last executing test programs: 1m37.191526323s ago: executing program 4 (id=164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = semget$private(0x0, 0x3, 0x0) semop(r3, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) 1m34.784955415s ago: executing program 4 (id=172): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = memfd_create(&(0x7f0000000c40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xf8\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfd\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cL\x8aC\x81\x16tZ\xff\x9b\x066U\x8f-\x9c\xa3B\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00x}Y\xa3T\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa8\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xab\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01|&\"a\xd1\x91\xb9\xb1\xa9\x11\x91\x86\x92\xd8\xd5\x02~\x9b\x83\xc70\xd1)y\xd2V\x97\xfe\xcf\xffj\x1ey\x89E\x97\xa9\xef\xectKAL\\\xb8\t\xf8\x1b\xc5y@\xc0', 0x6) fcntl$addseals(r0, 0x409, 0x12) fcntl$setstatus(r0, 0x4, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x101) r2 = dup3(r1, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 1m33.708610822s ago: executing program 4 (id=174): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setresuid(r1, r2, r1) ioprio_set$uid(0x0, r1, 0x2007) fallocate(r0, 0x8, 0x0, 0x21) lseek(r0, 0x9, 0x1) 1m33.484100493s ago: executing program 4 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m33.300367449s ago: executing program 4 (id=182): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="d7488ef46b0b"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) 1m32.547133054s ago: executing program 4 (id=184): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f00000002c0), &(0x7f0000000140)=0x4) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe, 0x5]}, 0x45c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="28020253c75a"], 0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.363636559s ago: executing program 2 (id=220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x20400, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000000040)) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x45c, 0x40103) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000180)=0x76, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 1m18.400637205s ago: executing program 2 (id=230): r0 = getpid() setpriority(0x2, r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd4768f03f48a57b7) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c02edc839003536"], 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = syz_io_uring_setup(0x1e1f, &(0x7f00000008c0)={0x0, 0x80082f7, 0x10100, 0x0, 0x800153}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ptrace(0x10, r8) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000001fc0)={0x2020}, 0x2020) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000000000005100000000000000738001192c5ee9a1c7c326a5c421f9514bf13e64f3420fc7b26a5f4eb3b9800000c00f3235000400000f30c4a34969860098000000400f01c30f01d1c462fd3295060000000f2357c301000000000000006000000000000000c4e22daae548b800980000000000000f23d00f21f835300000070f23f842c12f120fc72ab92a030000b862250000ba000000000f3066b8ab008ec86643d9faccb8010000000f01d966b8ee000f00d8c302000000000000001800000000000000f70d00000300000000000000000000001800000000000000010000000001000002000000000000001800000000000000090000000010000002000000000000001800000000000000020000000400000002000000000000001800000000000000000005000400000000000000000000001800000000000000024b00000000000000000200000000000000180000000000000003000000030000000100000000000000640000000000000064366fb9a7030000b8f7ffffffbaffffff7f0f3066b813000f00d036f344ded0430fc774e60067656765f30fc77200663666440f38805b4b66b8460007c066baf80cb8661d5680ef66bafc0cb00fee0f005b00c3000000000000000018000000000000000000000000000000020000cd00000000180000000000000000000000008000000200000000000000180000000000000004000000dc0000000000000000000000180000000000000003000000000000000000000000000000180000000000000001000100000000000200000000000000010000000000000051000000000000008f09609a82dfb5bf1a0f01c4450f788f008000006736460f2280440f20c0440f22c03e410fc77248c4a1c0563066b80b010f00d00fc79daa6f0000470f017205c300000000000000001800000000000000000000000000000000000000000000001800000000000000010000000100000000000000000000001800000000000000f7ffffffffffffff0100000000000000620000000000000066b83d01240002000000c7442402ee000000ff1c24b9800000c00f3235004000000f30410f070f0766baf80cb8122ce885ef66bafc0c66ed430f009f4236ffff40abc4435902d412470fc5f64ac3020000000000000018000000000000000a000001010000000200000000000000180000000000000008000000010000000000000000000000180000000000000006000000000000000000000000000000000000000000e7d74c285774b2cdb7dfb6d2c88eb809a62da51588ccc623e68dbe7b1a97b26eb82cf0f2311e90a92498582bfc5ec181a146dafb0d5c0eee5079bd14fc8c798d887bb0da6150be77651bef464f"], 0x390}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="f3a50f01c267640f235f66baf80cb890859c87ef66bafc0c66ed8fe878c38f00000000000f01c80f01cbb8ce5600000f23c00f21f835020009000f23f80fc7bd25b624c520e7", 0x46}], 0x1, 0x2c, &(0x7f0000000240)=[@cstype0={0x4, 0x9}, @dstype3={0x7, 0x6}], 0x2) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000003000)={0x1}, 0x2) 1m16.759038208s ago: executing program 32 (id=184): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r1, &(0x7f0000000100)=""/169, 0xa9) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f00000002c0), &(0x7f0000000140)=0x4) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe, 0x5]}, 0x45c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="28020253c75a"], 0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.698709997s ago: executing program 2 (id=235): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$kcm(0x23, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x4d8940, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1m15.303391646s ago: executing program 2 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x6, 0x1, 0xded4e1b743f496a2, 0x0, @msi={0x7, 0x3, 0x7, 0x8}}]}) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x3, {0x3, 0x11, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1m13.333182348s ago: executing program 2 (id=244): pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (fail_nth: 9) 1m13.0151779s ago: executing program 2 (id=245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000000000001200000006136d75a6833ffa0fe9dbb0534c81"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000480)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000003280), 0x0, 0x0}) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) 58.407652488s ago: executing program 3 (id=284): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020e9c4e082505a0a45b3e010203010902240001fd0940ef09048c0002e9d51c0309053d59"], &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffeb6, 0x0}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x60, 0xf5, [{{0x9, 0x4, 0x0, 0xe6, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0x100, 0x3, 0x1, {0x22, 0x1ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0x1, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x5, 0xff}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0x2, 0x3, 0x10, 0x7}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xe, 0x1}]}, 0x5, [{0xf, &(0x7f0000000140)=@string={0xf, 0x3, "24a06042cc46928c745ae29751"}}, {0x42, &(0x7f0000000180)=@string={0x42, 0x3, "1c929987d4ccddfee1f0d22c85cab3caa4262226f9a5a6a9bc1831db7c7b3beae3c1159b99db35196c0436536c8a217d5448e285dcd1ac7030209507e678516e"}}, {0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "d60ad5627d27b224a37d1c26d5e7e868de4702774ee0946124c1c2e4f558f4179b17ae5696e0cf0673d4d1961cf4b2e776f116f7ef762b7a69b34c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x413}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "628a9b776f5c8a07390de27435af792333a02f25c2613f7a1d749cb137d2fa7bdcdbd08dcd863715baf6c487d1551d5258e3207a202c2825453a650755a25390fde80781c730e6efe4d36574d184918762836390b12f8a6e7de6"}}]}) 57.046286428s ago: executing program 33 (id=245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000000000001200000006136d75a6833ffa0fe9dbb0534c81"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000480)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000003280), 0x0, 0x0}) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) 55.855244947s ago: executing program 3 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20040442) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040) shutdown(r2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x902, 0x100, 0x8, 0x0, 0x8, 0x0}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r6) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, r8, 0x6, 0x0, @val=@tracing}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r8, 0x32, 0x1, 0x71b, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) 55.333795673s ago: executing program 3 (id=294): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x8004) writev(r3, &(0x7f0000000840)=[{&(0x7f00000003c0)="48884ca234cd083c2a1f5cec81c91b9547c12f4abadf96f767a95b76c144118ac35b7071638f3111825c1d0cd3b04dcdb4a437a9ec099c09c1691fc81300a10699e1a1a400000000000900"/84, 0xf000}, {0x0}], 0x60) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x45080) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000140)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz1\x00', 0x4}, 0x1, 0x100, 0x7b, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003b002902000000000000000002000000", @ANYRESOCT, @ANYRES8=r2], 0x14}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8001, 0x228600) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 54.919188643s ago: executing program 3 (id=296): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$can_bcm(0x1d, 0x2, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"623b5806dc725f00007559c38d00", "951b0c4d673e28b18bcf08ed0b7e3a12"}}}}}}}, 0x0) socket(0x29, 0x400000000080803, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$I2C_SLAVE(r0, 0x703, 0x8003b0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 54.917552487s ago: executing program 3 (id=297): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_io_uring_setup(0x6f66, 0x0, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0, 0x19a199a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7ac, &(0x7f0000000980)={0x0}) socket$pppoe(0x2d, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0285628, &(0x7f0000000040)={0x59, 0x2, 0x0, 0x0, 0x0, 0x5, 0xc}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @sliced={0x0, [0xf10f, 0x4, 0x9, 0x1, 0xb, 0x0, 0x200, 0x6, 0x5, 0x5, 0x1, 0x8000, 0x413, 0x6, 0xd, 0xc29, 0x8, 0x0, 0x3, 0xb4b8, 0x9, 0xbc5e, 0x1, 0x9, 0x8, 0xb299, 0x800, 0x80, 0x6, 0x8, 0x1, 0xff7f, 0x1, 0x3, 0x80, 0x9, 0x1, 0x2, 0x8, 0x200, 0x5, 0x9a8, 0x9, 0x8, 0x7, 0x3fc, 0x9, 0xfd75], 0x7}}) 54.636663235s ago: executing program 3 (id=299): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002d9d7000000000000900020073797a300000000008004100736977000000000000000000000000000000000000000000645029ce8e824446313a076d4b390d2b79b881a84aceb161ee1fd3915a57ad216799e99fe48355352992696a4591ab54b97183ea0ebce39966c71e11c997a84f3e590e12aebe433f8e63cd9feb", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0xbbbe, 0x0, 0x18, 0x0, {0x0, 0x0, 0x801}, {0x7, 0xfffffffd, 0x1}, {0x0, 0xffff0000, 0x1}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) 52.51110766s ago: executing program 0 (id=306): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private1, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0xff, 0x0, 0xee01}, {0x4bd, 0xfff, 0x3, 0xb67, 0x4, 0x7, 0x47c4e462, 0xffffffffa9ce4f30}, {0x8, 0x50, 0x100, 0x8}, 0x7, 0x6e6bb1, 0x1, 0x0, 0xf553a0de0e1028a, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3500, 0x3, 0x2, 0x4, 0x80000000, 0x3, 0x8b6}}, 0xe8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00', 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)=""/257, 0x101}], 0x1, &(0x7f00000005c0)=""/214, 0xd6}, 0x5f821027}, {{&(0x7f00000006c0)=@pppoe, 0x80, &(0x7f0000001b00)}, 0x5}], 0x2, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) (async) listen(r8, 0x4000) close(r8) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x80000002, 0x2, 0x4, 0x0, 0x80}) 52.505747196s ago: executing program 0 (id=307): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8, 0x1, 0x1, 0x2, 0xc}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x1d, 0x80000, 0x9) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x40284504, &(0x7f0000000000)=""/56) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = dup(0xffffffffffffffff) r6 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0x6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x200}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 52.171916568s ago: executing program 0 (id=308): syz_open_dev$video(0x0, 0x75, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xfe8e) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r1 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x108c) 51.234943176s ago: executing program 0 (id=310): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x4, 0x200, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8a, 0x40}) 51.170716994s ago: executing program 0 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20040442) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040) shutdown(r3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x902, 0x100, 0x8, 0x0, 0x8, r1}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r7) ioctl$TCSETSF(r6, 0x5432, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r8, 0x6, 0x0, @val=@tracing}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r8, 0x32, 0x1, 0x71b, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) 50.766516635s ago: executing program 0 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0x0, 0x10022, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = syz_io_uring_setup(0x2f66, &(0x7f00000003c0)={0x0, 0x5e8d, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x7, &(0x7f0000000340)}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x1feb7d2d596f2d07, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100185f6100"/18], &(0x7f0000000140)=""/115, 0x21, 0x73, 0x0, 0x3}, 0x28) 37.37939275s ago: executing program 34 (id=299): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002d9d7000000000000900020073797a300000000008004100736977000000000000000000000000000000000000000000645029ce8e824446313a076d4b390d2b79b881a84aceb161ee1fd3915a57ad216799e99fe48355352992696a4591ab54b97183ea0ebce39966c71e11c997a84f3e590e12aebe433f8e63cd9feb", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0xbbbe, 0x0, 0x18, 0x0, {0x0, 0x0, 0x801}, {0x7, 0xfffffffd, 0x1}, {0x0, 0xffff0000, 0x1}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) 35.472683323s ago: executing program 35 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0x0, 0x10022, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = syz_io_uring_setup(0x2f66, &(0x7f00000003c0)={0x0, 0x5e8d, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x7, &(0x7f0000000340)}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x1feb7d2d596f2d07, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100185f6100"/18], &(0x7f0000000140)=""/115, 0x21, 0x73, 0x0, 0x3}, 0x28) 16.315158105s ago: executing program 1 (id=368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) fanotify_init(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 15.943862441s ago: executing program 1 (id=369): syz_emit_vhci(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 15.898714471s ago: executing program 1 (id=370): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}, 0x1, 0x100000000000000}, 0x0) 15.811220499s ago: executing program 1 (id=371): capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ff9000/0x1000)=nil) r0 = shmget$private(0x0, 0x4000, 0x540008a0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x2, 0x3000, 0x100, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/207) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) close_range(r2, r3, 0x0) 15.810945049s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15.756375119s ago: executing program 1 (id=373): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcd, 0x9, 0x6, 0x6, 0x5, 0xb, 0x90, 0xf, 0x1, 0xa, 0x7fffffff, 0x9, 0x8000, 0x0, 0xffff, 0x1, 0x2, 0x1, 0x7f, 0x7, 0x8, 0xfffffffb, 0x0, 0x2, 0x7fffffff, 0x80, 0x7, 0x2, 0x7, 0x0, 0x8, 0x7]}) 0s ago: executing program 36 (id=373): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcd, 0x9, 0x6, 0x6, 0x5, 0xb, 0x90, 0xf, 0x1, 0xa, 0x7fffffff, 0x9, 0x8000, 0x0, 0xffff, 0x1, 0x2, 0x1, 0x7f, 0x7, 0x8, 0xfffffffb, 0x0, 0x2, 0x7fffffff, 0x80, 0x7, 0x2, 0x7, 0x0, 0x8, 0x7]}) kernel console output (not intermixed with test programs): ed promiscuous mode [ 66.333123][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.341628][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.348792][ T5827] bridge_slave_1: entered allmulticast mode [ 66.356780][ T5827] bridge_slave_1: entered promiscuous mode [ 66.365232][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.378031][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.385331][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.392423][ T5826] bridge_slave_0: entered allmulticast mode [ 66.399161][ T5826] bridge_slave_0: entered promiscuous mode [ 66.406627][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.413621][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.439781][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.460543][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.473579][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.480774][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.488069][ T5826] bridge_slave_1: entered allmulticast mode [ 66.495453][ T5826] bridge_slave_1: entered promiscuous mode [ 66.502180][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.509661][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.535710][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.584355][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.606469][ T5828] team0: Port device team_slave_0 added [ 66.630679][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.642044][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.653842][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.665150][ T5828] team0: Port device team_slave_1 added [ 66.671032][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.678310][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.685514][ T5835] bridge_slave_0: entered allmulticast mode [ 66.692466][ T5835] bridge_slave_0: entered promiscuous mode [ 66.700469][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.707629][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.714796][ T5835] bridge_slave_1: entered allmulticast mode [ 66.721408][ T5835] bridge_slave_1: entered promiscuous mode [ 66.795533][ T5826] team0: Port device team_slave_0 added [ 66.811633][ T5825] hsr_slave_0: entered promiscuous mode [ 66.818499][ T5825] hsr_slave_1: entered promiscuous mode [ 66.827212][ T5827] team0: Port device team_slave_0 added [ 66.833776][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.840706][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.866995][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.887710][ T5826] team0: Port device team_slave_1 added [ 66.895646][ T5827] team0: Port device team_slave_1 added [ 66.902117][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.909106][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.935258][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.952004][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.964077][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.022721][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.029941][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.055947][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.075518][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.082470][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.108777][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.140465][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.148828][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.175669][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.187187][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.194247][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.220816][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.245587][ T5835] team0: Port device team_slave_0 added [ 67.275610][ T5835] team0: Port device team_slave_1 added [ 67.285194][ T5828] hsr_slave_0: entered promiscuous mode [ 67.291337][ T5828] hsr_slave_1: entered promiscuous mode [ 67.297607][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.304387][ T5836] Bluetooth: hci4: command tx timeout [ 67.305542][ T5828] Cannot create hsr debugfs directory [ 67.383591][ T5834] Bluetooth: hci2: command tx timeout [ 67.383594][ T50] Bluetooth: hci1: command tx timeout [ 67.383860][ T5836] Bluetooth: hci0: command tx timeout [ 67.395682][ T5826] hsr_slave_0: entered promiscuous mode [ 67.407259][ T5826] hsr_slave_1: entered promiscuous mode [ 67.413127][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.420826][ T5826] Cannot create hsr debugfs directory [ 67.440653][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.447771][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.474161][ T5836] Bluetooth: hci3: command tx timeout [ 67.474905][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.492053][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.499060][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.525057][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.581162][ T5827] hsr_slave_0: entered promiscuous mode [ 67.587454][ T5827] hsr_slave_1: entered promiscuous mode [ 67.593247][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.601031][ T5827] Cannot create hsr debugfs directory [ 67.706994][ T5835] hsr_slave_0: entered promiscuous mode [ 67.712970][ T5835] hsr_slave_1: entered promiscuous mode [ 67.719213][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.726882][ T5835] Cannot create hsr debugfs directory [ 67.855139][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.865958][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.880093][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.911192][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.973413][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.001714][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.013386][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.040242][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.107094][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.122270][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.133436][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.152162][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.240832][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.252817][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.262865][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.290986][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.300327][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.342908][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.381467][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.396766][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.404245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.417261][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.424402][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.437391][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.454595][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.469184][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.480081][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.489107][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.521567][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.528744][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.546083][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.553171][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.574244][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.612153][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.639537][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.669072][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.676203][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.718660][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.723170][ T30] audit: type=1400 audit(1752300741.695:86): avc: denied { sys_module } for pid=5825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.725789][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.850708][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.867779][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.933072][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.952325][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.979756][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.009864][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.017033][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.030692][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.037834][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.065113][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.072212][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.118488][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.125656][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.150132][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.289320][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.326204][ T5826] veth0_vlan: entered promiscuous mode [ 69.377989][ T5826] veth1_vlan: entered promiscuous mode [ 69.388471][ T5836] Bluetooth: hci4: command tx timeout [ 69.446092][ T5828] veth0_vlan: entered promiscuous mode [ 69.465120][ T5836] Bluetooth: hci0: command tx timeout [ 69.465832][ T5834] Bluetooth: hci1: command tx timeout [ 69.475491][ T50] Bluetooth: hci2: command tx timeout [ 69.487323][ T5828] veth1_vlan: entered promiscuous mode [ 69.498854][ T5826] veth0_macvtap: entered promiscuous mode [ 69.547304][ T50] Bluetooth: hci3: command tx timeout [ 69.549973][ T5826] veth1_macvtap: entered promiscuous mode [ 69.623148][ T5825] veth0_vlan: entered promiscuous mode [ 69.635004][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.645088][ T5828] veth0_macvtap: entered promiscuous mode [ 69.664805][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.676632][ T5828] veth1_macvtap: entered promiscuous mode [ 69.685212][ T5825] veth1_vlan: entered promiscuous mode [ 69.708062][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.717949][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.726806][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.735754][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.771547][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.782632][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.809795][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.820595][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.829828][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.839225][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.848146][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.874133][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.907870][ T5825] veth0_macvtap: entered promiscuous mode [ 69.925716][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.929681][ T5825] veth1_macvtap: entered promiscuous mode [ 69.943316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.005672][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.040246][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.054347][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.059781][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.062168][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.073113][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.087679][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.096432][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129135][ T30] audit: type=1400 audit(1752300743.105:87): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Qp85cE/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.154710][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.162530][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.166365][ T30] audit: type=1400 audit(1752300743.135:88): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.190407][ T5827] veth0_vlan: entered promiscuous mode [ 70.198633][ T30] audit: type=1400 audit(1752300743.135:89): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Qp85cE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.212528][ T5835] veth0_vlan: entered promiscuous mode [ 70.233341][ T30] audit: type=1400 audit(1752300743.135:90): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.261216][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.271661][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.289369][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.298003][ T30] audit: type=1400 audit(1752300743.135:91): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Qp85cE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.298562][ T5835] veth1_vlan: entered promiscuous mode [ 70.330941][ T30] audit: type=1400 audit(1752300743.135:92): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.Qp85cE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.367749][ T5827] veth1_vlan: entered promiscuous mode [ 70.376335][ T30] audit: type=1400 audit(1752300743.135:93): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.401402][ T30] audit: type=1400 audit(1752300743.185:94): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.426029][ T30] audit: type=1400 audit(1752300743.185:95): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=5909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.449261][ T30] audit: type=1400 audit(1752300743.185:96): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.480415][ T5835] veth0_macvtap: entered promiscuous mode [ 70.490418][ T5835] veth1_macvtap: entered promiscuous mode [ 70.517380][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.563364][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.587934][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.608907][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.630264][ T5951] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 70.690862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.898748][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.912905][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.042367][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.052665][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.057648][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.072845][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190814][ T5827] veth0_macvtap: entered promiscuous mode [ 71.262053][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.289253][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.311493][ T5827] veth1_macvtap: entered promiscuous mode [ 71.466141][ T50] Bluetooth: hci4: command tx timeout [ 71.471117][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.516873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.547345][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.603618][ T50] Bluetooth: hci2: command tx timeout [ 71.609030][ T50] Bluetooth: hci0: command tx timeout [ 71.614846][ T5834] Bluetooth: hci1: command tx timeout [ 71.623703][ T50] Bluetooth: hci3: command tx timeout [ 71.677986][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.704033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.980211][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.983440][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988165][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988191][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988215][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.074252][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.164049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.431709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.643034][ T5972] Lens A: ================= START STATUS ================= [ 72.650705][ T5972] Lens A: Focus, Absolute: 0 [ 72.656194][ T5972] Lens A: ================== END STATUS ================== [ 72.739314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.804941][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.817121][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.857373][ T5973] loop6: detected capacity change from 0 to 7 [ 72.865792][ T5973] Dev loop6: unable to read RDB block 7 [ 72.871375][ T5973] loop6: unable to read partition table [ 72.877593][ T5973] loop6: partition table beyond EOD, truncated [ 72.883934][ T5973] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 72.956947][ T5973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.046517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.143100][ T5981] trusted_key: encrypted_key: insufficient parameters specified [ 73.148820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.363745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.384092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.489102][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.501267][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.543876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.582217][ T50] Bluetooth: hci4: command tx timeout [ 73.633053][ T50] Bluetooth: hci0: command tx timeout [ 73.638487][ T50] Bluetooth: hci1: command tx timeout [ 73.644048][ T50] Bluetooth: hci2: command tx timeout [ 73.744118][ T5834] Bluetooth: hci3: command tx timeout [ 73.756782][ T5982] Zero length message leads to an empty skb [ 75.216370][ T1094] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 76.697726][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.877263][ T5917] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.902446][ T5917] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 76.933608][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.019415][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.072326][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 77.091711][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.112875][ T6018] Lens A: ================= START STATUS ================= [ 77.120385][ T6018] Lens A: Focus, Absolute: 0 [ 77.125076][ T6018] Lens A: ================== END STATUS ================== [ 77.497836][ T5917] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.543315][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.618809][ T5917] usb 4-1: Product: syz [ 77.656132][ T5917] usb 4-1: Manufacturer: syz [ 77.678175][ T6007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.699598][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 77.785422][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 77.835167][ T5917] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 78.312539][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.312753][ T5917] cdc_wdm 4-1:1.0: Unknown control protocol [ 78.464033][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.539026][ T6007] process 'syz.3.13' launched './file1' with NULL argv: empty string added [ 78.547898][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 78.551134][ T30] audit: type=1400 audit(1752300751.515:157): avc: denied { execute } for pid=6005 comm="syz.3.13" name="file1" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.889180][ T30] audit: type=1400 audit(1752300751.575:158): avc: denied { execute_no_trans } for pid=6005 comm="syz.3.13" path="/5/file1" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.028824][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.065142][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.112095][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.118857][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.125348][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.131928][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.138206][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.144795][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.151175][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.157750][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.164450][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.171051][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.177273][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.183851][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.191447][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.198056][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.204850][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.211450][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.217973][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.224560][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.230875][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.237473][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.285635][ T30] audit: type=1400 audit(1752300752.085:159): avc: denied { read write } for pid=6005 comm="syz.3.13" name="cdc-wdm0" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 79.406689][ T5917] usb 4-1: USB disconnect, device number 2 [ 79.406740][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.714127][ T30] audit: type=1400 audit(1752300752.085:160): avc: denied { open } for pid=6005 comm="syz.3.13" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 80.693684][ T30] audit: type=1400 audit(1752300752.725:161): avc: denied { name_bind } for pid=6005 comm="syz.3.13" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.722854][ T30] audit: type=1400 audit(1752300752.805:162): avc: denied { setopt } for pid=6036 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.072500][ T30] audit: type=1400 audit(1752300752.815:163): avc: denied { write } for pid=6036 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.114158][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.185003][ T9] cfg80211: failed to load regulatory.db [ 82.053323][ T6057] trusted_key: encrypted_key: insufficient parameters specified [ 82.883237][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.910997][ T6069] team0: Port device batadv1 added [ 85.154791][ T30] audit: type=1400 audit(1752300757.995:164): avc: denied { getopt } for pid=6072 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.189711][ T30] audit: type=1326 audit(1752300758.085:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.2.31" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x0 [ 85.325098][ T30] audit: type=1400 audit(1752300758.255:166): avc: denied { read } for pid=6072 comm="syz.1.29" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.399868][ T30] audit: type=1400 audit(1752300758.255:167): avc: denied { open } for pid=6072 comm="syz.1.29" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.423188][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.433798][ T30] audit: type=1400 audit(1752300758.255:168): avc: denied { ioctl } for pid=6072 comm="syz.1.29" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.458560][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.465669][ T30] audit: type=1326 audit(1752300758.305:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.2.31" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x0 [ 85.488236][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.533230][ T30] audit: type=1400 audit(1752300758.405:170): avc: denied { create } for pid=6095 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.552578][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.643516][ T30] audit: type=1400 audit(1752300758.445:171): avc: denied { ioctl } for pid=6095 comm="syz.4.35" path="socket:[7774]" dev="sockfs" ino=7774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.667854][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.752953][ T30] audit: type=1400 audit(1752300758.725:172): avc: denied { read } for pid=6099 comm="syz.2.37" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.836461][ T30] audit: type=1400 audit(1752300758.725:173): avc: denied { open } for pid=6099 comm="syz.2.37" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.417524][ T6109] trusted_key: encrypted_key: insufficient parameters specified [ 86.533632][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.723651][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 86.801014][ T5917] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.823669][ T5917] usb 1-1: config 1 has no interface number 1 [ 86.830548][ T5917] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.923588][ T5917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.404394][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.423780][ T5917] usb 1-1: Product: syz [ 87.427986][ T5917] usb 1-1: Manufacturer: syz [ 87.433816][ T5917] usb 1-1: SerialNumber: syz [ 87.704234][ T5917] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 87.821246][ T5917] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 87.834392][ T5917] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 87.849542][ T5917] usb 1-1: 2:1 : invalid channels 0 [ 87.882168][ T5917] usb 1-1: USB disconnect, device number 2 [ 88.495020][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.040016][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 90.104927][ T6160] team0: Port device batadv1 added [ 90.469933][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 90.469947][ T30] audit: type=1400 audit(1752300763.445:191): avc: denied { add_name } for pid=6128 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.567851][ T30] audit: type=1400 audit(1752300763.445:192): avc: denied { create } for pid=6128 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.946745][ T30] audit: type=1400 audit(1752300763.445:193): avc: denied { write } for pid=6128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=2110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.211512][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.264315][ T6154] team0: Port device batadv1 added [ 91.292018][ T30] audit: type=1400 audit(1752300763.445:194): avc: denied { append } for pid=6128 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.350837][ T6177] autofs: Bad value for 'fd' [ 91.399443][ T6179] ======================================================= [ 91.399443][ T6179] WARNING: The mand mount option has been deprecated and [ 91.399443][ T6179] and is ignored by this kernel. Remove the mand [ 91.399443][ T6179] option from the mount to silence this warning. [ 91.399443][ T6179] ======================================================= [ 91.448617][ T30] audit: type=1400 audit(1752300764.215:195): avc: denied { remove_name } for pid=6174 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.508439][ T6181] netlink: 'syz.3.53': attribute type 39 has an invalid length. [ 91.571546][ T30] audit: type=1400 audit(1752300764.215:196): avc: denied { unlink } for pid=6174 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.598521][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 91.633832][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.54'. [ 91.971301][ T30] audit: type=1400 audit(1752300764.365:197): avc: denied { mount } for pid=6176 comm="syz.4.51" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 92.029543][ T30] audit: type=1400 audit(1752300764.365:198): avc: denied { mount } for pid=6178 comm="syz.2.52" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 92.136468][ T30] audit: type=1400 audit(1752300764.365:199): avc: denied { read } for pid=6176 comm="syz.4.51" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 92.305190][ T30] audit: type=1400 audit(1752300764.365:200): avc: denied { open } for pid=6176 comm="syz.4.51" path="/15/file1/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 92.476141][ T6197] capability: warning: `syz.4.55' uses 32-bit capabilities (legacy support in use) [ 93.324092][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.523597][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 93.567446][ T5908] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 93.607048][ T5908] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.803994][ T5908] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.817174][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.990204][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 94.001876][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.017133][ T5917] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 94.037602][ T6221] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 94.048232][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.066790][ T5908] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 94.090695][ T5917] usb 4-1: config 0 descriptor?? [ 94.095276][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.120808][ T6224] No control pipe specified [ 94.137271][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 94.169429][ T5908] usb 3-1: config 0 descriptor?? [ 95.105512][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 95.132692][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.191159][ T5908] usb 3-1: USB disconnect, device number 2 [ 95.201259][ T5917] gspca_sonixj: reg_r err -32 [ 95.259203][ T5917] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 95.893134][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.944275][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 95.944289][ T30] audit: type=1400 audit(1752300768.925:210): avc: denied { setopt } for pid=6251 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.108202][ T6257] sctp: [Deprecated]: syz.2.68 (pid 6257) Use of int in max_burst socket option deprecated. [ 96.108202][ T6257] Use struct sctp_assoc_value instead [ 96.718586][ T5908] usb 4-1: USB disconnect, device number 4 [ 96.783739][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.860186][ T6265] netlink: 'syz.0.71': attribute type 39 has an invalid length. [ 96.928495][ T30] audit: type=1400 audit(1752300769.825:211): avc: denied { create } for pid=6262 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.199415][ T30] audit: type=1400 audit(1752300770.045:212): avc: denied { connect } for pid=6266 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.433670][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 97.454832][ T6277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38913 sclass=netlink_route_socket pid=6277 comm=syz.3.74 [ 97.474553][ T5893] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.496209][ T30] audit: type=1400 audit(1752300770.105:213): avc: denied { read } for pid=6266 comm="syz.4.73" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.521109][ T5893] usb 2-1: config 1 has no interface number 1 [ 97.547246][ T5893] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.559344][ T30] audit: type=1400 audit(1752300770.105:214): avc: denied { open } for pid=6266 comm="syz.4.73" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.584683][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.603261][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.618905][ T30] audit: type=1400 audit(1752300770.115:215): avc: denied { ioctl } for pid=6266 comm="syz.4.73" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.668510][ T5893] usb 2-1: Product: syz [ 97.683228][ T5893] usb 2-1: Manufacturer: syz [ 97.729100][ T5893] usb 2-1: SerialNumber: syz [ 97.764959][ T6277] evm: overlay not supported [ 97.788897][ T30] audit: type=1400 audit(1752300770.135:216): avc: denied { create } for pid=6266 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.831849][ T30] audit: type=1400 audit(1752300770.165:217): avc: denied { write } for pid=6266 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.852920][ T30] audit: type=1400 audit(1752300770.425:218): avc: denied { read write } for pid=6276 comm="syz.3.74" name="radio4" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.881392][ T30] audit: type=1400 audit(1752300770.425:219): avc: denied { open } for pid=6276 comm="syz.3.74" path="/dev/radio4" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 98.094532][ T5893] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 98.114825][ T5893] usb 2-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 98.127107][ T5893] usb 2-1: 2:1 : invalid channels 0 [ 98.582678][ T5893] usb 2-1: USB disconnect, device number 2 [ 98.676006][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.923547][ T1205] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.004257][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.121797][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 99.317253][ T1205] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 99.338927][ T1205] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.359123][ T1205] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.373587][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 99.401647][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.404428][ T5908] usb 5-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 99.435541][ T1205] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 99.456935][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.491459][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.510048][ T5908] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 99.514347][ T1205] usb 3-1: config 0 descriptor?? [ 99.541767][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.557248][ T5908] usb 5-1: config 0 descriptor?? [ 99.780699][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.083588][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 100.092854][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 100.112809][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.120271][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.134800][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.149145][ T10] usb 2-1: config 0 descriptor?? [ 100.161742][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.175392][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 100.185162][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.192314][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.228721][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.266867][ T5908] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 100.293653][ T1205] usbhid 3-1:0.0: can't add hid device: -71 [ 100.303541][ T6304] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 100.311377][ T1205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.325497][ T6304] netlink: 232 bytes leftover after parsing attributes in process `syz.4.81'. [ 100.343214][ T1205] usb 3-1: USB disconnect, device number 3 [ 100.343671][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 100.408716][ T5908] petalynx 0003:18B1:0037.0001: hidraw0: USB HID v0.03 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 100.513827][ T5908] usb 5-1: USB disconnect, device number 2 [ 100.646666][ T6325] fido_id[6325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 101.006598][ T10] gspca_sonixj: reg_r err -32 [ 101.011378][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 101.198202][ T6348] trusted_key: encrypted_key: insufficient parameters specified [ 101.293639][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.391879][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 101.391920][ T30] audit: type=1400 audit(1752300774.365:237): avc: denied { ioctl } for pid=6349 comm="syz.0.96" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.486605][ T30] audit: type=1400 audit(1752300774.455:238): avc: denied { write } for pid=6349 comm="syz.0.96" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.488629][ T6350] binder: BINDER_SET_CONTEXT_MGR already set [ 101.509838][ T30] audit: type=1400 audit(1752300774.455:239): avc: denied { set_context_mgr } for pid=6349 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.517325][ T6350] binder: 6349:6350 ioctl 4018620d 2000000000c0 returned -16 [ 101.573626][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 101.574207][ T30] audit: type=1400 audit(1752300774.455:240): avc: denied { map } for pid=6349 comm="syz.0.96" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.589887][ T5917] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 101.654068][ T5917] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.758640][ T5917] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.972725][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.015047][ T5917] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 102.029725][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.048209][ T5917] usb 5-1: config 0 descriptor?? [ 102.077401][ T30] audit: type=1326 audit(1752300775.055:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.141068][ T6365] FAULT_INJECTION: forcing a failure. [ 102.141068][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.149386][ T6367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 102.163669][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.3.99 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 102.163692][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.163700][ T6365] Call Trace: [ 102.163705][ T6365] [ 102.163710][ T6365] dump_stack_lvl+0x16c/0x1f0 [ 102.163729][ T6365] should_fail_ex+0x512/0x640 [ 102.163745][ T6365] _copy_from_user+0x2e/0xd0 [ 102.163760][ T6365] copy_msghdr_from_user+0x98/0x160 [ 102.163778][ T6365] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.163794][ T6365] ? kfree+0x24f/0x4d0 [ 102.163805][ T6365] ? __lock_acquire+0x622/0x1c90 [ 102.163818][ T6365] ___sys_recvmsg+0xdb/0x1a0 [ 102.163831][ T6365] ? __pfx____sys_recvmsg+0x10/0x10 [ 102.163852][ T6365] ? __pfx___might_resched+0x10/0x10 [ 102.163869][ T6365] do_recvmmsg+0x2fe/0x750 [ 102.163885][ T6365] ? __pfx_do_recvmmsg+0x10/0x10 [ 102.163901][ T6365] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 102.163925][ T6365] __x64_sys_recvmmsg+0x22a/0x280 [ 102.163939][ T6365] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 102.163958][ T6365] do_syscall_64+0xcd/0x4c0 [ 102.163973][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.163984][ T6365] RIP: 0033:0x7f41f3f8e929 [ 102.163992][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.164001][ T6365] RSP: 002b:00007f41f4e06038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 102.164012][ T6365] RAX: ffffffffffffffda RBX: 00007f41f41b6080 RCX: 00007f41f3f8e929 [ 102.164018][ T6365] RDX: 040000000000000d RSI: 0000200000004ec0 RDI: 0000000000000004 [ 102.164024][ T6365] RBP: 00007f41f4e06090 R08: 0000000000000000 R09: 0000000000000000 [ 102.164029][ T6365] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 102.164035][ T6365] R13: 0000000000000000 R14: 00007f41f41b6080 R15: 00007ffe681cff68 [ 102.164048][ T6365] [ 102.189687][ T30] audit: type=1326 audit(1752300775.075:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.409605][ T30] audit: type=1326 audit(1752300775.075:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.434420][ T30] audit: type=1326 audit(1752300775.075:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.463897][ T30] audit: type=1326 audit(1752300775.075:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.535270][ T30] audit: type=1326 audit(1752300775.075:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598e929 code=0x7ffc0000 [ 102.562947][ T24] usb 2-1: USB disconnect, device number 3 [ 102.692741][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 102.796965][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.939748][ T5917] usb 5-1: USB disconnect, device number 3 [ 102.943540][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.990148][ T6375] FAULT_INJECTION: forcing a failure. [ 102.990148][ T6375] name failslab, interval 1, probability 0, space 0, times 1 [ 103.003015][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.1.103 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 103.003030][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.003036][ T6375] Call Trace: [ 103.003039][ T6375] [ 103.003043][ T6375] dump_stack_lvl+0x16c/0x1f0 [ 103.003061][ T6375] should_fail_ex+0x512/0x640 [ 103.003075][ T6375] ? __kmalloc_noprof+0xbf/0x510 [ 103.003089][ T6375] ? do_insn_ioctl+0xd9/0x450 [ 103.003099][ T6375] should_failslab+0xc2/0x120 [ 103.003115][ T6375] __kmalloc_noprof+0xd2/0x510 [ 103.003127][ T6375] ? __might_fault+0x13b/0x190 [ 103.003143][ T6375] do_insn_ioctl+0xd9/0x450 [ 103.003155][ T6375] comedi_unlocked_ioctl+0x1576/0x2e90 [ 103.003169][ T6375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.003181][ T6375] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.003192][ T6375] ? do_vfs_ioctl+0x523/0x1a60 [ 103.003203][ T6375] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.003217][ T6375] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 103.003233][ T6375] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 103.003248][ T6375] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.003266][ T6375] ? hook_file_ioctl_common+0x145/0x410 [ 103.003280][ T6375] ? selinux_file_ioctl+0x180/0x270 [ 103.003294][ T6375] ? selinux_file_ioctl+0xb4/0x270 [ 103.003310][ T6375] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.003321][ T6375] __x64_sys_ioctl+0x18b/0x210 [ 103.003333][ T6375] do_syscall_64+0xcd/0x4c0 [ 103.003349][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.003360][ T6375] RIP: 0033:0x7f859c38e929 [ 103.003368][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.003377][ T6375] RSP: 002b:00007f859d166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.003388][ T6375] RAX: ffffffffffffffda RBX: 00007f859c5b5fa0 RCX: 00007f859c38e929 [ 103.003394][ T6375] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 103.003400][ T6375] RBP: 00007f859d166090 R08: 0000000000000000 R09: 0000000000000000 [ 103.003405][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.003411][ T6375] R13: 0000000000000000 R14: 00007f859c5b5fa0 R15: 00007fff50df4c98 [ 103.003423][ T6375] [ 103.353740][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 103.362142][ T5893] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 103.373473][ T5893] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.383300][ T5893] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.396467][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.403046][ T5893] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 103.412078][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.421402][ T5893] usb 3-1: config 0 descriptor?? [ 103.451169][ T6379] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[6379] [ 104.277245][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 104.280676][ T6383] hfs: can't find a HFS filesystem on dev nullb0 [ 104.289354][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.434905][ T5893] usb 3-1: USB disconnect, device number 4 [ 105.873524][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.833711][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.859101][ T6419] trusted_key: encrypted_key: insufficient parameters specified [ 107.347542][ T5917] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 107.397581][ T6426] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 107.472390][ T5917] usb 5-1: config 0 has no interface number 0 [ 107.493111][ T5917] usb 5-1: too many endpoints for config 0 interface 170 altsetting 143: 135, using maximum allowed: 30 [ 107.551925][ T5917] usb 5-1: config 0 interface 170 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 107.566764][ T5917] usb 5-1: config 0 interface 170 has no altsetting 0 [ 107.573781][ T5917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.583676][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.593977][ T5917] usb 5-1: config 0 descriptor?? [ 107.927301][ T6436] netlink: 1 bytes leftover after parsing attributes in process `syz.2.119'. [ 107.992991][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 107.993006][ T30] audit: type=1400 audit(1752300780.965:275): avc: denied { setopt } for pid=6411 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.343808][ T30] audit: type=1400 audit(1752300781.315:276): avc: denied { execute } for pid=6441 comm="syz.1.120" path="/20/rdma.current" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.479484][ T6444] block nbd4: NBD_DISCONNECT [ 108.502950][ T6444] block nbd4: Send disconnect failed -107 [ 108.512052][ T30] audit: type=1400 audit(1752300781.375:277): avc: denied { create } for pid=6411 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.535464][ T6411] block nbd4: Disconnected due to user request. [ 108.694176][ T6411] block nbd4: shutting down sockets [ 108.704430][ T30] audit: type=1400 audit(1752300781.475:278): avc: denied { write } for pid=6411 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.814314][ T6451] batadv_slave_1: entered promiscuous mode [ 108.821468][ T6451] batadv_slave_1: left promiscuous mode [ 110.401015][ T5917] usb 5-1: string descriptor 0 read error: -71 [ 110.411925][ T30] audit: type=1400 audit(1752300783.375:279): avc: denied { write } for pid=6461 comm="syz.2.124" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.434274][ T5917] cp210x 5-1:0.170: cp210x converter detected [ 110.448227][ T5917] cp210x 5-1:0.170: failed to get vendor val 0x370b size 1: -71 [ 110.499442][ T5917] cp210x 5-1:0.170: querying part number failed [ 111.023018][ T6472] fuse: Bad value for 'fd' [ 111.355107][ T30] audit: type=1400 audit(1752300783.395:280): avc: denied { open } for pid=6461 comm="syz.2.124" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.378244][ T30] audit: type=1400 audit(1752300783.395:281): avc: denied { ioctl } for pid=6461 comm="syz.2.124" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.402833][ T30] audit: type=1400 audit(1752300783.435:282): avc: denied { ioctl } for pid=6461 comm="syz.2.124" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.429894][ T30] audit: type=1400 audit(1752300783.495:283): avc: denied { read } for pid=6461 comm="syz.2.124" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.453315][ T30] audit: type=1400 audit(1752300784.245:284): avc: denied { ioctl } for pid=6461 comm="syz.2.124" path="socket:[10246]" dev="sockfs" ino=10246 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.542027][ T6474] trusted_key: encrypted_key: insufficient parameters specified [ 111.846057][ T5917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 111.927419][ T5917] usb 5-1: USB disconnect, device number 4 [ 111.952386][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.961665][ T5917] cp210x 5-1:0.170: device disconnected [ 112.513380][ T6470] syz.0.123 (6470): drop_caches: 2 [ 112.728625][ T6484] No control pipe specified [ 115.333181][ T6503] netlink: 1 bytes leftover after parsing attributes in process `syz.0.134'. [ 115.513565][ T6512] warning: `syz.3.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.633358][ T30] audit: type=1400 audit(1752300788.485:285): avc: denied { create } for pid=6508 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.654231][ T30] audit: type=1400 audit(1752300788.485:286): avc: denied { ioctl } for pid=6508 comm="syz.3.135" path="socket:[10425]" dev="sockfs" ino=10425 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.678786][ T30] audit: type=1400 audit(1752300788.505:287): avc: denied { connect } for pid=6508 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.807100][ T6515] autofs: Unknown parameter '0x0000000000000000' [ 115.981587][ T30] audit: type=1400 audit(1752300788.955:288): avc: denied { create } for pid=6520 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.333651][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.792465][ T5893] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 116.835746][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.892260][ T5893] usb 1-1: Product: syz [ 116.896889][ T30] audit: type=1400 audit(1752300789.875:289): avc: denied { watch watch_reads } for pid=6531 comm="syz.2.143" path="/24" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.925033][ T6534] No control pipe specified [ 116.940836][ T5893] usb 1-1: Manufacturer: syz [ 116.948333][ T5893] usb 1-1: SerialNumber: syz [ 116.981703][ T5893] usb 1-1: config 0 descriptor?? [ 116.983605][ T30] audit: type=1400 audit(1752300789.875:290): avc: denied { create } for pid=6531 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.013253][ T5893] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 003 [ 117.033943][ T30] audit: type=1400 audit(1752300789.905:291): avc: denied { setattr } for pid=6531 comm="syz.2.143" name="CAN_J1939" dev="sockfs" ino=9735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.423392][ T30] audit: type=1400 audit(1752300790.355:292): avc: denied { mount } for pid=6531 comm="syz.2.143" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 117.445807][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.543240][ T6548] trusted_key: encrypted_key: insufficient parameters specified [ 117.613622][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 117.626741][ T5917] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 117.821119][ T30] audit: type=1400 audit(1752300790.755:293): avc: denied { mount } for pid=6520 comm="syz.0.139" name="/" dev="ramfs" ino=10486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.843266][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.846242][ T5917] usb 5-1: config 0 descriptor?? [ 117.996870][ T30] audit: type=1400 audit(1752300790.785:294): avc: denied { ioctl } for pid=6520 comm="syz.0.139" path="socket:[9717]" dev="sockfs" ino=9717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.046210][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 118.063701][ T5893] i2c i2c-1: failure reading functionality [ 118.100914][ T5893] i2c i2c-1: connected i2c-tiny-usb device [ 118.109621][ T5893] usb 1-1: USB disconnect, device number 3 [ 118.424453][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.593507][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 118.611274][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 118.621773][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.770458][ T10] usb 2-1: config 0 descriptor?? [ 118.828283][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 118.831406][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 118.871661][ T5917] gspca_sonixj: reg_r err -32 [ 118.878071][ T5917] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 119.060100][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 119.486038][ T6571] binder: 6570:6571 ioctl 400c620e 200000000000 returned -22 [ 119.496843][ T6569] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET) [ 119.632240][ T6573] Lens A: ================= START STATUS ================= [ 119.913516][ T6573] Lens A: Focus, Absolute: 0 [ 119.924308][ T10] gspca_sonixj: reg_r err -32 [ 119.929396][ T6573] Lens A: ================== END STATUS ================== [ 119.936909][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 119.982629][ T6579] No control pipe specified [ 120.153094][ T6582] netlink: 'syz.2.157': attribute type 2 has an invalid length. [ 120.370018][ T9] usb 5-1: USB disconnect, device number 5 [ 120.902225][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 120.902236][ T30] audit: type=1400 audit(1752300793.875:299): avc: denied { mount } for pid=6591 comm="syz.0.160" name="/" dev="autofs" ino=10561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 121.123363][ T30] audit: type=1400 audit(1752300794.005:300): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 121.259232][ T6601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.376453][ T10] usb 2-1: USB disconnect, device number 4 [ 121.419178][ T30] audit: type=1400 audit(1752300794.215:301): avc: denied { read } for pid=6596 comm="syz.0.162" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.040364][ T30] audit: type=1400 audit(1752300794.215:302): avc: denied { open } for pid=6596 comm="syz.0.162" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.093601][ T30] audit: type=1400 audit(1752300794.215:303): avc: denied { ioctl } for pid=6596 comm="syz.0.162" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.327196][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 122.518011][ T30] audit: type=1400 audit(1752300795.495:304): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 124.250430][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=188 sclass=netlink_route_socket pid=6623 comm=syz.3.169 [ 125.566044][ T30] audit: type=1400 audit(1752300798.535:305): avc: denied { connect } for pid=6646 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.721642][ T6657] autofs: Unknown parameter 'fd0x0000000000000000' [ 126.127579][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 126.137278][ C0] Unknown status report in ack skb [ 126.615236][ T30] audit: type=1400 audit(1752300799.595:306): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.697151][ T30] audit: type=1400 audit(1752300799.665:307): avc: denied { block_suspend } for pid=6688 comm="syz.4.184" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.741227][ T6690] netlink: 'syz.0.183': attribute type 39 has an invalid length. [ 127.140323][ T30] audit: type=1400 audit(1752300800.105:308): avc: denied { read write } for pid=6688 comm="syz.4.184" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.486144][ T6689] pimreg: entered allmulticast mode [ 127.491753][ T6697] pimreg: left allmulticast mode [ 127.756556][ T6689] input: syz0 as /devices/virtual/input/input5 [ 128.138896][ T30] audit: type=1400 audit(1752300800.105:309): avc: denied { open } for pid=6688 comm="syz.4.184" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.250199][ T30] audit: type=1400 audit(1752300800.145:310): avc: denied { create } for pid=6688 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.412574][ T30] audit: type=1400 audit(1752300800.145:311): avc: denied { getopt } for pid=6688 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.569585][ T30] audit: type=1400 audit(1752300800.155:312): avc: denied { ioctl } for pid=6688 comm="syz.4.184" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.722766][ T30] audit: type=1400 audit(1752300800.995:313): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.988043][ T30] audit: type=1400 audit(1752300800.995:314): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.061170][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.093718][ T6701] team0: Port device batadv1 added [ 129.112860][ T30] audit: type=1400 audit(1752300800.995:315): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.369638][ T50] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 129.378735][ T50] Bluetooth: Wrong link type (-22) [ 129.475831][ T6736] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 129.537333][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.564586][ T6723] team0: Port device batadv1 added [ 130.667536][ T6759] trusted_key: encrypted_key: insufficient parameters specified [ 130.799158][ T6750] netlink: 'syz.3.193': attribute type 39 has an invalid length. [ 131.167620][ T6758] syz.0.195: attempt to access beyond end of device [ 131.167620][ T6758] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 131.196358][ T6758] syz.0.195: attempt to access beyond end of device [ 131.196358][ T6758] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 131.623740][ T5893] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.624392][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 131.690021][ T5893] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 132.364243][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.370604][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993922][ T30] audit: type=1400 audit(1752300805.965:316): avc: denied { map } for pid=6791 comm="syz.1.202" path="/dev/cec1" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.262073][ T30] audit: type=1400 audit(1752300805.975:317): avc: denied { execute } for pid=6791 comm="syz.1.202" path="/dev/cec1" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.294828][ T6800] netlink: 'syz.3.203': attribute type 39 has an invalid length. [ 133.687634][ T30] audit: type=1400 audit(1752300806.665:318): avc: denied { write } for pid=6802 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.797960][ T6812] capability: warning: `syz.1.207' uses deprecated v2 capabilities in a way that may be insecure [ 133.810652][ T30] audit: type=1400 audit(1752300806.795:319): avc: denied { append } for pid=6811 comm="syz.1.207" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 133.840095][ T6812] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 133.851043][ T6812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.870441][ T6812] overlayfs: failed to get uuid (39/file1, err=-13); falling back to uuid=null. [ 134.141336][ T6822] overlayfs: failed to resolve './file1': -2 [ 134.183663][ T5893] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 134.194436][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.246980][ T5893] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 134.265505][ T30] audit: type=1400 audit(1752300807.165:320): avc: denied { create } for pid=6817 comm="syz.1.208" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 134.481178][ T50] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 134.703941][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.961459][ T6836] overlayfs: missing 'lowerdir' [ 134.972609][ T30] audit: type=1400 audit(1752300807.935:321): avc: denied { mounton } for pid=6831 comm="syz.3.211" path="/40/bus" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.025494][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 135.033186][ T5917] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 135.052178][ T5917] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.288806][ T5917] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.322167][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.365478][ T5917] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 135.469335][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.519081][ T5917] usb 3-1: config 0 descriptor?? [ 135.633114][ T6851] overlayfs: failed to verify upper (41/file0, ino=248, err=-116) [ 135.661671][ T6851] overlayfs: failed to verify index dir 'upper' xattr [ 135.758728][ T6851] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 136.048097][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 136.085075][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 136.114146][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.212816][ T5917] usb 3-1: USB disconnect, device number 5 [ 136.276696][ T6862] syz.1.215: attempt to access beyond end of device [ 136.276696][ T6862] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 136.290340][ T6862] syz.1.215: attempt to access beyond end of device [ 136.290340][ T6862] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 136.344254][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.347107][ T5893] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 136.429121][ T5893] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 136.679148][ T30] audit: type=1400 audit(1752300809.645:322): avc: denied { ioctl } for pid=6876 comm="syz.3.218" path="socket:[11377]" dev="sockfs" ino=11377 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.688917][ T6877] vlan2: entered allmulticast mode [ 136.733643][ T6877] macsec0: entered allmulticast mode [ 136.742792][ T6877] veth1_macvtap: entered allmulticast mode [ 136.937170][ T6887] Lens A: ================= START STATUS ================= [ 136.945871][ T6887] Lens A: Focus, Absolute: 0 [ 136.952258][ T6887] Lens A: ================== END STATUS ================== [ 137.058641][ T6889] netlink: 'syz.3.222': attribute type 9 has an invalid length. [ 137.140357][ T30] audit: type=1400 audit(1752300810.115:323): avc: denied { append } for pid=6888 comm="syz.3.222" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.023029][ T30] audit: type=1400 audit(1752300810.145:324): avc: denied { open } for pid=6888 comm="syz.3.222" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.586978][ T5893] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 138.596960][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 138.649282][ T5893] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 138.749420][ T30] audit: type=1400 audit(1752300811.705:325): avc: denied { ioctl } for pid=6896 comm="syz.3.223" path="socket:[11127]" dev="sockfs" ino=11127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.794419][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 138.839604][ T6916] geneve2: entered promiscuous mode [ 138.849547][ T30] audit: type=1400 audit(1752300811.705:326): avc: denied { bind } for pid=6896 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.967951][ T30] audit: type=1400 audit(1752300811.715:327): avc: denied { connect } for pid=6896 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.090947][ T6920] FAULT_INJECTION: forcing a failure. [ 139.090947][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 139.095238][ T30] audit: type=1400 audit(1752300811.715:328): avc: denied { write } for pid=6896 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.115476][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.0.226 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 139.115501][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.115509][ T6920] Call Trace: [ 139.115515][ T6920] [ 139.115520][ T6920] dump_stack_lvl+0x16c/0x1f0 [ 139.115544][ T6920] should_fail_ex+0x512/0x640 [ 139.115563][ T6920] ? fs_reclaim_acquire+0xae/0x150 [ 139.115580][ T6920] ? tomoyo_encode2+0x100/0x3e0 [ 139.115598][ T6920] should_failslab+0xc2/0x120 [ 139.115619][ T6920] __kmalloc_noprof+0xd2/0x510 [ 139.115637][ T6920] ? d_absolute_path+0x136/0x1a0 [ 139.115656][ T6920] tomoyo_encode2+0x100/0x3e0 [ 139.115678][ T6920] tomoyo_encode+0x29/0x50 [ 139.115696][ T6920] tomoyo_realpath_from_path+0x18f/0x6e0 [ 139.115722][ T6920] tomoyo_mount_acl+0x1ae/0x850 [ 139.115738][ T6920] ? kernel_text_address+0x8d/0x100 [ 139.115755][ T6920] ? __kernel_text_address+0xd/0x40 [ 139.115770][ T6920] ? unwind_get_return_address+0x59/0xa0 [ 139.115785][ T6920] ? arch_stack_walk+0xa6/0x100 [ 139.115801][ T6920] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 139.115825][ T6920] ? stack_trace_save+0x8e/0xc0 [ 139.115861][ T6920] ? tomoyo_domain+0xbb/0x150 [ 139.115873][ T6920] ? tomoyo_profile+0x47/0x60 [ 139.115896][ T6920] tomoyo_mount_permission+0x16d/0x420 [ 139.115913][ T6920] ? tomoyo_mount_permission+0x14f/0x420 [ 139.115932][ T6920] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 139.115964][ T6920] security_sb_mount+0x9b/0x260 [ 139.115984][ T6920] path_mount+0x128/0x2020 [ 139.116007][ T6920] ? kmem_cache_free+0x2d1/0x4d0 [ 139.116024][ T6920] ? __pfx_path_mount+0x10/0x10 [ 139.116048][ T6920] ? putname+0x154/0x1a0 [ 139.116073][ T6920] __x64_sys_mount+0x28d/0x310 [ 139.116099][ T6920] ? __pfx___x64_sys_mount+0x10/0x10 [ 139.116127][ T6920] do_syscall_64+0xcd/0x4c0 [ 139.116149][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.116164][ T6920] RIP: 0033:0x7fa8d958e929 [ 139.116176][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.116189][ T6920] RSP: 002b:00007fa8da35b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.116204][ T6920] RAX: ffffffffffffffda RBX: 00007fa8d97b5fa0 RCX: 00007fa8d958e929 [ 139.116213][ T6920] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 139.116221][ T6920] RBP: 00007fa8da35b090 R08: 0000200000000340 R09: 0000000000000000 [ 139.116230][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.116238][ T6920] R13: 0000000000000000 R14: 00007fa8d97b5fa0 R15: 00007ffd31f96ca8 [ 139.116258][ T6920] [ 139.116273][ T6920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.233041][ T30] audit: type=1400 audit(1752300813.205:329): avc: denied { write } for pid=6932 comm="syz.1.228" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 140.518102][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 141.310576][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.491417][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 142.467852][ T10] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 142.488451][ T10] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 142.499377][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.511158][ T10] usb 1-1: Product: syz [ 142.516972][ T10] usb 1-1: Manufacturer: syz [ 142.531837][ T10] usb 1-1: SerialNumber: syz [ 142.543509][ T5908] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.574648][ T10] usb 1-1: config 0 descriptor?? [ 142.590539][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 142.633643][ T10] usb 1-1: setting power ON [ 142.731288][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 142.745152][ T6970] team0: Port device batadv2 added [ 142.770694][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 142.770733][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 142.797153][ T5893] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 142.821460][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 142.833676][ T5893] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 142.891274][ T5908] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 142.909132][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.941371][ T5908] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.972093][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 142.983470][ T5908] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.056095][ T10] usb 1-1: media controller created [ 143.081935][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.105572][ T5908] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 143.117947][ T30] audit: type=1400 audit(1752300816.095:330): avc: denied { mount } for pid=6973 comm="syz.3.236" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.152407][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.161137][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.218996][ T5908] usb 2-1: config 0 descriptor?? [ 143.251536][ T30] audit: type=1400 audit(1752300816.095:331): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.287684][ T10] usb 1-1: selecting invalid altsetting 6 [ 143.381994][ T10] usb 1-1: digital interface selection failed (-22) [ 143.389838][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 143.404242][ T10] usb 1-1: setting power OFF [ 143.409151][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 143.416628][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 143.527943][ T10] (NULL device *): no alternate interface [ 143.671411][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.690515][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 143.724912][ T6982] team0: Port device batadv2 added [ 143.729774][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 143.743768][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.768042][ T5908] usb 2-1: USB disconnect, device number 5 [ 143.795096][ T10] usb 1-1: USB disconnect, device number 4 [ 144.190577][ T30] audit: type=1400 audit(1752300817.165:332): avc: denied { setopt } for pid=6989 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.330013][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.447835][ T30] audit: type=1400 audit(1752300817.425:333): avc: denied { getopt } for pid=6989 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.497241][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 144.522671][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.534501][ T10] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 144.544826][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.555795][ T10] usb 3-1: config 0 descriptor?? [ 144.683488][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.691076][ T30] audit: type=1400 audit(1752300817.665:334): avc: denied { map } for pid=6996 comm="syz.1.241" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.713834][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.737595][ T30] audit: type=1400 audit(1752300817.665:335): avc: denied { execute } for pid=6996 comm="syz.1.241" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.863769][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 144.877154][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.903293][ T24] usb 4-1: config 4 interface 0 has no altsetting 0 [ 144.924874][ T24] usb 4-1: string descriptor 0 read error: -22 [ 144.931807][ T24] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 144.947165][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 144.976044][ T10] elo 0003:04E7:0030.0002: item fetching failed at offset 0/3 [ 145.065576][ T24] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 145.075841][ T10] elo 0003:04E7:0030.0002: parse failed [ 145.092278][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.097945][ T10] elo 0003:04E7:0030.0002: probe with driver elo failed with error -22 [ 145.135083][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 145.196222][ T24] usb 4-1: media controller created [ 145.259156][ T5917] usb 3-1: USB disconnect, device number 6 [ 145.323746][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.793763][ T1205] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.978238][ T1205] usb 1-1: Using ep0 maxpacket: 16 [ 146.008055][ T1205] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 146.033606][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 146.041776][ T1205] usb 1-1: Product: syz [ 146.054075][ T1205] usb 1-1: Manufacturer: syz [ 146.058785][ T1205] usb 1-1: SerialNumber: syz [ 146.074299][ T1205] usb 1-1: config 0 descriptor?? [ 146.266936][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.318363][ T10] usb 1-1: USB disconnect, device number 5 [ 146.415432][ T24] usb 4-1: USB disconnect, device number 5 [ 146.597129][ T30] audit: type=1400 audit(1752300819.575:336): avc: denied { connect } for pid=7036 comm="syz.1.246" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.628849][ T30] audit: type=1400 audit(1752300819.605:337): avc: denied { read write } for pid=7036 comm="syz.1.246" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.671635][ T30] audit: type=1400 audit(1752300819.605:338): avc: denied { open } for pid=7036 comm="syz.1.246" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.663721][ T5908] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 148.169465][ T30] audit: type=1400 audit(1752300821.135:339): avc: denied { write } for pid=7050 comm="syz.0.248" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.429481][ T30] audit: type=1400 audit(1752300821.135:340): avc: denied { create } for pid=7050 comm="syz.0.248" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.501158][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 148.523043][ T30] audit: type=1400 audit(1752300821.495:341): avc: denied { ioctl } for pid=7048 comm="syz.3.247" path="socket:[11885]" dev="sockfs" ino=11885 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.548695][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.561928][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 148.572150][ T5908] usb 4-1: can't read configurations, error -71 [ 148.629478][ T30] audit: type=1400 audit(1752300821.605:342): avc: denied { unlink } for pid=5835 comm="syz-executor" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.913779][ T1205] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.079089][ T1205] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.092240][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 149.102970][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.119292][ T1205] usb 1-1: Product: syz [ 149.129818][ T1205] usb 1-1: Manufacturer: syz [ 149.140391][ T1205] usb 1-1: SerialNumber: syz [ 149.559576][ T7067] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 149.566273][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.574563][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 149.649608][ T30] audit: type=1400 audit(1752300822.625:343): avc: denied { write } for pid=7066 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.813871][ T24] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 150.337077][ T1205] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 150.344209][ T1205] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 150.349802][ T7068] vhci_hcd: connection reset by peer [ 150.362616][ T6437] vhci_hcd: stop threads [ 150.363128][ T6437] vhci_hcd: release socket [ 150.363617][ T6437] vhci_hcd: disconnect device [ 150.556370][ T1205] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 150.622280][ T1205] usb 1-1: USB disconnect, device number 6 [ 150.654511][ T1205] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 151.011525][ T7083] netlink: 'syz.3.256': attribute type 39 has an invalid length. [ 151.034540][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.398914][ T7090] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 151.410539][ T7090] team0: Device ipvlan1 failed to register rx_handler [ 151.841637][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 151.856841][ T7101] team0: Port device batadv2 added [ 151.951287][ T1205] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.125825][ T1205] usb 2-1: Using ep0 maxpacket: 8 [ 152.134419][ T1205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.143204][ T1205] usb 2-1: config 4 interface 0 has no altsetting 0 [ 152.154314][ T1205] usb 2-1: string descriptor 0 read error: -22 [ 152.164643][ T1205] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 152.179184][ T1205] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 152.200946][ T1205] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 152.225315][ T1205] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.242845][ T1205] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 152.250846][ T1205] usb 2-1: media controller created [ 152.311790][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.525036][ T7090] fuseblk: Unknown parameter 'b~mt$G_ʯГȼ)`N@7%đ0kmHIr@' [ 153.270556][ T30] audit: type=1400 audit(1752300825.515:344): avc: denied { remount } for pid=7084 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.395454][ T30] audit: type=1400 audit(1752300826.375:345): avc: denied { create } for pid=7119 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.501629][ T30] audit: type=1400 audit(1752300826.475:346): avc: denied { read } for pid=7119 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.551003][ T1205] zl10353_read_register: readreg error (reg=127, ret==0) [ 153.647374][ T1205] usb 2-1: USB disconnect, device number 6 [ 154.022687][ T7127] autofs: Unknown parameter '0x0000000000000000' [ 154.333783][ T1205] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.654157][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.700390][ T1205] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.712360][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.738133][ T5966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.744155][ T1205] usb 1-1: config 0 descriptor?? [ 154.805997][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 154.955149][ T5966] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 154.973592][ T24] vhci_hcd: vhci_device speed not set [ 154.979466][ T5966] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 155.014031][ T5966] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 155.039392][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.075649][ T5966] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 155.207308][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 155.235993][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 155.260053][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 155.268565][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 155.271774][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 155.284766][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 155.291855][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 155.295819][ T7131] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 155.299090][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 155.314385][ T7131] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 155.325523][ T1205] pwc: recv_control_msg error -32 req 02 val 2100 [ 155.332511][ T1205] pwc: recv_control_msg error -32 req 04 val 1500 [ 155.339789][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.349962][ T1205] pwc: recv_control_msg error -32 req 02 val 2500 [ 155.350422][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.357322][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 155.376969][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 155.393294][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 155.393966][ T5966] gspca_sn9c2028: read1 error -71 [ 155.400799][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.406647][ T5966] gspca_sn9c2028: read1 error -71 [ 155.424520][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.431328][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 155.438071][ T5966] gspca_sn9c2028: read1 error -71 [ 155.438138][ T5966] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 155.470302][ T1205] pwc: Registered as video103. [ 155.485298][ T5966] usb 2-1: USB disconnect, device number 7 [ 155.495872][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 155.551999][ T1205] usb 1-1: USB disconnect, device number 7 [ 155.823508][ T5908] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 155.985644][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.010997][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 156.039422][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.055691][ T5908] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.065005][ T5908] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.072993][ T5908] usb 4-1: Manufacturer: syz [ 156.208475][ T5908] usb 4-1: config 0 descriptor?? [ 156.323512][ T5966] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.468446][ T7143] can: request_module (can-proto-0) failed. [ 156.474413][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 156.482090][ T5966] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 156.671917][ T5966] usb 2-1: config 8 has no interface number 0 [ 156.787402][ T5966] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 156.803879][ T5948] usb 4-1: USB disconnect, device number 8 [ 156.844129][ T5966] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 156.858011][ T5966] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 156.872994][ T5966] usb 2-1: config 8 interface 203 has no altsetting 0 [ 156.950727][ T5966] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 156.959812][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.967939][ T5966] usb 2-1: Product: syz [ 156.972090][ T5966] usb 2-1: Manufacturer: syz [ 156.976882][ T5966] usb 2-1: SerialNumber: syz [ 156.985476][ T7147] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.992687][ T7147] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.191644][ T7159] ip6tnl1: entered promiscuous mode [ 157.197101][ T7159] ip6tnl1: entered allmulticast mode [ 157.204716][ T7159] team0: Device ip6tnl1 is of different type [ 157.235372][ C0] port100 2-1:8.203: NFC: Urb failure (status -71) [ 157.242423][ C0] port100 2-1:8.203: NFC: Urb failure (status -71) [ 157.249637][ T5966] port100 2-1:8.203: NFC: Could not get supported command types [ 157.261180][ T5966] usb 2-1: USB disconnect, device number 8 [ 157.713542][ T1205] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.804155][ T30] audit: type=1400 audit(1752300830.775:347): avc: denied { create } for pid=7175 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.827914][ T30] audit: type=1400 audit(1752300830.775:348): avc: denied { write } for pid=7175 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.864192][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 157.882235][ T1205] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 157.892131][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.966797][ T1205] usb 4-1: config 0 descriptor?? [ 157.978698][ T7179] trusted_key: encrypted_key: insufficient parameters specified [ 157.986196][ T1205] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 158.555629][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 158.564958][ T7183] team0: Port device batadv2 added [ 158.881503][ T7187] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 158.890640][ T7187] team0: Port device batadv3 added [ 160.600823][ T5948] usb 4-1: USB disconnect, device number 9 [ 160.677340][ T7195] autofs: Unknown parameter '0x0000000000000000' [ 160.776925][ T30] audit: type=1400 audit(1752300833.745:349): avc: denied { create } for pid=7193 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.806105][ T30] audit: type=1400 audit(1752300833.745:350): avc: denied { connect } for pid=7193 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.924351][ T30] audit: type=1400 audit(1752300833.905:351): avc: denied { write } for pid=7200 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.191831][ T30] audit: type=1400 audit(1752300834.075:352): avc: denied { write } for pid=7200 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.213554][ T30] audit: type=1400 audit(1752300834.075:353): avc: denied { nlmsg_write } for pid=7200 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.233966][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.243541][ T5948] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 161.270249][ T30] audit: type=1400 audit(1752300834.075:354): avc: denied { connect } for pid=7200 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.300300][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.314297][ T30] audit: type=1400 audit(1752300834.075:355): avc: denied { shutdown } for pid=7200 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.429996][ T5948] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.438284][ T5948] usb 4-1: not running at top speed; connect to a high speed hub [ 161.462641][ T5948] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 161.473020][ T5948] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 161.484293][ T5948] usb 4-1: config 253 has no interface number 0 [ 161.491148][ T5948] usb 4-1: config 253 interface 140 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 161.505572][ T5948] usb 4-1: config 253 interface 140 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 161.643557][ T5948] usb 4-1: config 253 interface 140 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.786692][ T30] audit: type=1400 audit(1752300834.705:356): avc: denied { create } for pid=7204 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.838409][ T5948] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 161.920704][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.020316][ T5948] usb 4-1: Product: syz [ 162.092253][ T5948] usb 4-1: Manufacturer: syz [ 162.097138][ T5948] usb 4-1: SerialNumber: syz [ 162.453651][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.536687][ T30] audit: type=1400 audit(1752300835.515:357): avc: denied { write } for pid=7197 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 162.567026][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.602405][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.619551][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 162.630673][ T5909] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 162.664843][ T5909] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.686762][ T5948] usbtest 4-1:253.140: Linux gadget zero [ 162.692451][ T5948] usbtest 4-1:253.140: full-speed {control in/out iso-out} tests (+alt) [ 162.693483][ T5909] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.737602][ T5948] usb 4-1: USB disconnect, device number 10 [ 162.760023][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.773364][ T5909] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 162.787705][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.804239][ T5909] usb 2-1: config 0 descriptor?? [ 163.651293][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 163.660778][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 163.737181][ T5909] usb 2-1: USB disconnect, device number 9 [ 163.989473][ T30] audit: type=1400 audit(1752300836.965:358): avc: denied { create } for pid=7236 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.308136][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 164.317437][ T7239] team0: Port device batadv4 added [ 166.366919][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 166.366932][ T30] audit: type=1400 audit(1752300839.345:362): avc: denied { connect } for pid=7268 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.437581][ T30] audit: type=1400 audit(1752300839.345:363): avc: denied { bind } for pid=7268 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.459898][ T30] audit: type=1400 audit(1752300839.345:364): avc: denied { write } for pid=7268 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.491007][ T30] audit: type=1400 audit(1752300839.465:365): avc: denied { create } for pid=7269 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.522816][ T30] audit: type=1400 audit(1752300839.465:366): avc: denied { read } for pid=7268 comm="syz.0.305" path="socket:[13435]" dev="sockfs" ino=13435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.702385][ T30] audit: type=1400 audit(1752300839.675:367): avc: denied { execute_no_trans } for pid=7269 comm="syz.1.304" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.523629][ T30] audit: type=1400 audit(1752300841.495:368): avc: denied { create } for pid=7292 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.663001][ T30] audit: type=1400 audit(1752300841.635:369): avc: denied { connect } for pid=7292 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.683157][ T30] audit: type=1400 audit(1752300841.635:370): avc: denied { write } for pid=7292 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.201438][ T30] audit: type=1400 audit(1752300841.675:371): avc: denied { read } for pid=7292 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.571560][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'. [ 171.615457][ T7316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 171.622014][ T7316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.629501][ T7318] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 171.636005][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.646117][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 171.650901][ T7316] vhci_hcd vhci_hcd.0: Device attached [ 171.659555][ T7320] vhci_hcd: connection closed [ 171.659658][ T2135] vhci_hcd: stop threads [ 171.660092][ T7317] vhci_hcd: connection closed [ 171.669723][ T2135] vhci_hcd: release socket [ 171.679160][ T2135] vhci_hcd: disconnect device [ 171.689951][ T2135] vhci_hcd: stop threads [ 171.694226][ T2135] vhci_hcd: release socket [ 171.698616][ T2135] vhci_hcd: disconnect device [ 172.193961][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 172.205093][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 172.205105][ T30] audit: type=1400 audit(1752300845.185:373): avc: denied { create } for pid=7322 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.200052][ T30] audit: type=1400 audit(1752300846.175:374): avc: denied { map } for pid=7327 comm="syz.1.320" path="/proc/237/task/238/mounts" dev="proc" ino=12768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 173.223599][ T30] audit: type=1400 audit(1752300846.175:375): avc: denied { read } for pid=7327 comm="syz.1.320" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 173.249305][ T30] audit: type=1400 audit(1752300846.175:376): avc: denied { open } for pid=7327 comm="syz.1.320" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.489036][ T30] audit: type=1400 audit(1752300847.465:377): avc: denied { setopt } for pid=7334 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.524449][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 174.530788][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 174.541653][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 174.549238][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 174.620644][ T7335] ceph: No mds server is up or the cluster is laggy [ 174.817573][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 174.839475][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 175.599010][ T7347] input: syz0 as /devices/virtual/input/input8 [ 176.384856][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 176.392923][ T7352] team0: Port device batadv3 added [ 177.403664][ T5909] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.553484][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 177.559618][ T5909] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 177.568022][ T5909] usb 2-1: config 0 has no interface number 0 [ 177.576185][ T5909] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 177.585278][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.593250][ T5909] usb 2-1: Product: syz [ 177.598122][ T5909] usb 2-1: Manufacturer: syz [ 177.602711][ T5909] usb 2-1: SerialNumber: syz [ 177.608911][ T5909] usb 2-1: config 0 descriptor?? [ 177.822300][ T5909] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v61 fw v146.0.0 (2 channels) [ 178.078339][ T7354] binder: 7353:7354 ioctl c0306201 200000000040 returned -14 [ 178.087324][ T5909] peak_usb 2-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 178.097286][ T5909] peak_usb 2-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 178.165096][ T5909] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -71 [ 178.177223][ T5909] usb 2-1: USB disconnect, device number 10 [ 178.735598][ T7361] FAULT_INJECTION: forcing a failure. [ 178.735598][ T7361] name failslab, interval 1, probability 0, space 0, times 0 [ 178.756202][ T7361] CPU: 1 UID: 0 PID: 7361 Comm: syz.1.329 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 178.756229][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.756239][ T7361] Call Trace: [ 178.756244][ T7361] [ 178.756251][ T7361] dump_stack_lvl+0x16c/0x1f0 [ 178.756280][ T7361] should_fail_ex+0x512/0x640 [ 178.756302][ T7361] ? fs_reclaim_acquire+0xae/0x150 [ 178.756321][ T7361] ? tomoyo_encode2+0x100/0x3e0 [ 178.756343][ T7361] should_failslab+0xc2/0x120 [ 178.756373][ T7361] __kmalloc_noprof+0xd2/0x510 [ 178.756394][ T7361] ? d_absolute_path+0x136/0x1a0 [ 178.756415][ T7361] tomoyo_encode2+0x100/0x3e0 [ 178.756441][ T7361] tomoyo_encode+0x29/0x50 [ 178.756462][ T7361] tomoyo_realpath_from_path+0x18f/0x6e0 [ 178.756493][ T7361] tomoyo_mount_acl+0x1ae/0x850 [ 178.756513][ T7361] ? kernel_text_address+0x8d/0x100 [ 178.756533][ T7361] ? __kernel_text_address+0xd/0x40 [ 178.756551][ T7361] ? unwind_get_return_address+0x59/0xa0 [ 178.756568][ T7361] ? arch_stack_walk+0xa6/0x100 [ 178.756587][ T7361] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 178.756614][ T7361] ? stack_trace_save+0x8e/0xc0 [ 178.756657][ T7361] ? tomoyo_domain+0xbb/0x150 [ 178.756671][ T7361] ? tomoyo_profile+0x47/0x60 [ 178.756700][ T7361] tomoyo_mount_permission+0x16d/0x420 [ 178.756721][ T7361] ? tomoyo_mount_permission+0x14f/0x420 [ 178.756744][ T7361] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 178.756779][ T7361] security_sb_mount+0x9b/0x260 [ 178.756803][ T7361] path_mount+0x128/0x2020 [ 178.756830][ T7361] ? kmem_cache_free+0x2d1/0x4d0 [ 178.756850][ T7361] ? __pfx_path_mount+0x10/0x10 [ 178.756879][ T7361] ? putname+0x154/0x1a0 [ 178.756908][ T7361] __x64_sys_mount+0x28d/0x310 [ 178.756934][ T7361] ? __pfx___x64_sys_mount+0x10/0x10 [ 178.756968][ T7361] do_syscall_64+0xcd/0x4c0 [ 178.756994][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.757011][ T7361] RIP: 0033:0x7f859c38e929 [ 178.757024][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.757041][ T7361] RSP: 002b:00007f859d166038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.757057][ T7361] RAX: ffffffffffffffda RBX: 00007f859c5b5fa0 RCX: 00007f859c38e929 [ 178.757069][ T7361] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 178.757079][ T7361] RBP: 00007f859d166090 R08: 0000200000000300 R09: 0000000000000000 [ 178.757088][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.757098][ T7361] R13: 0000000000000000 R14: 00007f859c5b5fa0 R15: 00007fff50df4c98 [ 178.757121][ T7361] [ 178.757137][ T7361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.297771][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.454728][ T5886] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 179.462921][ T5886] usb 2-1: config 0 has no interface number 0 [ 179.470051][ T5886] usb 2-1: too many endpoints for config 0 interface 170 altsetting 143: 135, using maximum allowed: 30 [ 179.481222][ T5886] usb 2-1: config 0 interface 170 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 179.494655][ T5886] usb 2-1: config 0 interface 170 has no altsetting 0 [ 179.501421][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.510496][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.519878][ T5886] usb 2-1: config 0 descriptor?? [ 180.103775][ T7364] block nbd1: NBD_DISCONNECT [ 180.178626][ T7364] block nbd1: Send disconnect failed -107 [ 181.673388][ T7362] block nbd1: Disconnected due to user request. [ 181.691521][ T7362] block nbd1: shutting down sockets [ 181.732888][ T5886] usb 2-1: string descriptor 0 read error: -71 [ 181.750618][ T5886] cp210x 2-1:0.170: cp210x converter detected [ 181.759590][ T5886] cp210x 2-1:0.170: failed to get vendor val 0x370b size 1: -71 [ 181.767842][ T5886] cp210x 2-1:0.170: querying part number failed [ 181.780637][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0 [ 181.817862][ T5886] usb 2-1: USB disconnect, device number 11 [ 181.855944][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.891172][ T5886] cp210x 2-1:0.170: device disconnected [ 182.306274][ T30] audit: type=1400 audit(1752300855.285:378): avc: denied { accept } for pid=7369 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.405427][ T30] audit: type=1400 audit(1752300855.285:379): avc: denied { getopt } for pid=7369 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.339451][ T7376] trusted_key: encrypted_key: insufficient parameters specified [ 183.795293][ T7379] autofs: Unknown parameter 'fd0x0000000000000000' [ 183.882830][ T7381] autofs: Unknown parameter 'fd0x0000000000000000' [ 186.769624][ T7398] fuse: Bad value for 'fd' [ 187.703811][ T1205] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.853481][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 187.859900][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.871450][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.884367][ T1205] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.893492][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.901480][ T1205] usb 2-1: Product: syz [ 187.905724][ T1205] usb 2-1: Manufacturer: syz [ 187.910323][ T1205] usb 2-1: SerialNumber: syz [ 187.917211][ T1205] usb 2-1: config 0 descriptor?? [ 187.927615][ T1205] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.936854][ T1205] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 188.537014][ T1205] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 188.544238][ T1205] em28xx 2-1:0.0: Config register raw data: 0x41 [ 188.777185][ T10] usb 2-1: USB disconnect, device number 12 [ 188.787371][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 188.797384][ T10] em28xx 2-1:0.0: Freeing device [ 190.923471][ T30] audit: type=1400 audit(1752300863.585:380): avc: denied { create } for pid=7412 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.951095][ T30] audit: type=1400 audit(1752300863.595:381): avc: denied { bind } for pid=7412 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.970568][ T30] audit: type=1400 audit(1752300863.595:382): avc: denied { name_bind } for pid=7412 comm="syz.1.346" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 190.991436][ T30] audit: type=1400 audit(1752300863.595:383): avc: denied { node_bind } for pid=7412 comm="syz.1.346" saddr=fe80::f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 193.789701][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.796369][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.183503][ T1205] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.333482][ T1205] usb 2-1: Using ep0 maxpacket: 8 [ 198.340855][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.351730][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 198.363371][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 198.374448][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.384245][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.400530][ T1205] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 198.409628][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.417622][ T1205] usb 2-1: Product: syz [ 198.421755][ T1205] usb 2-1: Manufacturer: syz [ 198.426499][ T1205] usb 2-1: SerialNumber: syz [ 198.432703][ T1205] usb 2-1: config 0 descriptor?? [ 198.483523][ T1205] rc_core: IR keymap rc-imon-rsc not found [ 198.489374][ T1205] Registered IR keymap rc-empty [ 198.495576][ T1205] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 198.510930][ T1205] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 198.523844][ T1205] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90 [ 198.651744][ T1205] usb 2-1: USB disconnect, device number 13 [ 200.609791][ T30] audit: type=1400 audit(1752300873.585:384): avc: denied { override_creds } for pid=7478 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.766687][ T7482] sd 0:0:1:0: device reset [ 200.772195][ T30] audit: type=1326 audit(1752300873.745:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 200.833707][ T30] audit: type=1326 audit(1752300873.745:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 200.857091][ T30] audit: type=1326 audit(1752300873.745:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859c38d290 code=0x7ffc0000 [ 200.883665][ T30] audit: type=1326 audit(1752300873.745:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 200.907233][ T30] audit: type=1326 audit(1752300873.745:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 200.930682][ T30] audit: type=1326 audit(1752300873.745:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 200.953972][ T30] audit: type=1326 audit(1752300873.745:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859c38e929 code=0x7ffc0000 [ 201.486997][ T30] audit: type=1400 audit(1752300874.465:392): avc: denied { ioctl } for pid=7487 comm="syz.1.366" path="socket:[13886]" dev="sockfs" ino=13886 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.339560][ T30] audit: type=1400 audit(1752300876.315:393): avc: denied { mounton } for pid=7505 comm="syz.1.372" path="/121/file1/file0" dev="autofs" ino=13101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 255.225809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.232133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.303612][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 285.311387][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 [ 285.319298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.332824][ T31] task:kworker/0:0 state:D stack:25944 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.353588][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 285.360389][ T31] Call Trace: [ 285.372065][ T31] [ 285.413449][ T31] __schedule+0x116a/0x5de0 [ 285.418016][ T31] ? __pfx___schedule+0x10/0x10 [ 285.423842][ T31] ? find_held_lock+0x2b/0x80 [ 285.428548][ T31] ? schedule+0x2d7/0x3a0 [ 285.433928][ T31] schedule+0xe7/0x3a0 [ 285.438020][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.443788][ T31] __mutex_lock+0x6c7/0xb90 [ 285.448304][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 285.454922][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 285.460163][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.466055][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 285.471891][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 285.478272][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 285.484511][ T31] process_one_work+0x9cf/0x1b70 [ 285.489449][ T31] ? __pfx_process_one_work+0x10/0x10 [ 285.494958][ T31] ? assign_work+0x1a0/0x250 [ 285.499542][ T31] worker_thread+0x6c8/0xf10 [ 285.504180][ T31] ? __pfx_worker_thread+0x10/0x10 [ 285.509288][ T31] kthread+0x3c5/0x780 [ 285.513334][ T31] ? __pfx_kthread+0x10/0x10 [ 285.517936][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.522696][ T31] ? __pfx_kthread+0x10/0x10 [ 285.527487][ T31] ret_from_fork+0x5d7/0x6f0 [ 285.532082][ T31] ? __pfx_kthread+0x10/0x10 [ 285.536727][ T31] ret_from_fork_asm+0x1a/0x30 [ 285.541503][ T31] [ 285.544677][ T31] INFO: task syz.4.184:6688 blocked for more than 143 seconds. [ 285.552210][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 [ 285.559866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.568569][ T31] task:syz.4.184 state:D stack:26280 pid:6688 tgid:6688 ppid:5825 task_flags:0x400040 flags:0x00004004 [ 285.580530][ T31] Call Trace: [ 285.583844][ T31] [ 285.586769][ T31] __schedule+0x116a/0x5de0 [ 285.591276][ T31] ? __lock_acquire+0x622/0x1c90 [ 285.596254][ T31] ? __pfx___schedule+0x10/0x10 [ 285.601112][ T31] ? find_held_lock+0x2b/0x80 [ 285.605826][ T31] ? schedule+0x2d7/0x3a0 [ 285.610166][ T31] schedule+0xe7/0x3a0 [ 285.614294][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.619754][ T31] __mutex_lock+0x6c7/0xb90 [ 285.624300][ T31] ? rfkill_unregister+0xec/0x2c0 [ 285.629330][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 285.634541][ T31] ? device_del+0x6b6/0x9f0 [ 285.639062][ T31] ? __pfx_device_del+0x10/0x10 [ 285.643968][ T31] ? rfkill_unregister+0xec/0x2c0 [ 285.649001][ T31] rfkill_unregister+0xec/0x2c0 [ 285.653890][ T31] nfc_unregister_device+0x94/0x330 [ 285.659102][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 285.664863][ T31] virtual_ncidev_close+0x4b/0xa0 [ 285.669893][ T31] __fput+0x402/0xb70 [ 285.673915][ T31] task_work_run+0x14d/0x240 [ 285.678516][ T31] ? __pfx_task_work_run+0x10/0x10 [ 285.683683][ T31] ? __might_fault+0x13b/0x190 [ 285.688476][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 285.693816][ T31] do_syscall_64+0x3f6/0x4c0 [ 285.698410][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.704445][ T31] RIP: 0033:0x7fbb4e38e929 [ 285.708855][ T31] RSP: 002b:00007ffcb86679a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 285.717316][ T31] RAX: 0000000000000000 RBX: 00007fbb4e5b7ba0 RCX: 00007fbb4e38e929 [ 285.725300][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 285.733252][ T31] RBP: 00007fbb4e5b7ba0 R08: 00000000000001f8 R09: 0000001eb8667c9f [ 285.741258][ T31] R10: 00007fbb4e5b7ac0 R11: 0000000000000246 R12: 000000000001f481 [ 285.749417][ T31] R13: 00007fbb4e5b5fa0 R14: ffffffffffffffff R15: 00007ffcb8667ac0 [ 285.757448][ T31] [ 285.760484][ T31] [ 285.760484][ T31] Showing all locks held in the system: [ 285.768258][ T31] 3 locks held by kworker/0:0/9: [ 285.773198][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 285.783883][ T31] #1: ffffc900000e7d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 285.797815][ T31] #2: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 285.809298][ T31] 1 lock held by khungtaskd/31: [ 285.814168][ T31] #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 285.824072][ T31] 3 locks held by kworker/u8:7/2135: [ 285.829386][ T31] 2 locks held by getty/5589: [ 285.834191][ T31] #0: ffff8880325eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 285.844002][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 285.854349][ T31] 1 lock held by syz-executor/5827: [ 285.859542][ T31] #0: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 285.869794][ T31] 4 locks held by kworker/0:4/5893: [ 285.875013][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 285.885532][ T31] #1: ffffc9000455fd10 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 285.895924][ T31] #2: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 285.905454][ T31] #3: ffff88807b166100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 285.914566][ T31] 1 lock held by syz.3.135/6513: [ 285.919496][ T31] #0: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 285.929663][ T31] 2 locks held by syz.4.184/6688: [ 285.934693][ T31] #0: ffff88807b166100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 285.944800][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 285.955003][ T31] 1 lock held by syz.2.230/6950: [ 285.959930][ T31] #0: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 285.970058][ T31] 2 locks held by syz-executor/6978: [ 285.975505][ T31] #0: ffff88802fceb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 285.984971][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 285.994915][ T31] 2 locks held by syz-executor/7222: [ 286.000172][ T31] #0: ffff88807a008118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.009602][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.019585][ T31] 2 locks held by syz.0.312/7296: [ 286.024636][ T31] #0: ffff8880582e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.035040][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.045064][ T31] 2 locks held by syz-executor/7368: [ 286.050334][ T31] #0: ffff888055bb5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.059784][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.069754][ T31] 2 locks held by syz-executor/7382: [ 286.076318][ T31] #0: ffff888031851118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.085929][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.095981][ T31] 2 locks held by syz-executor/7495: [ 286.101255][ T31] #0: ffff888075bf6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.110823][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.120785][ T31] 2 locks held by syz-executor/7509: [ 286.126195][ T31] #0: ffff88807de0b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.135638][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.145595][ T31] 2 locks held by syz-executor/7511: [ 286.150867][ T31] #0: ffff88807a541118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.160313][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.170317][ T31] 2 locks held by syz-executor/7517: [ 286.175873][ T31] #0: ffff88802a139118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.186292][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.196248][ T31] 2 locks held by syz-executor/7520: [ 286.201520][ T31] #0: ffff888031866918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.210979][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.220966][ T31] 2 locks held by syz-executor/7522: [ 286.226338][ T31] #0: ffff888079701918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.235769][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.245762][ T31] 2 locks held by syz-executor/7525: [ 286.251037][ T31] #0: ffff88807d094918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.260442][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.270439][ T31] 2 locks held by syz-executor/7528: [ 286.275750][ T31] #0: ffff8880559c6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 286.285211][ T31] #1: ffffffff90804968 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 286.296746][ T31] [ 286.299083][ T31] ============================================= [ 286.299083][ T31] [ 286.311199][ T31] NMI backtrace for cpu 0 [ 286.311214][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 286.311234][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.311244][ T31] Call Trace: [ 286.311250][ T31] [ 286.311256][ T31] dump_stack_lvl+0x116/0x1f0 [ 286.311283][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 286.311301][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.311330][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 286.311350][ T31] watchdog+0xf70/0x12c0 [ 286.311374][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.311390][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.311413][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.311437][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.311454][ T31] kthread+0x3c5/0x780 [ 286.311471][ T31] ? __pfx_kthread+0x10/0x10 [ 286.311489][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.311511][ T31] ? __pfx_kthread+0x10/0x10 [ 286.311528][ T31] ret_from_fork+0x5d7/0x6f0 [ 286.311552][ T31] ? __pfx_kthread+0x10/0x10 [ 286.311568][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.311598][ T31] [ 286.311604][ T31] Sending NMI from CPU 0 to CPUs 1: [ 286.429951][ C1] NMI backtrace for cpu 1 [ 286.429966][ C1] CPU: 1 UID: 0 PID: 2135 Comm: kworker/u8:7 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 286.429984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.429993][ C1] Workqueue: 0x0 (events_unbound) [ 286.430011][ C1] RIP: 0010:__lock_acquire+0x6a5/0x1c90 [ 286.430028][ C1] Code: 29 c6 01 c8 c1 ce 0d 44 31 f6 89 f2 29 f7 01 f0 c1 c2 04 89 c0 31 fa 48 c1 e2 20 48 09 c2 41 8b 45 20 49 89 d0 25 00 80 04 00 <3d> 00 00 04 00 0f 84 c4 04 00 00 8b 35 3e 45 11 0f 85 f6 0f 84 79 [ 286.430040][ C1] RSP: 0018:ffffc90005617920 EFLAGS: 00000046 [ 286.430050][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000061398829 [ 286.430064][ C1] RDX: 20fd2086fc07d626 RSI: 0000000043da2437 RDI: 000000001d5f63f2 [ 286.430073][ C1] RBP: ffff88802b08c880 R08: 20fd2086fc07d626 R09: 0000000000000001 [ 286.430082][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802b08d370 [ 286.430091][ C1] R13: ffff88802b08d398 R14: 000000000de89396 R15: 0000000000000001 [ 286.430099][ C1] FS: 0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 286.430113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.430122][ C1] CR2: 000055b242ef8b48 CR3: 000000000e382000 CR4: 00000000003526f0 [ 286.430131][ C1] Call Trace: [ 286.430135][ C1] [ 286.430143][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 286.430158][ C1] lock_acquire+0x179/0x350 [ 286.430170][ C1] ? sched_balance_newidle+0x3ae/0x1390 [ 286.430190][ C1] sched_balance_newidle+0x3bf/0x1390 [ 286.430205][ C1] ? sched_balance_newidle+0x3ae/0x1390 [ 286.430224][ C1] ? dl_server_stop+0x49/0x90 [ 286.430237][ C1] ? __pfx_sched_balance_newidle+0x10/0x10 [ 286.430258][ C1] balance_fair+0x4a/0x70 [ 286.430273][ C1] __schedule+0x1c9a/0x5de0 [ 286.430290][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.430307][ C1] ? __lock_acquire+0x622/0x1c90 [ 286.430320][ C1] ? __pfx___schedule+0x10/0x10 [ 286.430336][ C1] ? find_held_lock+0x2b/0x80 [ 286.430352][ C1] ? schedule+0x2d7/0x3a0 [ 286.430368][ C1] schedule+0xe7/0x3a0 [ 286.430382][ C1] ? worker_thread+0x28b/0xf10 [ 286.430395][ C1] worker_thread+0x2e5/0xf10 [ 286.430410][ C1] ? __kthread_parkme+0x19e/0x250 [ 286.430429][ C1] ? __pfx_worker_thread+0x10/0x10 [ 286.430442][ C1] kthread+0x3c5/0x780 [ 286.430454][ C1] ? __pfx_kthread+0x10/0x10 [ 286.430467][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.430483][ C1] ? __pfx_kthread+0x10/0x10 [ 286.430496][ C1] ret_from_fork+0x5d7/0x6f0 [ 286.430514][ C1] ? __pfx_kthread+0x10/0x10 [ 286.430525][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.430544][ C1] [ 286.431094][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 286.697135][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 286.708932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.718986][ T31] Call Trace: [ 286.722259][ T31] [ 286.725182][ T31] dump_stack_lvl+0x3d/0x1f0 [ 286.729770][ T31] panic+0x71c/0x800 [ 286.733663][ T31] ? __pfx_panic+0x10/0x10 [ 286.738070][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.743451][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.749420][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.754796][ T31] ? watchdog+0xdda/0x12c0 [ 286.759196][ T31] ? watchdog+0xdcd/0x12c0 [ 286.763601][ T31] watchdog+0xdeb/0x12c0 [ 286.767831][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.772490][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.777677][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.782693][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.787358][ T31] kthread+0x3c5/0x780 [ 286.791413][ T31] ? __pfx_kthread+0x10/0x10 [ 286.795987][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.800736][ T31] ? __pfx_kthread+0x10/0x10 [ 286.805315][ T31] ret_from_fork+0x5d7/0x6f0 [ 286.809894][ T31] ? __pfx_kthread+0x10/0x10 [ 286.814468][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.819227][ T31] [ 286.822430][ T31] Kernel Offset: disabled [ 286.826733][ T31] Rebooting in 86400 seconds..