last executing test programs: 13.098189132s ago: executing program 4 (id=655): syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_mrs_zap\x00', r2, 0x0, 0x2}, 0x18) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e08810c08"], 0xb) 12.877084305s ago: executing program 4 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d200850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f9ffffff8500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.958004949s ago: executing program 4 (id=661): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa3f, {{0xa, 0x4e21, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @remote}, r1, 0x3}}, 0x48) 10.949258194s ago: executing program 4 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) syz_open_dev$loop(0x0, 0x7, 0x2480) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/176, 0xb0}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000440)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="1800000024000103000000000000000001", @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r8], 0x18}, 0x1, 0x0, 0x0, 0x8805}, 0x4000) recvmmsg(r11, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) 9.923379734s ago: executing program 4 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6}, 0x18) shutdown(r5, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, &(0x7f0000000240)) mkdir(0x0, 0x100) 8.375302125s ago: executing program 3 (id=669): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000041e0000080000000b"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x200000000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4013) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00083a00fc010000000000000000000000110000fe80006c0000000000000000000000aa8100907800000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x9, {0x0, 0x0, 0x0, r8, {0x7, 0xc}, {0x3, 0xe}, {0x7, 0xffe4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008884) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000040)={0x0, 0x2, 0x3ff, 0x30315559, 0x2, [], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x2], [0x8000000000000000]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) 8.201901498s ago: executing program 4 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x200, 0x2, 0x3}, 0x18, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f0000000280), 0x7fcc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040), 0x4) fsopen(0x0, 0x0) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x726, 0x7) 8.05929583s ago: executing program 3 (id=672): syz_open_dev$evdev(0x0, 0x2, 0x140c82) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x8041, 0x8, 0x5}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="01000000e26200000000000002000000000100000003000000ad00"/44], 0x658) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007b011800000000009500000000000000156b0525584845fc3f8c3b78e12db178fef1daa85c4a5acf88e849bd2c48da5fdfed8533ac72c96678d407220fc98d60ed1ba3347f13f757f7cebe8a09c3e18ced9a62397aaf18de5c985a1f9dabf1d326e8adfb6645055d986abfa6f32602e8aae3046d2a932a0d9dc3cee738dde776959ddce27c502badb58e38751ecd1fd94ac421c4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff79}, 0x1, 0x0, 0x0, 0x10}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 7.199806106s ago: executing program 3 (id=673): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) (async) syz_io_uring_setup(0x4ee6, &(0x7f0000000180)={0x0, 0xd294, 0x20, 0x3, 0x314, 0x0, r1}, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_sctp(0xa, 0x5, 0x84) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x55149edf26c6779f, 0xffffffffffffffff, 0x100000000) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000002c80)={0x5, 0xfffffddb, 0xfffff800, 0x0, 0x5, "8e8c3721eb2eaed3de78948640a6c4f698978c", 0xd, 0xffff}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) write(r5, &(0x7f0000000000)="3f14708a1525e3c8", 0x8) recvmmsg(r5, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) 7.013387091s ago: executing program 0 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f0000000280), 0x7fcc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040), 0x4) fsopen(0x0, 0x0) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x726, 0x7) 5.980358271s ago: executing program 1 (id=678): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fanotify_mark(r0, 0x21, 0x13, r2, 0x0) fanotify_mark(r0, 0x22, 0x40000038, r2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x288000, 0x0, 0x0, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffff3102}, @NFTA_LIMIT_RATE={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}}, 0x0) 5.831489808s ago: executing program 2 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 5.830543547s ago: executing program 1 (id=680): syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086dd602c96ed00003c00fe800000000000000000000000000000fe8000000000000000000000009000aa"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x8c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x2c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xd}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x45}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xee}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x41}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x16}, {0x621fcf12c7948309, 0x1}, {0x2}, {0x30, 0x1}, {0x1}, {0x9, 0x1}, {0x1}, {0x6, 0x1}, {0x2}, {0x3}, {0x48, 0x1}, {0xc}, {0x48}, {0x36}, {0xb, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x50, 0x1}, {0x18}, {0x60}, {0x5}, {0x1}, {0x35, 0x1}, {0xb, 0x1}, {0x24}, {0x1b}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c880}, 0x4004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000feffffff030000009500"/24], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000580)={r3, 0x8000, 0x1, 0x3, 0x5, 0x80}, 0x14) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000fc0)=[{{&(0x7f00000004c0)=@tipc=@name, 0x80, &(0x7f0000001700)=[{&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f0000000540)=""/37, 0x25}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f00000010c0)=""/141, 0x8d}, {&(0x7f0000001180)=""/186, 0xba}, {&(0x7f0000001240)=""/225, 0xe1}, {&(0x7f0000001480)=""/167, 0xa7}, {&(0x7f0000001340)=""/110, 0x6e}, {&(0x7f0000001540)=""/225, 0xe1}, {&(0x7f0000001640)=""/140, 0x8c}], 0xa, &(0x7f0000000740)=""/161, 0xa1}, 0x800}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/132, 0x84}, {&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/135, 0x87}], 0x4, &(0x7f0000000940)=""/99, 0x63}, 0x10000}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0xfffffffffffffe0b, &(0x7f00000009c0)=[{&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000d00)=""/187, 0xbb}], 0x3, &(0x7f0000000dc0)=""/90, 0x5a}, 0x3ff}, {{&(0x7f0000000e40)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/39, 0x27}, 0x40}], 0x4, 0x40010020, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 5.770532609s ago: executing program 0 (id=681): socket$inet6(0xa, 0x1, 0x940) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = syz_open_dev$mouse(0x0, 0x0, 0x2042) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000100)="b9dc987addeb79698daaed8469ba576d7e1d8aa3da54097aa70ac5f77a29f71087ae8c99c3997b5c875f9d6b4f030a8723bedfdc849e6915c4fbbc0bdfcb9ae4b835000f90c74362ca5852517e232c8c7d580ca6d2c077a4812abc9b3496de733b12901b6ab878707a3889925b228d850bcfb0124ef58ce505bd9d2aa9428b2ebefe4f0d8626f6310c11ae8f8ee02385d02e9014c06fdd4abb8fc9a3a559b78edd5cb4dc84dc1739522d875fb6ecfad5b381a29e5f0b", 0xb6}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)="e24d831467064779500ddbc9efc139882e86a70fa0f90ba83c339e23a97afab0db05c0d2c3021ae7313858a9f85a70c09b1c77572e6b7cf819b3b2cbbcc532152eea771ef618dd26dd14d6201a79432fff51992a", 0x54}], 0x3) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)=[{&(0x7f00000007c0)="08006d2a81496b273d", 0x9}], 0x1}, 0x800) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000000)={0x9, 0x10, 0x8}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc}) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '-*:*-!'}, 0x1c, r8) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x513}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc20}]}, 0x24}}, 0x404c000) 5.372310808s ago: executing program 0 (id=682): socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x40002100) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffdd9, 0x0}, 0xf5}], 0x40001b6, 0x0) close(r4) 4.923542978s ago: executing program 3 (id=683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000935aa8257f90"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x400c4808, 0x0) sendfile(r3, r4, 0x0, 0x38) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 4.831036649s ago: executing program 2 (id=684): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x88}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xe1, 0x1, 0xe, [{@local, 0x7}]}, @rr={0x7, 0x1b, 0xe3, [@rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @private=0xa010102]}, @rr={0x7, 0x1f, 0xf0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @loopback]}, @cipso={0x86, 0x33, 0x0, [{0x2, 0xb, "2383f0a4f3567aedfa"}, {0x6, 0xd, "c95c1099e4a9ed18c97ae0"}, {0x6, 0xc, "c210e0e645c4b6be077e"}, {0x6, 0x3, "a8"}, {0x5, 0x6, "3b9e69bb"}]}, @rr={0x7, 0x7, 0x6e, [@multicast2]}, @noop, @rr={0x7, 0x7, 0x41, [@loopback]}, @timestamp={0x44, 0xc, 0xef, 0x0, 0x6, [0x2, 0x8]}]}}}], 0xd8}, 0x48090) read$char_usb(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x4000) 3.762199057s ago: executing program 2 (id=685): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast1}]}}}]}, 0x4c}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x63a, 0x4) 3.523644361s ago: executing program 2 (id=686): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x1ff, 0xbb8f, 0x635, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 3.352985272s ago: executing program 2 (id=687): r0 = socket$alg(0x26, 0x5, 0x0) socket(0x22, 0x2, 0x23) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x18, 0x80805, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1, 0x15b}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 3.313538638s ago: executing program 0 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mem_connect\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) syz_open_dev$loop(0x0, 0x7, 0x2480) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/176, 0xb0}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000440)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="1800000024000103000000000000000001", @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES16=r8], 0x18}, 0x1, 0x0, 0x0, 0x8805}, 0x4000) recvmmsg(r11, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) 3.059452195s ago: executing program 1 (id=689): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100", 0xe}], 0x2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) r6 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 2.157256591s ago: executing program 0 (id=690): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5, 0x0, 0xe4}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.147717266s ago: executing program 2 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6c582b7599d6dcd3292ea54c7becf915d564c903999c200", 0x1a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x1) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x48010) openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0) prlimit64(r4, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x3, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 2.074452029s ago: executing program 1 (id=692): socket$inet6(0xa, 0x1, 0x940) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = syz_open_dev$mouse(0x0, 0x0, 0x2042) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000100)="b9dc987addeb79698daaed8469ba576d7e1d8aa3da54097aa70ac5f77a29f71087ae8c99c3997b5c875f9d6b4f030a8723bedfdc849e6915c4fbbc0bdfcb9ae4b835000f90c74362ca5852517e232c8c7d580ca6d2c077a4812abc9b3496de733b12901b6ab878707a3889925b228d850bcfb0124ef58ce505bd9d2aa9428b2ebefe4f0d8626f6310c11ae8f8ee02385d02e9014c06fdd4abb8fc9a3a559b78edd5cb4dc84dc1739522d875fb6ecfad5b381a29e5f0b", 0xb6}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)="e24d831467064779500ddbc9efc139882e86a70fa0f90ba83c339e23a97afab0db05c0d2c3021ae7313858a9f85a70c09b1c77572e6b7cf819b3b2cbbcc532152eea771ef618dd26dd14d6201a79432fff51992a", 0x54}], 0x3) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)=[{&(0x7f00000007c0)="08006d2a81496b273d", 0x9}], 0x1}, 0x800) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000000)={0x9, 0x10, 0x8}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc}) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '-*:*-!'}, 0x1c, r8) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x513}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc20}]}, 0x24}}, 0x404c000) 1.790906204s ago: executing program 0 (id=693): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000a80), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0xfff, 0x4, 0x401, 0x6}, {0x0, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/59, 0x110000, 0x800, 0xfffffffe}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.608442291s ago: executing program 1 (id=694): socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x80, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@delchain={0x24, 0x65, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xfffe, 0x8}, {0x8, 0x3}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x9}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x6, @f={0xff, 0x1, 0x4, 0x2, 0x3, 0x9, 0x1, {0xb, 0x1, "15"}, 0x3, 0x3, 0x7, 0xd, 0x1, "f5"}}, 0x13) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.439506201s ago: executing program 3 (id=695): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 467.735469ms ago: executing program 3 (id=696): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000300010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) socket(0x2a, 0x2, 0xffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000300)=@known='system.posix_acl_default\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) 0s ago: executing program 1 (id=697): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r1, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0xfffd, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f00000001c0)={0x4, [0x3ff, 0x2, 0x4, 0x5, 0x1, 0xcfd, 0x800, 0x7, 0x3, 0x2c7, 0x7, 0x1, 0x463, 0xfffc, 0x5, 0xf877, 0x1, 0x0, 0x5, 0x40, 0xff77, 0x0, 0x9, 0xb01, 0x5, 0x1, 0x8, 0xa6ee, 0x0, 0x2, 0xc, 0xd, 0x7fff, 0x0, 0x7, 0x0, 0x3, 0x400, 0x7, 0x4, 0x2, 0x7, 0x5, 0x8, 0x8, 0xb0, 0x8, 0x1000], 0xe}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x204, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000b00)={0x28, 0x427fd6522625339c, 0x0, 0x0, &(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @local, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x24) kernel console output (not intermixed with test programs): "syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7fc00000 [ 86.811284][ T30] audit: type=1326 audit(1744697424.551:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7fc00000 [ 86.812298][ T5874] aureal 0003:0755:2626.0001: probe with driver aureal failed with error -22 [ 86.834725][ T30] audit: type=1326 audit(1744697424.551:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7fc00000 [ 86.876176][ T30] audit: type=1326 audit(1744697424.551:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7fc00000 [ 87.118334][ T5874] usb 4-1: USB disconnect, device number 2 [ 87.118517][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 87.849032][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.857005][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.866663][ T6238] bridge0: entered allmulticast mode [ 88.729789][ T4195] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.998862][ T4195] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 89.399149][ T4195] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 89.441101][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.478794][ T4195] usb 2-1: config 0 descriptor?? [ 89.716146][ T6256] syz.4.100 uses obsolete (PF_INET,SOCK_PACKET) [ 89.729195][ T4195] usb 2-1: bad CDC descriptors [ 89.938858][ T6261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.101'. [ 89.988618][ T5874] usb 2-1: USB disconnect, device number 4 [ 90.169925][ T5882] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 90.321786][ T5882] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 90.331194][ T5882] usb 3-1: config 7 has no interface number 0 [ 90.337338][ T5882] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 90.348972][ T5882] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 90.361210][ T5882] usb 3-1: config 7 interface 252 has no altsetting 0 [ 90.371780][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 90.378152][ T5882] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 90.390420][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.415018][ T5882] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 90.433984][ T6267] input: syz0 as /devices/virtual/input/input6 [ 90.585335][ T6269] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.268655][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 91.268675][ T30] audit: type=1400 audit(1744697429.171:773): avc: denied { read } for pid=6270 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.695427][ T30] audit: type=1400 audit(1744697429.171:774): avc: denied { open } for pid=6270 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.720747][ T30] audit: type=1400 audit(1744697429.191:775): avc: denied { getattr } for pid=6270 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.786499][ T30] audit: type=1400 audit(1744697429.721:776): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.021067][ T5882] usb 3-1: USB disconnect, device number 6 [ 92.160087][ T911] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 92.189630][ T6291] bridge0: entered allmulticast mode [ 92.419003][ T911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.544403][ T911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.563142][ T911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.575144][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.587289][ T911] usb 4-1: Product: syz [ 92.591185][ T30] audit: type=1400 audit(1744697430.521:777): avc: denied { write } for pid=6268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.660873][ T30] audit: type=1400 audit(1744697430.521:778): avc: denied { add_name } for pid=6268 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.767832][ T911] usb 4-1: Manufacturer: syz [ 92.772865][ T911] usb 4-1: SerialNumber: syz [ 92.794020][ T30] audit: type=1400 audit(1744697430.521:779): avc: denied { create } for pid=6268 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.284602][ T30] audit: type=1400 audit(1744697430.521:780): avc: denied { write } for pid=6268 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.311698][ T30] audit: type=1400 audit(1744697430.521:781): avc: denied { append } for pid=6268 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.493400][ T30] audit: type=1400 audit(1744697431.431:782): avc: denied { remove_name } for pid=6302 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.585777][ T6308] ref_ctr_offset mismatch. inode: 0x8e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 93.961875][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.968961][ T5874] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.028813][ T5874] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 94.123064][ T5839] Bluetooth: hci1: Malformed LE Event: 0x1b [ 94.265108][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 94.280095][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 94.297202][ T6335] netlink: 'syz.1.117': attribute type 12 has an invalid length. [ 94.498792][ T911] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 94.527987][ T911] cdc_ncm 4-1:1.0: bind() failure [ 94.548710][ T911] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 94.751533][ T911] cdc_ncm 4-1:1.1: bind() failure [ 94.868552][ T911] usb 4-1: USB disconnect, device number 3 [ 94.921045][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.114371][ T5876] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 95.167532][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.270739][ T5876] usb 2-1: config 0 descriptor?? [ 95.279312][ T5876] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 95.289530][ T5876] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 95.435453][ T6361] bridge0: left allmulticast mode [ 95.485454][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.756365][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.852095][ T5905] usb 2-1: USB disconnect, device number 5 [ 96.260331][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.290479][ T5874] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 96.422413][ T5874] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 97.039879][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 97.039909][ T30] audit: type=1400 audit(1744697434.871:787): avc: denied { read } for pid=6376 comm="syz.3.127" name="media8" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.357447][ T30] audit: type=1400 audit(1744697434.871:788): avc: denied { open } for pid=6376 comm="syz.3.127" path="/dev/media8" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.380706][ T30] audit: type=1400 audit(1744697434.871:789): avc: denied { ioctl } for pid=6376 comm="syz.3.127" path="/dev/media8" dev="devtmpfs" ino=1014 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.382116][ T6388] netlink: 72 bytes leftover after parsing attributes in process `syz.0.126'. [ 97.616842][ T6390] xt_connbytes: Forcing CT accounting to be enabled [ 97.673912][ T30] audit: type=1400 audit(1744697435.611:790): avc: denied { create } for pid=6381 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.721048][ T30] audit: type=1400 audit(1744697435.641:791): avc: denied { getopt } for pid=6381 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.781712][ T6390] Cannot find add_set index 0 as target [ 97.858723][ T6390] FAULT_INJECTION: forcing a failure. [ 97.858723][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.998163][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.4.128 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 97.998191][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.998200][ T6390] Call Trace: [ 97.998206][ T6390] [ 97.998212][ T6390] dump_stack_lvl+0x16c/0x1f0 [ 97.998246][ T6390] should_fail_ex+0x512/0x640 [ 97.998269][ T6390] _copy_to_user+0x32/0xd0 [ 97.998290][ T6390] simple_read_from_buffer+0xcb/0x170 [ 97.998318][ T6390] proc_fail_nth_read+0x197/0x270 [ 97.998344][ T6390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.998371][ T6390] ? rw_verify_area+0xcf/0x680 [ 97.998393][ T6390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.998418][ T6390] vfs_read+0x1de/0xc70 [ 97.998447][ T6390] ? __pfx___mutex_lock+0x10/0x10 [ 97.998470][ T6390] ? __pfx_vfs_read+0x10/0x10 [ 97.998500][ T6390] ? __fget_files+0x20e/0x3c0 [ 97.998515][ T6390] ? file_seek_cur_needs_f_lock+0x180/0x190 [ 97.998540][ T6390] ksys_read+0x12a/0x240 [ 97.998554][ T6390] ? __pfx_ksys_read+0x10/0x10 [ 97.998575][ T6390] do_syscall_64+0xcd/0x260 [ 97.998598][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.998616][ T6390] RIP: 0033:0x7fa5b658bb7c [ 97.998629][ T6390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.998645][ T6390] RSP: 002b:00007fa5b7461030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.998661][ T6390] RAX: ffffffffffffffda RBX: 00007fa5b67a5fa0 RCX: 00007fa5b658bb7c [ 97.998671][ T6390] RDX: 000000000000000f RSI: 00007fa5b74610a0 RDI: 0000000000000004 [ 97.998680][ T6390] RBP: 00007fa5b7461090 R08: 0000000000000000 R09: 0000000000000000 [ 97.998689][ T6390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.998698][ T6390] R13: 0000000000000000 R14: 00007fa5b67a5fa0 R15: 00007ffe526daba8 [ 97.998720][ T6390] [ 98.586830][ T30] audit: type=1400 audit(1744697436.521:792): avc: denied { read } for pid=6400 comm="syz.4.131" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.693632][ T30] audit: type=1400 audit(1744697436.521:793): avc: denied { open } for pid=6400 comm="syz.4.131" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.720808][ T30] audit: type=1400 audit(1744697436.561:794): avc: denied { write } for pid=6400 comm="syz.4.131" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.767475][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.775760][ T5874] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 98.781917][ T5874] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 98.796558][ T30] audit: type=1400 audit(1744697436.731:795): avc: denied { read write } for pid=6411 comm="syz.2.132" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.832756][ T30] audit: type=1400 audit(1744697436.731:796): avc: denied { open } for pid=6411 comm="syz.2.132" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.416302][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.424143][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.849969][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.856525][ T5874] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 100.885519][ T5874] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 103.009810][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.012533][ T5874] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 103.021881][ T5874] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 103.773438][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 103.782597][ T5874] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.829821][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.971193][ T5874] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.980008][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 103.980036][ T5874] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.989230][ T5876] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.995577][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.007134][ T5876] usb 1-1: config 0 has no interface number 0 [ 104.018806][ T5874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.019362][ T5876] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.029987][ T5874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.044010][ T5876] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.203844][ T5876] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.225869][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.234019][ T5876] usb 1-1: Product: syz [ 104.236121][ T5874] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.238162][ T5876] usb 1-1: SerialNumber: syz [ 104.290417][ T5876] usb 1-1: config 0 descriptor?? [ 104.293375][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.300783][ T5876] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 104.304963][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 104.304974][ T30] audit: type=1400 audit(1744697442.241:817): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.311624][ T5876] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 104.360917][ T5874] usb 3-1: can't set config #1, error -71 [ 104.413325][ T5874] usb 3-1: USB disconnect, device number 7 [ 104.640436][ T911] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.692988][ T30] audit: type=1400 audit(1744697442.631:818): avc: denied { create } for pid=6506 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.725345][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 105.158832][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.166766][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.173762][ T911] usb 5-1: Using ep0 maxpacket: 16 [ 105.173923][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.188296][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.195434][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.202542][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.209640][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.216738][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.223870][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.230952][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.240636][ T5905] usb 1-1: USB disconnect, device number 3 [ 105.240705][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 105.306404][ T5905] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 105.354829][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.404348][ T6518] trusted_key: syz.3.151 sent an empty control message without MSG_MORE. [ 105.416027][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.428628][ T911] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 105.457362][ T30] audit: type=1400 audit(1744697443.381:819): avc: denied { read } for pid=6506 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.479901][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.646282][ T30] audit: type=1400 audit(1744697443.441:820): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.667935][ T30] audit: type=1400 audit(1744697443.441:821): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.695606][ T911] usb 5-1: config 0 descriptor?? [ 105.710003][ T30] audit: type=1400 audit(1744697443.441:822): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.735018][ T6525] dccp_invalid_packet: P.Data Offset(0) too small [ 106.238912][ T30] audit: type=1400 audit(1744697443.441:823): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.305686][ T911] usbhid 5-1:0.0: can't add hid device: -71 [ 106.310154][ T30] audit: type=1400 audit(1744697443.441:824): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.320241][ T911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.336551][ T30] audit: type=1400 audit(1744697443.461:825): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.362291][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.388061][ T911] usb 5-1: USB disconnect, device number 4 [ 106.621288][ T6532] capability: warning: `syz.1.156' uses 32-bit capabilities (legacy support in use) [ 106.648970][ T6532] hub 9-0:1.0: USB hub found [ 106.655038][ T6532] hub 9-0:1.0: 1 port detected [ 106.926643][ T6533] unknown channel width for channel at 909000KHz? [ 107.020707][ T30] audit: type=1326 audit(1744697444.951:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x0 [ 107.043419][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.055741][ T6538] Cannot find add_set index 0 as target [ 107.126465][ T6541] xt_connbytes: Forcing CT accounting to be enabled [ 107.135352][ T6541] Cannot find add_set index 0 as target [ 107.899978][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 108.287192][ T6559] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 109.313166][ T6574] veth0_macvtap: left promiscuous mode [ 109.510104][ T6578] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.519484][ T6578] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.528683][ T6578] netlink: 333 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.651671][ T6574] macvtap0: entered promiscuous mode [ 109.889389][ T6574] veth0_macvtap: entered promiscuous mode [ 109.930441][ T6574] team0: Device macvtap0 failed to register rx_handler [ 109.966554][ T6574] veth0_macvtap: left promiscuous mode [ 110.327891][ T5882] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.561389][ T6590] ref_ctr_offset mismatch. inode: 0xbe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 110.741668][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 111.115174][ T6586] syzkaller1: entered promiscuous mode [ 111.121721][ T6586] syzkaller1: entered allmulticast mode [ 111.128206][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.165632][ T6586] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 111.182692][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 111.182701][ T30] audit: type=1400 audit(1744697449.091:830): avc: denied { load_policy } for pid=6584 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 111.250988][ T6594] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 111.270577][ T6586] SELinux: failed to load policy [ 111.304715][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.315728][ T6596] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 111.325909][ T30] audit: type=1400 audit(1744697449.271:831): avc: denied { nlmsg_write } for pid=6584 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.436380][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 111.502375][ T30] audit: type=1400 audit(1744697449.431:832): avc: denied { ioctl } for pid=6593 comm="syz.4.176" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.539957][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.574581][ T5882] usb 3-1: config 0 descriptor?? [ 112.195719][ T6606] trusted_key: encrypted_key: insufficient parameters specified [ 112.518709][ T6608] bridge0: entered allmulticast mode [ 112.576860][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 112.584245][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.601174][ T5882] usb 3-1: USB disconnect, device number 8 [ 114.109971][ T4195] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 114.499136][ T30] audit: type=1400 audit(1744697452.431:833): avc: denied { read } for pid=6637 comm="syz.3.186" path="socket:[10431]" dev="sockfs" ino=10431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.748149][ T30] audit: type=1400 audit(1744697452.491:834): avc: denied { read } for pid=6643 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.864237][ T30] audit: type=1400 audit(1744697452.801:835): avc: denied { create } for pid=6654 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.938221][ T6649] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 115.132629][ T30] audit: type=1400 audit(1744697453.071:836): avc: denied { mount } for pid=6643 comm="syz.0.188" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 115.436439][ T6663] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 115.454484][ T30] audit: type=1400 audit(1744697453.331:837): avc: denied { create } for pid=6659 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.706861][ T5882] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.716449][ T30] audit: type=1400 audit(1744697453.351:838): avc: denied { setopt } for pid=6659 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.738471][ T30] audit: type=1400 audit(1744697453.361:839): avc: denied { write } for pid=6659 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.925121][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.951528][ T5882] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 115.966720][ T5882] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.977946][ T5882] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.992865][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.002993][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.154657][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 116.164381][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.574343][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.607870][ T5830] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 116.625500][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.632838][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.658680][ T5830] usb 4-1: config 0 descriptor?? [ 116.672461][ T5882] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 116.734643][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 116.734655][ T30] audit: type=1400 audit(1744697454.661:841): avc: denied { relabelfrom } for pid=6670 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.774201][ T30] audit: type=1400 audit(1744697454.701:842): avc: denied { relabelto } for pid=6670 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.801283][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.823874][ T5882] usb 5-1: USB disconnect, device number 5 [ 116.885500][ T5830] usbhid 4-1:0.0: can't add hid device: -71 [ 116.913427][ T5830] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.121279][ T5830] usb 4-1: USB disconnect, device number 4 [ 117.218195][ T6674] openvswitch: netlink: Message has 3 unknown bytes. [ 117.225025][ T6674] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.306174][ T30] audit: type=1400 audit(1744697455.171:843): avc: denied { setopt } for pid=6654 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.342380][ T6676] ref_ctr_offset mismatch. inode: 0xe7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 118.426606][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.559446][ T4195] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 118.567078][ T4195] usb 3-1: can't read configurations, error -71 [ 118.791742][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 118.974636][ T6693] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 118.994587][ T30] audit: type=1400 audit(1744697456.931:844): avc: denied { bind } for pid=6697 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 119.159807][ T30] audit: type=1400 audit(1744697456.931:845): avc: denied { name_bind } for pid=6697 comm="syz.4.204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 119.500516][ T30] audit: type=1400 audit(1744697456.931:846): avc: denied { node_bind } for pid=6697 comm="syz.4.204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 119.588381][ T30] audit: type=1400 audit(1744697456.961:847): avc: denied { ioctl } for pid=6681 comm="syz.1.200" path="socket:[10204]" dev="sockfs" ino=10204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.636760][ T30] audit: type=1400 audit(1744697457.121:848): avc: denied { listen } for pid=6697 comm="syz.4.204" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 119.662032][ T6710] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 119.689210][ T30] audit: type=1326 audit(1744697457.621:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.2.208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8ab58d169 code=0x0 [ 120.107788][ T6716] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 120.671254][ T6722] ref_ctr_offset mismatch. inode: 0xea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 121.335100][ T6740] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 122.302088][ T6759] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 123.439439][ T6774] input: syz1 as /devices/virtual/input/input9 [ 124.115416][ T6781] ref_ctr_offset mismatch. inode: 0x107 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 124.419909][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.906306][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.949503][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.987365][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.007287][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 125.022934][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 125.045559][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.068989][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.077737][ T24] usb 3-1: Product: syz [ 125.097550][ T24] usb 3-1: Manufacturer: syz [ 125.113664][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 125.118877][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 125.165318][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 125.199790][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 125.497163][ T6813] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 126.431472][ T30] audit: type=1400 audit(1744697464.371:850): avc: denied { read } for pid=6822 comm="syz.1.241" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.517244][ T30] audit: type=1400 audit(1744697464.371:851): avc: denied { open } for pid=6822 comm="syz.1.241" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.555924][ T6827] netlink: 2128 bytes leftover after parsing attributes in process `syz.1.243'. [ 126.590304][ T30] audit: type=1400 audit(1744697464.401:852): avc: denied { ioctl } for pid=6822 comm="syz.1.241" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.809855][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.959859][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 126.968674][ T5830] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 126.977948][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.022227][ T5830] usb 4-1: Product: syz [ 127.052415][ T5830] usb 4-1: Manufacturer: syz [ 127.072276][ T5830] usb 4-1: SerialNumber: syz [ 127.100511][ T5830] usb 4-1: config 0 descriptor?? [ 127.142911][ T24] usb 3-1: USB disconnect, device number 11 [ 127.267656][ T5830] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 127.297684][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 127.729139][ T6838] ref_ctr_offset mismatch. inode: 0x11c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 127.937366][ T5830] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 127.983953][ T5830] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 129.016573][ T30] audit: type=1400 audit(1744697466.831:853): avc: denied { read write } for pid=6841 comm="syz.2.248" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.100614][ T5830] usb 4-1: USB disconnect, device number 5 [ 129.110260][ T30] audit: type=1400 audit(1744697466.831:854): avc: denied { open } for pid=6841 comm="syz.2.248" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.056858][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'. [ 131.854701][ T6871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.364152][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.370516][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839884][ T5882] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.868824][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 133.000423][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.019797][ T5882] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 133.036291][ T5882] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.047754][ T5882] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.086905][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.099158][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.118118][ T5874] IPVS: starting estimator thread 0... [ 133.118934][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.158712][ T5882] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 133.189780][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 133.204050][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.221962][ T5830] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.230144][ T6891] IPVS: using max 43 ests per chain, 103200 per kthread [ 133.237824][ T5830] usb 2-1: config 0 has no interface number 0 [ 133.246727][ T5830] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 133.256164][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.264239][ T5830] usb 2-1: Product: syz [ 133.268403][ T5830] usb 2-1: Manufacturer: syz [ 133.273051][ T5830] usb 2-1: SerialNumber: syz [ 133.280247][ T5830] usb 2-1: config 0 descriptor?? [ 133.288159][ T5830] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 133.297041][ T5830] usb 2-1: selecting invalid altsetting 1 [ 133.302810][ T5830] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 133.314562][ T5830] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.326160][ T5882] usb 3-1: USB disconnect, device number 12 [ 133.337141][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 133.354537][ T5830] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 133.364484][ T5830] usb 2-1: media controller created [ 133.385186][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.437617][ T5874] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 133.490132][ T5830] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 133.499371][ T5830] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 133.509853][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.591657][ T5874] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 133.633689][ T5874] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 133.656941][ T5830] DVB: Unable to find symbol mxl5005s_attach() [ 133.664510][ T5874] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 133.677029][ T5874] usb 4-1: config 150 has no interface number 0 [ 133.684566][ T24] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 133.695558][ T30] audit: type=1400 audit(1744697471.631:855): avc: denied { append } for pid=6881 comm="syz.1.261" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.697104][ T5874] usb 4-1: config 150 interface 204 has no altsetting 0 [ 133.730456][ T24] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 133.749322][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.777217][ T6899] openvswitch: netlink: Message has 3 unknown bytes. [ 133.784203][ T6899] openvswitch: netlink: Actions may not be safe on all matching packets [ 133.803015][ T6898] misc userio: Can't change port type on an already running userio instance [ 133.880439][ T24] usb 1-1: config 0 descriptor?? [ 133.926881][ T24] usb 1-1: bad CDC descriptors [ 133.952697][ T5874] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 134.109101][ T5830] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 134.114553][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.119926][ T30] audit: type=1400 audit(1744697471.771:856): avc: denied { mount } for pid=6881 comm="syz.1.261" name="/" dev="ramfs" ino=11505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.162620][ T5874] usb 4-1: Product: syz [ 134.175795][ T5874] usb 4-1: Manufacturer: syz [ 134.186912][ T24] usb 1-1: USB disconnect, device number 4 [ 134.188900][ T5830] usb 2-1: USB disconnect, device number 6 [ 134.207947][ T5874] usb 4-1: SerialNumber: syz [ 134.662559][ T30] audit: type=1400 audit(1744697472.541:857): avc: denied { mounton } for pid=6900 comm="syz.4.267" path="/proc/173/cgroup" dev="proc" ino=11521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 135.680496][ T30] audit: type=1400 audit(1744697473.621:858): avc: denied { create } for pid=6917 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 135.877667][ T30] audit: type=1326 audit(1744697473.801:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 136.430334][ T30] audit: type=1326 audit(1744697473.801:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 136.631432][ T6921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.145518][ T30] audit: type=1326 audit(1744697473.801:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 137.169083][ T30] audit: type=1326 audit(1744697473.801:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 137.192328][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.198832][ T30] audit: type=1326 audit(1744697473.801:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 137.224443][ T30] audit: type=1326 audit(1744697473.801:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd8ab58d169 code=0x7ffc0000 [ 137.247639][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.294579][ T5874] usb 4-1: USB disconnect, device number 6 [ 138.283951][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.599756][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 138.621872][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.697288][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.728197][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 138.745749][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.909617][ T6954] process 'syz.1.282' launched './file0' with NULL argv: empty string added [ 138.986660][ T5875] usb 3-1: config 0 descriptor?? [ 138.993980][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 138.993992][ T30] audit: type=1400 audit(1744697476.871:926): avc: denied { execute_no_trans } for pid=6947 comm="syz.1.282" path="/61/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.044182][ T30] audit: type=1400 audit(1744697476.911:927): avc: denied { mount } for pid=6947 comm="syz.1.282" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.376888][ T5875] usbhid 3-1:0.0: can't add hid device: -71 [ 139.384597][ T5875] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.465307][ T30] audit: type=1400 audit(1744697477.131:928): avc: denied { setopt } for pid=6958 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.487313][ T5875] usb 3-1: USB disconnect, device number 13 [ 139.730429][ T4195] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.890564][ T4195] usb 2-1: Using ep0 maxpacket: 8 [ 139.906755][ T4195] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.936920][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.976491][ T4195] usb 2-1: config 0 descriptor?? [ 139.990093][ T30] audit: type=1400 audit(1744697477.921:929): avc: denied { unlink } for pid=6967 comm="syz.2.288" name="#1" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.994619][ T6968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.100384][ T6968] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 140.231534][ T30] audit: type=1400 audit(1744697478.101:930): avc: denied { open } for pid=6969 comm="syz.3.287" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.270909][ T4195] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 140.335159][ T30] audit: type=1400 audit(1744697478.251:931): avc: denied { mount } for pid=6967 comm="syz.2.288" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.377176][ T5875] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.439055][ T6972] Bluetooth: MGMT ver 1.23 [ 141.000118][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 141.017427][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.047560][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 141.098612][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 141.112609][ T6965] qrtr: Invalid version 144 [ 141.143994][ T5875] usb 3-1: SerialNumber: syz [ 141.194606][ T5875] usb 3-1: config 0 descriptor?? [ 141.219652][ T5875] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 141.251181][ T5875] usb 3-1: No valid video chain found. [ 141.768782][ T5882] usb 3-1: USB disconnect, device number 14 [ 141.800667][ T30] audit: type=1400 audit(1744697479.731:932): avc: denied { getopt } for pid=6980 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.089882][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.327603][ T30] audit: type=1400 audit(1744697480.261:933): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 142.351298][ T4195] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 142.868263][ T4195] asix 2-1:0.0: probe with driver asix failed with error -71 [ 142.879781][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 142.887968][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.898944][ T4195] usb 2-1: USB disconnect, device number 7 [ 142.904814][ T5875] usb 4-1: too many configurations: 136, using maximum allowed: 8 [ 142.918249][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.958274][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.968670][ T5875] usb 4-1: can't read configurations, error -61 [ 143.086940][ T7005] FAULT_INJECTION: forcing a failure. [ 143.086940][ T7005] name failslab, interval 1, probability 0, space 0, times 1 [ 143.100095][ T7005] CPU: 1 UID: 0 PID: 7005 Comm: syz.1.301 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 143.100118][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.100127][ T7005] Call Trace: [ 143.100133][ T7005] [ 143.100139][ T7005] dump_stack_lvl+0x16c/0x1f0 [ 143.100166][ T7005] should_fail_ex+0x512/0x640 [ 143.100184][ T7005] ? __kmalloc_node_noprof+0xc5/0x500 [ 143.100205][ T7005] should_failslab+0xc2/0x120 [ 143.100224][ T7005] __kmalloc_node_noprof+0xd8/0x500 [ 143.100240][ T7005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.100258][ T7005] ? alloc_slab_obj_exts+0x41/0xa0 [ 143.100282][ T7005] ? __pfx___schedule+0x10/0x10 [ 143.100304][ T7005] alloc_slab_obj_exts+0x41/0xa0 [ 143.100328][ T7005] new_slab+0x284/0x330 [ 143.100353][ T7005] ___slab_alloc+0xd9c/0x1940 [ 143.100377][ T7005] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 143.100400][ T7005] ? new_slab+0x2b1/0x330 [ 143.100432][ T7005] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 143.100452][ T7005] ? __slab_alloc.constprop.0+0x56/0xb0 [ 143.100476][ T7005] __slab_alloc.constprop.0+0x56/0xb0 [ 143.100503][ T7005] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 143.100521][ T7005] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 143.100546][ T7005] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 143.100567][ T7005] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 143.100588][ T7005] alloc_inode+0x61/0x240 [ 143.100610][ T7005] new_inode+0x22/0x1c0 [ 143.100633][ T7005] hugetlbfs_get_inode+0x354/0x730 [ 143.100653][ T7005] ? security_capable+0x7e/0x260 [ 143.100674][ T7005] hugetlb_file_setup+0x38c/0x620 [ 143.100700][ T7005] newseg+0xa74/0xe60 [ 143.100728][ T7005] ? __pfx_newseg+0x10/0x10 [ 143.100758][ T7005] ipcget+0xec/0xda0 [ 143.100788][ T7005] ? __pfx___schedule+0x10/0x10 [ 143.100807][ T7005] ? __pfx_ipcget+0x10/0x10 [ 143.100830][ T7005] ? rcu_is_watching+0x12/0xc0 [ 143.100851][ T7005] ? irqentry_exit+0x3b/0x90 [ 143.100871][ T7005] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.100895][ T7005] __x64_sys_shmget+0x13b/0x1b0 [ 143.100919][ T7005] ? __pfx___x64_sys_shmget+0x10/0x10 [ 143.100944][ T7005] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 143.100966][ T7005] do_syscall_64+0xcd/0x260 [ 143.100990][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.101014][ T7005] RIP: 0033:0x7f2814f8d169 [ 143.101028][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.101043][ T7005] RSP: 002b:00007f2815d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 143.101059][ T7005] RAX: ffffffffffffffda RBX: 00007f28151a6080 RCX: 00007f2814f8d169 [ 143.101069][ T7005] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 143.101078][ T7005] RBP: 00007f2815d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.101088][ T7005] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 143.101097][ T7005] R13: 0000000000000000 R14: 00007f28151a6080 R15: 00007fff1b4dc778 [ 143.101121][ T7005] [ 143.391738][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.550434][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.258384][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 144.545464][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.557324][ T5875] usb 4-1: too many configurations: 136, using maximum allowed: 8 [ 144.569189][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 144.634289][ T5875] usb 4-1: can't read configurations, error -61 [ 144.664626][ T5875] usb usb4-port1: attempt power cycle [ 145.045131][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.164622][ T7021] ref_ctr_offset mismatch. inode: 0x146 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 145.187820][ T5875] usb 4-1: device descriptor read/8, error -71 [ 145.749818][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.192361][ T48] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.259777][ T48] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.557745][ T48] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.573135][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.586491][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.611449][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.626233][ T30] audit: type=1400 audit(1744697484.561:934): avc: denied { name_bind } for pid=7048 comm="syz.2.315" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.683216][ T48] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 146.803106][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.845884][ T48] usb 5-1: USB disconnect, device number 6 [ 147.263282][ T7058] openvswitch: netlink: Message has 3 unknown bytes. [ 147.270208][ T7058] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.297591][ T30] audit: type=1326 audit(1744697485.031:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 149.057835][ T7074] ref_ctr_offset mismatch. inode: 0x153 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 149.496890][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.571061][ T30] audit: type=1400 audit(1744697487.511:936): avc: denied { getopt } for pid=7081 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.693198][ T7084] ref_ctr_offset mismatch. inode: 0x178 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 151.116272][ T30] audit: type=1326 audit(1744697489.051:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.197114][ T30] audit: type=1326 audit(1744697489.051:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.263947][ T30] audit: type=1326 audit(1744697489.051:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.388188][ T30] audit: type=1326 audit(1744697489.051:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.412346][ T30] audit: type=1326 audit(1744697489.051:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.439171][ T30] audit: type=1326 audit(1744697489.051:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a658d169 code=0x7fc00000 [ 151.510494][ T7114] capability: warning: `syz.4.332' uses deprecated v2 capabilities in a way that may be insecure [ 152.630265][ T7122] ref_ctr_offset mismatch. inode: 0x164 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 153.552304][ T7129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.089374][ T30] audit: type=1400 audit(1744697493.021:943): avc: denied { accept } for pid=7136 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.438052][ T7139] Cannot find add_set index 1026 as target [ 156.677389][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 156.734349][ T30] audit: type=1400 audit(1744697494.671:944): avc: denied { connect } for pid=7165 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.182820][ T7182] ref_ctr_offset mismatch. inode: 0x16f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 157.320348][ T7184] netlink: 'syz.1.351': attribute type 25 has an invalid length. [ 157.435830][ T48] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.742242][ T7189] No such timeout policy "syz1" [ 157.790566][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 157.804093][ T48] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 157.828392][ T48] usb 4-1: config 0 has no interface number 0 [ 157.850865][ T48] usb 4-1: config 0 interface 12 has no altsetting 0 [ 157.877679][ T48] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 157.897108][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.922897][ T48] usb 4-1: Product: syz [ 157.983781][ T48] usb 4-1: Manufacturer: syz [ 157.988945][ T48] usb 4-1: SerialNumber: syz [ 158.023484][ T48] usb 4-1: config 0 descriptor?? [ 158.282077][ T48] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 158.490657][ T48] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 158.575226][ T48] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 158.682805][ T48] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 158.758080][ T48] usb 4-1: USB disconnect, device number 11 [ 158.849788][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.869101][ T30] audit: type=1800 audit(1744697496.801:945): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.359" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 159.144733][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 159.573385][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.598952][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.623317][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 159.637509][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.872658][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.719171][ T5876] usb 2-1: config 0 descriptor?? [ 161.512321][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 161.528520][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.651417][ T5876] usb 2-1: USB disconnect, device number 8 [ 163.149805][ T911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.198046][ T30] audit: type=1400 audit(1744697501.121:946): avc: denied { create } for pid=7233 comm="syz.2.367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.228742][ T7236] overlayfs: missing 'lowerdir' [ 163.264751][ T7235] tmpfs: Bad value for 'nr_blocks' [ 163.289897][ T30] audit: type=1400 audit(1744697501.201:947): avc: denied { write } for pid=7233 comm="syz.2.367" name="file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.312060][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.341929][ T911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.419506][ T30] audit: type=1400 audit(1744697501.201:948): avc: denied { open } for pid=7233 comm="syz.2.367" path="/71/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.444481][ T30] audit: type=1400 audit(1744697501.201:949): avc: denied { mounton } for pid=7233 comm="syz.2.367" path="/71/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.579968][ T911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.661251][ T911] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.793120][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.132444][ T911] usb 1-1: SerialNumber: syz [ 164.357022][ T7255] ref_ctr_offset mismatch. inode: 0x190 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 164.396491][ T7250] No control pipe specified [ 164.492768][ T911] usb 1-1: 0:2 : does not exist [ 164.511792][ T911] usb 1-1: unit 5 not found! [ 164.864356][ T911] usb 1-1: USB disconnect, device number 5 [ 165.009603][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.374'. [ 165.084327][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.279773][ T30] audit: type=1400 audit(1744697503.191:950): avc: denied { block_suspend } for pid=7270 comm="syz.3.376" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.368656][ T30] audit: type=1400 audit(1744697503.251:951): avc: denied { module_load } for pid=7270 comm="syz.3.376" path="/sys/power/wakeup_count" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 166.396384][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.652231][ T30] audit: type=1400 audit(1744697505.541:952): avc: denied { bind } for pid=7294 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.759455][ T7301] dummy0: mtu less than device minimum [ 168.085546][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.386'. [ 168.442213][ T30] audit: type=1400 audit(1744697506.381:953): avc: denied { bind } for pid=7318 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.461347][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.673654][ T30] audit: type=1400 audit(1744697506.601:954): avc: denied { append } for pid=7321 comm="syz.3.393" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.380000][ T30] audit: type=1400 audit(1744697506.601:955): avc: denied { ioctl } for pid=7321 comm="syz.3.393" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.749932][ T30] audit: type=1400 audit(1744697506.751:956): avc: denied { setopt } for pid=7314 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.791118][ T7334] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 170.018530][ T30] audit: type=1800 audit(1744697507.901:957): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.392" name="file0" dev="overlay" ino=441 res=0 errno=0 [ 170.099019][ T30] audit: type=1400 audit(1744697508.031:958): avc: denied { connect } for pid=7338 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 170.173517][ T30] audit: type=1400 audit(1744697508.031:959): avc: denied { name_connect } for pid=7338 comm="syz.4.397" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 170.194444][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.419725][ T30] audit: type=1326 audit(1744697508.341:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7fc00000 [ 170.442936][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.481068][ T30] audit: type=1326 audit(1744697508.341:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7fc00000 [ 170.570452][ T30] audit: type=1326 audit(1744697508.341:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab58d169 code=0x7fc00000 [ 170.593649][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.740579][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.361000][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.372251][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.397787][ T5905] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 171.562782][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.575153][ T5905] usb 1-1: config 0 descriptor?? [ 172.882720][ T5905] hid-led 0003:1294:1320.0002: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 172.995532][ T5905] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 173.126267][ T5905] usb 1-1: USB disconnect, device number 6 [ 173.139997][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.140449][ T1145] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 173.208062][ T12] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 173.407643][ T1105] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 173.444089][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 173.476284][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.516916][ T5875] usb 4-1: config 0 descriptor?? [ 173.552255][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 173.552270][ T30] audit: type=1400 audit(1744697511.491:1005): avc: denied { setopt } for pid=7397 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.764178][ T7378] veth0_to_team: entered promiscuous mode [ 173.770077][ T7378] veth0_to_team: entered allmulticast mode [ 174.600744][ T5875] ath6kl: Failed to submit usb control message: -110 [ 174.618701][ T5875] ath6kl: unable to send the bmi data to the device: -110 [ 174.769737][ T5875] ath6kl: Unable to send get target info: -110 [ 174.873628][ T7420] FAULT_INJECTION: forcing a failure. [ 174.873628][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 174.886294][ T7420] CPU: 0 UID: 0 PID: 7420 Comm: syz.1.416 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 174.886317][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.886327][ T7420] Call Trace: [ 174.886332][ T7420] [ 174.886338][ T7420] dump_stack_lvl+0x16c/0x1f0 [ 174.886366][ T7420] should_fail_ex+0x512/0x640 [ 174.886383][ T7420] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 174.886403][ T7420] should_failslab+0xc2/0x120 [ 174.886422][ T7420] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 174.886439][ T7420] ? mm_alloc+0x1c/0xc0 [ 174.886462][ T7420] mm_alloc+0x1c/0xc0 [ 174.886482][ T7420] alloc_bprm+0x2ab/0xdd0 [ 174.886506][ T7420] ? do_execveat_common.isra.0+0x26/0x610 [ 174.886533][ T7420] do_execveat_common.isra.0+0x1ce/0x610 [ 174.886563][ T7420] __x64_sys_execve+0x8e/0xb0 [ 174.886579][ T7420] do_syscall_64+0xcd/0x260 [ 174.886599][ T7420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.886615][ T7420] RIP: 0033:0x7f2814f8d169 [ 174.886627][ T7420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.886640][ T7420] RSP: 002b:00007f2815d0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 174.886653][ T7420] RAX: ffffffffffffffda RBX: 00007f28151a6160 RCX: 00007f2814f8d169 [ 174.886661][ T7420] RDX: 0000200000019100 RSI: 0000000000000000 RDI: 0000200000000000 [ 174.886669][ T7420] RBP: 00007f2815d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.886677][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.886684][ T7420] R13: 0000000000000000 R14: 00007f28151a6160 R15: 00007fff1b4dc778 [ 174.886702][ T7420] [ 175.565069][ T5875] ath6kl: Failed to init ath6kl core: -110 [ 175.572982][ T5875] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 175.740117][ T5830] usb 4-1: USB disconnect, device number 12 [ 175.758800][ T7422] netlink: 64 bytes leftover after parsing attributes in process `syz.4.417'. [ 175.788654][ T30] audit: type=1400 audit(1744697513.701:1006): avc: denied { mount } for pid=7424 comm="syz.3.420" name="/" dev="hugetlbfs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 176.018433][ T30] audit: type=1400 audit(1744697513.711:1007): avc: denied { create } for pid=7424 comm="syz.3.420" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 176.047537][ T7435] overlayfs: failed to resolve './file1': -2 [ 176.092248][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.280234][ T7433] ref_ctr_offset mismatch. inode: 0x1db offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 176.689841][ T30] audit: type=1326 audit(1744697514.541:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 176.786986][ T30] audit: type=1326 audit(1744697514.541:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 176.810581][ T30] audit: type=1326 audit(1744697514.541:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 176.880571][ T30] audit: type=1326 audit(1744697514.551:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 176.904046][ T30] audit: type=1326 audit(1744697514.551:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 176.929468][ T30] audit: type=1326 audit(1744697514.551:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ffa78bad0 code=0x7ffc0000 [ 176.995176][ T7450] netlink: zone id is out of range [ 177.000521][ T7450] netlink: zone id is out of range [ 177.009226][ T30] audit: type=1326 audit(1744697514.551:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ffa78bc1f code=0x7ffc0000 [ 177.055990][ T7450] netlink: zone id is out of range [ 177.099824][ T7450] netlink: zone id is out of range [ 177.129748][ T7450] netlink: zone id is out of range [ 177.147452][ T7450] netlink: zone id is out of range [ 177.162869][ T7450] netlink: zone id is out of range [ 177.178328][ T7450] netlink: zone id is out of range [ 177.183869][ T7450] netlink: set zone limit has 8 unknown bytes [ 177.288803][ T7459] netlink: 48 bytes leftover after parsing attributes in process `syz.3.429'. [ 177.505569][ T6942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.531188][ T6942] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 178.598041][ T6942] usb 1-1: too many endpoints for config 0 interface 0 altsetting 233: 243, using maximum allowed: 30 [ 178.647046][ T6942] usb 1-1: config 0 interface 0 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 243 [ 178.693592][ T6942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.707567][ T6942] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.726898][ T6942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.798464][ T6942] usb 1-1: config 0 descriptor?? [ 178.834373][ T6942] pwc: Askey VC010 type 2 USB webcam detected. [ 179.199258][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 179.199272][ T30] audit: type=1400 audit(1744697517.131:1023): avc: denied { read } for pid=7481 comm="syz.4.436" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.250874][ T6942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 179.260485][ T6942] pwc: recv_control_msg error -32 req 02 val 2700 [ 179.273798][ T30] audit: type=1400 audit(1744697517.131:1024): avc: denied { open } for pid=7481 comm="syz.4.436" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.394848][ T7488] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 179.403451][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.438'. [ 179.413284][ T7488] batadv0: entered promiscuous mode [ 179.418467][ T7488] batadv0: entered allmulticast mode [ 179.424563][ T7488] bridge0: port 3(batadv0) entered blocking state [ 179.431052][ T7488] bridge0: port 3(batadv0) entered disabled state [ 179.453814][ T30] audit: type=1400 audit(1744697517.331:1025): avc: denied { create } for pid=7487 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.510842][ T7488] batman_adv: batadv0: Adding interface: dummy0 [ 179.517111][ T7488] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.542868][ T7488] batman_adv: batadv0: Interface activated: dummy0 [ 179.579969][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 179.589401][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 179.601623][ T30] audit: type=1400 audit(1744697517.541:1026): avc: denied { read } for pid=7489 comm="syz.4.440" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 179.697738][ T30] audit: type=1400 audit(1744697517.541:1027): avc: denied { open } for pid=7489 comm="syz.4.440" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 179.775408][ T30] audit: type=1326 audit(1744697517.621:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7ffc0000 [ 179.799135][ T6942] pwc: recv_control_msg error -71 req 04 val 1000 [ 180.481364][ T6942] pwc: recv_control_msg error -71 req 04 val 1300 [ 180.672743][ T6942] pwc: recv_control_msg error -71 req 04 val 1400 [ 180.697444][ T6942] pwc: recv_control_msg error -71 req 02 val 2000 [ 180.697465][ T30] audit: type=1326 audit(1744697517.621:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7ffc0000 [ 180.704329][ T6942] pwc: recv_control_msg error -71 req 02 val 2100 [ 180.734195][ T6942] pwc: recv_control_msg error -71 req 04 val 1500 [ 180.746713][ T6942] pwc: recv_control_msg error -71 req 02 val 2500 [ 180.753715][ T6942] pwc: recv_control_msg error -71 req 02 val 2400 [ 180.769779][ T6942] pwc: recv_control_msg error -71 req 02 val 2600 [ 180.776623][ T6942] pwc: recv_control_msg error -71 req 02 val 2900 [ 180.799872][ T6942] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.806899][ T6942] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.813714][ T30] audit: type=1326 audit(1744697517.621:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa5b658d169 code=0x7ffc0000 [ 180.904764][ T6942] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.910541][ T30] audit: type=1326 audit(1744697517.621:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7ffc0000 [ 180.948179][ T30] audit: type=1326 audit(1744697517.621:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b658d169 code=0x7ffc0000 [ 180.988726][ T6942] pwc: Registered as video103. [ 181.015794][ T6942] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 181.054132][ T6942] usb 1-1: USB disconnect, device number 7 [ 181.249504][ T7511] ref_ctr_offset mismatch. inode: 0x1d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 181.594633][ T7519] Cannot find del_set index 0 as target [ 182.145123][ T7513] No control pipe specified [ 183.069038][ T7527] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 183.472962][ T7530] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 183.770104][ T6942] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.951819][ T6942] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.997619][ T6942] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.244334][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.263948][ T6942] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.286925][ T6942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.309540][ T7532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.330234][ T6942] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.421658][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.465576][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.488464][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.519388][ T5875] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.548963][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.578750][ T5875] usb 2-1: config 0 descriptor?? [ 184.596092][ T911] usb 1-1: USB disconnect, device number 8 [ 185.049918][ T7555] netlink: 'syz.4.456': attribute type 10 has an invalid length. [ 185.081441][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.456'. [ 185.116367][ T7555] batman_adv: batadv0: Adding interface: veth0_vlan [ 185.126416][ T5875] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 185.144803][ T5875] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.153004][ T7555] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.182580][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.251203][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 185.415420][ T7555] batman_adv: batadv0: Interface activated: veth0_vlan [ 185.449130][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 185.449159][ T30] audit: type=1400 audit(1744697523.181:1040): avc: denied { name_bind } for pid=7550 comm="syz.2.455" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 185.547689][ T30] audit: type=1400 audit(1744697523.181:1041): avc: denied { setopt } for pid=7550 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.713734][ T30] audit: type=1400 audit(1744697523.651:1042): avc: denied { mount } for pid=7559 comm="syz.4.457" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 185.749759][ T30] audit: type=1400 audit(1744697523.681:1043): avc: denied { ioctl } for pid=7559 comm="syz.4.457" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 185.792486][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 185.828299][ T30] audit: type=1400 audit(1744697523.681:1044): avc: denied { getopt } for pid=7559 comm="syz.4.457" laddr=172.20.20.58 lport=35882 faddr=172.20.20.58 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.853055][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.014950][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 186.106587][ T30] audit: type=1400 audit(1744697524.041:1045): avc: denied { bind } for pid=7570 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.207701][ T30] audit: type=1400 audit(1744697524.041:1046): avc: denied { write } for pid=7570 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 186.253337][ T7575] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 186.372447][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 186.555196][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 188.371997][ T5882] usb 2-1: USB disconnect, device number 9 [ 188.427301][ T7601] mmap: syz.4.470 (7601) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.447916][ T30] audit: type=1400 audit(1744697526.351:1047): avc: denied { append } for pid=7600 comm="syz.4.470" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.018095][ T7604] ubi31: attaching mtd0 [ 189.246598][ T7604] ubi31: scanning is finished [ 189.297475][ T7604] ubi31: empty MTD device detected [ 189.553563][ T7617] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 189.869880][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 190.034269][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 190.462075][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 190.516845][ T7604] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 190.549570][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 190.970092][ T7604] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 190.979754][ T7604] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 190.989776][ T7604] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 191.006033][ T7626] ref_ctr_offset mismatch. inode: 0x20f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 191.018431][ T7604] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.037617][ T7604] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.049401][ T7604] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2022472357 [ 191.063496][ T7604] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.063980][ T7625] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.083130][ T7625] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.091884][ T7625] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.100556][ T7625] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.130139][ T7624] ubi31: background thread "ubi_bgt31d" started, PID 7624 [ 191.466712][ T7625] vxlan1: entered promiscuous mode [ 192.540378][ T7646] netlink: 'syz.1.481': attribute type 4 has an invalid length. [ 192.548053][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 192.556898][ T7646] NCSI netlink: No device for ifindex 6906736 [ 193.094567][ T7657] overlayfs: workdir and upperdir must be separate subtrees [ 193.155928][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'. [ 193.188209][ T5905] IPVS: starting estimator thread 0... [ 193.219752][ T30] audit: type=1400 audit(1744697531.121:1048): avc: denied { write } for pid=7644 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 193.301250][ T7661] IPVS: using max 44 ests per chain, 105600 per kthread [ 193.408320][ T7669] overlay: Unknown parameter 'smackfstransmute' [ 193.616829][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 193.637918][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 193.691118][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.816262][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.826650][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.869810][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 193.896795][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.786725][ T7680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.845975][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.878012][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 194.889386][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.912479][ T7688] FAULT_INJECTION: forcing a failure. [ 194.912479][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 194.932136][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.0.495 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 194.932161][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.932170][ T7688] Call Trace: [ 194.932175][ T7688] [ 194.932181][ T7688] dump_stack_lvl+0x16c/0x1f0 [ 194.932210][ T7688] should_fail_ex+0x512/0x640 [ 194.932232][ T7688] should_failslab+0xc2/0x120 [ 194.932252][ T7688] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 194.932271][ T7688] ? skb_clone+0x190/0x3f0 [ 194.932297][ T7688] skb_clone+0x190/0x3f0 [ 194.932319][ T7688] netlink_deliver_tap+0xabd/0xd30 [ 194.932347][ T7688] netlink_unicast+0x6b2/0x7f0 [ 194.932374][ T7688] ? __pfx_netlink_unicast+0x10/0x10 [ 194.932405][ T7688] netlink_ack+0x696/0xb80 [ 194.932435][ T7688] netlink_rcv_skb+0x347/0x440 [ 194.932458][ T7688] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.932486][ T7688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.932522][ T7688] ? bpf_lsm_capable+0x9/0x10 [ 194.932538][ T7688] ? security_capable+0x7e/0x260 [ 194.932558][ T7688] ? ns_capable+0xd7/0x110 [ 194.932583][ T7688] nfnetlink_rcv+0x1b3/0x430 [ 194.932608][ T7688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.932631][ T7688] ? netlink_deliver_tap+0x1ae/0xd30 [ 194.932658][ T7688] netlink_unicast+0x53a/0x7f0 [ 194.932683][ T7688] ? __pfx_netlink_unicast+0x10/0x10 [ 194.932714][ T7688] netlink_sendmsg+0x8d1/0xdd0 [ 194.932741][ T7688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.932774][ T7688] ____sys_sendmsg+0xa95/0xc70 [ 194.932801][ T7688] ? copy_msghdr_from_user+0x10a/0x160 [ 194.932821][ T7688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.932863][ T7688] ___sys_sendmsg+0x134/0x1d0 [ 194.932885][ T7688] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.932937][ T7688] __sys_sendmsg+0x16d/0x220 [ 194.932958][ T7688] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.932986][ T7688] ? rcu_is_watching+0x12/0xc0 [ 194.933015][ T7688] do_syscall_64+0xcd/0x260 [ 194.933041][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.933058][ T7688] RIP: 0033:0x7f8ffa78d169 [ 194.933072][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.933088][ T7688] RSP: 002b:00007f8ffb63b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.933104][ T7688] RAX: ffffffffffffffda RBX: 00007f8ffa9a5fa0 RCX: 00007f8ffa78d169 [ 194.933115][ T7688] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000006 [ 194.933125][ T7688] RBP: 00007f8ffb63b090 R08: 0000000000000000 R09: 0000000000000000 [ 194.933135][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.933144][ T7688] R13: 0000000000000000 R14: 00007f8ffa9a5fa0 R15: 00007ffd1cfa7478 [ 194.933168][ T7688] [ 194.934065][ T5876] usb 2-1: config 0 descriptor?? [ 195.773654][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 195.776445][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 195.791251][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.857811][ T5876] usb 2-1: USB disconnect, device number 10 [ 196.036467][ T30] audit: type=1400 audit(1744697533.971:1049): avc: denied { write } for pid=7704 comm="syz.0.499" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 196.059572][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.369861][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.426117][ T30] audit: type=1400 audit(1744697534.361:1050): avc: denied { ioctl } for pid=7714 comm="syz.2.503" path="socket:[15437]" dev="sockfs" ino=15437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 196.561030][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 196.641291][ T30] audit: type=1400 audit(1744697534.441:1051): avc: denied { create } for pid=7714 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 196.677828][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.816700][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.906222][ T5876] usb 1-1: Product: syz [ 196.908389][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 196.926419][ T30] audit: type=1400 audit(1744697534.441:1052): avc: denied { ioctl } for pid=7714 comm="syz.2.503" path="socket:[15443]" dev="sockfs" ino=15443 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 196.951367][ T5876] usb 1-1: Manufacturer: syz [ 196.996242][ T5876] usb 1-1: SerialNumber: syz [ 197.840748][ T7727] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 197.870851][ T5876] usb 1-1: config 0 descriptor?? [ 197.883551][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.506'. [ 198.078557][ T5876] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.732221][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.108999][ T30] audit: type=1400 audit(1744697537.001:1053): avc: denied { nlmsg_read } for pid=7743 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.973510][ T5876] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 200.249388][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 200.986691][ T5875] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.135219][ T6942] usb 1-1: USB disconnect, device number 9 [ 201.281016][ T5875] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 201.291983][ T5875] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 201.310029][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.331192][ T5875] usb 3-1: config 0 descriptor?? [ 201.345118][ T30] audit: type=1400 audit(1744697539.281:1054): avc: denied { execute } for pid=7765 comm="syz.1.519" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.371862][ T5875] usb 3-1: bad CDC descriptors [ 201.996721][ T5876] usb 3-1: USB disconnect, device number 15 [ 202.150586][ T7773] bridge0: entered allmulticast mode [ 202.777229][ T30] audit: type=1400 audit(1744697540.711:1055): avc: denied { bind } for pid=7779 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.536800][ T7796] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 203.734419][ T7797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.308460][ T7809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.562295][ T7814] ip6tnl1: entered promiscuous mode [ 204.779324][ T7821] ubi: mtd0 is already attached to ubi31 [ 205.630428][ T7833] FAULT_INJECTION: forcing a failure. [ 205.630428][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 205.643381][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.2.538 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 205.643405][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.643415][ T7833] Call Trace: [ 205.643420][ T7833] [ 205.643427][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 205.643455][ T7833] should_fail_ex+0x512/0x640 [ 205.643473][ T7833] ? __kvmalloc_node_noprof+0x122/0x600 [ 205.643493][ T7833] should_failslab+0xc2/0x120 [ 205.643512][ T7833] __kvmalloc_node_noprof+0x135/0x600 [ 205.643529][ T7833] ? nf_hook_entries_grow+0x285/0x860 [ 205.643553][ T7833] ? nf_hook_entries_grow+0x285/0x860 [ 205.643570][ T7833] nf_hook_entries_grow+0x285/0x860 [ 205.643587][ T7833] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 205.643613][ T7833] __nf_register_net_hook+0x1cd/0x730 [ 205.643637][ T7833] nf_register_net_hook+0x109/0x160 [ 205.643657][ T7833] nf_register_net_hooks+0x5d/0xd0 [ 205.643679][ T7833] nf_ct_netns_do_get+0x389/0x620 [ 205.643700][ T7833] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 205.643718][ T7833] ? __pfx___might_resched+0x10/0x10 [ 205.643743][ T7833] ? rcu_is_watching+0x12/0xc0 [ 205.643763][ T7833] ? find_held_lock+0x2b/0x80 [ 205.643794][ T7833] nf_ct_netns_get+0x39/0x150 [ 205.643813][ T7833] connlimit_mt_check+0xb5/0x2d0 [ 205.643834][ T7833] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 205.643856][ T7833] ? __pfx_connlimit_mt_check+0x10/0x10 [ 205.643879][ T7833] xt_check_match+0x283/0xa50 [ 205.643902][ T7833] ? mem_cgroup_css_alloc+0x1761/0x1f90 [ 205.643923][ T7833] ? __pfx_xt_check_match+0x10/0x10 [ 205.643951][ T7833] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 205.643973][ T7833] ? xt_find_match+0x1f6/0x290 [ 205.644002][ T7833] find_check_entry.constprop.0+0x317/0x9b0 [ 205.644035][ T7833] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 205.644069][ T7833] ? kasan_quarantine_put+0x10a/0x240 [ 205.644084][ T7833] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.644108][ T7833] ? kfree+0x2b6/0x4d0 [ 205.644131][ T7833] ? translate_table+0xba1/0x1720 [ 205.644160][ T7833] translate_table+0xc98/0x1720 [ 205.644196][ T7833] ? __pfx_translate_table+0x10/0x10 [ 205.644219][ T7833] ? xt_alloc_table_info+0x3e/0xa0 [ 205.644248][ T7833] do_ipt_set_ctl+0x570/0xae0 [ 205.644273][ T7833] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 205.644300][ T7833] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 205.644325][ T7833] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.644346][ T7833] ? sockopt_release_sock+0x52/0x60 [ 205.644367][ T7833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.644390][ T7833] ? sockopt_release_sock+0x52/0x60 [ 205.644423][ T7833] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 205.644449][ T7833] nf_setsockopt+0x8a/0xf0 [ 205.644474][ T7833] ip_setsockopt+0xcb/0xf0 [ 205.644493][ T7833] tcp_setsockopt+0xa4/0x100 [ 205.644512][ T7833] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.644536][ T7833] do_sock_setsockopt+0x221/0x470 [ 205.644559][ T7833] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.644596][ T7833] __sys_setsockopt+0x1a0/0x230 [ 205.644620][ T7833] __x64_sys_setsockopt+0xbd/0x160 [ 205.644637][ T7833] ? do_syscall_64+0x91/0x260 [ 205.644660][ T7833] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.644680][ T7833] do_syscall_64+0xcd/0x260 [ 205.644705][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.644721][ T7833] RIP: 0033:0x7fd8ab58d169 [ 205.644736][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.644752][ T7833] RSP: 002b:00007fd8ac38a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.644768][ T7833] RAX: ffffffffffffffda RBX: 00007fd8ab7a6160 RCX: 00007fd8ab58d169 [ 205.644779][ T7833] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 205.644794][ T7833] RBP: 00007fd8ac38a090 R08: 00000000000002f0 R09: 0000000000000000 [ 205.644804][ T7833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.644814][ T7833] R13: 0000000000000000 R14: 00007fd8ab7a6160 R15: 00007ffca60c22a8 [ 205.644838][ T7833] [ 205.645081][ T7833] xt_connlimit: cannot load conntrack support for proto=2 [ 207.329116][ T7848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.867852][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 210.443840][ T30] audit: type=1400 audit(1744697548.371:1056): avc: denied { bind } for pid=7861 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.753856][ T30] audit: type=1400 audit(1744697550.691:1057): avc: denied { read } for pid=7900 comm="syz.1.561" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 212.779902][ T30] audit: type=1400 audit(1744697550.691:1058): avc: denied { open } for pid=7900 comm="syz.1.561" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 212.895781][ T30] audit: type=1400 audit(1744697550.711:1059): avc: denied { bind } for pid=7890 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.989976][ T6942] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.180256][ T6942] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 213.207185][ T6942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.429257][ T6942] usb 1-1: config 0 descriptor?? [ 213.608448][ T6942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 213.748176][ T7912] 9pnet_fd: Insufficient options for proto=fd [ 213.773202][ T30] audit: type=1400 audit(1744697551.681:1060): avc: denied { read write } for pid=7907 comm="syz.4.562" dev="sockfs" ino=15022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.765680][ T30] audit: type=1400 audit(1744697553.481:1061): avc: denied { ioctl } for pid=7926 comm="syz.1.568" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 216.794613][ T7941] netlink: 72 bytes leftover after parsing attributes in process `syz.3.573'. [ 217.217803][ T6942] usb 1-1: USB disconnect, device number 10 [ 218.547009][ T30] audit: type=1400 audit(1744697556.481:1062): avc: denied { append } for pid=7955 comm="syz.4.579" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.960031][ T7961] input: syz0 as /devices/virtual/input/input12 [ 218.979854][ T30] audit: type=1400 audit(1744697556.911:1063): avc: denied { ioctl } for pid=7967 comm="syz.1.580" path="socket:[16002]" dev="sockfs" ino=16002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.378219][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.369775][ T6942] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 220.409350][ T30] audit: type=1400 audit(1744697557.921:1064): avc: denied { ioctl } for pid=7974 comm="syz.0.583" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 220.462398][ T7983] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.564851][ T7985] cgroup: Invalid name [ 220.602302][ T5875] usb 2-1: device descriptor read/64, error -71 [ 220.617766][ T30] audit: type=1400 audit(1744697558.441:1065): avc: denied { append } for pid=7984 comm="syz.2.585" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 220.669749][ T6942] usb 4-1: device descriptor read/64, error -71 [ 221.365578][ T5875] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.506491][ T6942] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 222.057453][ T5875] usb 2-1: device descriptor read/64, error -71 [ 222.140371][ T6942] usb 4-1: device descriptor read/64, error -71 [ 222.241008][ T5875] usb usb2-port1: attempt power cycle [ 222.370929][ T6942] usb usb4-port1: attempt power cycle [ 223.194526][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 223.467323][ T8027] FAULT_INJECTION: forcing a failure. [ 223.467323][ T8027] name failslab, interval 1, probability 0, space 0, times 0 [ 223.488331][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.3.599 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 223.488356][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.488366][ T8027] Call Trace: [ 223.488372][ T8027] [ 223.488378][ T8027] dump_stack_lvl+0x16c/0x1f0 [ 223.488406][ T8027] should_fail_ex+0x512/0x640 [ 223.488424][ T8027] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 223.488458][ T8027] ? __pfx_fl_classify+0x10/0x10 [ 223.488475][ T8027] should_failslab+0xc2/0x120 [ 223.488493][ T8027] __kmalloc_cache_noprof+0x6a/0x3e0 [ 223.488515][ T8027] ? do_raw_read_unlock+0x44/0xe0 [ 223.488534][ T8027] ? fl_init+0x45/0x2c0 [ 223.488550][ T8027] ? __pfx_fl_classify+0x10/0x10 [ 223.488565][ T8027] fl_init+0x45/0x2c0 [ 223.488580][ T8027] tc_new_tfilter+0x1147/0x2340 [ 223.488613][ T8027] ? avc_has_perm_noaudit+0x117/0x3b0 [ 223.488633][ T8027] ? __pfx_tc_new_tfilter+0x10/0x10 [ 223.488663][ T8027] ? __lock_acquire+0x5ca/0x1ba0 [ 223.488690][ T8027] ? find_held_lock+0x2b/0x80 [ 223.488709][ T8027] ? __pfx_tc_new_tfilter+0x10/0x10 [ 223.488728][ T8027] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 223.488750][ T8027] ? __pfx_tc_new_tfilter+0x10/0x10 [ 223.488772][ T8027] rtnetlink_rcv_msg+0x95b/0xe90 [ 223.488793][ T8027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.488826][ T8027] netlink_rcv_skb+0x16a/0x440 [ 223.488847][ T8027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.488868][ T8027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.488902][ T8027] ? netlink_deliver_tap+0x1ae/0xd30 [ 223.488926][ T8027] netlink_unicast+0x53a/0x7f0 [ 223.488949][ T8027] ? __pfx_netlink_unicast+0x10/0x10 [ 223.488976][ T8027] netlink_sendmsg+0x8d1/0xdd0 [ 223.489001][ T8027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.489033][ T8027] ____sys_sendmsg+0xa95/0xc70 [ 223.489057][ T8027] ? copy_msghdr_from_user+0x10a/0x160 [ 223.489076][ T8027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.489113][ T8027] ___sys_sendmsg+0x134/0x1d0 [ 223.489135][ T8027] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.489187][ T8027] __sys_sendmsg+0x16d/0x220 [ 223.489207][ T8027] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.489244][ T8027] do_syscall_64+0xcd/0x260 [ 223.489268][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.489284][ T8027] RIP: 0033:0x7f34a658d169 [ 223.489299][ T8027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.489314][ T8027] RSP: 002b:00007f34a7429038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.489330][ T8027] RAX: ffffffffffffffda RBX: 00007f34a67a5fa0 RCX: 00007f34a658d169 [ 223.489341][ T8027] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 223.489350][ T8027] RBP: 00007f34a7429090 R08: 0000000000000000 R09: 0000000000000000 [ 223.489360][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.489369][ T8027] R13: 0000000000000000 R14: 00007f34a67a5fa0 R15: 00007ffca68aed58 [ 223.489393][ T8027] [ 224.498957][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 224.726911][ T8037] delete_channel: no stack [ 225.498820][ T8050] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 225.506733][ T8050] netlink: 224 bytes leftover after parsing attributes in process `syz.0.604'. [ 225.765107][ T8062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.607'. [ 226.639758][ T5882] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 227.498951][ T30] audit: type=1400 audit(1744697565.321:1066): avc: denied { getopt } for pid=8085 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.669137][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.698837][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.707819][ T30] audit: type=1400 audit(1744697565.561:1067): avc: denied { bind } for pid=8085 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.763449][ T5882] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 227.787549][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.822804][ T5882] usb 2-1: config 0 descriptor?? [ 228.135131][ T8101] afs: Unknown parameter 'dyn·¥' [ 228.747702][ T30] audit: type=1400 audit(1744697566.681:1068): avc: denied { map } for pid=8076 comm="syz.1.612" path="socket:[16201]" dev="sockfs" ino=16201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 228.771401][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.721974][ T8104] serio: Serial port ttyS3 [ 230.022948][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 230.036239][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.068176][ T8115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.091255][ T5882] usb 2-1: USB disconnect, device number 14 [ 230.098727][ T8115] overlayfs: missing 'lowerdir' [ 230.159948][ T8122] IPv6: Can't replace route, no match found [ 230.739848][ T6942] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.774268][ T30] audit: type=1326 audit(1744697568.711:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 230.982679][ T30] audit: type=1326 audit(1744697568.711:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.006266][ T30] audit: type=1326 audit(1744697568.711:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.032343][ T30] audit: type=1326 audit(1744697568.971:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.033221][ T8115] warning: `syz.0.622' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.055618][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.056658][ T30] audit: type=1326 audit(1744697568.971:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.105076][ T30] audit: type=1326 audit(1744697568.971:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.128712][ T30] audit: type=1326 audit(1744697568.971:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa78d169 code=0x7ffc0000 [ 231.153250][ T6942] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.159826][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 231.162567][ T6942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.190749][ T6942] usb 5-1: config 0 descriptor?? [ 231.199907][ T6942] cp210x 5-1:0.0: cp210x converter detected [ 231.389896][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 231.399065][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 231.408166][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.428691][ T9] usb 4-1: config 0 descriptor?? [ 231.656514][ T6942] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 231.845223][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 231.945170][ T6942] usb 5-1: cp210x converter now attached to ttyUSB0 [ 231.990289][ T6942] usb 5-1: USB disconnect, device number 7 [ 232.007370][ T6942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 232.095908][ T6942] cp210x 5-1:0.0: device disconnected [ 232.454491][ T8123] QAT: Invalid ioctl -2147289835 [ 233.155828][ T8145] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 233.361700][ T8148] tipc: Started in network mode [ 233.372041][ T8148] tipc: Node identity ac1414aa, cluster identity 4711 [ 233.408284][ T8148] tipc: Enabled bearer , priority 10 [ 233.592248][ T8157] FAULT_INJECTION: forcing a failure. [ 233.592248][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 233.661798][ T8160] FAULT_INJECTION: forcing a failure. [ 233.661798][ T8160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.675035][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.2.635 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 233.675058][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.675067][ T8160] Call Trace: [ 233.675073][ T8160] [ 233.675079][ T8160] dump_stack_lvl+0x16c/0x1f0 [ 233.675106][ T8160] should_fail_ex+0x512/0x640 [ 233.675127][ T8160] _copy_from_user+0x2e/0xd0 [ 233.675147][ T8160] dev_ethtool+0x15b/0x5b80 [ 233.675167][ T8160] ? __lock_acquire+0xaa4/0x1ba0 [ 233.675185][ T8160] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 233.675211][ T8160] ? __pfx_dev_ethtool+0x10/0x10 [ 233.675229][ T8160] ? lock_acquire+0x179/0x350 [ 233.675244][ T8160] ? find_held_lock+0x2b/0x80 [ 233.675265][ T8160] ? finish_task_switch.isra.0+0x21c/0xc10 [ 233.675288][ T8160] ? rcu_is_watching+0x12/0xc0 [ 233.675308][ T8160] ? finish_task_switch.isra.0+0x221/0xc10 [ 233.675328][ T8160] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.675350][ T8160] ? finish_task_switch.isra.0+0x221/0xc10 [ 233.675378][ T8160] ? rcu_is_watching+0x12/0xc0 [ 233.675397][ T8160] ? trace_sched_exit_tp+0xde/0x130 [ 233.675422][ T8160] ? __schedule+0x1186/0x5de0 [ 233.675440][ T8160] ? irqentry_exit+0x3b/0x90 [ 233.675461][ T8160] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.675494][ T8160] ? __pfx___schedule+0x10/0x10 [ 233.675516][ T8160] ? __lock_acquire+0x5ca/0x1ba0 [ 233.675533][ T8160] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 233.675560][ T8160] ? find_held_lock+0x2b/0x80 [ 233.675580][ T8160] ? dev_load+0x8e/0x240 [ 233.675604][ T8160] dev_ioctl+0x290/0x10e0 [ 233.675623][ T8160] sock_do_ioctl+0x19d/0x280 [ 233.675648][ T8160] ? __pfx_sock_do_ioctl+0x10/0x10 [ 233.675677][ T8160] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 233.675702][ T8160] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 233.675729][ T8160] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.675758][ T8160] sock_ioctl+0x227/0x6b0 [ 233.675773][ T8160] ? __pfx_sock_ioctl+0x10/0x10 [ 233.675787][ T8160] ? hook_file_ioctl_common+0x145/0x410 [ 233.675810][ T8160] ? selinux_file_ioctl+0x180/0x270 [ 233.675833][ T8160] ? selinux_file_ioctl+0xb4/0x270 [ 233.675858][ T8160] ? __pfx_sock_ioctl+0x10/0x10 [ 233.675874][ T8160] __x64_sys_ioctl+0x190/0x200 [ 233.675898][ T8160] do_syscall_64+0xcd/0x260 [ 233.675923][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.675939][ T8160] RIP: 0033:0x7fd8ab58d169 [ 233.675952][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.675968][ T8160] RSP: 002b:00007fd8ac38a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.675984][ T8160] RAX: ffffffffffffffda RBX: 00007fd8ab7a6160 RCX: 00007fd8ab58d169 [ 233.675994][ T8160] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000007 [ 233.676004][ T8160] RBP: 00007fd8ac38a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.676013][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.676023][ T8160] R13: 0000000000000000 R14: 00007fd8ab7a6160 R15: 00007ffca60c22a8 [ 233.676045][ T8160] [ 233.981158][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.990856][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 233.990917][ T30] audit: type=1400 audit(1744697571.931:1080): avc: denied { compute_member } for pid=8118 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 234.026288][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.4.634'. [ 234.071440][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.1.627 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 234.071464][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.071474][ T8157] Call Trace: [ 234.071479][ T8157] [ 234.071486][ T8157] dump_stack_lvl+0x16c/0x1f0 [ 234.071513][ T8157] should_fail_ex+0x512/0x640 [ 234.071530][ T8157] should_failslab+0xc2/0x120 [ 234.071542][ T8157] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 234.071553][ T8157] ? skb_clone+0x190/0x3f0 [ 234.071569][ T8157] skb_clone+0x190/0x3f0 [ 234.071582][ T8157] netlink_deliver_tap+0xabd/0xd30 [ 234.071599][ T8157] netlink_unicast+0x6b2/0x7f0 [ 234.071621][ T8157] ? __pfx_netlink_unicast+0x10/0x10 [ 234.071635][ T8157] ? write_comp_data+0x3c/0x90 [ 234.071648][ T8157] netlink_ack+0x696/0xb80 [ 234.071666][ T8157] netlink_rcv_skb+0x347/0x440 [ 234.071680][ T8157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.071697][ T8157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.071717][ T8157] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 234.071735][ T8157] ? __pfx_down_read+0x10/0x10 [ 234.071755][ T8157] genl_rcv+0x28/0x40 [ 234.071770][ T8157] netlink_unicast+0x53a/0x7f0 [ 234.071785][ T8157] ? __pfx_netlink_unicast+0x10/0x10 [ 234.071804][ T8157] netlink_sendmsg+0x8d1/0xdd0 [ 234.071820][ T8157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.071840][ T8157] ____sys_sendmsg+0xa95/0xc70 [ 234.071856][ T8157] ? copy_msghdr_from_user+0x10a/0x160 [ 234.071869][ T8157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.071891][ T8157] ___sys_sendmsg+0x134/0x1d0 [ 234.071904][ T8157] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.071934][ T8157] __sys_sendmsg+0x16d/0x220 [ 234.071947][ T8157] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.071968][ T8157] do_syscall_64+0xcd/0x260 [ 234.071985][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.071995][ T8157] RIP: 0033:0x7f2814f8d169 [ 234.072003][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.072013][ T8157] RSP: 002b:00007f2815d50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.072023][ T8157] RAX: ffffffffffffffda RBX: 00007f28151a5fa0 RCX: 00007f2814f8d169 [ 234.072029][ T8157] RDX: 0000000020040000 RSI: 0000200000000400 RDI: 0000000000000003 [ 234.072035][ T8157] RBP: 00007f2815d50090 R08: 0000000000000000 R09: 0000000000000000 [ 234.072041][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.072047][ T8157] R13: 0000000000000000 R14: 00007f28151a5fa0 R15: 00007fff1b4dc778 [ 234.072060][ T8157] [ 234.323467][ T8152] delete_channel: no stack [ 234.426811][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.4.634'. [ 234.611067][ T5876] tipc: Node number set to 2886997162 [ 234.629723][ T9] gspca_sonixj: i2c_w8 err -110 [ 234.649781][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 234.767994][ T30] audit: type=1400 audit(1744697572.701:1081): avc: denied { connect } for pid=8165 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.787412][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.052732][ T6942] usb 4-1: USB disconnect, device number 16 [ 235.135119][ T30] audit: type=1400 audit(1744697573.071:1082): avc: denied { read } for pid=8173 comm="syz.1.638" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 235.158335][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.923477][ T8184] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 236.139066][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 236.155872][ T8184] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.641'. [ 236.403480][ T30] audit: type=1400 audit(1744697573.111:1083): avc: denied { open } for pid=8173 comm="syz.1.638" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.427205][ T30] audit: type=1400 audit(1744697573.411:1084): avc: denied { map } for pid=8173 comm="syz.1.638" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.485066][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 236.494333][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 237.155099][ T8196] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 237.583594][ T30] audit: type=1400 audit(1744697575.521:1085): avc: denied { write } for pid=8204 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.079829][ T30] audit: type=1400 audit(1744697575.521:1086): avc: denied { setopt } for pid=8204 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.532736][ T8250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.608193][ T8252] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 239.615940][ T8252] audit: out of memory in audit_log_start [ 239.625691][ T8250] batadv_slave_0: entered promiscuous mode [ 239.720547][ T8253] netlink: 228 bytes leftover after parsing attributes in process `syz.2.652'. [ 241.554386][ T8278] Bluetooth: MGMT ver 1.23 [ 241.825573][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 241.836687][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.034500][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.196455][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.223794][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.252465][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.270869][ T9] usb 2-1: Product: syz [ 242.281121][ T9] usb 2-1: Manufacturer: syz [ 242.290907][ T9] usb 2-1: SerialNumber: syz [ 242.306672][ T9] usb 2-1: config 0 descriptor?? [ 243.239790][ T30] audit: type=1400 audit(1744697580.771:1087): avc: denied { nlmsg_write } for pid=8292 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.270375][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 243.298624][ T9] usb 2-1: selecting invalid altsetting 0 [ 243.570509][ T5876] usb 1-1: device descriptor read/64, error -71 [ 243.906112][ T30] audit: type=1400 audit(1744697581.471:1088): avc: denied { getopt } for pid=8300 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.022067][ T5875] usb 2-1: USB disconnect, device number 15 [ 244.172220][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.239181][ T8281] sp0: Synchronizing with TNC [ 244.261316][ T8279] [U] è [ 244.309962][ T5876] usb 1-1: device descriptor read/64, error -71 [ 244.486043][ T5876] usb usb1-port1: attempt power cycle [ 244.955701][ T8318] ref_ctr_offset mismatch. inode: 0x2ef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 245.254812][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 245.290183][ T5876] usb 1-1: device descriptor read/8, error -71 [ 248.341717][ T30] audit: type=1400 audit(1744697585.891:1089): avc: denied { read } for pid=8351 comm="syz.2.684" path="socket:[17642]" dev="sockfs" ino=17642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.469754][ T5876] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 248.649767][ T5876] usb 4-1: device descriptor read/64, error -71 [ 248.742995][ T30] audit: type=1400 audit(1744697586.681:1090): avc: denied { setopt } for pid=8357 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.782606][ T8360] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 248.792045][ T8356] IPVS: stopping backup sync thread 8360 ... [ 248.909023][ T8362] ======================================================= [ 248.909023][ T8362] WARNING: The mand mount option has been deprecated and [ 248.909023][ T8362] and is ignored by this kernel. Remove the mand [ 248.909023][ T8362] option from the mount to silence this warning. [ 248.909023][ T8362] ======================================================= [ 248.909761][ T5876] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 248.943898][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.968252][ T30] audit: type=1400 audit(1744697586.901:1091): avc: denied { mount } for pid=8361 comm="syz.2.686" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 249.060939][ T30] audit: type=1400 audit(1744697586.991:1092): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 249.159772][ T5876] usb 4-1: device descriptor read/64, error -71 [ 249.302947][ T5876] usb usb4-port1: attempt power cycle [ 249.391950][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 250.143892][ T8367] delete_channel: no stack [ 250.236477][ T5876] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 250.290255][ T5876] usb 4-1: device descriptor read/8, error -71 [ 250.589949][ T5876] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.743723][ T8383] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 250.752226][ T5876] usb 4-1: device descriptor read/8, error -71 [ 250.819049][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.864422][ T5876] usb usb4-port1: unable to enumerate USB device [ 252.450702][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 252.489271][ T8402] [ 252.491600][ T8402] ====================================================== [ 252.498588][ T8402] WARNING: possible circular locking dependency detected [ 252.505575][ T8402] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 252.512648][ T8402] ------------------------------------------------------ [ 252.519632][ T8402] syz.1.697/8402 is trying to acquire lock: [ 252.525488][ T8402] ffff888029212ad8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 252.529846][ T8400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.696'. [ 252.534675][ T8402] [ 252.534675][ T8402] but task is already holding lock: [ 252.534683][ T8402] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 252.559693][ T8402] [ 252.559693][ T8402] which lock already depends on the new lock. [ 252.559693][ T8402] [ 252.570080][ T8402] [ 252.570080][ T8402] the existing dependency chain (in reverse order) is: [ 252.579059][ T8402] [ 252.579059][ T8402] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 252.586234][ T8402] __mutex_lock+0x199/0xb90 [ 252.591235][ T8402] start_sync_thread+0x120/0x28b0 [ 252.596751][ T8402] do_ip_vs_set_ctl+0x451/0x11d0 [ 252.602185][ T8402] nf_setsockopt+0x8a/0xf0 [ 252.607093][ T8402] ip_setsockopt+0xcb/0xf0 [ 252.612008][ T8402] tcp_setsockopt+0xa4/0x100 [ 252.617089][ T8402] smc_setsockopt+0x1b3/0xa00 [ 252.622256][ T8402] do_sock_setsockopt+0x221/0x470 [ 252.627775][ T8402] __sys_setsockopt+0x1a0/0x230 [ 252.633121][ T8402] __x64_sys_setsockopt+0xbd/0x160 [ 252.638722][ T8402] do_syscall_64+0xcd/0x260 [ 252.643719][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.650103][ T8402] [ 252.650103][ T8402] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 252.658665][ T8402] __mutex_lock+0x199/0xb90 [ 252.663670][ T8402] smc_switch_to_fallback+0x2d/0x9f0 [ 252.669445][ T8402] smc_sendmsg+0x13d/0x520 [ 252.674350][ T8402] __sys_sendto+0x495/0x510 [ 252.679341][ T8402] __x64_sys_sendto+0xe0/0x1c0 [ 252.684597][ T8402] do_syscall_64+0xcd/0x260 [ 252.689603][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.695991][ T8402] [ 252.695991][ T8402] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 252.703601][ T8402] __lock_acquire+0x1173/0x1ba0 [ 252.708959][ T8402] lock_acquire+0x179/0x350 [ 252.713952][ T8402] lock_sock_nested+0x41/0xf0 [ 252.719124][ T8402] sockopt_lock_sock+0x54/0x70 [ 252.724379][ T8402] do_ip_setsockopt+0xfe/0x3240 [ 252.729724][ T8402] ip_setsockopt+0x59/0xf0 [ 252.734631][ T8402] raw_setsockopt+0xb7/0x2a0 [ 252.739711][ T8402] do_sock_setsockopt+0x221/0x470 [ 252.745230][ T8402] __sys_setsockopt+0x1a0/0x230 [ 252.750574][ T8402] __x64_sys_setsockopt+0xbd/0x160 [ 252.756178][ T8402] do_syscall_64+0xcd/0x260 [ 252.761175][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.767561][ T8402] [ 252.767561][ T8402] other info that might help us debug this: [ 252.767561][ T8402] [ 252.777756][ T8402] Chain exists of: [ 252.777756][ T8402] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 252.777756][ T8402] [ 252.791277][ T8402] Possible unsafe locking scenario: [ 252.791277][ T8402] [ 252.798694][ T8402] CPU0 CPU1 [ 252.804029][ T8402] ---- ---- [ 252.809363][ T8402] lock(rtnl_mutex); [ 252.813320][ T8402] lock(&smc->clcsock_release_lock); [ 252.821180][ T8402] lock(rtnl_mutex); [ 252.827651][ T8402] lock(sk_lock-AF_INET); [ 252.832081][ T8402] [ 252.832081][ T8402] *** DEADLOCK *** [ 252.832081][ T8402] [ 252.840219][ T8402] 1 lock held by syz.1.697/8402: [ 252.845121][ T8402] #0: ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 252.854403][ T8402] [ 252.854403][ T8402] stack backtrace: [ 252.860262][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.1.697 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 252.860276][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.860283][ T8402] Call Trace: [ 252.860287][ T8402] [ 252.860292][ T8402] dump_stack_lvl+0x116/0x1f0 [ 252.860307][ T8402] print_circular_bug+0x275/0x350 [ 252.860324][ T8402] check_noncircular+0x14c/0x170 [ 252.860341][ T8402] __lock_acquire+0x1173/0x1ba0 [ 252.860353][ T8402] lock_acquire+0x179/0x350 [ 252.860366][ T8402] ? sockopt_lock_sock+0x54/0x70 [ 252.860381][ T8402] lock_sock_nested+0x41/0xf0 [ 252.860393][ T8402] ? sockopt_lock_sock+0x54/0x70 [ 252.860405][ T8402] sockopt_lock_sock+0x54/0x70 [ 252.860416][ T8402] do_ip_setsockopt+0xfe/0x3240 [ 252.860427][ T8402] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 252.860435][ T8402] ? __pfx_futex_wake_mark+0x10/0x10 [ 252.860446][ T8402] ? sock_has_perm+0x259/0x2f0 [ 252.860459][ T8402] ? __pfx_sock_has_perm+0x10/0x10 [ 252.860470][ T8402] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 252.860486][ T8402] ip_setsockopt+0x59/0xf0 [ 252.860495][ T8402] raw_setsockopt+0xb7/0x2a0 [ 252.860506][ T8402] ? __pfx_raw_setsockopt+0x10/0x10 [ 252.860515][ T8402] ? selinux_socket_setsockopt+0x6a/0x80 [ 252.860527][ T8402] ? sock_common_setsockopt+0x2e/0xf0 [ 252.860542][ T8402] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.860557][ T8402] do_sock_setsockopt+0x221/0x470 [ 252.860571][ T8402] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 252.860589][ T8402] __sys_setsockopt+0x1a0/0x230 [ 252.860602][ T8402] __x64_sys_setsockopt+0xbd/0x160 [ 252.860614][ T8402] ? do_syscall_64+0x91/0x260 [ 252.860628][ T8402] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.860641][ T8402] do_syscall_64+0xcd/0x260 [ 252.860656][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.860666][ T8402] RIP: 0033:0x7f2814f8d169 [ 252.860675][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.860686][ T8402] RSP: 002b:00007f2815d50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.860696][ T8402] RAX: ffffffffffffffda RBX: 00007f28151a5fa0 RCX: 00007f2814f8d169 [ 252.860702][ T8402] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000004 [ 252.860708][ T8402] RBP: 00007f281500e990 R08: 0000000000000008 R09: 0000000000000000 [ 252.860714][ T8402] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.860720][ T8402] R13: 0000000000000000 R14: 00007f28151a5fa0 R15: 00007fff1b4dc778 [ 252.860730][ T8402] [ 253.109653][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.185739][ T8403] lo: entered allmulticast mode [ 253.445465][ T8402] syz_tun: entered allmulticast mode [ 253.474017][ T8401] lo: left allmulticast mode [ 255.241777][ T1296] ieee802154 phy1 wpan1: encryption failed: -22