last executing test programs: 2m48.792542012s ago: executing program 0 (id=612): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8200400", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r4, &(0x7f000000c380)={0x2020}, 0xffffffffffffffcd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5, 0x0, 0x3}, 0x18) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202) syz_emit_ethernet(0x4a, &(0x7f0000000c00)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x10000000}) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 2m48.653015588s ago: executing program 0 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf0}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x200, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m48.461151014s ago: executing program 0 (id=617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0xd, 0x0, 0x5}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x1, 0x40, @loopback, @mcast2, 0x78f1, 0x20, 0x6, 0x3}}) openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x105000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000400)=""/165, 0x41000, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0x7f5, @void, @value}, 0x94) ioctl$TCSETS(r8, 0x89f1, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x2, 0x13, '\x00\x00\x00l\x00'}) 2m46.905857766s ago: executing program 0 (id=622): request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='{]\x00', 0x0) setitimer(0x2, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x62200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) mkdir(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) sched_setaffinity(r2, 0x8, &(0x7f0000000040)) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x61f}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) 2m40.887366139s ago: executing program 0 (id=636): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000400)={@host, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xb4}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000009c0)={0x9, 0x7, 0x9, 0x4, 0x2, 0xc1e7}) 2m40.163703625s ago: executing program 0 (id=640): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x412cfb3ab88921e3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044005}, 0x4004010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = fcntl$dupfd(r6, 0x406, r5) sendto$packet(r7, 0x0, 0x0, 0x20008801, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r8 = eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x1, 0x7, 0x2, {0x2, @pix_mp={0x53b9, 0x7fffffff, 0x34325241, 0x0, 0x3, [{0xc3, 0x40}, {0x68f, 0x2000004}, {0x7, 0x6}, {0x7d, 0xea}, {0x9, 0x8}, {0x1, 0x4}, {0x2, 0x1bc00000}, {0x10001, 0x3}], 0x10, 0x1, 0x2, 0x3, 0x4}}}) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000000)={0x3, 0x0, [0x8bec, 0x6, 0x2, 0x6, 0x0, 0x6, 0x4, 0x6]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) close_range(r8, 0xffffffffffffffff, 0x0) 2m25.035106403s ago: executing program 32 (id=640): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x412cfb3ab88921e3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044005}, 0x4004010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = fcntl$dupfd(r6, 0x406, r5) sendto$packet(r7, 0x0, 0x0, 0x20008801, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r8 = eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x1, 0x7, 0x2, {0x2, @pix_mp={0x53b9, 0x7fffffff, 0x34325241, 0x0, 0x3, [{0xc3, 0x40}, {0x68f, 0x2000004}, {0x7, 0x6}, {0x7d, 0xea}, {0x9, 0x8}, {0x1, 0x4}, {0x2, 0x1bc00000}, {0x10001, 0x3}], 0x10, 0x1, 0x2, 0x3, 0x4}}}) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000000)={0x3, 0x0, [0x8bec, 0x6, 0x2, 0x6, 0x0, 0x6, 0x4, 0x6]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) close_range(r8, 0xffffffffffffffff, 0x0) 1m12.619283593s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00006b5bfbd1650000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x72, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xc) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xa4) 1m12.379509859s ago: executing program 2 (id=900): setitimer(0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}}}, 0xa) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000005440)=ANY=[@ANYBLOB="49e9785073935c74634dcf709cd2ce362a98b202a9cd001278badb428b7a7554415b80cd67affe726055e917e8af29984651073a40b355bde950fad05b490d", @ANYRESHEX=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000200030005ac0f003b07d9865fb3d4dc3b87a5094d4c72c90d5dc64058220270e234689f021afb64d184be139571d70149319755b6e7a0feb66297add5f9332cbaffeca3d4cfcc7120b59803087fa0cee68efcec40b8f5738f52443cbb5a6220d06aa4c3af2fc4467c0defda677a25efe6195aca04c3f337aaeb9330ff2442b31532af584d57cdd8"], 0x58}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x1, 0x2, {0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9f}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="5980ceeca8aabc6b3048966eab58da7588ca6de73902b09ed65dda984fef128d84ed0623aab8be86b02c830f26602b42f476a1cd8da21d7680549ba3ff108e1f1dfb9fd215f65b54009e5ffd4728653743efcce3a7e09c2cf72e4fe890ad46a919728f9b3b48e67e56655e556190c83c1b3f21337d6f0c70252d370277b39779fddc02f03a7d56e5e27addf107a122723b1511afcf72a8ff6c5488768e328a89fe3c0130c81c6d2cf616ccdd454b42a783d96237efc28657af03d663f536af7201c3c5d925e563e39ee39fcf91f1c4aed2987689dc03dd04670d8e788247fbe25471ae0d83c6395e592645cc9823ee03239acb1e7b22905eb825357200d9803aeff72d29ef260a50d6900750f8daedeccf4b268be315035a144d21c00fda8e4e2cb68062e8ab571af4b9d3996f82fc0e2925f151633052c82c3487106267e287bd050e4ef0fec29cab2b86233d5381b33f7f3f0d58124eb89b827fae4efcf92a4d18135ad6d5e2ca7527b710fe5759e00b1bf5e922d6a5e93d5da2823785d4169a8b1f3a6683f4febcabee75dcfacf9bc63acde08ca67addf6a546b260fc45ab7669319632facf8fdf11e62cf997dcd16932ef7cc9fa0adcd31a325c82509fb60a511f26f8adc20c1a043569c772a423fbe57c3fccbee433cf46c73bc158f05095c254ccb9552dc235c3cd0cb89089e620623d107db78fe5b0b930789d9ee7eac896c6fd86eed220e6b60225ac69c5bd49200c4882b9ed459df81208a8ed4ac7606588d4f0887d8e46f4d08d5f54664cf7ab643ca82e326d9ee59a8320348187f401837fc8516c77d7208ab425141108e0e5dd0ec9ee395aa3b3cebabb85a0da330e6be8b7147e7e0131f02a06297182f5bbff4d5c8774b92850bf06ff10e5dece123fa0a1e15d5515c16cc9e363c8c88c3b58addc84f97553574fed856b1aec96650ce3d7e7fb7b7c55a28ddbc633889a434dd876ce26c6be2ff977da3f41f543f9ce2bc4af796142316f93ed4b8dbaf52b849c96041ee8395207ac1d5eeba2fffdd5b6bc22a3c7adac37cfdde3ca2b65a671243e61559a16bd395c3f421988222293062cebe486fb7d9676c4df456ac32acdb6bf0c458223bc1af85c5bdbc7800ffa312de59d8b293dc7a4f96d9c1c60d7ee64d7ce8de59bd46c53d55a37babda5b9e803e28d8b94e4b232a70e38a421c01ffea259af249d0d928b8da64f01000e0ecc35d43f10eaaa03c795a87170265a994ffdbb6f92cc22f1000494789e38761de8f9b3a26873fbea2f89fc1e0e04c063a3d1f3a989899dd1cf30c5ea85ce9b8a48ab9e20a5a0d97b8c41061e5a6bd67265f625a096fdfb03f189d5f180a1ae9d24ae59999cee753ff8cf34204d1139e2f1016a99b6bee5b4a719c16127451565eb1f8a03da9328c7e3a7ecfab2dccdde625d3700996cf45f98cb228e4195973da41e0ef135abfdea33f31b1383ba129e5c0137c8b7a02eda19c763954fbce251c66382195f865925e16a007ed7acfc4ec6ef12186cd1f07888fceabd31dfb5a3a8ba0491c2a869e124e35f40571dfab6379f93c83e44c45c4fd18ff8013be7bda6ec757995db9f333ef4536499210c5691862219dc08fcb2acb5df70d2d5ae2e8ad87a49b6879cb050546be06f499cb2c6162b21414e0d7f0b640b83130f873f2cf43d6b81a91452f7e441cdca6babaa5336e5f8c3586f933611e2e15268d7be2a7974a4a1c7ed25091afb57e63ba1fcf9ab2213c1edad7c3f08b412ef6051d983d25ebfaf782bae970ae18aee639ec2416f19005632e3154c4fc2d99117e9b0b54a58b27cef0f823b5ffeab2985e26fb47345d4b064a574c4723511577c893d630c7a980ae810c2c765541e8b7b407fe7cb816a53b28d05424056a27ed482b30be993d9c61909bf556cc71623d851d9e20a0f9fa780e2c52067fde7637ab001e3228319c4bbdb3b202f17fabc2c099e7db332f79c52f5978f99d01ae4a81c3d837623ad4219cfa0ac1a51fcd1a9c41305596560e58bf4f086ab8c259e150385b5a9a4b7b525014026199cb0a5d32f86e285a462098e3b9fe09d3342ced87a78df2775f6e26e5c3628df835207ac0226bce5e90770c4b9ee2a9e929a8f5c5989f6ad4e8b87bdd8dc053c27c316afc4f4ab777ce8494c49fade5df5675889ede66ee090bea130ad7056536d1c45678a4ea7dbeaeeb077f2000b10507f4cd822061e0e0ce2c225a49d43f8938322905f7a3ecda53157ef9db8db89c77c64a1e02b9e72cf5cfe7b7971ad2f3a087f4cb2e51143e92d46ba78a28a78fa08abbb15f5f8f0fb444aa46a15b93c7a80a176180d021aea3abaf295f50284c467b69f7dcf01ffcc927df578d6028f18a7c7e1f7e32d968f907f3392589d96d782db864c6ccd0aea28084e6c18d3e5ece34299cc3a244871e2fb7a815111b6129deb8d91d57357fe3a3da9c17a943301cc64da2e0bfe014052fedf2008eb08505528b6db8dff372f9f8e0d740a43967f02e42c0f20a021ce8fd9953ce34011c03ad39eeef0e9e9e3fd915d9f41de202bbfd30434411d54d8541710c3e4823934c0851c26b5c81b7f8cb69d9dfc1b076737bbedd51cb24121ced070a2e3a5f80b82e3746ae24c9d8c54a9829e34c3bd13b5df0264229bb772268ee190c5c06f08cb2068fd682f69f5651c553cb3018923248d8d2ac9693ec5aca8f0192f88ef4dd2fc2bb37b197cb3f523cab45d5b57a24fe2f71e649a836a1f440bfbba165832977c499503ccc06f56a988f2e8c464adfb5b2d602f76dcaa92a9eb148d80d0cc505df39aaf5ca861359ed7b5a28028b0cfcaf52b0e88a54e9b8c33405113654ee6758017b28222ae836cce80cc223c0521feecc9e0e76497142a82fdfbb5cfbb1d18e7b1c4c944d884b4dbd563fdddc1660e0225d1758e4bec8ccdfd7fde1262f9984d7c1368934abbc27346ecc3058b3b6c8843e29bb122f050708cc89aada2f7941576cbc900cca98ba84ca820cdbb2231a768155ac885d6a1f27c7c92b8256c3fcde9d3022b7613563c51e7182e8c4e32abb6a4431a58a5dd0f5648c3510970fcb09449d7762088d24c8d5d281c7270625ba5f249bfad0ae5c08290e622d306f1c322bdd76adf689abd7ca8ea5161b2e32e2ea746b6eeb610222b7d60bf6d58b67022591f7221f5361301cdc9fa506ec676009cc947e31b2833cdb8264490676e47c42d0d5438cc91040a43e12c0d15c86c64454812b22eb6fe261d63fabfe1a84b5896ebd18da062979bd1e0a2b3fdb6e422d60d3b27d4fe362ce7190f7bacf39fd8992874c889954e4792b3e0dfc7d3c7597a15a9e5499ae27c32f5145ab3f24716421aca51b1fdc47acf5e1ab08623a33516ed988fa63ec78c8db9e0088ec0209852fe3dc6173440335b9cbd78f870730e0627db7f8d241a20d3204dee126a59607ec0c2a60f437a0c71502b89c45dd2cc468af944f0f874303355339e55e4cc3ef190d614568c83f5464df9d8b30855e5bd7549906e4a2b833c18f31c811ae1965e103c1b0a0c4dd62c0784e3fae6e13a8c97e41ec9e54f4389bc16cd4d9979f21a187d3c07e6dc91280fc894725e8cac5fb078747cd78dbf209b13c3895e5e6f3106b8685cb7a9e6eb8210f61a0e087acf739563368b77251ba1adf211f050937e7f6f70c5acb4d8ac10cade45a11eae603f761055bdd69f5bf701c75448eb79db9dc32c52181baf9f6ffb3558a0bb28fda7b1de7c33fac0309e1937c86ed568ff5bc61d4481132a896a7a471691e6f10de04a2952e531c0126effb61046ec87769a729641016b07e4d9ac895a9aae3cfb30e2b2f67fd042a61ff2221ddad49d964756a2d099441c50011155d0fd4de298b915acb64909ff87fe73651880f128e8e9eb5de6aa9c129c6ba4414f2cd185da7869e1f81a62969a7e10f4e0ab7b2b1102b86cf11673ad6ba62e872fa93f6c3bd9c58721c8696c774be2ce8535814a83c98fe10e3a5336aa71fcc6a7b88d05b6e7f46e797ee22647aaef69ad8b31619a41948a9a4a8c44ee16f21cb887f1ec5dc5628b99f9796cfef1a0324d8c664cbcb57742a25ac719808804178fc1ac30c2ee4ff2e3503f3912992fdcdda4f95213ce35514113cfcba1d35117edac90ab753a839a1c7aaefb4498e5273ab6697f1982a8d4bfa02dc473f34dc68ad79f679c2080bc31247d9dfcf8335f7ba2b0f156c58194b0bbfa9fa0c1d07946c10fea8a2fd7fce09825d1d53109a016f1959fe1d6802de0f67d659b45766bd68c8ff850c368798100ca7033e959b6aca88d4f459c1f79257326d4e6c508d551b278c1b50b46a8646546a6029e44846bfce830fc11ee1c14a4bdafba702396d7db1b3fbfcc59fd2b39bd904e9d8e7ee0884feb16f203ff7bc6540f2dcb8eea4f8fc5bdf87f605e70ea8d160105e340b6327a0b05da026971758aa27cc7861290da38c6fc3429f419301ae7b5944c8e75ed31de377b56aca98c372abb23904aebe61ec8c5a9326bddb838ea6d4ec563083e3f0f2ae5ab4947d0535b0b0f772ac95964cabe9093fe91964088bb75baa20f75517b04604dd2d44dd41c0df72e8bff36caad9908a4fdc7ab7b2b3ebaf898e81b290f46504c1c7ef4c3ae3c4f781f31fce2a3802b00d21212b78fd39bfb87b2c2130592c25aaa7aec07af49df72b4515ae5897f284f15f8f5b5cdf4d9e825af25500f090bad1741a98297a713f31582b9df80ea12bea4651ea345ae2dd63b16c9030328ab2a3fa8c84c59fbf3dfddabb20e29647fd4fc19dd5cee8d3ebf6f95cabad7c0b0eb5174e397f8bc308c13e9f59fb5e5ca622331dbe202ed5f960c481224bb8f8c15382e6d66c459b25af34703f3e7c52beacf2a8bb27ed5ab8c3dd51d47b80a5a34ccb56afd2701606b7eeaf92b9dd48d704442c03d524cab41c4b72fa5207f36d3365858afc011c08c4a64bca61369545230221486e6b63cd40b2ff889de7cce5ae51197771cfe90d2e64578c79f49c9eb69962cf007462177b3d69b7cfc2628ffbf733fd62a832162855e5129b026137e8ccff78a04a77d3eed56024c3b4e01bcffd1f395568ec4532ee7bf10da3ee0088eaf677b57c9b1b409061759c0576a409f9be2843f8b2499acc7a5c153c79124ac4072397f4355aa8b86380253c683f8f96f3fb243b4961411210d8c6fe2075950b7bb8a9a9601b5f80fd2259cc7d3e777c7ef8a9d7210f56de76352e388e98a4171ebfeb562e7303b7c96ef09dac82b65957f9be0496395dbcd9bda40376bb8a4b74280ff2de4a021b164053077d6f6e1bacd62b91ad3bed29eeff5a155a82aec66724065555d4e0238969add8fbf00fcbc5a3e420a4686c0f14ec14e88ae39379e4a81e46bc3f3da248587f284f4123239ea87fb16bd4c400c3b653a8db9279155b3c8929f3dc471fbafcd2e1073e553d9a31497fcd5083e2421afe544f3ff84ab4c1ed311865d3b4911ce562b8bfc87837215b7a742d1e606e9bbd9eb573d52b2527258db86ab4b6fdbab5416223c9f984721825eb509fce66bc1827c1699f1ef250ca61d9cbbc436711c957b901e9bfa395332ae8a1637b2ef5310af86784c956b3539ca494c0c36eb677b8eb3293209be45faa941c5dbed8ac05388aec54442f26e291f09d22ba687729bf123bd2d874e3b3d2fb9f78a16501aeafbd9fa28bc9ccf5018b0df06e4c2ab852d6ae1585acd369917b05095052b7d5f09798f2b876fd814ed96845cdd3907cba9bc7beea19c718244d642ddd44f225c7ff43855f3773dd4a75882036fb2", 0x1000}, {&(0x7f0000000100)="60f07fe90574d9522c88292ea1c3378263a308675f8acad3d0e13837ad002cb39ed9101b22691c63e36da2b310b0182016f493b473795cd91ef6a78182e6e102eb16b092897cf5793d0c0a9d998bd26795ae0b97234bc9ff9da35ffe32a7108338156be5847c9a6b70caa384474c5b76", 0x70}, {&(0x7f0000000180)="0275911de362941d4f0bafaa7aef26132f19abc05e63f613b1f83e2e0cb35f69a4423d884f54cd4b13f0dd86d781a73484f53622bf331af43833f655a24a7474e911e9d23fe4b2075c3cece2bee251c217473a42600e1dc76a36a6346fb8ab52445983998148eccc2cf434572834de25aa23502177827251f7b8793f3662603331229b9e67e5f8f342d980993376d6f223563157a8662a20f36553b08e9a4d56f2296aca36a12ec1bfc87e53f6825f6062a6a294115a90d387f8fc89dbecd5775b9d07d4e056bd91273b02350c", 0xcd}, {&(0x7f0000000280)="7e3c6f901a255e02e2e7bd739b297c6c645b1b1c333eaf07ba6ac79c454de888aeabba479f08dbc781ad18eb0382", 0x2e}, {&(0x7f00000002c0)="03578d21c8ab13b4529e77e7730ba33f172d3960b4489a060ae49b01b742d865a171864709af65ee5d4c54514852f8b1c6c59b3e5850b3b6d5725a9c7073975a909b54be7bf7506655c872e6c0e66eae3c43975c561c64f7af4d9b69362ee62e4d81048cac1a54b2d1b134e898eab51089532cda4723d957ec48bd06ed782117184c6f2a4aad19d96a536a62f38fe8826d60ca585f6f0f435dc37b732d9e938ff3a64a07886d0fe39feb811b6ff3a72429c3827a873734", 0xb7}], 0x6, &(0x7f00000025c0)=ANY=[@ANYBLOB="d00000000000000020000000070000008f2b96b76e0d8ec3a64557db7713cc204cab223491e14997822a44883da5bb1117e89c29ceb43ecd2ed38ba96671d9346e49bb67dda97ea149ffe95650e738768e188041127581dacb89dd93d9e32120bb708e4b5f24646abe8edb07c017b9740658565cca1decebe6861868d461e296ebc354144cfe7a2fb4eaff54e91bfd8fc538e1b74ee65de5f593b2dc581cd62b07c4881e7b98b2b13ff6058de8e43f5a27f9f1736b70a659c88ba0b169e7d90ddf6882c0cc4cf100bee7000000000000fc164e3a0ba2443ee64ccfc0f5b5d76878f96b3f9faf0b67cc4b"], 0xd0}, 0x4008080) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) recvmmsg(r0, &(0x7f0000005280)=[{{&(0x7f00000024c0)=@hci, 0x80, &(0x7f0000003980)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/163, 0xa3}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f0000003780)=""/203, 0xcb}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000003880)}, {&(0x7f00000038c0)=""/126, 0x7e}, {&(0x7f0000003940)=""/28, 0x1c}], 0x8, &(0x7f0000003a00)=""/91, 0x5b}, 0x401}, {{&(0x7f0000003a80)=@phonet, 0x80, &(0x7f0000005180)=[{&(0x7f0000003b00)=""/209, 0xd1}, {&(0x7f0000003c00)=""/95, 0x5f}, {&(0x7f0000003c80)=""/247, 0xf7}, {&(0x7f0000003d80)=""/136, 0x88}, {&(0x7f0000003e40)=""/84, 0x54}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/184, 0xb8}, {&(0x7f0000004f80)=""/238, 0xee}, {&(0x7f0000005080)=""/245, 0xf5}], 0x9, &(0x7f0000005240)=""/32, 0x20}, 0x9384}], 0x2, 0x20000022, &(0x7f0000005300)) 1m11.368528081s ago: executing program 2 (id=901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 1m7.551424327s ago: executing program 2 (id=912): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='thermal_power_cpu_limit\x00'}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0xfffffffe, 0x1f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000680)=[@ioring_restriction_sqe_op={0x1, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0xffffffffffff5995, 0x5b, 0x8d1, 0x7, 0x6, 0x40, 0x2, 0xd}, &(0x7f0000000180)={0x4, 0x3, 0x9, 0x3, 0x7fff, 0xe, 0x80, 0x6}, &(0x7f0000000240)={0x7, 0x9, 0x10000, 0xffffffffffffffff, 0x6, 0x8, 0x9, 0x7fff}, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) 1m6.747349647s ago: executing program 2 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000e9ffffff007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a800000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/15, 0x5}) 1m5.158251474s ago: executing program 2 (id=918): request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='{]\x00', 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x62200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) sched_setaffinity(r2, 0x8, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x61f}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 50.077272802s ago: executing program 33 (id=918): request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='{]\x00', 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x62200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) sched_setaffinity(r2, 0x8, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x61f}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 15.395440374s ago: executing program 4 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) 13.581129742s ago: executing program 4 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0xd, 0x0, 0x5}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x1, 0x40, @loopback, @mcast2, 0x78f1, 0x20, 0x6, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000400)=""/165, 0x41000, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0x7f5, @void, @value}, 0x94) ioctl$TCSETS(r8, 0x89f1, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x2, 0x13, '\x00\x00\x00l\x00'}) 12.102194958s ago: executing program 6 (id=1076): fstatfs(0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8a042, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4802991b68087696) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x400c000) semop(0x0, &(0x7f0000000380)=[{0x0, 0xfffd}, {0x0, 0x6, 0x1000}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) 10.200275952s ago: executing program 4 (id=1082): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket(0x5, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa0}) ioctl(r6, 0x8b2a, &(0x7f0000000040)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r9, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@polexpire={0xcc, 0x1b, 0x200, 0x70bd26, 0x25dfdbfe, {{{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x2, 0x4e22, 0x8, 0x2, 0x20, 0x20, 0x6, r7, r9}, {0x8, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffffa, 0x8000000000000000, 0x1}, {0xf, 0x5, 0x7fff, 0xf}, 0x401, 0x6e6bc0, 0x2, 0x0, 0x0, 0x1}, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 9.426105957s ago: executing program 1 (id=1083): ioperm(0x5, 0x7fff, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xb, 0x200040) syz_usb_disconnect(r0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/34, 0x22}], 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000080)=""/49, 0x8) 8.915225121s ago: executing program 3 (id=1086): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000300000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10140, 0x0, 0xffffffffffffff24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x4818) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0100ffffffffffff"], 0x20}}, 0x0) 7.679291816s ago: executing program 1 (id=1087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x90a03, 0x84) dup3(0xffffffffffffffff, r3, 0x0) iopl(0xc) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pwrite64(r4, &(0x7f0000000200)="81d7ec1179c854e244dfe13820a2ac88fbcac5517cce360fe3b70f390baa8633454aa7113d72b5c3f7daacc61412f8637162ce8838f4b440e4d94bafb2c4885f451a422e24c11ad29071a769c3e9633ef0fa9fb0d9f7d268901063f715ce8ead2f9ca55fcc44887ea2bb0a6db117c671ee316eafc87d333120bb27096df8a6", 0x7f, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, 0x0, 0x0, 0xfffffffffffffffe) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r7, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20018815) 7.670746267s ago: executing program 5 (id=1088): fstatfs(0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8a042, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4802991b68087696) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) semop(0x0, &(0x7f0000000380)=[{0x0, 0xfffd}, {0x0, 0x6, 0x1000}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) 6.831813199s ago: executing program 6 (id=1089): socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000001800)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03120000000000002c0012800c0001006d6163766c616e001c000280080007000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc010) 6.59153835s ago: executing program 1 (id=1090): request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='{]\x00', 0x0) setitimer(0x2, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x62200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) sched_setaffinity(r2, 0x8, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x61f}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.545004781s ago: executing program 3 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) 6.521521382s ago: executing program 6 (id=1092): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000080)) 5.264629635s ago: executing program 6 (id=1093): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) r5 = userfaultfd(0x80001) getpid() syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x409, 0x70bd29, 0x25dfdbfd, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c800) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$dsp(r0, &(0x7f0000000200)="ec3fa15bbe15cf3f65861b690a62d2f64fad50632221d5be6c7c3f2067687b180575135cb6d860dee0124b55c7c03fd1d29d63e3915881545295eceb4c28541f4f318e848d134d1bc8408abe7e34a60d8fd3dfef2ecda61d104f5e188104fbc1a3f7c57bec99255d8fbb440d898958dc34da56", 0x73) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) io_setup(0x2004, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 5.063757654s ago: executing program 3 (id=1094): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 4.935540246s ago: executing program 4 (id=1095): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) fgetxattr(r3, &(0x7f0000000100)=@random={'btrfs.', '/dev/kvm\x00'}, &(0x7f0000000140)=""/35, 0x23) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000004c0)={0x4, &(0x7f0000000500)=""/139, &(0x7f0000000400)=[{0xfffffffd, 0xaf, 0x200, &(0x7f00000005c0)=""/175}, {0x64b6, 0x73, 0x9, &(0x7f0000000240)=""/115}, {0x2, 0xc5, 0x8, &(0x7f00000002c0)=""/197}, {0x9, 0x23, 0x3, &(0x7f00000000c0)=""/35}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) 4.899445481s ago: executing program 1 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfd, {0x1, @broadcast, 'lo\x00'}}) 4.198044651s ago: executing program 3 (id=1097): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000080)) 3.91073622s ago: executing program 1 (id=1098): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0xff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800060000000000080007000000e9ff070005"], 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r1, &(0x7f0000003d00)={0x2020}, 0x2020) 3.859485482s ago: executing program 5 (id=1099): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = eventfd(0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x1, r3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setgid(0xffffffffffffffff) 2.72749372s ago: executing program 3 (id=1100): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmc(0x0, 0x3, 0x882) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r6) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r6) keyctl$read(0xb, r6, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.662454947s ago: executing program 1 (id=1101): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace$setregs(0xf, r0, 0x4, &(0x7f0000000440)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$audio1(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010001", 0x7) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x40c6f, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 2.630187872s ago: executing program 5 (id=1102): socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000001800)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03120000000000002c0012800c0001006d6163766c616e001c000280080007000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc010) 2.445575385s ago: executing program 6 (id=1103): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000080)) 2.097444525s ago: executing program 5 (id=1104): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x75f, 0x80, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.86070111s ago: executing program 5 (id=1105): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) 1.700447129s ago: executing program 3 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x1, 0x40, @loopback, @mcast2, 0x78f1, 0x20, 0x6, 0x3}}) openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x105000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000400)=""/165, 0x41000, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0x7f5, @void, @value}, 0x94) ioctl$TCSETS(r7, 0x89f1, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x2, 0x13, '\x00\x00\x00l\x00'}) 248.452824ms ago: executing program 6 (id=1107): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 197.617187ms ago: executing program 5 (id=1108): mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000001000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r7 = socket(0x18, 0x3, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r7, r6, 0x0, 0x8) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x8) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000001c0), 0x4) 152.764397ms ago: executing program 4 (id=1109): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfd, {0x1, @broadcast, 'lo\x00'}}) 0s ago: executing program 4 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0xd, 0x0, 0x5}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x1, 0x40, @loopback, @mcast2, 0x78f1, 0x20, 0x6, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000400)=""/165, 0x41000, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0x7f5, @void, @value}, 0x94) ioctl$TCSETS(r8, 0x89f1, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x2, 0x13, '\x00\x00\x00l\x00'}) kernel console output (not intermixed with test programs): 0 [ 293.993602][ T9146] ? __alloc_skb+0x200/0x380 [ 293.993619][ T9146] ? __pfx__copy_from_iter+0x10/0x10 [ 293.993636][ T9146] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 293.993659][ T9146] netlink_sendmsg+0x829/0xdd0 [ 293.993681][ T9146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.993705][ T9146] ____sys_sendmsg+0xa95/0xc70 [ 293.993725][ T9146] ? copy_msghdr_from_user+0x10a/0x160 [ 293.993740][ T9146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.993769][ T9146] ___sys_sendmsg+0x134/0x1d0 [ 293.993785][ T9146] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.993824][ T9146] __sys_sendmsg+0x16d/0x220 [ 293.993840][ T9146] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.993861][ T9146] ? rcu_is_watching+0x12/0xc0 [ 293.993885][ T9146] do_syscall_64+0xcd/0x260 [ 293.993905][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.993918][ T9146] RIP: 0033:0x7f998898d169 [ 293.993931][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.993944][ T9146] RSP: 002b:00007f9989756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.993958][ T9146] RAX: ffffffffffffffda RBX: 00007f9988ba5fa0 RCX: 00007f998898d169 [ 293.993967][ T9146] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 293.993974][ T9146] RBP: 00007f9989756090 R08: 0000000000000000 R09: 0000000000000000 [ 293.993982][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.993989][ T9146] R13: 0000000000000000 R14: 00007f9988ba5fa0 R15: 00007ffcd3602478 [ 293.994007][ T9146] [ 293.998452][ T8928] veth0_vlan: entered promiscuous mode [ 294.290915][ T8928] veth1_vlan: entered promiscuous mode [ 294.350765][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 294.361304][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.380072][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 294.420626][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.469196][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.470176][ T8928] veth0_macvtap: entered promiscuous mode [ 294.633097][ T5906] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 294.635088][ T30] audit: type=1400 audit(1744228628.204:505): avc: denied { accept } for pid=9149 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 294.673877][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.106481][ T8928] veth1_macvtap: entered promiscuous mode [ 295.153651][ T5906] usb 2-1: config 0 descriptor?? [ 295.163503][ T9142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.196656][ T5906] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 295.227062][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.311130][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.429481][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.440436][ T1066] block nbd0: Possible stuck request ffff888026900000: control (read@0,4096B). Runtime 30 seconds [ 295.470517][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.487450][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.498855][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.510578][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.521632][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.531492][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.542048][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.553231][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.576479][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.609253][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.652870][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.680089][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.727406][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.762435][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.773020][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.783916][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.810962][ T9184] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.813295][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.850974][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.866787][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.926577][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 295.936768][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 295.993435][ T81] usb 2-1: USB disconnect, device number 28 [ 296.006917][ T8928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.052178][ T8928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.063855][ T8928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.105705][ T8928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.653037][ T9199] loop9: detected capacity change from 0 to 8 [ 296.662561][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 296.701123][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.709354][ T9199] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 296.714881][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.722694][ T9199] loop9: partition table partially beyond EOD, truncated [ 296.787190][ T9206] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 296.870812][ T9199] loop9: p1 size 81768186 extends beyond EOD, truncated [ 297.223884][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.268036][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.348014][ T30] audit: type=1400 audit(1744228631.034:506): avc: denied { mounton } for pid=8928 comm="syz-executor" path="/root/syzkaller.JzPLkH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 297.412610][ T30] audit: type=1400 audit(1744228631.084:507): avc: denied { mount } for pid=8928 comm="syz-executor" name="/" dev="gadgetfs" ino=7241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.086319][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 298.287611][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 298.488639][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 299.271220][ T30] audit: type=1400 audit(1744228632.914:508): avc: denied { create } for pid=9235 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 300.198629][ T9247] mmap: syz.4.757 (9247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 300.227404][ T30] audit: type=1400 audit(1744228633.904:509): avc: denied { bind } for pid=9257 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.859869][ T9267] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 301.105768][ T9269] overlayfs: conflicting options: userxattr,redirect_dir=on [ 301.715498][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 302.455432][ T30] audit: type=1400 audit(1744228636.144:510): avc: denied { ioctl } for pid=9280 comm="syz.4.764" path="socket:[19200]" dev="sockfs" ino=19200 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 303.353925][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.767'. [ 303.363104][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 303.415861][ T9306] dummy0: entered promiscuous mode [ 303.442378][ T9306] macvlan3: entered allmulticast mode [ 303.448070][ T9306] dummy0: entered allmulticast mode [ 303.551851][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 303.587797][ T5875] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 303.630875][ T5875] usb 6-1: config 0 has no interface number 0 [ 303.639081][ T30] audit: type=1400 audit(1744228637.324:511): avc: denied { mount } for pid=9314 comm="syz.4.771" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 303.667171][ T5875] usb 6-1: config 0 interface 184 has no altsetting 0 [ 303.702341][ T5875] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.714491][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.730985][ T30] audit: type=1400 audit(1744228637.324:512): avc: denied { read write } for pid=9314 comm="syz.4.771" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.760856][ T5875] usb 6-1: Product: syz [ 303.765076][ T5875] usb 6-1: Manufacturer: syz [ 303.769729][ T5875] usb 6-1: SerialNumber: syz [ 303.819792][ T5875] usb 6-1: config 0 descriptor?? [ 303.879735][ T9319] FAULT_INJECTION: forcing a failure. [ 303.879735][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 303.893578][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.3.772 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 303.893601][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.893611][ T9319] Call Trace: [ 303.893617][ T9319] [ 303.893623][ T9319] dump_stack_lvl+0x16c/0x1f0 [ 303.893652][ T9319] should_fail_ex+0x512/0x640 [ 303.893670][ T9319] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 303.893699][ T9319] should_failslab+0xc2/0x120 [ 303.893718][ T9319] __kmalloc_cache_noprof+0x6a/0x3e0 [ 303.893742][ T9319] ? io_provide_buffers+0x38b/0xc40 [ 303.893763][ T9319] io_provide_buffers+0x38b/0xc40 [ 303.893788][ T9319] io_issue_sqe+0x171/0x1350 [ 303.893817][ T9319] io_submit_sqes+0x921/0x25d0 [ 303.893854][ T9319] __do_sys_io_uring_enter+0xd6a/0x1630 [ 303.893884][ T9319] ? __fget_files+0x20e/0x3c0 [ 303.893900][ T9319] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 303.893929][ T9319] ? fput+0x70/0xf0 [ 303.893947][ T9319] ? ksys_write+0x1b9/0x240 [ 303.893963][ T9319] ? __pfx_ksys_write+0x10/0x10 [ 303.893985][ T9319] do_syscall_64+0xcd/0x260 [ 303.894010][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.894028][ T9319] RIP: 0033:0x7f998898d169 [ 303.894042][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.894058][ T9319] RSP: 002b:00007f9989735038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 303.894075][ T9319] RAX: ffffffffffffffda RBX: 00007f9988ba6080 RCX: 00007f998898d169 [ 303.894086][ T9319] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000008 [ 303.894096][ T9319] RBP: 00007f9989735090 R08: 0000000000000000 R09: 0000000000000000 [ 303.894105][ T9319] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 303.894115][ T9319] R13: 0000000000000000 R14: 00007f9988ba6080 R15: 00007ffcd3602478 [ 303.894138][ T9319] [ 304.864733][ T30] audit: type=1400 audit(1744228637.324:513): avc: denied { open } for pid=9314 comm="syz.4.771" path="/151/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.902389][ T5875] smsc75xx v1.0.0 [ 304.964174][ T5875] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 305.006097][ T5875] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 305.008901][ T9322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.775'. [ 305.026232][ T30] audit: type=1400 audit(1744228637.484:514): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.391759][ T9331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9331 comm=syz.3.777 [ 305.431120][ T30] audit: type=1400 audit(1744228639.114:515): avc: denied { read } for pid=9330 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 305.591875][ T9336] overlayfs: conflicting lowerdir path [ 305.600971][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.905554][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.907697][ T30] audit: type=1326 audit(1744228639.124:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.4.778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f61d8d169 code=0x0 [ 306.571517][ T9349] [U] [ 306.574267][ T9349] [U] [ 306.576960][ T9349] [U] [ 306.579655][ T9349] [U] [ 306.582435][ T9349] [U] [ 306.585193][ T9349] [U] [ 306.587882][ T9349] [U] [ 306.590585][ T9349] [U] [ 306.593407][ T9349] [U] [ 306.596112][ T9349] [U] [ 306.598823][ T9349] [U] [ 306.601513][ T9349] [U] [ 306.604260][ T9349] [U] [ 306.606965][ T9349] [U] [ 306.609653][ T9349] [U] [ 306.612377][ T9349] [U] [ 306.615234][ T9349] [U] [ 306.617935][ T9349] [U] [ 306.620632][ T9349] [U] [ 306.623330][ T9349] [U] [ 306.633349][ T9349] [U] [ 306.636093][ T9349] [U] [ 306.638774][ T9349] [U] [ 306.641450][ T9349] [U] [ 306.644348][ T9349] [U] [ 306.647035][ T9349] [U] [ 306.649698][ T9349] [U] [ 306.652369][ T9349] [U] [ 306.655256][ T9349] [U] [ 306.657955][ T9349] [U] [ 306.660632][ T9349] [U] [ 306.663303][ T9349] [U] [ 306.666658][ T9349] [U] [ 306.669360][ T9349] [U] [ 306.672025][ T9349] [U] [ 306.674694][ T9349] [U] [ 306.677982][ T9349] [U] [ 306.680713][ T9349] [U] [ 306.683382][ T9349] [U] [ 306.686046][ T9349] [U] [ 306.688869][ T9349] [U] [ 306.691709][ T9349] [U] [ 306.694403][ T9349] [U] [ 306.697111][ T9349] [U] [ 306.700081][ T9349] [U] [ 306.702770][ T9349] [U] [ 306.705436][ T9349] [U] [ 306.708104][ T9349] [U] [ 306.717711][ T9345] [U] [ 306.954687][ T9359] 9pnet_fd: p9_fd_create_unix (9359): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 307.050782][ T5928] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.480979][ T81] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 307.490937][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 307.506774][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.750466][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 307.775359][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.794583][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.833993][ T5928] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 307.858009][ T24] usb 6-1: USB disconnect, device number 2 [ 307.871543][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.906538][ T5928] usb 5-1: config 0 descriptor?? [ 307.912796][ T9347] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 307.920440][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.934505][ T5928] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 307.950756][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.970937][ T81] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 308.002718][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.045860][ T81] usb 3-1: config 0 descriptor?? [ 309.374054][ T81] usbhid 3-1:0.0: can't add hid device: -71 [ 309.380092][ T81] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.557664][ T81] usb 3-1: USB disconnect, device number 15 [ 309.611111][ T24] usb 5-1: USB disconnect, device number 18 [ 309.692344][ T30] audit: type=1400 audit(1744228643.234:517): avc: denied { map } for pid=9373 comm="syz.1.787" path="socket:[19355]" dev="sockfs" ino=19355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.726286][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 309.738060][ T30] audit: type=1400 audit(1744228643.234:518): avc: denied { accept } for pid=9373 comm="syz.1.787" path="socket:[19355]" dev="sockfs" ino=19355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 311.357400][ T30] audit: type=1400 audit(1744228644.954:519): avc: denied { listen } for pid=9390 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.589345][ T30] audit: type=1400 audit(1744228644.964:520): avc: denied { accept } for pid=9390 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.040823][ T5875] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 312.295506][ T5875] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 312.872285][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.003104][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.039093][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.055722][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.067125][ T5875] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.077675][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.193498][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.381206][ T9419] FAULT_INJECTION: forcing a failure. [ 313.381206][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 313.393994][ T9419] CPU: 0 UID: 0 PID: 9419 Comm: syz.2.800 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 313.394014][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.394020][ T9419] Call Trace: [ 313.394024][ T9419] [ 313.394029][ T9419] dump_stack_lvl+0x16c/0x1f0 [ 313.394049][ T9419] should_fail_ex+0x512/0x640 [ 313.394061][ T9419] ? __kmalloc_noprof+0xbf/0x510 [ 313.394073][ T9419] ? cond_policydb_dup+0x11a/0x750 [ 313.394084][ T9419] should_failslab+0xc2/0x120 [ 313.394096][ T9419] __kmalloc_noprof+0xd2/0x510 [ 313.394108][ T9419] cond_policydb_dup+0x11a/0x750 [ 313.394125][ T9419] ? security_set_bools+0x115/0x6c0 [ 313.394141][ T9419] ? __asan_memcpy+0x3c/0x60 [ 313.394156][ T9419] security_set_bools+0x13f/0x6c0 [ 313.394175][ T9419] ? sel_commit_bools_write+0x25c/0x420 [ 313.394187][ T9419] sel_commit_bools_write+0x36e/0x420 [ 313.394199][ T9419] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 313.394214][ T9419] vfs_write+0x25c/0x1180 [ 313.394223][ T9419] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 313.394237][ T9419] ? __pfx_vfs_write+0x10/0x10 [ 313.394246][ T9419] ? do_sys_openat2+0x157/0x1d0 [ 313.394258][ T9419] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.394272][ T9419] ? __pfx___schedule+0x10/0x10 [ 313.394289][ T9419] ksys_write+0x12a/0x240 [ 313.394298][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 313.394310][ T9419] do_syscall_64+0xcd/0x260 [ 313.394325][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.394335][ T9419] RIP: 0033:0x7fc0e918d169 [ 313.394344][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.394353][ T9419] RSP: 002b:00007fc0ea0c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.394362][ T9419] RAX: ffffffffffffffda RBX: 00007fc0e93a5fa0 RCX: 00007fc0e918d169 [ 313.394368][ T9419] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000005 [ 313.394374][ T9419] RBP: 00007fc0ea0c0090 R08: 0000000000000000 R09: 0000000000000000 [ 313.394379][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.394385][ T9419] R13: 0000000000000000 R14: 00007fc0e93a5fa0 R15: 00007ffd9f872d48 [ 313.394398][ T9419] [ 313.751168][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.762342][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.776413][ T5875] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.783881][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.793863][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.803662][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.814778][ T5875] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.830922][ T5875] usb 2-1: string descriptor 0 read error: -22 [ 313.837157][ T5875] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.846199][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.892807][ T5875] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 314.993301][ T24] usb 2-1: USB disconnect, device number 29 [ 315.911013][ T5875] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 316.577960][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.600974][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.763775][ T5875] usb 4-1: Product: syz [ 316.781743][ T5875] usb 4-1: Manufacturer: syz [ 316.787478][ T5875] usb 4-1: SerialNumber: syz [ 317.134453][ T5875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 317.175066][ T30] audit: type=1400 audit(1744228650.854:521): avc: denied { watch } for pid=9480 comm="syz.4.813" path="/158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 317.175353][ T5906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 317.219373][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.255725][ T9481] overlayfs: failed to resolve './file0': -2 [ 317.421321][ T30] audit: type=1400 audit(1744228650.854:522): avc: denied { watch_sb watch_reads } for pid=9480 comm="syz.4.813" path="/158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 317.466630][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.788220][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.811246][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.862121][ T30] audit: type=1400 audit(1744228651.274:523): avc: denied { connect } for pid=9482 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.742688][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 318.961973][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 319.020167][ T5906] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 319.044400][ T5906] ath9k_htc: Failed to initialize the device [ 319.075275][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.090931][ T5906] usb 4-1: ath9k_htc: USB layer deinitialized [ 319.166663][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 319.222630][ T5875] usb 4-1: USB disconnect, device number 21 [ 319.257114][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.420780][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.510875][ T24] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 319.519953][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.930509][ T9517] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.961822][ T24] usb 2-1: config 0 descriptor?? [ 319.992148][ T9489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 320.027124][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 320.050312][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 320.128021][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 321.469330][ T5928] usb 2-1: USB disconnect, device number 30 [ 321.611914][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 323.416372][ T9543] 9pnet_fd: p9_fd_create_unix (9543): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 323.567399][ T9562] netlink: 'syz.1.832': attribute type 5 has an invalid length. [ 323.740818][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 325.638056][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 325.922826][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 326.138013][ T1066] block nbd0: Possible stuck request ffff888026900000: control (read@0,4096B). Runtime 60 seconds [ 328.223639][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 331.066546][ T9583] syz.5.837: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.105799][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.5.837 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 331.105826][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.105835][ T9583] Call Trace: [ 331.105840][ T9583] [ 331.105844][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 331.105863][ T9583] warn_alloc+0x248/0x3a0 [ 331.105876][ T9583] ? __pfx_warn_alloc+0x10/0x10 [ 331.105891][ T9583] ? __get_vm_area_node+0x1b9/0x300 [ 331.105904][ T9583] ? __get_vm_area_node+0x1e5/0x300 [ 331.105920][ T9583] __vmalloc_node_range_noprof+0x1110/0x1540 [ 331.105940][ T9583] ? xskq_create+0xfb/0x1d0 [ 331.105955][ T9583] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.105973][ T9583] ? xskq_create+0xfb/0x1d0 [ 331.105984][ T9583] vmalloc_user_noprof+0x6b/0x90 [ 331.106005][ T9583] ? xskq_create+0xfb/0x1d0 [ 331.106016][ T9583] xskq_create+0xfb/0x1d0 [ 331.106028][ T9583] xsk_setsockopt+0x684/0x840 [ 331.106039][ T9583] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.106053][ T9583] ? selinux_socket_setsockopt+0x6a/0x80 [ 331.106068][ T9583] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.106078][ T9583] do_sock_setsockopt+0x221/0x470 [ 331.106093][ T9583] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 331.106115][ T9583] __sys_setsockopt+0x1a0/0x230 [ 331.106128][ T9583] __x64_sys_setsockopt+0xbd/0x160 [ 331.106138][ T9583] ? do_syscall_64+0x91/0x260 [ 331.106152][ T9583] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.106164][ T9583] do_syscall_64+0xcd/0x260 [ 331.106178][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.106188][ T9583] RIP: 0033:0x7f06fd58d169 [ 331.106198][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.106208][ T9583] RSP: 002b:00007f06fb3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.106218][ T9583] RAX: ffffffffffffffda RBX: 00007f06fd7a5fa0 RCX: 00007f06fd58d169 [ 331.106224][ T9583] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 331.106230][ T9583] RBP: 00007f06fd60e730 R08: 0000000000000004 R09: 0000000000000000 [ 331.106236][ T9583] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 331.106242][ T9583] R13: 0000000000000000 R14: 00007f06fd7a5fa0 R15: 00007fff8c6fdea8 [ 331.106258][ T9583] [ 331.106262][ T9583] Mem-Info: [ 331.456736][ T9583] active_anon:7247 inactive_anon:0 isolated_anon:0 [ 331.456736][ T9583] active_file:10396 inactive_file:39462 isolated_file:0 [ 331.456736][ T9583] unevictable:897 dirty:177 writeback:0 [ 331.456736][ T9583] slab_reclaimable:11351 slab_unreclaimable:104519 [ 331.456736][ T9583] mapped:36735 shmem:2483 pagetables:1010 [ 331.456736][ T9583] sec_pagetables:0 bounce:0 [ 331.456736][ T9583] kernel_misc_reclaimable:0 [ 331.456736][ T9583] free:1299882 free_pcp:8136 free_cma:0 [ 331.561799][ T9583] Node 0 active_anon:33588kB inactive_anon:0kB active_file:41584kB inactive_file:157772kB unevictable:2052kB isolated(anon):0kB isolated(file):0kB mapped:151740kB dirty:708kB writeback:0kB shmem:13096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11540kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.667133][ T9583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.713036][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 331.770862][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 331.780767][ T9583] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.959633][ T9643] 9pnet_fd: p9_fd_create_unix (9643): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.542397][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.878621][ T9583] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 332.880879][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.894316][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.907460][ T5907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.916695][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.920905][ T9583] Node 0 DMA32 free:1297308kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:48212kB inactive_anon:0kB active_file:41584kB inactive_file:156192kB unevictable:2052kB writepending:804kB present:3129332kB managed:2541536kB mlocked:0kB bounce:0kB free_pcp:8452kB local_pcp:868kB free_cma:0kB [ 332.969399][ T5907] usb 3-1: config 0 descriptor?? [ 333.021012][ T9583] lowmem_reserve[]: 0 0 1 1 1 [ 333.031845][ T9583] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 333.186498][ T9583] lowmem_reserve[]: 0 0 0 0 0 [ 333.206829][ T9583] Node 1 Normal free:3873168kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18060kB local_pcp:17616kB free_cma:0kB [ 333.413014][ T9583] lowmem_reserve[]: 0 0 0 0 0 [ 333.421726][ T9583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 333.498894][ T9583] Node 0 DMA32: 53*4kB (UE) 25*8kB (UE) 9*16kB (ME) 77*32kB (UME) 153*64kB (UME) 151*128kB (UME) 170*256kB (UME) 113*512kB (UM) 92*1024kB (UME) 15*2048kB (UME) 255*4096kB (UM) = 1302924kB [ 333.547385][ T9583] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 333.623549][ T5907] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 333.724108][ T9583] Node 1 Normal: 3*4kB (UE) 9*8kB (UME) 9*16kB (UME) 11*32kB (UME) 12*64kB (UME) 5*128kB (UME) 6*256kB (UME) 2*512kB (M) 6*1024kB (UM) 4*2048kB (UE) 941*4096kB (UM) = 3873220kB [ 333.756450][ T5907] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 333.770873][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 333.867169][ T9583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.891807][ T9583] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.923339][ T9583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.948173][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 333.986578][ T9583] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.018235][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.042223][ T9583] 54318 total pagecache pages [ 334.046943][ T9583] 0 pages in swap cache [ 334.054474][ T9] usb 2-1: config 0 descriptor?? [ 334.061601][ T9583] Free swap = 124996kB [ 334.066924][ T9583] Total swap = 124996kB [ 334.072612][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 334.091652][ T9583] 2097051 pages RAM [ 334.100072][ T9583] 0 pages HighMem/MovableOnly [ 334.231841][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.255332][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.792513][ T9583] 429625 pages reserved [ 335.647780][ T9583] 0 pages cma reserved [ 335.756751][ T5907] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 335.838893][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 336.002543][ T5907] usb 3-1: device descriptor read/64, error -32 [ 336.271606][ T5907] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 336.444077][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.855'. [ 336.462775][ T5876] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 336.733417][ T5876] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.747967][ T5876] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.924458][ T9] usb 2-1: Detected FT232A [ 336.980471][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 337.003206][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.034112][ T9] usb 2-1: USB disconnect, device number 31 [ 337.133123][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 337.218654][ T5906] usb 3-1: USB disconnect, device number 16 [ 337.229919][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 337.270540][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 337.433962][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 337.554619][ T9] ftdi_sio 2-1:0.0: device disconnected [ 337.584713][ T5876] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.605740][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.771379][ T5876] usb 4-1: Product: syz [ 337.784434][ T5876] usb 4-1: Manufacturer: syz [ 337.799795][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 337.815340][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 337.829649][ T5876] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 337.848117][ T5876] cdc_wdm 4-1:1.0: Unknown control protocol [ 337.966559][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 338.276501][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.359801][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.415480][ T5876] usb 4-1: USB disconnect, device number 22 [ 339.757157][ T9720] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 340.280878][ T30] audit: type=1400 audit(1744228673.964:524): avc: denied { ioctl } for pid=9722 comm="syz.3.864" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.336954][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 340.758086][ T30] audit: type=1400 audit(1744228674.004:525): avc: denied { prog_load } for pid=9727 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.803472][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.834618][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.873415][ T30] audit: type=1400 audit(1744228674.004:526): avc: denied { bpf } for pid=9727 comm="syz.4.865" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.901648][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.938014][ T5928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.954544][ T30] audit: type=1400 audit(1744228674.024:527): avc: denied { create } for pid=9729 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.986633][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.996738][ T30] audit: type=1400 audit(1744228674.044:528): avc: denied { setopt } for pid=9729 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.016862][ T5928] usb 4-1: config 0 descriptor?? [ 341.022059][ T30] audit: type=1400 audit(1744228674.064:529): avc: denied { read } for pid=5181 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 341.044233][ T30] audit: type=1400 audit(1744228674.064:530): avc: denied { search } for pid=5181 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.066950][ T30] audit: type=1400 audit(1744228674.064:531): avc: denied { map_create } for pid=9727 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.098047][ T30] audit: type=1400 audit(1744228674.064:532): avc: denied { append } for pid=5181 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.136519][ T30] audit: type=1400 audit(1744228674.064:533): avc: denied { open } for pid=5181 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.413113][ T81] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 341.611968][ T81] usb 3-1: Using ep0 maxpacket: 32 [ 341.690600][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.721548][ T5928] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 341.849553][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.043056][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.076566][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.203622][ T5928] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 342.235360][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.301135][ T81] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 342.523096][ T9750] overlayfs: missing 'workdir' [ 342.540832][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.774301][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.047816][ T81] usb 3-1: config 0 descriptor?? [ 343.140877][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 343.407944][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.814346][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.279587][ T81] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0014/input/input31 [ 344.291609][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.720444][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 344.737480][ T81] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0014/input/input32 [ 344.749026][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.806582][ T5878] usb 4-1: USB disconnect, device number 23 [ 344.857500][ T24] usb 6-1: config 0 descriptor?? [ 344.907001][ T81] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 344.931406][ T81] usb 3-1: USB disconnect, device number 17 [ 345.139595][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 345.148323][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 345.327934][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 345.496199][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 345.496215][ T30] audit: type=1400 audit(1744228679.184:582): avc: denied { create } for pid=9766 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.531002][ T30] audit: type=1400 audit(1744228679.214:583): avc: denied { ioctl } for pid=9767 comm="syz.5.876" path="socket:[20259]" dev="sockfs" ino=20259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.639879][ T30] audit: type=1400 audit(1744228679.294:584): avc: denied { read append } for pid=9766 comm="syz.4.875" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.107068][ T30] audit: type=1400 audit(1744228679.304:585): avc: denied { open } for pid=9766 comm="syz.4.875" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.328496][ T24] usb 6-1: USB disconnect, device number 3 [ 346.343592][ T30] audit: type=1400 audit(1744228679.304:586): avc: denied { map } for pid=9766 comm="syz.4.875" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.956545][ T30] audit: type=1400 audit(1744228679.304:587): avc: denied { write execute } for pid=9766 comm="syz.4.875" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 347.706686][ T30] audit: type=1400 audit(1744228679.304:588): avc: denied { read } for pid=9766 comm="syz.4.875" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.860278][ T30] audit: type=1400 audit(1744228679.304:589): avc: denied { open } for pid=9766 comm="syz.4.875" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.883654][ T30] audit: type=1400 audit(1744228679.304:590): avc: denied { ioctl } for pid=9766 comm="syz.4.875" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.912145][ T30] audit: type=1400 audit(1744228679.704:591): avc: denied { create } for pid=9763 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 348.092828][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.881'. [ 348.930120][ T9788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.318075][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 351.294619][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 351.752779][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 351.752796][ T30] audit: type=1400 audit(1744228685.444:609): avc: denied { module_request } for pid=9829 comm="syz.2.892" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 351.884830][ T30] audit: type=1400 audit(1744228685.494:610): avc: denied { create } for pid=9829 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.941937][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 351.954933][ T30] audit: type=1400 audit(1744228685.494:611): avc: denied { bind } for pid=9829 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.017929][ T30] audit: type=1400 audit(1744228685.494:612): avc: denied { name_bind } for pid=9829 comm="syz.2.892" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 352.081749][ T30] audit: type=1400 audit(1744228685.494:613): avc: denied { node_bind } for pid=9829 comm="syz.2.892" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 352.127753][ T30] audit: type=1400 audit(1744228685.764:614): avc: denied { mounton } for pid=9849 comm="syz.3.896" path="/195/file1" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 352.150543][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 352.186849][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 352.200841][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.219187][ T9] usb 5-1: Product: syz [ 352.224082][ T9] usb 5-1: Manufacturer: syz [ 352.234616][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 352.254418][ T9] usb 5-1: SerialNumber: syz [ 352.259203][ T30] audit: type=1400 audit(1744228685.944:615): avc: denied { shutdown } for pid=9852 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.300165][ T9] usb 5-1: config 0 descriptor?? [ 352.313347][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 352.410879][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 352.421829][ T5906] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 352.431802][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.471461][ T5906] usb 6-1: config 0 descriptor?? [ 352.498527][ T5906] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 352.528342][ T5906] usb 6-1: Detected FT4232H [ 352.695664][ T30] audit: type=1400 audit(1744228686.384:616): avc: denied { read write } for pid=9860 comm="syz.2.899" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 352.810807][ T30] audit: type=1400 audit(1744228686.414:617): avc: denied { open } for pid=9860 comm="syz.2.899" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 353.019793][ T30] audit: type=1400 audit(1744228686.534:618): avc: denied { mount } for pid=9860 comm="syz.2.899" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 353.134453][ T9866] loop9: detected capacity change from 0 to 8 [ 353.576089][ T9] gspca_stk1135: reg_w 0x3 err -110 [ 353.584542][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 353.599274][ T9] gspca_stk1135: Sensor write failed [ 353.605410][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 353.612429][ T9] gspca_stk1135: Sensor write failed [ 353.617929][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 353.624707][ T9] gspca_stk1135: Sensor read failed [ 353.629981][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 353.636769][ T9] gspca_stk1135: Sensor read failed [ 353.647208][ T9866] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 353.653433][ T9866] loop9: partition table partially beyond EOD, truncated [ 353.662596][ T9866] loop9: p1 size 81768186 extends beyond EOD, truncated [ 353.691774][ T9870] 9pnet_fd: p9_fd_create_unix (9870): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 353.741846][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 354.119945][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 354.141320][ T9] gspca_stk1135: Sensor read failed [ 354.156660][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 354.173556][ T9] gspca_stk1135: Sensor read failed [ 354.190272][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 354.205034][ T9] gspca_stk1135: Sensor write failed [ 354.217503][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 354.233339][ T9] gspca_stk1135: Sensor write failed [ 354.246813][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 354.659044][ T9879] netlink: 'syz.4.893': attribute type 2 has an invalid length. [ 354.680594][ T9879] netlink: 119 bytes leftover after parsing attributes in process `syz.4.893'. [ 355.401981][ T5906] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 355.520811][ T5906] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 355.529718][ T5906] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 355.559612][ T5906] usb 6-1: USB disconnect, device number 4 [ 355.592660][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 355.603080][ T5906] ftdi_sio 6-1:0.0: device disconnected [ 356.911189][ T1066] block nbd0: Possible stuck request ffff888026900000: control (read@0,4096B). Runtime 90 seconds [ 356.948136][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 356.948152][ T30] audit: type=1400 audit(1744228690.634:642): avc: denied { read } for pid=5181 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 357.090814][ T24] usb 5-1: USB disconnect, device number 19 [ 357.144761][ T30] audit: type=1400 audit(1744228690.634:643): avc: denied { search } for pid=5181 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.202339][ T30] audit: type=1400 audit(1744228690.634:644): avc: denied { append } for pid=5181 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.254323][ T30] audit: type=1400 audit(1744228690.634:645): avc: denied { open } for pid=5181 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.321380][ T30] audit: type=1400 audit(1744228690.634:646): avc: denied { getattr } for pid=5181 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.400772][ T5928] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 357.420485][ T30] audit: type=1400 audit(1744228690.674:647): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.10.54 dest=45820 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.517442][ T30] audit: type=1400 audit(1744228690.674:648): avc: denied { map_create } for pid=9892 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.564069][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 357.576617][ T30] audit: type=1400 audit(1744228690.714:649): avc: denied { read write } for pid=8928 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.617299][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.628540][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 357.660392][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.683403][ T30] audit: type=1400 audit(1744228690.714:650): avc: denied { open } for pid=8928 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.727547][ T9923] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 357.735589][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.816082][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.858175][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.880910][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.902449][ T30] audit: type=1400 audit(1744228690.714:651): avc: denied { ioctl } for pid=8928 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.933744][ T5928] usb 4-1: config 0 descriptor?? [ 357.940299][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.957354][ T5928] hub 4-1:0.0: USB hub found [ 358.020787][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.119141][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.182501][ T24] usb 6-1: config 0 descriptor?? [ 358.195489][ T5928] hub 4-1:0.0: 1 port detected [ 359.105754][ T24] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 359.115100][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.148593][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.161454][ T9934] ALSA: mixer_oss: invalid OSS volume '' [ 359.187347][ T5928] hub 4-1:0.0: activate --> -90 [ 359.211561][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 359.330888][ T9952] netlink: 'syz.2.916': attribute type 8 has an invalid length. [ 359.772648][ T5906] usb 4-1: USB disconnect, device number 24 [ 360.301187][ T5928] usb 4-1-port1: config error [ 360.705063][ T9975] tmpfs: Unknown parameter '18446744073709551615' [ 360.879943][ T9977] nbd: must specify a device to reconfigure [ 361.003844][ T9980] FAULT_INJECTION: forcing a failure. [ 361.003844][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 361.022690][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.4.925 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 361.022714][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 361.022723][ T9980] Call Trace: [ 361.022730][ T9980] [ 361.022736][ T9980] dump_stack_lvl+0x16c/0x1f0 [ 361.022763][ T9980] should_fail_ex+0x512/0x640 [ 361.022780][ T9980] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 361.022798][ T9980] should_failslab+0xc2/0x120 [ 361.022815][ T9980] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 361.022828][ T9980] ? __alloc_skb+0x2b2/0x380 [ 361.022848][ T9980] __alloc_skb+0x2b2/0x380 [ 361.022869][ T9980] ? __pfx___alloc_skb+0x10/0x10 [ 361.022885][ T9980] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 361.022907][ T9980] netlink_alloc_large_skb+0x69/0x130 [ 361.022925][ T9980] netlink_sendmsg+0x6a1/0xdd0 [ 361.022945][ T9980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.022971][ T9980] ____sys_sendmsg+0xa95/0xc70 [ 361.022994][ T9980] ? copy_msghdr_from_user+0x10a/0x160 [ 361.023012][ T9980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.023041][ T9980] ___sys_sendmsg+0x134/0x1d0 [ 361.023062][ T9980] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.023110][ T9980] __sys_sendmsg+0x16d/0x220 [ 361.023130][ T9980] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.023157][ T9980] ? rcu_is_watching+0x12/0xc0 [ 361.023185][ T9980] do_syscall_64+0xcd/0x260 [ 361.023208][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.023224][ T9980] RIP: 0033:0x7f3f61d8d169 [ 361.023238][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.023254][ T9980] RSP: 002b:00007f3f62c14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.023272][ T9980] RAX: ffffffffffffffda RBX: 00007f3f61fa5fa0 RCX: 00007f3f61d8d169 [ 361.023283][ T9980] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 361.023292][ T9980] RBP: 00007f3f62c14090 R08: 0000000000000000 R09: 0000000000000000 [ 361.023302][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.023312][ T9980] R13: 0000000000000000 R14: 00007f3f61fa5fa0 R15: 00007ffe03d3e868 [ 361.023334][ T9980] [ 362.806354][ T9] usb 6-1: USB disconnect, device number 5 [ 362.904162][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 362.904179][ T30] audit: type=1400 audit(1744228696.594:741): avc: denied { execute } for pid=9993 comm="syz.4.928" dev="tmpfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.029730][ T30] audit: type=1400 audit(1744228696.624:742): avc: denied { execute_no_trans } for pid=9993 comm="syz.4.928" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.078792][ T30] audit: type=1400 audit(1744228696.754:743): avc: denied { read write } for pid=9993 comm="syz.4.928" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 363.143513][ T9999] netlink: 'syz.4.928': attribute type 10 has an invalid length. [ 363.509608][ T30] audit: type=1400 audit(1744228696.754:744): avc: denied { open } for pid=9993 comm="syz.4.928" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 363.859561][ T30] audit: type=1400 audit(1744228696.864:745): avc: denied { create } for pid=9991 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.860319][ T9999] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.879285][ T30] audit: type=1400 audit(1744228696.864:746): avc: denied { setopt } for pid=9991 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.879442][ T30] audit: type=1400 audit(1744228696.914:747): avc: denied { getopt } for pid=9991 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.879586][ T30] audit: type=1400 audit(1744228697.524:748): avc: denied { egress } for pid=9970 comm="syz.1.922" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 363.879751][ T30] audit: type=1400 audit(1744228697.524:749): avc: denied { sendto } for pid=9970 comm="syz.1.922" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 363.879881][ T30] audit: type=1400 audit(1744228697.544:750): avc: denied { mounton } for pid=9995 comm="syz.5.929" path="/26/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 364.107242][T10006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 364.113771][T10006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 364.229015][T10006] vhci_hcd vhci_hcd.0: Device attached [ 364.360936][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 364.470975][ T1212] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 364.493720][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 364.503730][T10023] FAULT_INJECTION: forcing a failure. [ 364.503730][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 364.517747][ T9] usb 5-1: device descriptor read/64, error -71 [ 364.520126][T10023] CPU: 1 UID: 0 PID: 10023 Comm: syz.1.936 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 364.520148][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.520156][T10023] Call Trace: [ 364.520161][T10023] [ 364.520168][T10023] dump_stack_lvl+0x16c/0x1f0 [ 364.520191][T10023] should_fail_ex+0x512/0x640 [ 364.520211][T10023] should_failslab+0xc2/0x120 [ 364.520228][T10023] __kmalloc_cache_noprof+0x6a/0x3e0 [ 364.520249][T10023] ? __pfx___might_resched+0x10/0x10 [ 364.520270][T10023] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 364.520295][T10023] __hw_addr_add_ex+0x3c9/0x7c0 [ 364.520319][T10023] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 364.520338][T10023] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 364.520361][T10023] ? __pfx_macsec_setup+0x10/0x10 [ 364.520383][T10023] dev_addr_init+0x161/0x250 [ 364.520397][T10023] ? __pfx_dev_addr_init+0x10/0x10 [ 364.520417][T10023] alloc_netdev_mqs+0x3d2/0x1570 [ 364.520440][T10023] rtnl_create_link+0xc10/0xfa0 [ 364.520467][T10023] rtnl_newlink+0xb69/0x2000 [ 364.520491][T10023] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.520507][T10023] ? find_held_lock+0x2b/0x80 [ 364.520525][T10023] ? avc_has_perm_noaudit+0x117/0x3b0 [ 364.520543][T10023] ? avc_has_perm_noaudit+0x149/0x3b0 [ 364.520576][T10023] ? find_held_lock+0x2b/0x80 [ 364.520591][T10023] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.520607][T10023] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.520622][T10023] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 364.520639][T10023] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.520660][T10023] rtnetlink_rcv_msg+0x95b/0xe90 [ 364.520680][T10023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.520708][T10023] netlink_rcv_skb+0x16a/0x440 [ 364.520727][T10023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.520746][T10023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.520776][T10023] ? netlink_deliver_tap+0x1ae/0xd30 [ 364.520798][T10023] netlink_unicast+0x53a/0x7f0 [ 364.520819][T10023] ? __pfx_netlink_unicast+0x10/0x10 [ 364.520843][T10023] netlink_sendmsg+0x8d1/0xdd0 [ 364.520865][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.520892][T10023] ____sys_sendmsg+0xa95/0xc70 [ 364.520912][T10023] ? copy_msghdr_from_user+0x10a/0x160 [ 364.520929][T10023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.520961][T10023] ___sys_sendmsg+0x134/0x1d0 [ 364.520978][T10023] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.521022][T10023] __sys_sendmsg+0x16d/0x220 [ 364.521038][T10023] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.521061][T10023] ? rcu_is_watching+0x12/0xc0 [ 364.521085][T10023] do_syscall_64+0xcd/0x260 [ 364.521107][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.521121][T10023] RIP: 0033:0x7f20af38d169 [ 364.521134][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.521147][T10023] RSP: 002b:00007f20b0224038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.521163][T10023] RAX: ffffffffffffffda RBX: 00007f20af5a5fa0 RCX: 00007f20af38d169 [ 364.521172][T10023] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 364.521180][T10023] RBP: 00007f20b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 364.521188][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.521196][T10023] R13: 0000000000000000 R14: 00007f20af5a5fa0 R15: 00007ffcee284d58 [ 364.521215][T10023] [ 364.660752][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.906180][T10008] vhci_hcd: connection reset by peer [ 364.916469][ T9898] vhci_hcd: stop threads [ 364.920989][ T9898] vhci_hcd: release socket [ 364.926108][ T9898] vhci_hcd: disconnect device [ 364.954450][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 365.012419][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 365.019277][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.030394][ T5928] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.039445][ T5928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 365.048765][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.058495][ T5928] usb 6-1: config 0 descriptor?? [ 365.090893][ T9] usb 5-1: device descriptor read/64, error -71 [ 365.202946][ T9] usb usb5-port1: attempt power cycle [ 365.561475][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 365.584689][ T9] usb 5-1: device descriptor read/8, error -71 [ 365.990967][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.280843][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 366.305549][ T5928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 366.314829][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.320850][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 366.330804][ T5928] usb 4-1: Product: syz [ 366.341257][ T5928] usb 4-1: Manufacturer: syz [ 366.345947][ T5928] usb 4-1: SerialNumber: syz [ 366.372038][ T5928] usb 4-1: config 0 descriptor?? [ 366.380692][ T9] usb 5-1: device descriptor read/8, error -71 [ 366.604110][ T9] usb usb5-port1: unable to enumerate USB device [ 366.611489][ T5928] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 367.236683][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.261314][T10050] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 367.320422][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.934785][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 367.934800][ T30] audit: type=1400 audit(1744228701.624:779): avc: denied { setopt } for pid=10062 comm="syz.4.948" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 367.964413][T10063] openvswitch: netlink: Actions may not be safe on all matching packets [ 367.978575][ T30] audit: type=1400 audit(1744228701.664:780): avc: denied { read } for pid=10062 comm="syz.4.948" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.046888][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 368.138130][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.162696][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.176318][T10067] nbd: must specify a device to reconfigure [ 368.453970][ T5928] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 368.616801][ T5928] usb 4-1: USB disconnect, device number 25 [ 368.686643][ T30] audit: type=1400 audit(1744228702.374:781): avc: denied { read } for pid=10072 comm="syz.1.951" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.728713][ T9] usb 6-1: USB disconnect, device number 6 [ 368.804046][ T30] audit: type=1400 audit(1744228702.374:782): avc: denied { open } for pid=10072 comm="syz.1.951" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.834161][ T30] audit: type=1400 audit(1744228702.374:783): avc: denied { ioctl } for pid=10072 comm="syz.1.951" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.989861][T10078] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 368.998479][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 369.507720][ T30] audit: type=1400 audit(1744228703.194:784): avc: denied { map } for pid=10083 comm="syz.1.955" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.545004][ T30] audit: type=1400 audit(1744228703.194:785): avc: denied { execute } for pid=10083 comm="syz.1.955" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.587102][ T30] audit: type=1400 audit(1744228703.264:786): avc: denied { map } for pid=10084 comm="syz.4.956" path="socket:[23001]" dev="sockfs" ino=23001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 369.612299][ T1212] vhci_hcd: vhci_device speed not set [ 369.618762][ T30] audit: type=1400 audit(1744228703.264:787): avc: denied { accept } for pid=10084 comm="syz.4.956" path="socket:[23001]" dev="sockfs" ino=23001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 369.711226][T10090] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 371.017881][ T30] audit: type=1400 audit(1744228704.704:788): avc: denied { create } for pid=10097 comm="syz.3.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 371.075632][T10100] nbd: must specify a device to reconfigure [ 371.310570][T10106] FAULT_INJECTION: forcing a failure. [ 371.310570][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 371.323251][T10106] CPU: 1 UID: 0 PID: 10106 Comm: syz.3.962 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 371.323266][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.323273][T10106] Call Trace: [ 371.323276][T10106] [ 371.323280][T10106] dump_stack_lvl+0x16c/0x1f0 [ 371.323298][T10106] should_fail_ex+0x512/0x640 [ 371.323309][T10106] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 371.323326][T10106] should_failslab+0xc2/0x120 [ 371.323338][T10106] __kmalloc_cache_noprof+0x6a/0x3e0 [ 371.323353][T10106] ? smc_pnet_add+0xe3f/0x1780 [ 371.323367][T10106] smc_pnet_add+0xe3f/0x1780 [ 371.323381][T10106] ? __pfx_smc_pnet_add+0x10/0x10 [ 371.323394][T10106] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 371.323412][T10106] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 371.323430][T10106] genl_family_rcv_msg_doit+0x206/0x2f0 [ 371.323446][T10106] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.323466][T10106] ? bpf_lsm_capable+0x9/0x10 [ 371.323475][T10106] ? security_capable+0x7e/0x260 [ 371.323489][T10106] genl_rcv_msg+0x55c/0x800 [ 371.323505][T10106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.323520][T10106] ? __pfx_smc_pnet_add+0x10/0x10 [ 371.323532][T10106] ? __lock_acquire+0xaa4/0x1ba0 [ 371.323545][T10106] netlink_rcv_skb+0x16a/0x440 [ 371.323558][T10106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.323573][T10106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.323593][T10106] ? __pfx_down_read+0x10/0x10 [ 371.323608][T10106] ? netlink_deliver_tap+0x1ae/0xd30 [ 371.323622][T10106] genl_rcv+0x28/0x40 [ 371.323635][T10106] netlink_unicast+0x53a/0x7f0 [ 371.323649][T10106] ? __pfx_netlink_unicast+0x10/0x10 [ 371.323670][T10106] netlink_sendmsg+0x8d1/0xdd0 [ 371.323684][T10106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.323703][T10106] ____sys_sendmsg+0xa95/0xc70 [ 371.323718][T10106] ? copy_msghdr_from_user+0x10a/0x160 [ 371.323729][T10106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.323750][T10106] ___sys_sendmsg+0x134/0x1d0 [ 371.323762][T10106] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.323790][T10106] __sys_sendmsg+0x16d/0x220 [ 371.323802][T10106] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.323822][T10106] do_syscall_64+0xcd/0x260 [ 371.323836][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.323846][T10106] RIP: 0033:0x7f998898d169 [ 371.323855][T10106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.323864][T10106] RSP: 002b:00007f9989735038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.323874][T10106] RAX: ffffffffffffffda RBX: 00007f9988ba6080 RCX: 00007f998898d169 [ 371.323880][T10106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 371.323885][T10106] RBP: 00007f9989735090 R08: 0000000000000000 R09: 0000000000000000 [ 371.323890][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.323895][T10106] R13: 0000000000000000 R14: 00007f9988ba6080 R15: 00007ffcd3602478 [ 371.323908][T10106] [ 371.753561][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 372.000819][ T81] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 372.150914][ T81] usb 5-1: Using ep0 maxpacket: 16 [ 372.178154][ T81] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 372.189529][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.206930][ T81] usb 5-1: Product: syz [ 372.240498][ T81] usb 5-1: Manufacturer: syz [ 372.259793][ T81] usb 5-1: SerialNumber: syz [ 372.345832][ T81] r8152-cfgselector 5-1: Unknown version 0x0000 [ 372.389838][ T81] r8152-cfgselector 5-1: config 0 descriptor?? [ 372.393897][T10117] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 372.442302][T10117] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.964'. [ 373.119891][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.966'. [ 373.152295][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.966'. [ 374.179730][ T81] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 374.681653][ T5928] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 374.731069][ T81] usb 2-1: Using ep0 maxpacket: 16 [ 374.740152][ T81] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.752769][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 374.788682][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.804923][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 374.804938][ T30] audit: type=1400 audit(1744228708.494:797): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 374.853159][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.878389][ T81] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 374.888475][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.901207][ T81] usb 2-1: config 0 descriptor?? [ 374.907152][T10132] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 375.010522][ T81] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 375.027261][ T30] audit: type=1400 audit(1744228708.714:798): avc: denied { read } for pid=5184 comm="acpid" name="js0" dev="devtmpfs" ino=3172 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.136947][ T30] audit: type=1400 audit(1744228708.714:799): avc: denied { open } for pid=5184 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3172 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.187774][ T5876] usb 2-1: USB disconnect, device number 32 [ 375.210489][ T5842] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 375.234435][ T30] audit: type=1400 audit(1744228708.714:800): avc: denied { ioctl } for pid=5184 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3172 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.520904][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 375.718838][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.979'. [ 375.734525][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.979'. [ 375.782341][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.820889][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 375.846581][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.875917][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.900858][ T24] usb 4-1: Product: syz [ 375.905070][ T24] usb 4-1: Manufacturer: syz [ 375.927325][ T24] usb 4-1: SerialNumber: syz [ 376.020766][ T30] audit: type=1400 audit(1744228709.664:801): avc: denied { ioctl } for pid=10161 comm="syz.1.981" path="socket:[22003]" dev="sockfs" ino=22003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.145108][ T30] audit: type=1400 audit(1744228709.794:802): avc: denied { create } for pid=10159 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 376.167184][ T30] audit: type=1400 audit(1744228709.794:803): avc: denied { connect } for pid=10159 comm="syz.4.980" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.210135][T10150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 376.353172][T10164] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 376.383924][ T30] audit: type=1400 audit(1744228709.824:804): avc: denied { append } for pid=10161 comm="syz.1.981" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 377.007107][ T30] audit: type=1400 audit(1744228709.824:805): avc: denied { map } for pid=10161 comm="syz.1.981" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 377.031288][ T30] audit: type=1400 audit(1744228709.824:806): avc: denied { write execute } for pid=10161 comm="syz.1.981" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 377.308001][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.320397][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.321713][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.347569][T10150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.457071][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.471402][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.480462][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.876885][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.610061][ T24] cdc_mbim 4-1:1.0: failed to get mac address [ 378.741652][ T24] cdc_mbim 4-1:1.0: bind() failure [ 378.819463][T10170] 9pnet_fd: p9_fd_create_unix (10170): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 378.904275][ T24] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 379.047281][ T24] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 379.067395][ T24] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 379.084533][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.104002][ T24] usb 4-1: USB disconnect, device number 26 [ 379.216992][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.363200][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.591560][ T5841] Bluetooth: hci3: command tx timeout [ 379.756798][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.341243][T10197] FAULT_INJECTION: forcing a failure. [ 380.341243][T10197] name failslab, interval 1, probability 0, space 0, times 0 [ 380.353982][T10197] CPU: 1 UID: 0 PID: 10197 Comm: syz.4.988 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 380.354005][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.354015][T10197] Call Trace: [ 380.354021][T10197] [ 380.354028][T10197] dump_stack_lvl+0x16c/0x1f0 [ 380.354055][T10197] should_fail_ex+0x512/0x640 [ 380.354072][T10197] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 380.354092][T10197] should_failslab+0xc2/0x120 [ 380.354111][T10197] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 380.354126][T10197] ? preempt_schedule_thunk+0x16/0x30 [ 380.354146][T10197] ? alloc_empty_file+0x55/0x1e0 [ 380.354170][T10197] alloc_empty_file+0x55/0x1e0 [ 380.354191][T10197] alloc_file_pseudo+0x13a/0x230 [ 380.354213][T10197] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 380.354234][T10197] ? alloc_fd+0x471/0x7d0 [ 380.354253][T10197] sock_alloc_file+0x50/0x210 [ 380.354276][T10197] __sys_socket+0x1c0/0x260 [ 380.354288][T10197] ? fput+0x70/0xf0 [ 380.354305][T10197] ? __pfx___sys_socket+0x10/0x10 [ 380.354317][T10197] ? ksys_write+0x1b9/0x240 [ 380.354339][T10197] __x64_sys_socket+0x72/0xb0 [ 380.354352][T10197] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.354373][T10197] do_syscall_64+0xcd/0x260 [ 380.354396][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.354412][T10197] RIP: 0033:0x7f3f61d8d169 [ 380.354425][T10197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.354439][T10197] RSP: 002b:00007f3f62bd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 380.354454][T10197] RAX: ffffffffffffffda RBX: 00007f3f61fa6160 RCX: 00007f3f61d8d169 [ 380.354465][T10197] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 380.354474][T10197] RBP: 00007f3f62bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 380.354483][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.354492][T10197] R13: 0000000000000001 R14: 00007f3f61fa6160 R15: 00007ffe03d3e868 [ 380.354514][T10197] [ 380.607811][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 380.841377][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'. [ 380.991625][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'. [ 381.064830][T10203] sp0: Synchronizing with TNC [ 381.109524][T10203] [U] è [ 381.170510][ T13] !€ÿ: left promiscuous mode [ 381.184087][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 381.184101][ T30] audit: type=1400 audit(1744228714.874:810): avc: denied { unlink } for pid=10208 comm="syz.4.992" name="#b" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.221297][ T13] bond_slave_1: left promiscuous mode [ 381.306551][ T30] audit: type=1400 audit(1744228714.874:811): avc: denied { mount } for pid=10208 comm="syz.4.992" name="/" dev="overlay" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.329983][ T30] audit: type=1400 audit(1744228714.964:812): avc: denied { read } for pid=10208 comm="syz.4.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.681773][ T5841] Bluetooth: hci3: command tx timeout [ 381.995478][ T30] audit: type=1400 audit(1744228715.664:813): avc: denied { ioctl } for pid=10208 comm="syz.4.992" path="socket:[23415]" dev="sockfs" ino=23415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.160740][ T30] audit: type=1400 audit(1744228715.834:814): avc: denied { setopt } for pid=10193 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 382.351284][ T30] audit: type=1400 audit(1744228716.034:815): avc: denied { bind } for pid=10219 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.463607][ T30] audit: type=1400 audit(1744228716.034:816): avc: denied { listen } for pid=10219 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.507199][ T30] audit: type=1400 audit(1744228716.034:817): avc: denied { accept } for pid=10219 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.399061][ T13] bond0 (unregistering): left allmulticast mode [ 383.405702][ T13] !€ÿ: left allmulticast mode [ 383.410618][ T13] bond_slave_1: left allmulticast mode [ 383.437446][ T13] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 383.449855][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.463946][ T13] bond0 (unregistering): Released all slaves [ 383.607616][ T30] audit: type=1400 audit(1744228717.284:818): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.769049][ T5841] Bluetooth: hci3: command tx timeout [ 384.233872][T10236] overlayfs: conflicting lowerdir path [ 384.420880][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 384.581098][ T30] audit: type=1400 audit(1744228717.924:819): avc: denied { mounton } for pid=10232 comm="syz.4.997" path="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.662328][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 384.676579][T10176] chnl_net:caif_netlink_parms(): no params data found [ 384.952024][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.974620][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.010770][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.048990][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.077752][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.212440][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 385.341415][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 385.426626][ T24] usb 2-1: config 0 descriptor?? [ 385.754464][T10263] overlayfs: conflicting lowerdir path [ 385.833509][ T5841] Bluetooth: hci3: command tx timeout [ 386.015442][ T13] hsr_slave_0: left promiscuous mode [ 386.032002][ T13] hsr_slave_1: left promiscuous mode [ 386.058787][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.122626][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.163767][ T24] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 386.207498][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.263394][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.264117][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 386.340928][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 386.340943][ T30] audit: type=1400 audit(1744228720.024:822): avc: denied { setopt } for pid=10273 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.376351][ T13] veth1_macvtap: left promiscuous mode [ 386.412609][ T13] veth0_macvtap: left promiscuous mode [ 387.204273][ T30] audit: type=1400 audit(1744228720.074:823): avc: denied { write } for pid=10273 comm="syz.3.1005" path="socket:[23505]" dev="sockfs" ino=23505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.300825][ T13] veth1_vlan: left promiscuous mode [ 387.316737][ T13] veth0_vlan: left promiscuous mode [ 387.422345][ T30] audit: type=1400 audit(1744228721.104:824): avc: denied { accept } for pid=10273 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 387.584146][ T30] audit: type=1400 audit(1744228721.104:825): avc: denied { sys_module } for pid=10273 comm="syz.3.1005" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 387.614957][ T24] usb 2-1: USB disconnect, device number 33 [ 387.693523][ T1066] block nbd0: Possible stuck request ffff888026900000: control (read@0,4096B). Runtime 120 seconds [ 387.711015][ T30] audit: type=1400 audit(1744228721.104:826): avc: denied { module_load } for pid=10273 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 387.767883][ T30] audit: type=1326 audit(1744228721.454:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20af38d169 code=0x7ffc0000 [ 387.827621][ T30] audit: type=1326 audit(1744228721.484:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f20af38d169 code=0x7ffc0000 [ 387.864234][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 387.875668][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'. [ 387.892029][ T30] audit: type=1326 audit(1744228721.484:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20af38d169 code=0x7ffc0000 [ 387.943864][ T30] audit: type=1326 audit(1744228721.484:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20af38d169 code=0x7ffc0000 [ 387.969482][ T30] audit: type=1326 audit(1744228721.484:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20af38bad0 code=0x7ffc0000 [ 388.073274][T10296] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 388.754004][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 388.840392][ T13] team0 (unregistering): Port device team_slave_1 removed [ 388.902087][ T13] team0 (unregistering): Port device team_slave_0 removed [ 388.916769][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 388.917632][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 388.917655][ T9] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 388.917673][ T9] usb 4-1: Manufacturer: syz [ 388.919759][ T9] usb 4-1: config 0 descriptor?? [ 388.959325][T10298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.384975][ T9] elan 0003:04F3:0755.0017: unknown main item tag 0x3 [ 389.385568][ T5928] infiniband syz2: ib_query_port failed (-19) [ 389.436071][ T9] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.3-1/input0 [ 389.570949][T10308] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 389.711261][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.879604][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.930846][T10176] bridge_slave_0: entered allmulticast mode [ 389.963764][T10176] bridge_slave_0: entered promiscuous mode [ 389.992846][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.000082][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.035293][T10176] bridge_slave_1: entered allmulticast mode [ 390.056890][T10176] bridge_slave_1: entered promiscuous mode [ 390.571664][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 390.701956][ T9] usb 4-1: reset full-speed USB device number 27 using dummy_hcd [ 390.912545][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.956428][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.293193][T10176] team0: Port device team_slave_0 added [ 391.485861][T10176] team0: Port device team_slave_1 added [ 392.005048][ T5907] usb 4-1: USB disconnect, device number 27 [ 392.452754][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 392.513918][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 392.520830][T10344] 9pnet_fd: Insufficient options for proto=fd [ 392.539818][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 392.752628][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.826218][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.852449][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.062874][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.484950][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.494351][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.520777][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.358305][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 394.487102][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 394.487144][ T30] audit: type=1400 audit(1744228728.164:854): avc: denied { block_suspend } for pid=10365 comm="syz.4.1027" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.514687][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.544672][ T30] audit: type=1400 audit(1744228728.164:855): avc: denied { create } for pid=10365 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 394.577120][ T30] audit: type=1400 audit(1744228728.174:856): avc: denied { bind } for pid=10365 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 394.613394][T10176] hsr_slave_0: entered promiscuous mode [ 394.625960][T10176] hsr_slave_1: entered promiscuous mode [ 394.632787][T10176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.801474][T10176] Cannot create hsr debugfs directory [ 394.969157][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 395.106308][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1030'. [ 395.992224][ T30] audit: type=1400 audit(1744228729.674:858): avc: denied { create } for pid=10386 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 396.011699][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.035260][ T30] audit: type=1400 audit(1744228729.674:857): avc: denied { create } for pid=10386 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 396.158453][T10401] 9pnet_fd: Insufficient options for proto=fd [ 396.903292][T10176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.937760][T10176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.782799][T10176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.838008][T10176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.926674][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.490235][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.934706][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.956402][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.973220][ T5907] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.982420][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.993153][ T5907] usb 6-1: config 0 descriptor?? [ 399.015061][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.238056][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.927113][ T5907] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 399.938247][ T5907] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 399.985600][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.992803][ T6246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.033534][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.040728][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.059140][ T30] audit: type=1400 audit(1744228733.744:859): avc: denied { shutdown } for pid=10435 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.101044][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 400.151606][ T30] audit: type=1400 audit(1744228733.744:860): avc: denied { getopt } for pid=10435 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.218230][ T30] audit: type=1800 audit(1744228733.744:861): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1041" name="bus" dev="overlay" ino=1079 res=0 errno=0 [ 400.889575][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.928798][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.430859][ T81] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 401.705003][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.730832][ T81] usb 6-1: device descriptor read/64, error -32 [ 402.011779][T10478] usb usb1: usbfs: process 10478 (syz.1.1047) did not claim interface 0 before use [ 402.025515][T10478] FAULT_INJECTION: forcing a failure. [ 402.025515][T10478] name failslab, interval 1, probability 0, space 0, times 0 [ 402.038241][T10478] CPU: 1 UID: 0 PID: 10478 Comm: syz.1.1047 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 402.038265][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.038274][T10478] Call Trace: [ 402.038281][T10478] [ 402.038287][T10478] dump_stack_lvl+0x16c/0x1f0 [ 402.038318][T10478] should_fail_ex+0x512/0x640 [ 402.038340][T10478] should_failslab+0xc2/0x120 [ 402.038358][T10478] __kmalloc_cache_noprof+0x6a/0x3e0 [ 402.038384][T10478] ? preempt_schedule_thunk+0x16/0x30 [ 402.038401][T10478] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 402.038428][T10478] __hw_addr_add_ex+0x3c9/0x7c0 [ 402.038456][T10478] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 402.038479][T10478] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 402.038507][T10478] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 402.038526][T10478] dev_addr_init+0x161/0x250 [ 402.038542][T10478] ? __pfx_dev_addr_init+0x10/0x10 [ 402.038566][T10478] alloc_netdev_mqs+0x3d2/0x1570 [ 402.038589][T10478] ? __pfx_rtnl_newlink+0x10/0x10 [ 402.038611][T10478] rtnl_create_link+0xc10/0xfa0 [ 402.038635][T10478] rtnl_newlink+0xb69/0x2000 [ 402.038663][T10478] ? __pfx_rtnl_newlink+0x10/0x10 [ 402.038684][T10478] ? __pfx___schedule+0x10/0x10 [ 402.038712][T10478] ? lockdep_hardirqs_on+0x7c/0x110 [ 402.038739][T10478] ? preempt_schedule_thunk+0x16/0x30 [ 402.038760][T10478] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 402.038781][T10478] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 402.038817][T10478] ? __pfx_rtnl_newlink+0x10/0x10 [ 402.038838][T10478] rtnetlink_rcv_msg+0x95b/0xe90 [ 402.038861][T10478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.038885][T10478] ? __lock_acquire+0xaa4/0x1ba0 [ 402.038907][T10478] netlink_rcv_skb+0x16a/0x440 [ 402.038929][T10478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.038951][T10478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.038971][T10478] ? find_held_lock+0x2b/0x80 [ 402.039013][T10478] netlink_unicast+0x53a/0x7f0 [ 402.039037][T10478] ? __pfx_netlink_unicast+0x10/0x10 [ 402.039065][T10478] netlink_sendmsg+0x8d1/0xdd0 [ 402.039091][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.039122][T10478] ____sys_sendmsg+0xa95/0xc70 [ 402.039146][T10478] ? copy_msghdr_from_user+0x10a/0x160 [ 402.039166][T10478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.039196][T10478] ? plist_check_prev_next+0x12a/0x1a0 [ 402.039217][T10478] ___sys_sendmsg+0x134/0x1d0 [ 402.039237][T10478] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.039288][T10478] __sys_sendmsg+0x16d/0x220 [ 402.039313][T10478] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.039349][T10478] do_syscall_64+0xcd/0x260 [ 402.039372][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.039388][T10478] RIP: 0033:0x7f20af38d169 [ 402.039402][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.039417][T10478] RSP: 002b:00007f20b01e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.039433][T10478] RAX: ffffffffffffffda RBX: 00007f20af5a6160 RCX: 00007f20af38d169 [ 402.039443][T10478] RDX: 0000000024008040 RSI: 0000200000000080 RDI: 0000000000000006 [ 402.039452][T10478] RBP: 00007f20b01e2090 R08: 0000000000000000 R09: 0000000000000000 [ 402.039462][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.039471][T10478] R13: 0000000000000000 R14: 00007f20af5a6160 R15: 00007ffcee284d58 [ 402.039493][T10478] [ 402.374451][ T81] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 402.945790][T10487] vlan2: entered promiscuous mode [ 402.986732][T10487] bridge0: entered promiscuous mode [ 403.037881][T10487] vlan2: entered allmulticast mode [ 403.083875][T10487] bridge0: entered allmulticast mode [ 403.433514][ T5928] usb 6-1: USB disconnect, device number 7 [ 403.600032][ T30] audit: type=1400 audit(1744228737.284:862): avc: denied { create } for pid=10494 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.834194][ T30] audit: type=1400 audit(1744228737.374:863): avc: denied { getopt } for pid=10494 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.076713][T10487] 9pnet_fd: Insufficient options for proto=fd [ 404.078917][ T30] audit: type=1400 audit(1744228737.764:864): avc: denied { write } for pid=10486 comm="syz.5.1050" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.169668][T10176] veth0_vlan: entered promiscuous mode [ 404.193290][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 404.376465][T10176] veth1_vlan: entered promiscuous mode [ 404.398770][ T30] audit: type=1400 audit(1744228738.084:865): avc: denied { create } for pid=10494 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 404.425699][ T30] audit: type=1400 audit(1744228738.084:866): avc: denied { watch } for pid=10512 comm="syz.5.1057" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 404.983870][ T30] audit: type=1400 audit(1744228738.084:867): avc: denied { watch_sb watch_reads } for pid=10512 comm="syz.5.1057" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.039391][ T30] audit: type=1400 audit(1744228738.724:868): avc: denied { sys_chroot } for pid=10517 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 405.080096][ T30] audit: type=1400 audit(1744228738.754:869): avc: denied { setgid } for pid=10517 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 405.127471][ T30] audit: type=1400 audit(1744228738.754:870): avc: denied { setrlimit } for pid=10517 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 405.507939][T10176] veth0_macvtap: entered promiscuous mode [ 405.514834][ T30] audit: type=1400 audit(1744228739.194:871): avc: denied { ioctl } for pid=10518 comm="syz.5.1059" path="socket:[24216]" dev="sockfs" ino=24216 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.668652][T10176] veth1_macvtap: entered promiscuous mode [ 405.812455][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.843484][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.982452][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.227154][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.244980][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.383036][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.500792][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.621091][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.754336][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.917575][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.362470][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.409047][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.447685][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.538139][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.634616][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.723085][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.806153][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.890818][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.932212][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.942244][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.952744][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.974159][T10176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.026317][T10176] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.390833][T10176] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.490237][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 408.583081][T10176] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.633454][T10176] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.725649][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 409.889605][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.912070][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.063725][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 410.080070][ T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 410.092253][ T24] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 410.100356][ T24] usb 6-1: config 0 has no interface number 0 [ 410.106713][ T24] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.118779][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 410.130097][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 410.148541][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 410.155287][ T6531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.157725][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 410.170609][ T6531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.188009][ T24] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 410.197853][ T24] usb 6-1: Product: syz [ 410.203477][ T24] usb 6-1: Manufacturer: syz [ 410.236915][ T24] usb 6-1: config 0 descriptor?? [ 410.245686][T10567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 410.282847][ T30] audit: type=1400 audit(1744228743.954:872): avc: denied { mounton } for pid=10176 comm="syz-executor" path="/root/syzkaller.vmewbt/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 410.308987][ T30] audit: type=1400 audit(1744228743.954:873): avc: denied { mount } for pid=10176 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 410.332382][ T30] audit: type=1400 audit(1744228743.954:874): avc: denied { mount } for pid=10176 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 410.352229][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.365917][ T30] audit: type=1400 audit(1744228743.954:875): avc: denied { mounton } for pid=10176 comm="syz-executor" path="/root/syzkaller.vmewbt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 410.430946][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.441451][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.456613][ T5928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.477952][ T30] audit: type=1400 audit(1744228743.954:876): avc: denied { mounton } for pid=10176 comm="syz-executor" path="/root/syzkaller.vmewbt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 410.509675][ T30] audit: type=1400 audit(1744228743.964:877): avc: denied { mounton } for pid=10176 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 410.533261][ T30] audit: type=1400 audit(1744228744.174:878): avc: denied { mounton } for pid=10176 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 410.548229][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.584907][ T5928] usb 4-1: config 0 descriptor?? [ 411.959469][ T24] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input34 [ 411.989565][ T5928] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 412.004492][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 412.110722][ T30] audit: type=1400 audit(1744228745.784:879): avc: denied { bind } for pid=10595 comm="syz.4.1074" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.189592][ T5928] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 412.250560][ T30] audit: type=1400 audit(1744228745.784:880): avc: denied { node_bind } for pid=10595 comm="syz.4.1074" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 412.390196][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1075'. [ 412.528811][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.565456][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.295247][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 413.317701][ T1212] usb 6-1: USB disconnect, device number 8 [ 413.410840][ T5928] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 413.590869][ T5928] usb 4-1: device descriptor read/64, error -32 [ 413.860823][ T5928] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 414.630752][ T5928] usb 4-1: device descriptor read/64, error -32 [ 415.778098][ T24] usb 4-1: USB disconnect, device number 28 [ 416.028250][ T30] audit: type=1400 audit(1744228749.714:881): avc: denied { create } for pid=10643 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 416.258900][ T30] audit: type=1400 audit(1744228749.944:882): avc: denied { write } for pid=10643 comm="syz.4.1082" path="socket:[25606]" dev="sockfs" ino=25606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 416.498532][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 416.525263][ T30] audit: type=1400 audit(1744228749.944:883): avc: denied { nlmsg_read } for pid=10643 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 417.827850][T10676] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 418.293671][ T1066] block nbd0: Possible stuck request ffff888026900000: control (read@0,4096B). Runtime 150 seconds [ 418.935282][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 420.270661][ T30] audit: type=1400 audit(1744228753.954:884): avc: denied { open } for pid=10695 comm="syz.6.1093" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 420.400547][ T30] audit: type=1400 audit(1744228753.954:885): avc: denied { ioctl } for pid=10695 comm="syz.6.1093" path="/dev/ttyr1" dev="devtmpfs" ino=392 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 420.627200][ T30] audit: type=1400 audit(1744228754.294:886): avc: denied { create } for pid=10703 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.064092][ T30] audit: type=1400 audit(1744228754.304:887): avc: denied { connect } for pid=10703 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.271135][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 421.313361][ T30] audit: type=1400 audit(1744228754.314:888): avc: denied { ioctl } for pid=10703 comm="syz.1.1096" path="socket:[25852]" dev="sockfs" ino=25852 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.458984][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 421.474597][ T30] audit: type=1400 audit(1744228754.714:889): avc: denied { append } for pid=10702 comm="syz.4.1095" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 422.504681][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.512837][ T9] usb 5-1: Product: syz [ 422.517030][ T9] usb 5-1: Manufacturer: syz [ 422.520195][T10725] netlink: 'syz.1.1098': attribute type 5 has an invalid length. [ 422.521681][ T9] usb 5-1: SerialNumber: syz [ 422.541545][ T9] usb 5-1: config 0 descriptor?? [ 422.793672][ T9] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 422.802162][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 423.543242][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 423.589592][ T9] usb 5-1: USB disconnect, device number 25 [ 423.605732][T10739] Bluetooth: MGMT ver 1.23 [ 423.622177][ T30] audit: type=1400 audit(1744228757.294:890): avc: denied { write } for pid=10737 comm="syz.1.1101" path="socket:[25902]" dev="sockfs" ino=25902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.271881][ T31] INFO: task syz.0.640:8632 blocked for more than 143 seconds. [ 425.332725][ T31] Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 [ 425.342257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.351345][ T31] task:syz.0.640 state:D stack:27352 pid:8632 tgid:8631 ppid:5827 task_flags:0x400140 flags:0x00004004 [ 425.471941][ T30] audit: type=1400 audit(1744228759.144:891): avc: denied { write } for pid=10764 comm="syz.5.1108" path="socket:[26700]" dev="sockfs" ino=26700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 425.809708][ T31] Call Trace: [ 425.817329][ T31] [ 425.828033][ T31] __schedule+0x116f/0x5de0 [ 425.842985][ T30] audit: type=1400 audit(1744228759.484:892): avc: denied { write } for pid=5808 comm="syz-executor" path="pipe:[3816]" dev="pipefs" ino=3816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 425.867691][ T31] ? register_lock_class+0x41/0x4c0 [ 425.894205][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 425.936388][ T31] ? __pfx___schedule+0x10/0x10 [ 425.966834][ T31] ? find_held_lock+0x2b/0x80 [ 426.047312][ T31] ? schedule+0x2d7/0x3a0 [ 426.087618][ T30] audit: type=1400 audit(1744228759.484:893): avc: denied { recv } for pid=9 comm="kworker/0:0" saddr=10.128.0.169 src=39928 daddr=10.128.10.54 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 426.112983][ T31] schedule+0xe7/0x3a0 [ 426.117084][ T31] schedule_preempt_disabled+0x13/0x30 [ 426.122843][ T31] __mutex_lock+0x6c7/0xb90 [ 426.127387][ T31] ? bdev_release+0x15a/0x6d0 [ 426.132832][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 426.137902][ T31] ? find_held_lock+0x2b/0x80 [ 426.142998][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 426.148242][ T31] ? bdev_release+0x15a/0x6d0 [ 426.170910][ T31] bdev_release+0x15a/0x6d0 [ 426.175455][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 426.188220][ T31] blkdev_release+0x15/0x20 [ 426.193096][ T31] __fput+0x3ff/0xb70 [ 426.197161][ T31] task_work_run+0x14d/0x240 [ 426.202342][ T31] ? __pfx_task_work_run+0x10/0x10 [ 426.207499][ T31] ? __fput_deferred+0x118/0x370 [ 426.212908][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 426.218571][ T31] do_syscall_64+0xda/0x260 [ 426.223786][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.229713][ T31] RIP: 0033:0x7f25a318d169 [ 426.234244][ T31] RSP: 002b:00007f25a3f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.250131][ T31] RAX: 0000000000000000 RBX: 00007f25a33a5fa0 RCX: 00007f25a318d169 [ 426.258266][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 426.273069][ T31] RBP: 00007f25a320e730 R08: 0000000000000000 R09: 0000000000000000 [ 426.282127][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.290140][ T31] R13: 0000000000000000 R14: 00007f25a33a5fa0 R15: 00007ffe1b3f4108 [ 426.302876][ T31] [ 426.489672][ T31] [ 426.489672][ T31] Showing all locks held in the system: [ 426.595753][ T31] 3 locks held by kworker/0:0/9: [ 426.604736][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 426.645342][ T31] #1: ffffc900000e7d18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 426.680328][ T31] #2: ffff88805c65c240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 426.699045][ T31] 4 locks held by kworker/u8:1/13: [ 426.714257][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 426.724996][ T31] #1: ffffc90000127d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 426.738617][ T31] #2: ffffffff90115f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 426.748092][ T31] #3: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 426.757659][ T31] 1 lock held by khungtaskd/31: [ 426.766085][ T31] #0: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 426.778860][ T31] 2 locks held by dhcpcd/5493: [ 426.787121][ T31] #0: ffff88805a93c6c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 426.797738][ T31] #1: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 426.816288][ T31] 2 locks held by getty/5576: [ 426.821613][ T31] #0: ffff88814cff30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 426.831774][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 426.841971][ T31] 4 locks held by syz-executor/5823: [ 426.847263][ T31] #0: ffff88807f000d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 426.856879][ T31] #1: ffff88807f000078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 426.866567][ T31] #2: ffffffff9039abc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 426.877533][ T31] #3: ffff88807b8d8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 426.887031][ T31] 1 lock held by udevd/5843: [ 426.891638][ T31] #0: ffff888026888358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 426.901021][ T31] 1 lock held by syz.0.640/8632: [ 426.905991][ T31] #0: ffff888026888358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 426.915665][ T31] 3 locks held by kworker/u8:13/9898: [ 426.921080][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 426.932282][ T31] #1: ffffc90003b27d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 426.942668][ T31] #2: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 426.951916][ T31] 3 locks held by syz.6.1107/10762: [ 426.957110][ T31] #0: ffff888028ed8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 426.966726][ T31] #1: ffff888028ed8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 426.976428][ T31] #2: ffffffff9039abc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 426.987145][ T31] 1 lock held by syz.5.1108/10770: [ 426.992374][ T31] #0: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 427.001394][ T31] 1 lock held by syz.4.1110/10772: [ 427.006479][ T31] #0: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 427.015479][ T31] 2 locks held by dhcpcd/10785: [ 427.020328][ T31] #0: ffff88805d0a6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 427.030055][ T31] #1: ffffffff8e3ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 427.043956][ T31] [ 427.056952][ T31] ============================================= [ 427.056952][ T31] [ 427.067831][ T31] NMI backtrace for cpu 0 [ 427.067849][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 427.067869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.067878][ T31] Call Trace: [ 427.067882][ T31] [ 427.067888][ T31] dump_stack_lvl+0x116/0x1f0 [ 427.067915][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 427.067930][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 427.067950][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.067967][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 427.067983][ T31] watchdog+0xf70/0x12c0 [ 427.068002][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.068013][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.068039][ T31] ? __kthread_parkme+0x19e/0x250 [ 427.068061][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.068073][ T31] kthread+0x3c2/0x780 [ 427.068088][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068102][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068114][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068126][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068138][ T31] ? rcu_is_watching+0x12/0xc0 [ 427.068156][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068171][ T31] ret_from_fork+0x45/0x80 [ 427.068186][ T31] ? __pfx_kthread+0x10/0x10 [ 427.068199][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.068231][ T31] [ 427.068237][ T31] Sending NMI from CPU 0 to CPUs 1: [ 427.208733][ C1] NMI backtrace for cpu 1 [ 427.208747][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 427.208763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.208776][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 427.208796][ C1] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 427.208808][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 427.208820][ C1] RAX: 0000000001d256bf RBX: 0000000000000001 RCX: ffffffff8b723439 [ 427.208828][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeef8e RDI: ffffffff8bf465c0 [ 427.208836][ C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd [ 427.208843][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 427.208851][ C1] R13: ffff88801daf2440 R14: ffffffff90865310 R15: 0000000000000000 [ 427.208859][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 427.208872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.208880][ C1] CR2: 00007fff2651cff2 CR3: 000000000e182000 CR4: 00000000003526f0 [ 427.208888][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.208895][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.208903][ C1] Call Trace: [ 427.208908][ C1] [ 427.208912][ C1] default_idle+0x13/0x20 [ 427.208931][ C1] default_idle_call+0x6d/0xb0 [ 427.208947][ C1] do_idle+0x391/0x510 [ 427.208965][ C1] ? __pfx_do_idle+0x10/0x10 [ 427.208980][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 427.209000][ C1] cpu_startup_entry+0x4f/0x60 [ 427.209015][ C1] start_secondary+0x21d/0x2b0 [ 427.209029][ C1] ? __pfx_start_secondary+0x10/0x10 [ 427.209043][ C1] common_startup_64+0x13e/0x148 [ 427.209064][ C1] [ 427.441328][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 427.448224][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 427.460037][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.470092][ T31] Call Trace: [ 427.473443][ T31] [ 427.476372][ T31] dump_stack_lvl+0x3d/0x1f0 [ 427.480960][ T31] panic+0x71c/0x800 [ 427.484856][ T31] ? __pfx_panic+0x10/0x10 [ 427.489257][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 427.494631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.500595][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 427.505959][ T31] ? watchdog+0xdda/0x12c0 [ 427.510358][ T31] ? watchdog+0xdcd/0x12c0 [ 427.514763][ T31] watchdog+0xdeb/0x12c0 [ 427.518991][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.523652][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.528835][ T31] ? __kthread_parkme+0x19e/0x250 [ 427.533853][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.538510][ T31] kthread+0x3c2/0x780 [ 427.542565][ T31] ? __pfx_kthread+0x10/0x10 [ 427.547134][ T31] ? __pfx_kthread+0x10/0x10 [ 427.551704][ T31] ? __pfx_kthread+0x10/0x10 [ 427.556275][ T31] ? __pfx_kthread+0x10/0x10 [ 427.560862][ T31] ? rcu_is_watching+0x12/0xc0 [ 427.565640][ T31] ? __pfx_kthread+0x10/0x10 [ 427.570250][ T31] ret_from_fork+0x45/0x80 [ 427.574655][ T31] ? __pfx_kthread+0x10/0x10 [ 427.579246][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.584005][ T31] [ 427.587234][ T31] Kernel Offset: disabled [ 427.591537][ T31] Rebooting in 86400 seconds..