946483][T14924] ? dst_alloc+0x99/0x1a0 [ 1055.950811][T14924] dst_alloc+0x99/0x1a0 [ 1055.954966][T14924] ? fib_validate_source+0x13d/0x730 [ 1055.960248][T14924] rt_dst_alloc+0x35/0x3a0 [ 1055.964668][T14924] ip_route_input_slow+0x165e/0x3910 [ 1055.969961][T14924] ? __pfx_ip_route_input_slow+0x10/0x10 [ 1055.975615][T14924] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1055.981247][T14924] ? ip_route_input_noref+0xb6/0x2e0 [ 1055.986531][T14924] ? lock_acquire+0x2f/0xb0 [ 1055.991023][T14924] ? ip_route_input_noref+0xb6/0x2e0 [ 1055.996309][T14924] ip_route_input_noref+0x121/0x2e0 [ 1056.001505][T14924] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1056.007228][T14924] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1056.012850][T14924] ? sock_wfree+0x11c/0x880 [ 1056.017354][T14924] ip_rcv_finish_core.constprop.0+0x46f/0x2290 [ 1056.023612][T14924] ip_rcv+0x1c0/0x5d0 [ 1056.027609][T14924] ? __pfx_ip_rcv+0x10/0x10 [ 1056.032115][T14924] __netif_receive_skb_one_core+0x199/0x1e0 [ 1056.038092][T14924] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1056.044506][T14924] ? rcu_is_watching+0x12/0xc0 [ 1056.049272][T14924] ? ktime_get_with_offset+0x273/0x3a0 [ 1056.054732][T14924] ? lockdep_hardirqs_on+0x7c/0x110 [ 1056.060446][T14924] ? netif_receive_skb+0x109/0x7b0 [ 1056.065555][T14924] __netif_receive_skb+0x1d/0x160 [ 1056.070575][T14924] netif_receive_skb+0x13f/0x7b0 [ 1056.075526][T14924] ? __pfx_netif_receive_skb+0x10/0x10 [ 1056.080980][T14924] ? tun_rx_batched.isra.0+0xa5/0x730 [ 1056.086385][T14924] tun_rx_batched.isra.0+0x3eb/0x730 [ 1056.091684][T14924] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1056.097494][T14924] ? tun_get_user+0x13e6/0x3e50 [ 1056.102343][T14924] ? lock_acquire+0x2f/0xb0 [ 1056.106839][T14924] ? tun_get_user+0x13e6/0x3e50 [ 1056.111687][T14924] tun_get_user+0x2a22/0x3e50 [ 1056.116365][T14924] ? __pfx_tun_get_user+0x10/0x10 [ 1056.121383][T14924] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1056.127183][T14924] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1056.132979][T14924] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 1056.139564][T14924] ? rcu_is_watching+0x12/0xc0 [ 1056.144326][T14924] ? __rcu_read_unlock+0x2b4/0x580 [ 1056.149430][T14924] tun_chr_write_iter+0xdc/0x210 [ 1056.154364][T14924] vfs_write+0x5ae/0x1150 [ 1056.158681][T14924] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1056.164223][T14924] ? __pfx_vfs_write+0x10/0x10 [ 1056.168976][T14924] ? __fget_files+0x40/0x3a0 [ 1056.173569][T14924] ksys_write+0x12b/0x250 [ 1056.177889][T14924] ? __pfx_ksys_write+0x10/0x10 [ 1056.182736][T14924] do_syscall_64+0xcd/0x250 [ 1056.187501][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.193390][T14924] RIP: 0033:0x7fa20e5847df [ 1056.197795][T14924] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1056.217395][T14924] RSP: 002b:00007fa20f334000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1056.225798][T14924] RAX: ffffffffffffffda RBX: 00007fa20e775fa0 RCX: 00007fa20e5847df [ 1056.233774][T14924] RDX: 0000000000000046 RSI: 0000000020000000 RDI: 00000000000000c8 [ 1056.241734][T14924] RBP: 00007fa20f334090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.249694][T14924] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 1056.257652][T14924] R13: 0000000000000001 R14: 00007fa20e775fa0 R15: 00007fffc268b778 [ 1056.265621][T14924] [ 1057.374327][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 1057.374346][ T29] audit: type=1400 audit(1735547605.100:30012): avc: denied { prog_load } for pid=14927 comm="syz.3.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1057.399910][ T29] audit: type=1400 audit(1735547605.110:30013): avc: denied { bpf } for pid=14927 comm="syz.3.2089" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.420827][ T29] audit: type=1400 audit(1735547605.120:30014): avc: denied { perfmon } for pid=14927 comm="syz.3.2089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.442125][ T29] audit: type=1400 audit(1735547605.120:30015): avc: denied { perfmon } for pid=14927 comm="syz.3.2089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.463406][ T29] audit: type=1400 audit(1735547605.130:30016): avc: denied { perfmon } for pid=14927 comm="syz.3.2089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.485271][ T29] audit: type=1400 audit(1735547605.140:30017): avc: denied { perfmon } for pid=14927 comm="syz.3.2089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.506557][ T29] audit: type=1400 audit(1735547605.150:30018): avc: denied { perfmon } for pid=14927 comm="syz.3.2089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.527842][ T29] audit: type=1400 audit(1735547605.160:30019): avc: denied { bpf } for pid=14927 comm="syz.3.2089" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.548879][ T29] audit: type=1400 audit(1735547605.170:30020): avc: denied { bpf } for pid=14927 comm="syz.3.2089" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.569634][ T29] audit: type=1400 audit(1735547605.170:30021): avc: denied { prog_run } for pid=14927 comm="syz.3.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1058.579151][T14948] fuse: Unknown parameter '00000000000000016384À' [ 1060.070194][ T5900] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1060.327338][T14970] binder: 14962:14970 unknown command 4294967126 [ 1060.342905][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 1060.350006][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 1060.367197][T14970] binder: 14962:14970 ioctl c0306201 200001c0 returned -22 [ 1060.405340][ T5900] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1060.436295][ T5900] usb 1-1: config 0 has no interface number 0 [ 1060.466273][ T5900] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1060.497089][ T5900] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1060.541402][ T5900] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1060.702855][ T5900] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1060.740018][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.748051][ T5900] usb 1-1: Product: syz [ 1060.800226][ T5900] usb 1-1: Manufacturer: syz [ 1060.814537][ T5900] usb 1-1: SerialNumber: syz [ 1060.888792][ T5900] usb 1-1: config 0 descriptor?? [ 1060.896807][T14974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.912462][T14964] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.946668][T14964] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.260192][T14958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.301575][T14958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.550268][T14701] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1062.504763][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 1062.504806][ T29] audit: type=1400 audit(1735547610.380:30239): avc: denied { map_create } for pid=14991 comm="syz.3.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1062.556047][ T29] audit: type=1400 audit(1735547610.840:30240): avc: denied { ioctl } for pid=14983 comm="syz.5.2102" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.598269][ T29] audit: type=1400 audit(1735547610.880:30241): avc: denied { ioctl } for pid=14983 comm="syz.5.2102" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.624314][T14701] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1062.699695][T14701] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1062.709704][T14701] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.719495][ T29] audit: type=1400 audit(1735547610.880:30242): avc: denied { ioctl } for pid=14983 comm="syz.5.2102" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.745013][T14701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.759006][ T29] audit: type=1400 audit(1735547610.910:30243): avc: denied { ioctl } for pid=14983 comm="syz.5.2102" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.784670][ T29] audit: type=1400 audit(1735547610.940:30244): avc: denied { ioctl } for pid=14955 comm="syz.0.2099" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.810222][ T29] audit: type=1400 audit(1735547610.940:30245): avc: denied { ioctl } for pid=14955 comm="syz.0.2099" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.835652][ T29] audit: type=1400 audit(1735547610.940:30246): avc: denied { ioctl } for pid=14955 comm="syz.0.2099" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.861602][ T29] audit: type=1400 audit(1735547611.000:30247): avc: denied { create } for pid=14993 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1062.882705][ T29] audit: type=1400 audit(1735547611.000:30248): avc: denied { write } for pid=14993 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1062.905052][ T5900] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1063.195809][T14984] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1063.315512][T14701] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1063.478049][T15002] overlayfs: failed to clone lowerpath [ 1063.533062][T15002] overlayfs: failed to clone lowerpath [ 1064.361361][ T5900] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1064.428153][ T5900] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1064.598122][ T5900] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1065.266596][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.273889][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.281276][T15015] bridge0: entered allmulticast mode [ 1065.395207][ T5900] usb 1-1: USB disconnect, device number 57 [ 1066.031192][ T5900] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1066.392011][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1066.555588][ T5900] usb 1-1: config 9 has an invalid interface number: 192 but max is 0 [ 1066.563970][ T5900] usb 1-1: config 9 has no interface number 0 [ 1066.570185][ T5900] usb 1-1: config 9 interface 192 has no altsetting 0 [ 1066.610324][ T5900] usb 1-1: string descriptor 0 read error: -22 [ 1066.616591][ T5900] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=16.a7 [ 1066.625815][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.509946][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 1067.509964][ T29] audit: type=1400 audit(1735547615.720:30527): avc: denied { write } for pid=15035 comm="syz.3.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1067.580064][ T29] audit: type=1400 audit(1735547615.710:30525): avc: denied { perfmon } for pid=15035 comm="syz.3.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1067.601453][ T29] audit: type=1400 audit(1735547615.720:30528): avc: denied { map_read map_write } for pid=15035 comm="syz.3.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1067.640166][ T29] audit: type=1400 audit(1735547615.720:30529): avc: denied { bpf } for pid=15035 comm="syz.3.2117" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1067.715502][ T29] audit: type=1400 audit(1735547615.720:30530): avc: denied { perfmon } for pid=15035 comm="syz.3.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1067.748880][ T5900] mos7840 1-1:9.192: required endpoints missing [ 1067.757861][ T5900] usb 1-1: USB disconnect, device number 58 [ 1067.814401][T15044] usb 6-1: USB disconnect, device number 41 [ 1067.858021][T15044] hub 6-0:1.0: USB hub found [ 1067.864675][T15044] hub 6-0:1.0: 1 port detected [ 1067.914130][ T29] audit: type=1400 audit(1735547615.730:30531): avc: denied { perfmon } for pid=15035 comm="syz.3.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1067.961099][ T29] audit: type=1400 audit(1735547615.730:30532): avc: denied { read } for pid=15020 comm="syz.0.2113" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1068.000078][T14701] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1068.018970][ T29] audit: type=1400 audit(1735547615.730:30533): avc: denied { perfmon } for pid=15035 comm="syz.3.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1068.041655][ T29] audit: type=1400 audit(1735547615.730:30534): avc: denied { read open } for pid=15020 comm="syz.0.2113" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1068.069026][ T29] audit: type=1400 audit(1735547615.730:30535): avc: denied { perfmon } for pid=15035 comm="syz.3.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1070.913868][T15067] tipc: Enabling of bearer rejected, failed to enable media [ 1072.037770][T15072] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2127'. [ 1072.937010][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 1072.943903][ T29] audit: type=1400 audit(1735547620.630:30756): avc: denied { read } for pid=15075 comm="syz.0.2129" dev="nsfs" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1073.109637][ T29] audit: type=1400 audit(1735547620.640:30757): avc: denied { read open } for pid=15075 comm="syz.0.2129" path="net:[4026533221]" dev="nsfs" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1073.349385][ T29] audit: type=1400 audit(1735547620.640:30758): avc: denied { create } for pid=15075 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1073.383492][ T29] audit: type=1400 audit(1735547620.790:30759): avc: denied { create } for pid=15079 comm="syz.3.2130" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.404884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.411303][ T29] audit: type=1400 audit(1735547620.810:30760): avc: denied { map } for pid=15079 comm="syz.3.2130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.435827][ T29] audit: type=1400 audit(1735547620.830:30761): avc: denied { read write } for pid=15079 comm="syz.3.2130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.460734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.466923][ T29] audit: type=1400 audit(1735547620.850:30762): avc: denied { map } for pid=15079 comm="syz.3.2130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.491258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.497426][ T29] audit: type=1400 audit(1735547620.860:30763): avc: denied { read write } for pid=15079 comm="syz.3.2130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.522369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.528480][ T29] audit: type=1400 audit(1735547621.230:30764): avc: denied { create } for pid=15079 comm="syz.3.2130" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1073.550050][ T29] audit: type=1400 audit(1735547621.260:30765): avc: denied { create } for pid=15079 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1077.760077][T14701] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1077.930299][T14701] usb 2-1: Using ep0 maxpacket: 8 [ 1077.944615][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 1077.944632][ T29] audit: type=1400 audit(1735547626.232:31178): avc: denied { ioctl } for pid=15116 comm="syz.1.2135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1077.976021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.039639][T14701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1078.090084][T14701] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1078.146393][ T29] audit: type=1400 audit(1735547626.242:31179): avc: denied { search } for pid=15125 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.208272][T14701] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1078.229926][T14701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.237993][T14701] usb 2-1: Product: syz [ 1078.278361][T14701] usb 2-1: Manufacturer: syz [ 1078.298625][ T29] audit: type=1400 audit(1735547626.242:31180): avc: denied { search } for pid=15125 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.321595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.340264][T14701] usb 2-1: SerialNumber: syz [ 1078.400021][ T29] audit: type=1400 audit(1735547626.242:31181): avc: denied { search } for pid=15125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.423349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.468905][ T29] audit: type=1400 audit(1735547626.242:31182): avc: denied { search } for pid=15125 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.492371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.680087][ T29] audit: type=1400 audit(1735547626.282:31183): avc: denied { ioctl } for pid=15116 comm="syz.1.2135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1078.705188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.880155][ T29] audit: type=1400 audit(1735547626.302:31184): avc: denied { ioctl } for pid=15116 comm="syz.1.2135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1078.905229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1079.010087][ T29] audit: type=1400 audit(1735547626.312:31185): avc: denied { ioctl } for pid=15116 comm="syz.1.2135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1079.038991][ T29] audit: type=1400 audit(1735547626.312:31186): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.063394][ T29] audit: type=1400 audit(1735547626.312:31187): avc: denied { ioctl } for pid=15116 comm="syz.1.2135" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1079.204829][T14701] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1079.579557][T14701] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1079.590144][T14701] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1079.599790][T14701] usb 2-1: media controller created [ 1079.615772][T14701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1080.200376][T14701] zl10353_read_register: readreg error (reg=127, ret==0) [ 1080.258638][T14701] usb 2-1: USB disconnect, device number 60 [ 1080.394536][T15155] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1080.394536][T15155] program syz.4.2144 not setting count and/or reply_len properly [ 1082.128780][T15175] afs: Unknown parameter 'dóã^d' [ 1082.329629][T15163] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1082.401414][T15167] delete_channel: no stack [ 1083.030381][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 1083.030401][ T29] audit: type=1400 audit(1735547631.252:31478): avc: denied { search } for pid=15182 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.057757][ T29] audit: type=1400 audit(1735547631.262:31479): avc: denied { search } for pid=15182 comm="rm" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.079957][ T29] audit: type=1400 audit(1735547631.262:31480): avc: denied { search } for pid=15182 comm="rm" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.102296][ T29] audit: type=1400 audit(1735547631.262:31481): avc: denied { getattr } for pid=15182 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=7995 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1083.127837][ T29] audit: type=1400 audit(1735547631.262:31482): avc: denied { search } for pid=15182 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.149100][ T29] audit: type=1400 audit(1735547631.262:31483): avc: denied { search } for pid=15182 comm="rm" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.171508][ T29] audit: type=1400 audit(1735547631.262:31484): avc: denied { search } for pid=15182 comm="rm" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.193847][ T29] audit: type=1400 audit(1735547631.262:31485): avc: denied { write search } for pid=15182 comm="rm" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.217553][ T29] audit: type=1400 audit(1735547631.272:31486): avc: denied { create } for pid=15181 comm="syz.1.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1083.239709][ T29] audit: type=1400 audit(1735547631.272:31487): avc: denied { remove_name search } for pid=15182 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=7995 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.731635][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 1088.079337][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 1088.079356][ T29] audit: type=1400 audit(1735547636.362:31864): avc: denied { search } for pid=15221 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.119921][ T29] audit: type=1400 audit(1735547636.362:31865): avc: denied { read } for pid=15221 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1088.181673][ T29] audit: type=1400 audit(1735547636.362:31866): avc: denied { read open } for pid=15221 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1088.300433][ T29] audit: type=1400 audit(1735547636.362:31867): avc: denied { getattr } for pid=15221 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1088.409979][ T29] audit: type=1400 audit(1735547636.692:31868): avc: denied { read write } for pid=8876 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.514714][ T29] audit: type=1400 audit(1735547636.692:31869): avc: denied { read write open } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.636330][ T29] audit: type=1400 audit(1735547636.692:31870): avc: denied { ioctl } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.820210][ T29] audit: type=1400 audit(1735547636.702:31871): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.963888][ T29] audit: type=1400 audit(1735547636.712:31872): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1089.086191][ T29] audit: type=1400 audit(1735547636.712:31873): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1090.916936][T15257] afs: Unknown parameter 'dóã^d' [ 1091.400741][T15262] net_ratelimit: 10 callbacks suppressed [ 1091.400761][T15262] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1091.418078][T15262] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1091.428200][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1091.437388][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1091.802844][T15262] FAULT_INJECTION: forcing a failure. [ 1091.802844][T15262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.886129][T15262] CPU: 1 UID: 0 PID: 15262 Comm: syz.0.2167 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1091.896912][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1091.906945][T15262] Call Trace: [ 1091.910204][T15262] [ 1091.913116][T15262] dump_stack_lvl+0x16c/0x1f0 [ 1091.917789][T15262] should_fail_ex+0x497/0x5b0 [ 1091.922463][T15262] _copy_from_user+0x2e/0xd0 [ 1091.927038][T15262] copy_msghdr_from_user+0x99/0x160 [ 1091.932219][T15262] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1091.938011][T15262] ___sys_sendmsg+0xff/0x1e0 [ 1091.942579][T15262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.947761][T15262] ? __pfx_lock_release+0x10/0x10 [ 1091.952765][T15262] ? trace_lock_acquire+0x14e/0x1f0 [ 1091.957949][T15262] ? __fget_files+0x206/0x3a0 [ 1091.962610][T15262] __sys_sendmsg+0x16e/0x220 [ 1091.967176][T15262] ? __pfx___sys_sendmsg+0x10/0x10 [ 1091.972272][T15262] do_syscall_64+0xcd/0x250 [ 1091.976755][T15262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.982629][T15262] RIP: 0033:0x7f572e985d29 [ 1091.987024][T15262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.006608][T15262] RSP: 002b:00007f572f776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.014997][T15262] RAX: ffffffffffffffda RBX: 00007f572eb76080 RCX: 00007f572e985d29 [ 1092.022945][T15262] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 1092.030894][T15262] RBP: 00007f572f776090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.038839][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.046796][T15262] R13: 0000000000000000 R14: 00007f572eb76080 R15: 00007ffc171d5a88 [ 1092.054772][T15262] [ 1092.057861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.689455][T15264] afs: Unknown parameter 'dóã^d' [ 1093.117535][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 1093.117554][ T29] audit: type=1400 audit(1735547641.372:32066): avc: denied { read write open } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1093.148961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.229940][ T29] audit: type=1400 audit(1735547641.402:32067): avc: denied { ioctl } for pid=8876 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1093.256265][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1093.277657][ T29] audit: type=1400 audit(1735547641.412:32068): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.990070][ T29] audit: type=1400 audit(1735547641.412:32069): avc: denied { read write open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1096.015197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.107199][ T29] audit: type=1400 audit(1735547641.412:32070): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1096.132888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.169707][ T29] audit: type=1400 audit(1735547641.482:32071): avc: denied { map_create } for pid=15273 comm="syz.3.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1096.209648][ T29] audit: type=1400 audit(1735547641.482:32072): avc: denied { ioctl } for pid=15267 comm="syz.4.2171" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1096.234695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.300199][ T29] audit: type=1400 audit(1735547641.502:32073): avc: denied { prog_load } for pid=15273 comm="syz.3.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1096.362595][ T29] audit: type=1400 audit(1735547641.502:32074): avc: denied { map_create } for pid=15273 comm="syz.3.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1096.381887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.442921][ T29] audit: type=1400 audit(1735547641.502:32075): avc: denied { bpf } for pid=15273 comm="syz.3.2173" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1096.463601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.089899][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1201.096913][ C1] rcu: 0-...!: (1 GPs behind) idle=3224/1/0x4000000000000000 softirq=97466/97474 fqs=830 [ 1201.108469][ C1] rcu: (detected by 1, t=10502 jiffies, g=72865, q=805 ncpus=2) [ 1201.116213][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1201.116245][ C0] NMI backtrace for cpu 0 [ 1201.116259][ C0] CPU: 0 UID: 0 PID: 15273 Comm: syz.3.2173 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1201.116282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1201.116293][ C0] RIP: 0010:timerqueue_add+0x33/0x330 [ 1201.116335][ C0] Code: 55 41 54 55 48 89 f5 53 48 83 ec 08 48 89 3c 24 e8 02 0b 74 f6 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 92 02 00 00 48 8b 5d 00 48 89 ee 48 89 df e8 88 0c 74 f6 48 [ 1201.116354][ C0] RSP: 0018:ffffc90000007dc0 EFLAGS: 00000046 [ 1201.116369][ C0] RAX: dffffc0000000000 RBX: ffff8880b862cb00 RCX: 0000000000000001 [ 1201.116383][ C0] RDX: 1ffff1100fa1ea68 RSI: ffffffff8b260b1e RDI: ffff8880b862cb50 [ 1201.116397][ C0] RBP: ffff88807d0f5340 R08: 0000000000000005 R09: 000000000000001f [ 1201.116409][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b862ca00 [ 1201.116422][ C0] R13: 0000000000000002 R14: ffff8880b862ca00 R15: ffffffff894158e0 [ 1201.116436][ C0] FS: 000055558beff500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1201.116455][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.116469][ C0] CR2: 00007fc6d73b4d58 CR3: 000000002ac4a000 CR4: 00000000003526f0 [ 1201.116482][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.116494][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1201.116507][ C0] Call Trace: [ 1201.116514][ C0] [ 1201.116523][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1201.116545][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1201.116565][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1201.116586][ C0] ? timerqueue_add+0x33/0x330 [ 1201.116614][ C0] ? default_do_nmi+0x6a/0x160 [ 1201.116633][ C0] ? exc_nmi+0x170/0x1e0 [ 1201.116651][ C0] ? end_repeat_nmi+0xf/0x53 [ 1201.116678][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1201.116701][ C0] ? timerqueue_add+0x1e/0x330 [ 1201.116728][ C0] ? timerqueue_add+0x33/0x330 [ 1201.116756][ C0] ? timerqueue_add+0x33/0x330 [ 1201.116785][ C0] ? timerqueue_add+0x33/0x330 [ 1201.116813][ C0] [ 1201.116819][ C0] [ 1201.116826][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1201.116845][ C0] enqueue_hrtimer+0x1c9/0x3c0 [ 1201.116872][ C0] __hrtimer_run_queues+0x903/0xae0 [ 1201.116901][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1201.116926][ C0] ? read_tsc+0x9/0x20 [ 1201.116954][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1201.116985][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1201.117009][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1201.117033][ C0] [ 1201.117039][ C0] [ 1201.117046][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.117073][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1201.117098][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 71 4a f6 48 89 df e8 ae f0 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 d5 3b f6 65 8b 05 f6 90 d7 74 85 c0 74 16 5b [ 1201.117115][ C0] RSP: 0018:ffffc9000cf1fbb8 EFLAGS: 00000246 [ 1201.117130][ C0] RAX: 0000000000000006 RBX: ffffffff8eea7b58 RCX: 1ffffffff20bde71 [ 1201.117143][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ede0 [ 1201.117156][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000001 [ 1201.117168][ C0] R10: ffffffff905f36d7 R11: 0000000000000000 R12: 0000000000000000 [ 1201.117180][ C0] R13: 0000000000000202 R14: 0000000000000000 R15: ffff8880287f0000 [ 1201.117199][ C0] add_device_randomness+0xb8/0xf0 [ 1201.117222][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 1201.117244][ C0] ? _copy_from_user+0x59/0xd0 [ 1201.117274][ C0] kernel_clone+0x109/0x960 [ 1201.117300][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1201.117333][ C0] ? find_held_lock+0x2d/0x110 [ 1201.117363][ C0] __do_sys_clone3+0x1f9/0x270 [ 1201.117389][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 1201.117427][ C0] do_syscall_64+0xcd/0x250 [ 1201.117453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.117480][ C0] RIP: 0033:0x7fc6d95ba589 [ 1201.117496][ C0] Code: 1b 08 00 48 8d 3d fc 1b 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 1201.117513][ C0] RSP: 002b:00007ffe7533f3c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1201.117531][ C0] RAX: ffffffffffffffda RBX: 00007fc6d953c9a0 RCX: 00007fc6d95ba589 [ 1201.117545][ C0] RDX: 00007fc6d953c9a0 RSI: 0000000000000058 RDI: 00007ffe7533f410 [ 1201.117557][ C0] RBP: 00007fc6d73b46c0 R08: 00007fc6d73b46c0 R09: 00007ffe7533f4f7 [ 1201.117570][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 1201.117583][ C0] R13: 000000000000006e R14: 00007ffe7533f410 R15: 00007ffe7533f4f8 [ 1201.117601][ C0] [ 1201.118243][ C1] rcu: rcu_preempt kthread starved for 6794 jiffies! g72865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1201.589171][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1201.599165][ C1] rcu: RCU grace-period kthread stack dump: [ 1201.605049][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1201.616829][ C1] Call Trace: [ 1201.620115][ C1] [ 1201.623048][ C1] __schedule+0xe58/0x5ad0 [ 1201.627478][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1201.632704][ C1] ? __pfx___schedule+0x10/0x10 [ 1201.637565][ C1] ? schedule+0x298/0x350 [ 1201.641901][ C1] ? __pfx_lock_release+0x10/0x10 [ 1201.646936][ C1] ? lock_acquire+0x2f/0xb0 [ 1201.651450][ C1] ? schedule+0x1fd/0x350 [ 1201.655798][ C1] schedule+0xe7/0x350 [ 1201.659875][ C1] schedule_timeout+0x124/0x280 [ 1201.664730][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1201.670118][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1201.675426][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1201.681245][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1201.686726][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1201.691509][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1201.696802][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1201.701490][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1201.706705][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1201.712525][ C1] rcu_gp_kthread+0x271/0x380 [ 1201.717300][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1201.722516][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.727726][ C1] ? __kthread_parkme+0x148/0x220 [ 1201.732937][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1201.738146][ C1] kthread+0x2c1/0x3a0 [ 1201.742227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1201.747434][ C1] ? __pfx_kthread+0x10/0x10 [ 1201.752036][ C1] ret_from_fork+0x45/0x80 [ 1201.756462][ C1] ? __pfx_kthread+0x10/0x10 [ 1201.761074][ C1] ret_from_fork_asm+0x1a/0x30 [ 1201.765865][ C1] [ 1201.768884][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1201.775202][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1201.785529][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1201.795582][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1201.800883][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 a1 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1201.820498][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1201.826570][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c759 [ 1201.834550][ C1] RDX: 0000000000000001 RSI: ffff888020add800 RDI: ffff888020add864 [ 1201.842523][ C1] RBP: ffff888020add864 R08: 0000000000000001 R09: ffffed10170e6fed [ 1201.850498][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff88801d737800 [ 1201.858470][ C1] R13: ffffffff8ee16a20 R14: 0000000000000001 R15: 0000000000000000 [ 1201.866452][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1201.875391][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.881977][ C1] CR2: 000055558b5065c8 CR3: 000000002ae50000 CR4: 00000000003526f0 [ 1201.889949][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.897921][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1201.905891][ C1] Call Trace: [ 1201.909169][ C1] [ 1201.912016][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1201.918360][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1201.923575][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1201.929060][ C1] ? timekeeping_advance+0x72e/0xa90 [ 1201.934350][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1201.939999][ C1] ? __asan_memcpy+0x3c/0x60 [ 1201.944604][ C1] ? rcu_is_watching+0x12/0xc0 [ 1201.949387][ C1] ? update_process_times+0x178/0x2d0 [ 1201.954772][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1201.960502][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1201.965977][ C1] ? update_wall_time+0x1c/0x40 [ 1201.970836][ C1] ? tick_nohz_handler+0x376/0x530 [ 1201.975973][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1201.981445][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1201.986842][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1201.992574][ C1] ? read_tsc+0x9/0x20 [ 1201.996661][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 1202.001798][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1202.007965][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1202.013778][ C1] [ 1202.016710][ C1] [ 1202.019728][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1202.025911][ C1] ? ct_kernel_exit+0x139/0x190 [ 1202.030802][ C1] ? acpi_safe_halt+0x1a/0x20 [ 1202.035498][ C1] acpi_idle_enter+0xc5/0x160 [ 1202.040191][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 1202.045240][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1202.051058][ C1] cpuidle_enter+0x4e/0xa0 [ 1202.055531][ C1] do_idle+0x310/0x3f0 [ 1202.059637][ C1] ? __pfx_do_idle+0x10/0x10 [ 1202.064254][ C1] cpu_startup_entry+0x4f/0x60 [ 1202.069027][ C1] start_secondary+0x222/0x2b0 [ 1202.073793][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1202.079086][ C1] common_startup_64+0x13e/0x148 [ 1202.084045][ C1]