last executing test programs: 3m0.521965901s ago: executing program 1 (id=249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000007}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private, @broadcast, 0x0}, &(0x7f0000000240)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r2, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x0) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000200)=[0x3, 0xfffffffc]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000280)=0x20, &(0x7f00000004c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) 2m58.797165703s ago: executing program 1 (id=254): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000200)={0x1, 0x1ff, 0x3, 0x9, 0x3, 0x80000001, 0x4, 0x8, 0x8000, 0x2, 0x7fff, 0x3}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x0) 2m57.793199849s ago: executing program 1 (id=257): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x7595c1) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r1, r2}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r5 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x5b) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) chroot(&(0x7f0000000180)='./file0\x00') connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r4}, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) close(0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x86) 2m56.016486168s ago: executing program 1 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4000000, 0x1}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0xfffffffffffffffc, 0x0, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x0, r2, 0x1}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r12, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 2m54.126309566s ago: executing program 1 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001240)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xfff}, 0x18) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x11) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 2m52.91599527s ago: executing program 1 (id=272): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 2m52.454444935s ago: executing program 32 (id=272): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 8.781096594s ago: executing program 3 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc094) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000e1050a0b04000000000000200002000000620009000100732b5189a2797a30000000000900020073797a3200000007000000001100010000000000000000000000000a00"/100], 0x64}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000400eb1140eb0000000010000000000000000000ded73500"], 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x213900, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x5, r2, 0x1c, {0x9, 0x1}, 0x6}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x8}) accept4$tipc(r5, &(0x7f0000000280)=@id, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_uring_setup(0x807f7d, &(0x7f00000002c0)={0x0, 0x10000, 0x10, 0x3}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = dup3(r8, r9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r11, 0x40045109, &(0x7f0000002240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x32, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)}, 0x400}], 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAP(r6, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 8.440923951s ago: executing program 0 (id=769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 8.198005171s ago: executing program 0 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000a0206010800000000000000000000000014000780050014007f00000005001500030000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x4008804) 8.052811657s ago: executing program 0 (id=771): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x349000, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000040)="c630274c24e0cc50069a2d1f3ff73a2cc48a4b198ee7a11cea1a9be87e08405cebd46cf3353d1814c1fbf50249d07288744b76b07d612aee2136db4759407611c5f6f9562d881417a9f1871b7c102f8944ccc8d2028f2d6794a80ffe98411d2412c551753531d54d4e8d80d43ce7d8752a87e9fdebf6df5db6deca2ab689e4c04dcd3a66e85fa1eddfbe6bc50929533a8854ee1d6f6b73346a217452ad0e463c3d5466") write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8800) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x45, 0x7, 0x3015, 0x9, 0x9, 0x1, 0x0, 0x4}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/130) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/130) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000400)={0x5, 0x100, "646378c8e54c032a25f3e09f5dee0c8f2debe2dbb02f3897e5f52b4996d9b605", 0x0, 0x0, 0x271, 0x7f, 0x1}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', r1}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000002580)={0x10000000, 0x8, 0x3}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000002580)={0x10000000, 0x8, 0x3}) ioctl$TIOCSIG(r1, 0x40045436, 0x18) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000025c0), &(0x7f0000002600)=0xe) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r4, &(0x7f0000002640)) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r4, &(0x7f0000002640)) r5 = getpid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000026c0)=0x94b21de63077ae9e) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000026c0)=0x94b21de63077ae9e) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x100010, r0, 0xc) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x100010, r0, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000002700), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000002740)={0x7, 0x0, 0x0, "b7a02552171d02cdeb43c5d74c6f4eb135790047622ef4083cf3ed23fe5eaa0e", 0x69641d14}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000002740)={0x7, 0x0, 0x0, "b7a02552171d02cdeb43c5d74c6f4eb135790047622ef4083cf3ed23fe5eaa0e", 0x69641d14}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000002780), &(0x7f00000027c0)={0x0, 0xfb, 0x38, 0x0, 0x2, "6c868f4b98c37eb6268a0088a652ecfc", "63ff65af2ce05cc743282bb9650fd2a3c2a08034c8841b8f0aeb68d5bd9939bbb51d68"}, 0x38, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000002800)=0x80) getpid() (async) getpid() syz_open_procfs(r5, &(0x7f0000002840)='net/snmp6\x00') (async) syz_open_procfs(r5, &(0x7f0000002840)='net/snmp6\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000002880)=0x1d, 0x0, 0x4) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000002900)) 7.665227592s ago: executing program 0 (id=772): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) socket(0x25, 0x800000003, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xeeb3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.608081537s ago: executing program 0 (id=774): syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="04be"], 0x9) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "825ee50e"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xa, 0x5, 0x4, 0xfff9, 0xb4f, 0x2, 0x8, 0xe, 0x6, 0x3, 0x6, 0x3cd2}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) 7.519385855s ago: executing program 3 (id=776): syz_usb_connect(0x4, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/69, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 7.001872192s ago: executing program 5 (id=780): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x400, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (fail_nth: 1) 6.9995864s ago: executing program 4 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0x358) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) cachestat(r3, &(0x7f0000000740)={0xdd7, 0x6}, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r6 = open(0x0, 0x1e5842, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x9) ftruncate(r7, 0x2007ffd) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r9, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000a3) 6.650862275s ago: executing program 3 (id=784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000240), &(0x7f00000004c0)=""/200, 0x7000000}, 0x20) 5.792269643s ago: executing program 4 (id=785): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4000010) 5.750290502s ago: executing program 4 (id=786): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0xb, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 5.676507118s ago: executing program 5 (id=787): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) 5.244585718s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x64, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000880)={r2, "cdfa645f2af1167b804094080db1a1d4"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 4.816111751s ago: executing program 5 (id=789): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xeb, 0xf2, 0x20, 0x14aa, 0x22b, 0xb011, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbe, 0x0, 0x0, 0x15, 0xbc, 0xbe}}]}}]}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf254f00000000000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) 4.754166132s ago: executing program 4 (id=790): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000240)={0x0, 0x4000000, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.751536648s ago: executing program 0 (id=791): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x20}}}}}}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x21000, 0xe, 0x1, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@hyper}) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file1/file0\x00'}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000b80)={{@host, 0x200}, {@hyper, 0x2000}, 0x400, "5892f8846a1584d5f50780d062878b5d8d00dbb7259a8c091b65dcf098053a9af39e6d845471decb43c8fc88c155f8735af3d94d4d1559de56c7feba7ef198388d33a5efdf0477bf22430a4f7f61679045e70cd8a9777c8feb3e1f229662a0eab8d795c696c9c189287853d8c33c5a4b5bf5a60ef839376f634798f852cf4c11dd80a1f974a5d221c051adb9885e1ea8cd542b8aca2bd751909a12e50ab6db3f757333f966f6598bb7e9140c82b7bb98afa22f23041b77ce1188e2c0dc4ad8869ca1e65d1547c9e511851583f0c6f031040ec6c9520897671fb64909c7e991a01e2d8eda3386d26d5e95c89685780668684d9ef98355274ebd990ed6c94f7280a9c11a6114b7f98ad2208bdf4bafb7b798a1aacdbba5ca7760f15fe36eb285bd7577f6a5c1598195c5d1a70b8157808ed976f39344c03920aa1afb9122cb50f817f66182316890365bd9de56d71be8c05b8a8b570d130e5ad197ae2c29f47c9135b17c15cb134141e7d5e073240d110a3c956185f4df2378adf6358983bfdddd69e4b1b3d23063f1a290d008ef04c8f3ffa6fddbbd3fd339796e212a0cdc22592c00aa5bcf99ebb56a6048f0760ad29de3d59310a07d9e5651342839ea660b5998a1bff65b780057c48bccbac988ffb6201617c1181eb9c2feb4e3f67e00a16e7e1a65f5daf91d20885a1a072efa9983ae6358f4c91f8411d7164b9f079c44a5a05c1a7bdba53200c19452fb8b1cd298aa2ba02ca2aa6d4ded164e74ffa25465468a6918fb05fa1e99fe6435bab2298ef1c3b97b2a69c12b1b967dec4c14ec705b8e2517ca11fb4ea655a54bbfa4e764ac5d3c4b0aae3e74b456d9aaedbbfe4052540ff66d91e90361516811b4b5510a921069a1b0571d5ca6c3c579785ea705a9aa1ab6f6d2aa6741a97ff7de7c3337d14231ffc92b0ebab9a14b4ff9873d5626a495dcdf35fff67d83bda18b736c674139d954d36657d6f38983df5217f58b75789b29d96207c7cea40ceb7544b2674f3fb0b73093e8649f5c841f89169adc37c1fb52cb90c04b4ac66d6b559ca86ec2aaa52f20b14aadba9b3f25be093a0ef6e366bfeb22aa3cfbec23ce56c334f448cf7f1f9653744388a3552e4564a26e399088b6746c907fd3039a3e3befd458740d54bb21936d19d5e3077bf7469047bb809ded01fdd620c0e32c0364527d54bef987a96cf15fb8e7b42c6e9b337c9026c7bf5002043811944036255aa47296e1fd22cb9b380838f5c134d7c33a72c7817ab52bfb31ece32e4dce47d0f9ed817b9d3e5f7630f355813c3ba1c22f744a2e32c563685a62699398f7226ae24799e1b2fba2f0ed8fd08d2bb0e7950805a119bd4ea46714a73facd4fda8ec64213221d7fd8f09fcdab4be032d8fab53211b4b00f282e794858af57064732352099983359cb9919fca39b9b2ff7a4778f6d5"}, 0x418}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) dup3(r4, r4, 0x80000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ff"], 0x20}], 0x1}, 0x20008851) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000080)) 4.689170298s ago: executing program 3 (id=792): socket$unix(0x1, 0x5, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x2000000000000}, 0x0, 0x0, 0x1}, [@lastused={0xc, 0xf, 0x15}]}, 0xc4}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_vlan\x00'}) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) 3.092618917s ago: executing program 3 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x1a) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="000000000800000018110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000182500000e03de59a7a013a2a2317f6db70d88028ff6b9f8f0f2584950e6da4d4c25536ba5967e56576c", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000002200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0x10, 0xc00000, @void, @value}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_open_dev$dmmidi(&(0x7f0000000c00), 0x2, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f00000001c0)={0x1000000}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="1f59cae5639cf15b04e0d625d96f0e6d5b5ac726b2c5590b57e7a61c0950f033a94c40da6183afb9321768ea8396fd428ff2860cae2d8713376468de8f0b92a502fa001fb7caa4cf48cfc89e753d76b163fd607c7907bc14d6560c08a667b105424a54bfcc3f564bffa5115ccb7923e0aac334f027399c59bdfa9fe668963cbd08be04d24f7981fa096b448f426f73637f649fb1ae81e36f3a70372c5bd2801916fdbee325092def000a95df3c6d4b", 0xaf, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f1", 0x8d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha512-avx2\x00'}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab", 0xe) 3.021208056s ago: executing program 2 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) landlock_restrict_self(r0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0xfffffffd, 0xffffffff, 0x9, 0x71a8, 0x0}) 3.020772022s ago: executing program 5 (id=796): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x4000010) 2.558883637s ago: executing program 5 (id=797): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0xf0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000003700010324bd7002fadbdf25020000000618880cda5d90103d8212623881d60913763ac4c9dbdbe55d852d060000006200ca71a3b21feaf93a4f8452b50baaba6a9fc479b4e9dca567e0a5147fc422ee4eeda08bdaf516831ec5cafd75a06e127a640dff3831d87a2e0ec1ad6f7dc1173f4158bf71"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000c300)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x4002}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000002c00000003e70000000000000400048045001100fedcbb7d1d11c6d36ad643b225d9fa8d62f53fcc5cf5ca0895a0abb6ba14702d4f56729b90a05e1954183363e3e4b2105e9d3e000000d0910043d45d54a51f68ac4b9f68c4754d21c8d7d4d224957c04468fcf92264bc8691b4ea7458eac6944d89ef51c80348736c17ef92d7ee1553e08b4093d6c05e2352bc57dac9670"], 0x5c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000180)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) socket$inet_udp(0x2, 0x2, 0x0) r6 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, 0x0, 0x0) 2.455666663s ago: executing program 2 (id=798): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0xb, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 1.977306246s ago: executing program 2 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) 1.538469086s ago: executing program 2 (id=800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000370001000000020095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x20, 0x200001) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000000)={0x80000000, &(0x7f00000000c0), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xb) copy_file_range(r2, &(0x7f0000000080), r1, 0x0, 0xfffffffffffffff8, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x40800) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x40) ftruncate(r5, 0x82081fc) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r6, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x4) 701.428968ms ago: executing program 5 (id=801): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+60000000}, &(0x7f00000000c0)) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) 662.248519ms ago: executing program 2 (id=802): setreuid(0x0, 0xee01) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000006c0)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000001000900004000000040e8a7c55989", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000042000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 557.123025ms ago: executing program 3 (id=803): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x14, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1, 0x0, 0x80}}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x1, @local, 0x8e}}, 0x1000, 0x9, 0x10, 0x1, 0xa797}, &(0x7f0000000100)=0x98) syz_open_dev$usbfs(&(0x7f0000000200), 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000050000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000380)=[{0x2, 0x7, 0x9, 0x5, @tick=0xd82, {0x6, 0x2}, {0x1, 0x3}, @raw32={[0x69c5dd72, 0x0, 0x6]}}, {0x1, 0x2, 0x4, 0x8, @tick=0x4, {0xae, 0xf}, {0x3, 0xf}, @raw8={"5d9c5c2aaaee79f74f030257"}}, {0x6, 0x9, 0x4, 0x6, @time={0x401, 0xffffffff}, {0xd, 0xf9}, {0xad, 0x6}, @queue={0x0, {0x6, 0x4d92}}}, {0x7, 0x0, 0x9, 0x0, @time={0x5}, {0x25, 0x5}, {0x81, 0x86}, @connect={{0x2, 0xf9}, {0x1, 0x40}}}, {0x0, 0x8, 0x4, 0x9, @time={0xbbc0, 0x9c}, {0x5, 0x7}, {0x4, 0xb4}, @time=@time={0x9, 0x200}}, {0x2, 0x3, 0x3, 0x2, @tick=0x8ec00000, {0x5, 0x4}, {0x1, 0x5}, @queue={0x5, {0x6, 0x8}}}, {0x3, 0x6, 0xe, 0x8, @time={0x7ff, 0x7fff}, {0x7f, 0x6}, {0x0, 0x74}, @note={0x0, 0xa5, 0x3, 0xa, 0x10001}}], 0xc4) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @note={0x9, 0x0, 0xff, 0xf, 0x9}}], 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={'vmac64(sm4)\x00'}}) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 48.879667ms ago: executing program 4 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0x358) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) cachestat(r3, &(0x7f0000000740)={0xdd7, 0x6}, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r7 = open(0x0, 0x145542, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x9) ftruncate(r7, 0x2007ffd) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r9, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000a3) 0s ago: executing program 2 (id=805): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x4, 0x78, 0x10}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000480)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x5, 0x9, 0x7fffffff, 0x9, 0x4, 0x4, 0x38f9, 0xcb2, 0x10000, 0x9, 0x0, 0x9, 0x6, 0x3, 0x7, 0x9, 0x9, 0x7ffe, 0x9, 0x5, 0x7fffffff, 0x9, 0x81, 0x8, 0xf42, 0x9, 0x2, 0x101, 0x3, 0x1, 0x7fff]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x400}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000640)={r5, 0x0, 0x30, 0x8000000000000000, 0x2}, &(0x7f0000000680)=0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r7, 0xfaac4106a1b87a7, 0xfffffffc, 0x0, {0x7}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r9, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r9}) kernel console output (not intermixed with test programs): 211.077010][ T7220] SELinux: failed to load policy [ 211.416237][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.482415][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.770924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.778142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.842039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.849336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.253062][ T7228] lo speed is unknown, defaulting to 1000 [ 214.287344][ T7249] FAULT_INJECTION: forcing a failure. [ 214.287344][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 214.337715][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.4.339 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 214.348379][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.358467][ T7249] Call Trace: [ 214.361766][ T7249] [ 214.364722][ T7249] dump_stack_lvl+0x16c/0x1f0 [ 214.369617][ T7249] should_fail_ex+0x497/0x5b0 [ 214.374311][ T7249] ? fs_reclaim_acquire+0xae/0x150 [ 214.379447][ T7249] should_failslab+0xc2/0x120 [ 214.384119][ T7249] __kmalloc_node_noprof+0xd1/0x510 [ 214.389323][ T7249] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 214.394789][ T7249] __kvmalloc_node_noprof+0xad/0x1a0 [ 214.400093][ T7249] bpf_test_run_xdp_live+0x170/0x500 [ 214.405397][ T7249] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 214.411221][ T7249] ? __pfx___lock_acquire+0x10/0x10 [ 214.416451][ T7249] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 214.422344][ T7249] ? __might_fault+0xe3/0x190 [ 214.427036][ T7249] ? __might_fault+0xe3/0x190 [ 214.431730][ T7249] ? _copy_from_user+0x59/0xd0 [ 214.436533][ T7249] ? bpf_test_init.isra.0+0x111/0x150 [ 214.441915][ T7249] bpf_prog_test_run_xdp+0x827/0x1580 [ 214.447317][ T7249] ? lock_acquire+0x2f/0xb0 [ 214.451862][ T7249] ? __fget_files+0x40/0x3a0 [ 214.456499][ T7249] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.462348][ T7249] ? __fget_files+0x206/0x3a0 [ 214.467050][ T7249] ? fput+0x67/0x440 [ 214.470944][ T7249] ? __bpf_prog_get+0xa0/0x290 [ 214.475729][ T7249] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.481568][ T7249] __sys_bpf+0xfc6/0x49c0 [ 214.485907][ T7249] ? __pfx_lock_release+0x10/0x10 [ 214.490926][ T7249] ? __pfx___sys_bpf+0x10/0x10 [ 214.495699][ T7249] ? vfs_write+0x306/0x1150 [ 214.500193][ T7249] ? __mutex_unlock_slowpath+0x164/0x690 [ 214.505847][ T7249] ? fput+0x67/0x440 [ 214.509756][ T7249] ? ksys_write+0x1ba/0x250 [ 214.514250][ T7249] ? __pfx_ksys_write+0x10/0x10 [ 214.519107][ T7249] __x64_sys_bpf+0x78/0xc0 [ 214.523546][ T7249] ? lockdep_hardirqs_on+0x7c/0x110 [ 214.528761][ T7249] do_syscall_64+0xcd/0x250 [ 214.533270][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.539175][ T7249] RIP: 0033:0x7fc3dcf7ff19 [ 214.543587][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.563297][ T7249] RSP: 002b:00007fc3ddcf0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.571701][ T7249] RAX: ffffffffffffffda RBX: 00007fc3dd145fa0 RCX: 00007fc3dcf7ff19 [ 214.579660][ T7249] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 214.587632][ T7249] RBP: 00007fc3ddcf00a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.595608][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.603131][ T5905] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 214.603563][ T7249] R13: 0000000000000000 R14: 00007fc3dd145fa0 R15: 00007ffe68399a68 [ 214.619104][ T7249] [ 214.623202][ T867] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 214.755909][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 214.776678][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.779427][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.793093][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.802445][ T5905] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 214.813203][ T867] usb 1-1: device descriptor read/64, error -71 [ 214.816499][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.837424][ T5905] usb 3-1: Product: syz [ 214.863161][ T7243] lo speed is unknown, defaulting to 1000 [ 214.873539][ T5905] usb 3-1: Manufacturer: syz [ 214.889571][ T5905] usb 3-1: SerialNumber: syz [ 215.017753][ T5905] usb 3-1: config 0 descriptor?? [ 215.158413][ T867] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 215.543251][ T867] usb 1-1: device descriptor read/64, error -71 [ 215.608813][ T7269] bridge_slave_0: left allmulticast mode [ 215.636233][ T7269] bridge_slave_0: left promiscuous mode [ 215.643341][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.645895][ T7264] (syz.4.341,7264,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 215.659646][ T7264] (syz.4.341,7264,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 215.683258][ T867] usb usb1-port1: attempt power cycle [ 215.732855][ T7269] bridge_slave_1: left allmulticast mode [ 215.741374][ T7269] bridge_slave_1: left promiscuous mode [ 215.813674][ T7276] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 215.828548][ T7276] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2583 sclass=netlink_xfrm_socket pid=7276 comm=syz.2.340 [ 216.028733][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.058315][ T867] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.226718][ T7269] bond0: (slave bond_slave_0): Releasing backup interface [ 216.366043][ T867] usb 1-1: device not accepting address 25, error -71 [ 216.418253][ T7269] bond0: (slave bond_slave_1): Releasing backup interface [ 217.028966][ T7269] team0: Port device team_slave_0 removed [ 217.044767][ T7269] team0: Port device team_slave_1 removed [ 217.052609][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.064178][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.075366][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.167968][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.497307][ T51] usb 3-1: USB disconnect, device number 12 [ 218.331534][ T6931] veth0_vlan: entered promiscuous mode [ 218.706609][ T6931] veth1_vlan: entered promiscuous mode [ 218.741734][ T6931] veth0_macvtap: entered promiscuous mode [ 218.759979][ T6931] veth1_macvtap: entered promiscuous mode [ 218.869225][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.901962][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.911976][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.923126][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.933058][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.943551][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.954842][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.964736][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.975266][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.985537][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.996230][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.006361][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.017084][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.028376][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.062226][ T29] audit: type=1400 audit(1733828633.425:399): avc: denied { read } for pid=7303 comm="syz.4.349" laddr=fe80::b lport=35022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.155796][ T6931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.167727][ T6931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.182368][ T6931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.220179][ T6931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.391934][ T867] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 219.527149][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.537793][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.623287][ T7316] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 219.638936][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 219.673197][ T867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.691678][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.706407][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.723797][ T867] usb 1-1: no configurations [ 219.735606][ T867] usb 1-1: can't read configurations, error -22 [ 219.953500][ T29] audit: type=1400 audit(1733828634.425:400): avc: denied { connect } for pid=7338 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.984659][ T7340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 221.095926][ T29] audit: type=1400 audit(1733828635.555:401): avc: denied { ioctl } for pid=7358 comm="syz.3.359" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 221.352389][ T7368] FAULT_INJECTION: forcing a failure. [ 221.352389][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 221.365400][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.3.361 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 221.376047][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.386143][ T7368] Call Trace: [ 221.389461][ T7368] [ 221.392425][ T7368] dump_stack_lvl+0x16c/0x1f0 [ 221.397154][ T7368] should_fail_ex+0x497/0x5b0 [ 221.401886][ T7368] ? fs_reclaim_acquire+0xae/0x150 [ 221.407050][ T7368] should_failslab+0xc2/0x120 [ 221.411783][ T7368] __kmalloc_noprof+0xcb/0x510 [ 221.416604][ T7368] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 221.422295][ T7368] tomoyo_realpath_from_path+0xb9/0x720 [ 221.427905][ T7368] ? tomoyo_path_number_perm+0x235/0x590 [ 221.433598][ T7368] ? tomoyo_path_number_perm+0x235/0x590 [ 221.439301][ T7368] tomoyo_path_number_perm+0x248/0x590 [ 221.444824][ T7368] ? tomoyo_path_number_perm+0x235/0x590 [ 221.450513][ T7368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.456588][ T7368] ? __pfx_lock_release+0x10/0x10 [ 221.461655][ T7368] ? trace_lock_acquire+0x14e/0x1f0 [ 221.466875][ T7368] ? lock_acquire+0x2f/0xb0 [ 221.471373][ T7368] ? __fget_files+0x40/0x3a0 [ 221.475965][ T7368] ? __fget_files+0x206/0x3a0 [ 221.480672][ T7368] security_file_ioctl+0x9b/0x240 [ 221.485705][ T7368] __x64_sys_ioctl+0xb7/0x200 [ 221.490395][ T7368] do_syscall_64+0xcd/0x250 [ 221.494904][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.500793][ T7368] RIP: 0033:0x7f371797ff19 [ 221.505221][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.524829][ T7368] RSP: 002b:00007f371870a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.533242][ T7368] RAX: ffffffffffffffda RBX: 00007f3717b45fa0 RCX: 00007f371797ff19 [ 221.541210][ T7368] RDX: 00000000200001c0 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 221.549174][ T7368] RBP: 00007f371870a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 221.557139][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.565103][ T7368] R13: 0000000000000000 R14: 00007f3717b45fa0 R15: 00007ffc7fe75e18 [ 221.573087][ T7368] [ 221.576236][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.717569][ T7368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.276904][ T29] audit: type=1400 audit(1733828636.745:402): avc: denied { write } for pid=7351 comm="syz.5.275" name="igmp" dev="proc" ino=4026534246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 222.357006][ T5920] IPVS: starting estimator thread 0... [ 222.643341][ T7378] IPVS: using max 45 ests per chain, 108000 per kthread [ 222.652262][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 222.969694][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 223.165225][ T7410] netlink: 'syz.2.368': attribute type 2 has an invalid length. [ 223.209687][ T29] audit: type=1400 audit(1733828637.675:403): avc: denied { create } for pid=7409 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.469675][ T7418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.369'. [ 224.016216][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'. [ 224.496969][ T29] audit: type=1400 audit(1733828638.905:404): avc: denied { write } for pid=7425 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 226.273200][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 227.049434][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 228.485870][ T7467] x_tables: ip_tables: ah match: only valid for protocol 51 [ 228.689327][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 228.762169][ T7473] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.617559][ T29] audit: type=1400 audit(1733828644.085:405): avc: denied { getattr } for pid=7469 comm="syz.5.382" path="cgroup:[4026534224]" dev="nsfs" ino=4026534224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.750554][ T29] audit: type=1400 audit(1733828644.215:406): avc: denied { nlmsg_write } for pid=7487 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 229.978920][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 230.105378][ T867] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 230.333206][ T867] usb 5-1: Using ep0 maxpacket: 16 [ 230.392282][ T867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.432657][ T867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.500726][ T867] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 230.515946][ T867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.578523][ T867] usb 5-1: Product: syz [ 230.628507][ T29] audit: type=1400 audit(1733828645.085:407): avc: denied { write } for pid=7499 comm="syz.3.388" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.683040][ T867] usb 5-1: Manufacturer: syz [ 230.703080][ T867] usb 5-1: SerialNumber: syz [ 230.749183][ T867] usb 5-1: config 0 descriptor?? [ 230.910711][ T7514] lo speed is unknown, defaulting to 1000 [ 232.351234][ T7521] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.717237][ T5897] usb 5-1: USB disconnect, device number 16 [ 233.503861][ T5905] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.654438][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 233.682832][ T5905] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 233.698713][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.739198][ T5905] usb 4-1: config 0 descriptor?? [ 233.773838][ T5905] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 235.102711][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.401'. [ 235.126755][ T7559] ipip0: entered promiscuous mode [ 235.873251][ T29] audit: type=1400 audit(1733828650.315:408): avc: denied { connect } for pid=7571 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.105679][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 236.300169][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 236.524348][ T5865] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 236.554991][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.565085][ T5865] usb 3-1: Product: syz [ 236.584940][ T5865] usb 3-1: Manufacturer: syz [ 236.596408][ T5865] usb 3-1: SerialNumber: syz [ 237.547185][ T5865] usb 3-1: config 0 descriptor?? [ 237.583038][ T5905] gspca_vc032x: reg_w err -110 [ 237.639078][ T5865] as10x_usb: device has been detected [ 237.652432][ T5865] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 237.759532][ T7606] netlink: 'syz.5.407': attribute type 4 has an invalid length. [ 237.929897][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.407'. [ 238.267094][ T5865] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 238.705728][ T7610] lo speed is unknown, defaulting to 1000 [ 238.716240][ T29] audit: type=1400 audit(1733828653.165:409): avc: denied { nlmsg_write } for pid=7583 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 238.736878][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.333692][ T7615] random: crng reseeded on system resumption [ 239.361153][ T29] audit: type=1400 audit(1733828653.805:410): avc: denied { write } for pid=7583 comm="syz.2.404" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.401008][ T5865] as10x_usb: error during firmware upload part1 [ 239.465020][ T5865] Registered device Sky IT Digital Key (green led) [ 239.689939][ T5865] usb 3-1: USB disconnect, device number 13 [ 241.171863][ T5865] Unregistered device Sky IT Digital Key (green led) [ 241.185190][ T5865] as10x_usb: device has been disconnected [ 242.217999][ T867] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 242.394056][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.5.417'. [ 242.447154][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.486609][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.512788][ T867] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 242.579847][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.623291][ T867] usb 5-1: config 0 descriptor?? [ 243.016147][ T29] audit: type=1400 audit(1733828657.465:411): avc: denied { create } for pid=7661 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 243.404611][ T29] audit: type=1400 audit(1733828657.475:412): avc: denied { setopt } for pid=7661 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 243.868121][ T7671] i2c i2c-0: Invalid block write size 252 [ 243.876492][ T29] audit: type=1400 audit(1733828658.345:413): avc: denied { setopt } for pid=7670 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.950927][ T29] audit: type=1400 audit(1733828658.415:414): avc: denied { setopt } for pid=7641 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.498402][ T29] audit: type=1400 audit(1733828658.765:415): avc: denied { write } for pid=7641 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.944214][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 246.574206][ T867] usbhid 5-1:0.0: can't add hid device: -71 [ 246.580302][ T867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 246.871902][ T867] usb 5-1: USB disconnect, device number 17 [ 247.843383][ T7717] infiniband syz2: set active [ 247.848151][ T7717] infiniband syz2: added team_slave_1 [ 247.884452][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 247.963520][ T867] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 248.043040][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 248.054948][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.066312][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.091324][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 248.102633][ T7717] RDS/IB: syz2: added [ 248.107007][ T7717] smc: adding ib device syz2 with port count 1 [ 248.113263][ T7717] smc: ib device syz2 port 1 has pnetid [ 248.141014][ T25] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 248.142079][ T7720] lo speed is unknown, defaulting to 1000 [ 248.160527][ T25] usb 3-1: Product: syz [ 248.186438][ T25] usb 3-1: Manufacturer: syz [ 248.559324][ T25] usb 3-1: config 0 descriptor?? [ 248.620036][ T7706] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 248.658632][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 248.846378][ T867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.854304][ T867] usb 1-1: no configurations [ 248.859004][ T867] usb 1-1: can't read configurations, error -22 [ 248.914512][ T7736] FAULT_INJECTION: forcing a failure. [ 248.914512][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.928661][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.4.434 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 248.939703][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.949756][ T7736] Call Trace: [ 248.953051][ T7736] [ 248.955990][ T7736] dump_stack_lvl+0x16c/0x1f0 [ 248.960679][ T7736] should_fail_ex+0x497/0x5b0 [ 248.965384][ T7736] _copy_from_iter+0x2a1/0x1560 [ 248.970265][ T7736] ? trace_lock_acquire+0x14e/0x1f0 [ 248.975488][ T7736] ? __alloc_skb+0x1fe/0x380 [ 248.980092][ T7736] ? __pfx__copy_from_iter+0x10/0x10 [ 248.985413][ T7736] ? __virt_addr_valid+0x1a4/0x590 [ 248.990554][ T7736] ? __virt_addr_valid+0x5e/0x590 [ 248.995602][ T7736] ? __phys_addr_symbol+0x30/0x80 [ 249.000646][ T7736] ? __check_object_size+0x488/0x710 [ 249.006138][ T7736] netlink_sendmsg+0x813/0xd70 [ 249.010935][ T7736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.016257][ T7736] ____sys_sendmsg+0xaaf/0xc90 [ 249.021034][ T7736] ? copy_msghdr_from_user+0x10b/0x160 [ 249.026532][ T7736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.031922][ T7736] ___sys_sendmsg+0x135/0x1e0 [ 249.036618][ T7736] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.041887][ T7736] ? __pfx_lock_release+0x10/0x10 [ 249.046952][ T7736] ? trace_lock_acquire+0x14e/0x1f0 [ 249.052211][ T7736] ? __fget_files+0x206/0x3a0 [ 249.056910][ T7736] __sys_sendmsg+0x16e/0x220 [ 249.061523][ T7736] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.066672][ T7736] do_syscall_64+0xcd/0x250 [ 249.071204][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.077108][ T7736] RIP: 0033:0x7fc3dcf7ff19 [ 249.081525][ T7736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.101173][ T7736] RSP: 002b:00007fc3ddcf0058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.109603][ T7736] RAX: ffffffffffffffda RBX: 00007fc3dd145fa0 RCX: 00007fc3dcf7ff19 [ 249.117675][ T7736] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 249.125656][ T7736] RBP: 00007fc3ddcf00a0 R08: 0000000000000000 R09: 0000000000000000 [ 249.133661][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.141645][ T7736] R13: 0000000000000000 R14: 00007fc3dd145fa0 R15: 00007ffe68399a68 [ 249.149632][ T7736] [ 249.407397][ T7703] mkiss: ax0: crc mode is auto. [ 249.469568][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 249.510297][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 249.642770][ T7754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 249.647064][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 249.728419][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 249.821256][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 249.881624][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 250.003023][ T25] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 250.037934][ T25] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 250.195403][ T25] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 250.213182][ T25] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 250.224772][ T25] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 250.268182][ T25] usb 3-1: USB disconnect, device number 14 [ 250.363380][ T867] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 250.663886][ T867] usb 1-1: Using ep0 maxpacket: 16 [ 250.670810][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.683423][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.693773][ T867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.706950][ T867] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.722982][ T867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.742303][ T867] usb 1-1: config 0 descriptor?? [ 250.975354][ T7785] ptrace attach of "./syz-executor exec"[7787] was attempted by "./syz-executor exec"[7785] [ 251.042159][ T29] audit: type=1400 audit(1733828665.465:416): avc: denied { bind } for pid=7784 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.093135][ T7789] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 251.765396][ T867] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed [ 251.795817][ T867] microsoft 0003:045E:07DA.0007: parse failed [ 251.867834][ T7786] sctp: failed to load transform for md5: -2 [ 251.894992][ T867] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 251.949627][ T7792] sctp: failed to load transform for md5: -2 [ 252.035441][ T7758] veth1_to_team: entered promiscuous mode [ 252.185946][ T7756] veth1_to_team: left promiscuous mode [ 252.353458][ T5867] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 252.390371][ T867] usb 1-1: USB disconnect, device number 31 [ 252.984690][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.995737][ T5867] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.019363][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.074229][ T5867] usb 3-1: config 0 descriptor?? [ 253.389388][ T7825] overlayfs: failed to resolve './bus': -2 [ 253.898129][ T5867] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 253.912318][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input9 [ 254.179085][ T7828] lo speed is unknown, defaulting to 1000 [ 254.193864][ T5867] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 254.583717][ T5897] usb 3-1: USB disconnect, device number 15 [ 254.738206][ T29] audit: type=1400 audit(1733828669.205:417): avc: denied { mount } for pid=7848 comm="syz.0.452" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.102340][ T29] audit: type=1400 audit(1733828669.565:418): avc: denied { write } for pid=7859 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.187108][ T29] audit: type=1400 audit(1733828669.595:419): avc: denied { create } for pid=7859 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 255.343041][ T29] audit: type=1400 audit(1733828669.685:420): avc: denied { write } for pid=7859 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 256.623006][ T29] audit: type=1400 audit(1733828670.835:421): avc: denied { recv } for pid=7787 comm="syz.4.443" saddr=10.128.0.169 src=30006 daddr=10.128.0.152 dest=39306 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 257.322250][ T7890] FAULT_INJECTION: forcing a failure. [ 257.322250][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.335513][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.3.460 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 257.346114][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.356186][ T7890] Call Trace: [ 257.359466][ T7890] [ 257.362396][ T7890] dump_stack_lvl+0x16c/0x1f0 [ 257.367091][ T7890] should_fail_ex+0x497/0x5b0 [ 257.371783][ T7890] _copy_from_user+0x2e/0xd0 [ 257.376386][ T7890] __sys_bpf+0x21c/0x49c0 [ 257.380729][ T7890] ? finish_task_switch.isra.0+0x217/0xcc0 [ 257.386550][ T7890] ? __switch_to+0x6a0/0x1190 [ 257.391249][ T7890] ? __pfx___sys_bpf+0x10/0x10 [ 257.396026][ T7890] ? __schedule+0xe60/0x5ad0 [ 257.400649][ T7890] ? fput+0x67/0x440 [ 257.404555][ T7890] ? ksys_write+0x1ba/0x250 [ 257.409072][ T7890] __x64_sys_bpf+0x78/0xc0 [ 257.413501][ T7890] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.418706][ T7890] do_syscall_64+0xcd/0x250 [ 257.423226][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.429130][ T7890] RIP: 0033:0x7f371797ff19 [ 257.433550][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.453168][ T7890] RSP: 002b:00007f37186c8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.461588][ T7890] RAX: ffffffffffffffda RBX: 00007f3717b46160 RCX: 00007f371797ff19 [ 257.469571][ T7890] RDX: 0000000000000050 RSI: 00000000200009c0 RDI: 0000000000000000 [ 257.477551][ T7890] RBP: 00007f37186c80a0 R08: 0000000000000000 R09: 0000000000000000 [ 257.485525][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.493496][ T7890] R13: 0000000000000000 R14: 00007f3717b46160 R15: 00007ffc7fe75e18 [ 257.501485][ T7890] [ 257.504586][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.558472][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.578154][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.734517][ T7867] lo speed is unknown, defaulting to 1000 [ 258.347790][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 259.264689][ T7875] rdma_rxe: rxe_newlink: failed to add lo [ 259.289148][ T29] audit: type=1400 audit(1733828673.755:422): avc: denied { module_request } for pid=7906 comm="syz.3.465" kmod="(null)t_A" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.310842][ T5867] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 259.497073][ T7909] netlink: 92 bytes leftover after parsing attributes in process `syz.3.465'. [ 259.541417][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 259.603092][ T5867] usb 1-1: device descriptor read/64, error -71 [ 259.740237][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 259.844234][ T5867] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 260.615707][ T5867] usb 1-1: device descriptor read/64, error -71 [ 260.725729][ T5867] usb usb1-port1: attempt power cycle [ 260.843349][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 261.018474][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 261.026691][ T7923] netlink: 'syz.5.469': attribute type 1 has an invalid length. [ 261.297327][ T5867] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 261.306124][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.469'. [ 261.408038][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.443128][ T867] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 261.452380][ T5865] usb 6-1: no configurations [ 261.468813][ T5865] usb 6-1: can't read configurations, error -22 [ 261.655444][ T7934] lo speed is unknown, defaulting to 1000 [ 261.716398][ T867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.848179][ T867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 261.875364][ T5867] usb 1-1: device descriptor read/8, error -71 [ 261.896385][ T29] audit: type=1400 audit(1733828676.365:423): avc: denied { getopt } for pid=7935 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.958953][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 262.014077][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 262.045924][ T867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.358979][ T29] audit: type=1400 audit(1733828676.815:424): avc: denied { ioctl } for pid=7941 comm="syz.5.477" path="socket:[16828]" dev="sockfs" ino=16828 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 262.389490][ T867] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 262.410122][ T867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 262.417509][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 262.433043][ T867] usb 3-1: Product: syz [ 262.445213][ T867] usb 3-1: Manufacturer: syz [ 262.452623][ T867] usb 3-1: SerialNumber: syz [ 262.617385][ T867] usb 3-1: config 0 descriptor?? [ 262.879275][ T867] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 262.926263][ T5865] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 262.946555][ T867] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 262.994068][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.018795][ T867] usb 3-1: USB disconnect, device number 16 [ 263.044501][ T7945] bond0: (slave rose0): Enslaving as an active interface with an up link [ 263.143044][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 263.150741][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.165369][ T5865] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 263.197639][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.816757][ T5865] usb 6-1: config 0 descriptor?? [ 264.009221][ T5865] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 264.429232][ T7961] Set syz1 is full, maxelem 65536 reached [ 264.812781][ T29] audit: type=1400 audit(1733828679.265:425): avc: denied { append } for pid=7967 comm="syz.3.482" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.878985][ T29] audit: type=1400 audit(1733828679.345:426): avc: denied { mount } for pid=7974 comm="syz.2.483" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 265.075816][ T29] audit: type=1400 audit(1733828679.535:427): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 265.673043][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.777571][ T5865] gspca_vc032x: reg_w err -71 [ 265.782408][ T5865] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 265.821105][ T5865] usb 6-1: USB disconnect, device number 4 [ 265.880130][ T29] audit: type=1400 audit(1733828680.345:428): avc: denied { remount } for pid=7998 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 265.912257][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 265.929610][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.939970][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.947133][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 265.959927][ T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 266.013576][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.032213][ T25] usb 3-1: Product: syz [ 266.047737][ T25] usb 3-1: Manufacturer: syz [ 266.055501][ T8004] overlayfs: failed to resolve './file1': -2 [ 266.062720][ T25] usb 3-1: SerialNumber: syz [ 266.083887][ T25] usb 3-1: config 0 descriptor?? [ 266.161138][ T8009] netlink: 68 bytes leftover after parsing attributes in process `syz.4.487'. [ 266.171690][ T8009] overlay: Unknown parameter 'obj_user' [ 266.671043][ T8024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2583 sclass=netlink_xfrm_socket pid=8024 comm=syz.2.484 [ 266.996403][ T29] audit: type=1400 audit(1733828681.135:429): avc: denied { bind } for pid=8023 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.050705][ T8027] No such timeout policy "syz0" [ 267.273966][ T5819] usb 3-1: USB disconnect, device number 17 [ 267.903212][ T5865] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 268.075117][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.090215][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.121267][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.140053][ T5865] usb 1-1: config 0 descriptor?? [ 268.157050][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 268.350669][ T29] audit: type=1400 audit(1733828682.815:430): avc: denied { sys_chroot } for pid=8038 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 268.372074][ T29] audit: type=1400 audit(1733828682.815:431): avc: denied { setgid } for pid=8038 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 268.557879][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 268.565951][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 268.573334][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 268.588996][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 268.596674][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 269.204064][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 269.352509][ T5865] pwc: recv_control_msg error -71 req 02 val 2000 [ 269.366351][ T5865] pwc: recv_control_msg error -71 req 02 val 2100 [ 269.413109][ T5865] pwc: recv_control_msg error -71 req 04 val 1500 [ 269.459884][ T5865] pwc: recv_control_msg error -71 req 02 val 2500 [ 269.553045][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 269.583059][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 269.590400][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 269.599681][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 269.611292][ T8050] lo speed is unknown, defaulting to 1000 [ 269.621035][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 269.628022][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 269.638268][ T5865] pwc: Registered as video103. [ 269.656166][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 269.868183][ T5865] usb 1-1: USB disconnect, device number 36 [ 270.903504][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 271.607110][ T8086] netlink: 536 bytes leftover after parsing attributes in process `syz.5.508'. [ 271.837708][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 271.963186][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 273.116477][ T5832] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 273.347952][ T29] audit: type=1400 audit(1733828687.815:432): avc: denied { read } for pid=8109 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.406792][ T8117] netlink: 76 bytes leftover after parsing attributes in process `syz.0.515'. [ 273.500813][ T29] audit: type=1400 audit(1733828687.935:433): avc: denied { egress } for pid=5867 comm="kworker/0:5" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 273.661456][ T29] audit: type=1400 audit(1733828687.935:434): avc: denied { sendto } for pid=5867 comm="kworker/0:5" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 274.753499][ T5867] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 275.154212][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 275.189416][ T5867] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 275.198957][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.761658][ T5867] usb 6-1: config 0 has no interface number 0 [ 275.783893][ T8131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8131 comm=syz.4.521 [ 276.243135][ T867] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 276.413144][ T867] usb 1-1: Using ep0 maxpacket: 16 [ 276.443643][ T5867] usb 6-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 276.450786][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 276.462989][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.516169][ T867] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 276.516346][ T5867] usb 6-1: Product: syz [ 276.538469][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.583077][ T5867] usb 6-1: Manufacturer: syz [ 276.587746][ T5867] usb 6-1: SerialNumber: syz [ 276.588080][ T867] usb 1-1: Product: syz [ 276.604008][ T5867] usb 6-1: config 0 descriptor?? [ 276.609434][ T867] usb 1-1: Manufacturer: syz [ 276.619705][ T867] usb 1-1: SerialNumber: syz [ 276.627237][ T867] usb 1-1: config 0 descriptor?? [ 276.636611][ T5867] em28xx 6-1:0.230: audio device (2013:0251): interface 230, class 1 [ 276.722107][ T867] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 276.903272][ T867] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 277.070179][ T29] audit: type=1400 audit(1733828691.535:435): avc: denied { bind } for pid=8170 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.093491][ T29] audit: type=1400 audit(1733828691.535:436): avc: denied { name_bind } for pid=8170 comm="syz.2.531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 277.122208][ T5897] usb 6-1: USB disconnect, device number 5 [ 277.142233][ T29] audit: type=1400 audit(1733828691.535:437): avc: denied { node_bind } for pid=8170 comm="syz.2.531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 277.147461][ T8156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.182537][ T8156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.226979][ T29] audit: type=1400 audit(1733828691.635:438): avc: denied { listen } for pid=8170 comm="syz.2.531" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.313850][ T867] usb 1-1: USB disconnect, device number 37 [ 277.322981][ T29] audit: type=1400 audit(1733828691.635:439): avc: denied { setopt } for pid=8170 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.356310][ T867] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 277.395779][ T867] kobil_sct 1-1:0.0: device disconnected [ 277.397424][ T29] audit: type=1400 audit(1733828691.635:440): avc: denied { connect } for pid=8170 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.441010][ T8176] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 277.491344][ T29] audit: type=1400 audit(1733828691.635:441): avc: denied { name_connect } for pid=8170 comm="syz.2.531" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 278.639961][ T8182] lo speed is unknown, defaulting to 1000 [ 278.647102][ T29] audit: type=1400 audit(1733828692.575:442): avc: denied { read } for pid=8184 comm="syz.5.535" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.674735][ T29] audit: type=1400 audit(1733828692.575:443): avc: denied { open } for pid=8184 comm="syz.5.535" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.698081][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.989884][ T29] audit: type=1400 audit(1733828693.455:444): avc: denied { accept } for pid=8177 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 279.009719][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.088286][ T29] audit: type=1400 audit(1733828693.535:445): avc: denied { getopt } for pid=8205 comm="syz.5.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.714059][ T8217] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 280.290302][ T29] audit: type=1400 audit(1733828694.755:446): avc: denied { bind } for pid=8225 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.654384][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8248 comm=syz.0.547 [ 281.790869][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 281.842165][ T8259] syz.4.549: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.875001][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.4.549 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 281.885644][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.895712][ T8259] Call Trace: [ 281.898998][ T8259] [ 281.901932][ T8259] dump_stack_lvl+0x16c/0x1f0 [ 281.906612][ T8259] warn_alloc+0x24d/0x3a0 [ 281.910937][ T8259] ? __pfx_warn_alloc+0x10/0x10 [ 281.915777][ T8259] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 281.921579][ T8259] ? kasan_save_stack+0x42/0x60 [ 281.926432][ T8259] ? kasan_save_stack+0x33/0x60 [ 281.931272][ T8259] ? kasan_save_track+0x14/0x30 [ 281.936129][ T8259] ? __kasan_kmalloc+0xaa/0xb0 [ 281.940926][ T8259] ? xskq_create+0x52/0x1d0 [ 281.945458][ T8259] ? do_sock_setsockopt+0x222/0x480 [ 281.950666][ T8259] ? __sys_setsockopt+0x1a0/0x230 [ 281.955717][ T8259] ? __x64_sys_setsockopt+0xbd/0x160 [ 281.961030][ T8259] __vmalloc_node_range_noprof+0x10df/0x1530 [ 281.967017][ T8259] ? xskq_create+0xfb/0x1d0 [ 281.971530][ T8259] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.977865][ T8259] ? xskq_create+0xfb/0x1d0 [ 281.982374][ T8259] vmalloc_user_noprof+0x6b/0x90 [ 281.987343][ T8259] ? xskq_create+0xfb/0x1d0 [ 281.991871][ T8259] xskq_create+0xfb/0x1d0 [ 281.996230][ T8259] xsk_setsockopt+0x7b7/0xa10 [ 282.000942][ T8259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.006180][ T8259] ? selinux_socket_setsockopt+0x6a/0x80 [ 282.011830][ T8259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.017078][ T8259] do_sock_setsockopt+0x222/0x480 [ 282.022109][ T8259] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.027654][ T8259] ? lock_acquire+0x2f/0xb0 [ 282.032169][ T8259] __sys_setsockopt+0x1a0/0x230 [ 282.037035][ T8259] __x64_sys_setsockopt+0xbd/0x160 [ 282.042148][ T8259] ? do_syscall_64+0x91/0x250 [ 282.046831][ T8259] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.052028][ T8259] do_syscall_64+0xcd/0x250 [ 282.056530][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.062422][ T8259] RIP: 0033:0x7fc3dcf7ff19 [ 282.066831][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.086521][ T8259] RSP: 002b:00007fc3ddcf0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.094934][ T8259] RAX: ffffffffffffffda RBX: 00007fc3dd145fa0 RCX: 00007fc3dcf7ff19 [ 282.102899][ T8259] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 282.110871][ T8259] RBP: 00007fc3dcff3cc8 R08: 0000000000000004 R09: 0000000000000000 [ 282.118852][ T8259] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.126819][ T8259] R13: 0000000000000000 R14: 00007fc3dd145fa0 R15: 00007ffe68399a68 [ 282.134799][ T8259] [ 282.137824][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.242238][ T8259] Mem-Info: [ 282.261232][ T8259] active_anon:6470 inactive_anon:0 isolated_anon:0 [ 282.261232][ T8259] active_file:13845 inactive_file:38555 isolated_file:0 [ 282.261232][ T8259] unevictable:2793 dirty:287 writeback:0 [ 282.261232][ T8259] slab_reclaimable:11296 slab_unreclaimable:108445 [ 282.261232][ T8259] mapped:31030 shmem:1481 pagetables:1041 [ 282.261232][ T8259] sec_pagetables:0 bounce:0 [ 282.261232][ T8259] kernel_misc_reclaimable:0 [ 282.261232][ T8259] free:1312909 free_pcp:555 free_cma:0 [ 282.306645][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.332660][ T8259] Node 0 active_anon:25880kB inactive_anon:0kB active_file:55380kB inactive_file:154144kB unevictable:9636kB isolated(anon):0kB isolated(file):0kB mapped:124120kB dirty:1144kB writeback:0kB shmem:4388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no [ 282.377676][ T8259] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 282.415341][ T8259] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.478447][ T8259] lowmem_reserve[]: 0 2459 2459 0 0 [ 282.521210][ T8259] Node 0 DMA32 free:1330992kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33380kB inactive_anon:0kB active_file:55380kB inactive_file:154052kB unevictable:2036kB writepending:1144kB present:3129332kB managed:2547148kB mlocked:500kB bounce:0kB free_pcp:1220kB local_pcp:272kB free_cma:0kB [ 282.593254][ T8259] lowmem_reserve[]: 0 0 0 0 0 [ 282.602541][ T8259] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 282.798461][ T8259] lowmem_reserve[]: 0 0 0 0 0 [ 282.837625][ T8259] Node 1 Normal free:3908620kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.927931][ T8259] lowmem_reserve[]: 0 0 0 0 0 [ 282.932722][ T8259] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.953073][ T8259] Node 0 DMA32: 493*4kB (U) 379*8kB (UME) 280*16kB (UME) 203*32kB (UME) 303*64kB (UME) 92*128kB (UM) 29*256kB (UME) 13*512kB (ME) 7*1024kB (UME) 14*2048kB (ME) 299*4096kB (UM) = 1321772kB [ 283.153309][ T8259] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.165074][ T8259] Node 1 Normal: 181*4kB (UM) 49*8kB (UME) 37*16kB (UME) 199*32kB (UME) 76*64kB (UME) 37*128kB (UME) 15*256kB (UME) 10*512kB (UME) 1*1024kB (M) 3*2048kB (UE) 946*4096kB (M) = 3908620kB [ 283.183982][ T8259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.194286][ T8259] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.203879][ T8259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.213974][ T8259] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.223696][ T8259] 59556 total pagecache pages [ 283.228884][ T8259] 0 pages in swap cache [ 283.233459][ T8259] Free swap = 124808kB [ 283.237633][ T8259] Total swap = 124996kB [ 283.241879][ T8259] 2097051 pages RAM [ 283.833585][ T8259] 0 pages HighMem/MovableOnly [ 283.838309][ T8259] 428606 pages reserved [ 283.842849][ T8259] 0 pages cma reserved [ 284.277731][ T29] audit: type=1400 audit(1733828698.285:447): avc: denied { read } for pid=8278 comm="syz.3.552" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.324825][ T29] audit: type=1400 audit(1733828698.285:448): avc: denied { open } for pid=8278 comm="syz.3.552" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.414324][ T29] audit: type=1400 audit(1733828698.285:449): avc: denied { ioctl } for pid=8278 comm="syz.3.552" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.514059][ T29] audit: type=1400 audit(1733828698.785:450): avc: denied { getopt } for pid=8278 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.744887][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 284.805700][ T29] audit: type=1400 audit(1733828699.015:451): avc: denied { bind } for pid=8294 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.007568][ T29] audit: type=1400 audit(1733828699.025:452): avc: denied { connect } for pid=8294 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.073969][ T29] audit: type=1400 audit(1733828699.045:453): avc: denied { write } for pid=8294 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.192068][ T29] audit: type=1326 audit(1733828699.655:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8294 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dcf7ff19 code=0x7ffc0000 [ 285.298363][ T29] audit: type=1326 audit(1733828699.655:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8294 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dcf7ff19 code=0x7ffc0000 [ 285.367929][ T29] audit: type=1326 audit(1733828699.655:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8294 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc3dcf7ff19 code=0x7ffc0000 [ 285.423176][ T5867] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 285.595760][ T5867] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x1 is Bulk; changing to Interrupt [ 285.612023][ T5867] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.653003][ T5867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 285.697733][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.720471][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.783284][ T5867] usb 5-1: Product: Њ [ 285.804118][ T5867] usb 5-1: Manufacturer: ఇ [ 285.826017][ T5867] usb 5-1: SerialNumber: 㐁 [ 285.855200][ T8296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 285.921568][ T8329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=8329 comm=syz.0.564 [ 286.296178][ T8335] overlayfs: missing 'workdir' [ 286.320169][ T5867] usb 5-1: USB disconnect, device number 18 [ 286.356599][ T8332] lo speed is unknown, defaulting to 1000 [ 286.450411][ T8335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 287.189756][ T8338] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 288.384624][ T8338] bond0: (slave rose0): Releasing backup interface [ 288.439889][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.570'. [ 288.451652][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.570'. [ 288.666517][ T8354] No such timeout policy "syz0" [ 290.807208][ T8386] vlan0: entered allmulticast mode [ 292.790390][ T8386] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 292.943817][ T8386] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 293.990214][ T8421] xt_bpf: check failed: parse error [ 294.041445][ T8421] netlink: 44 bytes leftover after parsing attributes in process `syz.5.582'. [ 294.623344][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 294.623364][ T29] audit: type=1400 audit(1733828708.825:527): avc: denied { listen } for pid=8418 comm="syz.5.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.675589][ T5868] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 294.846194][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.864445][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.000106][ T5868] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 295.018592][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 295.038359][ T5868] usb 1-1: Product: syz [ 295.054529][ T29] audit: type=1400 audit(1733828709.505:528): avc: denied { relabelfrom } for pid=8435 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 295.074937][ T29] audit: type=1400 audit(1733828709.515:529): avc: denied { relabelto } for pid=8435 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 295.095751][ T5868] usb 1-1: config 0 descriptor?? [ 295.112071][ T5868] usbhid 1-1:0.0: can't add hid device: -22 [ 295.119062][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 295.155614][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 295.646501][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.667850][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.911709][ T8452] lo speed is unknown, defaulting to 1000 [ 296.655546][ T8459] tmpfs: Bad value for 'mpol' [ 296.670942][ T8459] FAULT_INJECTION: forcing a failure. [ 296.670942][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.714942][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.3.591 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 296.725581][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.735747][ T8459] Call Trace: [ 296.739020][ T8459] [ 296.741956][ T8459] dump_stack_lvl+0x16c/0x1f0 [ 296.746647][ T8459] should_fail_ex+0x497/0x5b0 [ 296.751344][ T8459] _copy_from_user+0x2e/0xd0 [ 296.755968][ T8459] kstrtouint_from_user+0xd7/0x1c0 [ 296.761140][ T8459] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 296.766887][ T8459] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 296.772524][ T8459] proc_fail_nth_write+0x84/0x250 [ 296.777647][ T8459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.783282][ T8459] ? ksys_write+0x12b/0x250 [ 296.787792][ T8459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.793534][ T8459] vfs_write+0x24c/0x1150 [ 296.797867][ T8459] ? __fget_files+0x1fc/0x3a0 [ 296.802538][ T8459] ? __pfx___mutex_lock+0x10/0x10 [ 296.807561][ T8459] ? __pfx_vfs_write+0x10/0x10 [ 296.812344][ T8459] ? __fget_files+0x206/0x3a0 [ 296.817023][ T8459] ksys_write+0x12b/0x250 [ 296.821362][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 296.826226][ T8459] do_syscall_64+0xcd/0x250 [ 296.830750][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.836840][ T8459] RIP: 0033:0x7f371797e9cf [ 296.841366][ T8459] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 296.860988][ T8459] RSP: 002b:00007f371870a050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 296.869494][ T8459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f371797e9cf [ 296.877474][ T8459] RDX: 0000000000000001 RSI: 00007f371870a0b0 RDI: 0000000000000003 [ 296.885466][ T8459] RBP: 00007f371870a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.893458][ T8459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 296.901515][ T8459] R13: 0000000000000000 R14: 00007f3717b45fa0 R15: 00007ffc7fe75e18 [ 296.909497][ T8459] [ 296.912616][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.092576][ T29] audit: type=1400 audit(1733828711.555:530): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.132058][ T29] audit: type=1400 audit(1733828711.555:531): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.154605][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.396935][ T29] audit: type=1400 audit(1733828711.555:532): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.394198][ T5867] usb 1-1: USB disconnect, device number 38 [ 299.945979][ T29] audit: type=1400 audit(1733828714.415:533): avc: denied { accept } for pid=8478 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.785612][ T29] audit: type=1400 audit(1733828715.245:534): avc: denied { write } for pid=8489 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.819940][ T29] audit: type=1400 audit(1733828715.285:535): avc: denied { accept } for pid=8489 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.832597][ T8496] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 301.036904][ T29] audit: type=1400 audit(1733828715.505:536): avc: denied { bind } for pid=8501 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.067980][ T29] audit: type=1400 audit(1733828715.535:537): avc: denied { connect } for pid=8501 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.193120][ T5865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.231767][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.266366][ T8496] team0: Port device bond0 added [ 302.422821][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 302.432676][ T5865] usb 6-1: no configurations [ 302.438018][ T5865] usb 6-1: can't read configurations, error -22 [ 302.914907][ T8520] FAULT_INJECTION: forcing a failure. [ 302.914907][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.935293][ T8520] CPU: 0 UID: 0 PID: 8520 Comm: syz.2.606 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 302.946049][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.956157][ T8520] Call Trace: [ 302.959464][ T8520] [ 302.962426][ T8520] dump_stack_lvl+0x16c/0x1f0 [ 302.967341][ T8520] should_fail_ex+0x497/0x5b0 [ 302.972078][ T8520] _copy_to_user+0x32/0xd0 [ 302.976545][ T8520] simple_read_from_buffer+0xd0/0x160 [ 302.981974][ T8520] proc_fail_nth_read+0x198/0x270 [ 302.987029][ T8520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.992597][ T8520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.998192][ T8520] vfs_read+0x1df/0xbe0 [ 303.002352][ T8520] ? __fget_files+0x1fc/0x3a0 [ 303.007113][ T8520] ? __pfx___mutex_lock+0x10/0x10 [ 303.012226][ T8520] ? __pfx_vfs_read+0x10/0x10 [ 303.016905][ T8520] ? __fget_files+0x206/0x3a0 [ 303.021585][ T8520] ksys_read+0x12b/0x250 [ 303.025821][ T8520] ? __pfx_ksys_read+0x10/0x10 [ 303.030583][ T8520] do_syscall_64+0xcd/0x250 [ 303.035089][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.040981][ T8520] RIP: 0033:0x7f71a637e92c [ 303.045393][ T8520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 303.065000][ T8520] RSP: 002b:00007f71a7101050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.073705][ T8520] RAX: ffffffffffffffda RBX: 00007f71a6545fa0 RCX: 00007f71a637e92c [ 303.081686][ T8520] RDX: 000000000000000f RSI: 00007f71a71010b0 RDI: 0000000000000004 [ 303.089743][ T8520] RBP: 00007f71a71010a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.097721][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.105691][ T8520] R13: 0000000000000000 R14: 00007f71a6545fa0 R15: 00007ffec5fb7308 [ 303.113671][ T8520] [ 303.116700][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.275188][ T29] audit: type=1400 audit(1733828717.665:538): avc: denied { wake_alarm } for pid=8521 comm="syz.3.607" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.296595][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.331032][ T29] audit: type=1400 audit(1733828717.795:539): avc: denied { write } for pid=8521 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 304.908626][ T8531] Set syz1 is full, maxelem 65536 reached [ 305.559471][ T8549] syz.5.613: attempt to access beyond end of device [ 305.559471][ T8549] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 305.572753][ T8549] hpfs: hpfs_map_sector(): read error [ 306.371991][ T8549] xt_cgroup: xt_cgroup: no path or classid specified [ 306.857138][ T5865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.156318][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 307.987607][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 307.997635][ T8571] sctp: [Deprecated]: syz.2.620 (pid 8571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.997635][ T8571] Use struct sctp_sack_info instead [ 308.016476][ T8571] Bluetooth: MGMT ver 1.23 [ 308.132532][ T29] audit: type=1400 audit(1733828722.485:540): avc: denied { write } for pid=8562 comm="syz.2.620" path="socket:[18774]" dev="sockfs" ino=18774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.136230][ T5865] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 308.156405][ T29] audit: type=1400 audit(1733828722.595:541): avc: denied { read } for pid=8560 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 308.235280][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.243537][ T5865] usb 5-1: Product: syz [ 308.247723][ T5865] usb 5-1: Manufacturer: syz [ 308.252374][ T5865] usb 5-1: SerialNumber: syz [ 308.259394][ T5865] usb 5-1: config 0 descriptor?? [ 308.585601][ T5865] usb 5-1: can't set config #0, error -71 [ 308.616125][ T5865] usb 5-1: USB disconnect, device number 19 [ 310.029633][ T8590] overlayfs: missing 'lowerdir' [ 312.463482][ T29] audit: type=1400 audit(1733828726.885:542): avc: denied { ioctl } for pid=8608 comm="syz.4.631" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 312.478757][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.625'. [ 313.944553][ T29] audit: type=1400 audit(1733828728.415:543): avc: denied { recv } for pid=8602 comm="syz.2.632" saddr=10.128.0.169 src=30006 daddr=10.128.0.152 dest=39306 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.365796][ T8612] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 314.435500][ T29] audit: type=1400 audit(1733828728.825:544): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.469853][ T29] audit: type=1400 audit(1733828728.825:545): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.494463][ T29] audit: type=1400 audit(1733828728.825:546): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.520419][ T29] audit: type=1400 audit(1733828728.865:547): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 314.543267][ T29] audit: type=1400 audit(1733828728.865:548): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.564961][ T29] audit: type=1400 audit(1733828728.865:549): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.588170][ T29] audit: type=1400 audit(1733828728.865:550): avc: denied { open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.611053][ T29] audit: type=1400 audit(1733828728.865:551): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.634046][ T29] audit: type=1400 audit(1733828728.935:552): avc: denied { mount } for pid=8586 comm="syz.5.625" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.449210][ T5905] gspca_vc032x: Unknown sensor... [ 315.454874][ T5905] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 315.883121][ T5905] usb 4-1: USB disconnect, device number 18 [ 317.475487][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 318.905996][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.912559][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.063184][ T867] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 319.235323][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 319.235342][ T29] audit: type=1400 audit(1733828733.705:615): avc: denied { create } for pid=8672 comm="syz.2.655" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.263347][ T5905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 319.292784][ T29] audit: type=1400 audit(1733828733.705:616): avc: denied { map } for pid=8672 comm="syz.2.655" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.323159][ T5865] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 319.330869][ T8674] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 319.330901][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 319.365347][ T29] audit: type=1400 audit(1733828733.705:617): avc: denied { read write } for pid=8672 comm="syz.2.655" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.390822][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.404581][ T29] audit: type=1400 audit(1733828733.755:618): avc: denied { read } for pid=8672 comm="syz.2.655" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.427280][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.437030][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 319.438362][ T29] audit: type=1400 audit(1733828733.755:619): avc: denied { open } for pid=8672 comm="syz.2.655" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.438924][ T29] audit: type=1400 audit(1733828733.765:620): avc: denied { create } for pid=8672 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 319.439319][ T29] audit: type=1400 audit(1733828733.765:621): avc: denied { getopt } for pid=8672 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 319.439419][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.439461][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.439794][ T29] audit: type=1400 audit(1733828733.765:622): avc: denied { ioctl } for pid=8672 comm="syz.2.655" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.440208][ T29] audit: type=1400 audit(1733828733.765:623): avc: denied { set_context_mgr } for pid=8672 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 319.441224][ T5905] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 319.441260][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.441299][ T5905] usb 4-1: Product: syz [ 319.441318][ T5905] usb 4-1: Manufacturer: syz [ 319.441336][ T5905] usb 4-1: SerialNumber: syz [ 319.444352][ T5905] usb 4-1: config 0 descriptor?? [ 319.571108][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.571151][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 319.571203][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.571223][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.571259][ T5865] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.571289][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.573535][ T5865] usb 1-1: config 0 descriptor?? [ 319.574896][ T8686] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 319.825858][ T29] audit: type=1400 audit(1733828734.295:624): avc: denied { read accept } for pid=8683 comm="syz.3.658" dev="sockfs" ino=19022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.996312][ T8690] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2583 sclass=netlink_xfrm_socket pid=8690 comm=syz.3.658 [ 320.213857][ T5865] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 320.221318][ T5865] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 320.255825][ T5865] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 320.456433][ T5869] usb 4-1: USB disconnect, device number 19 [ 320.577437][ T867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.578238][ T5865] usb 1-1: USB disconnect, device number 39 [ 320.610685][ T867] usb 3-1: no configurations [ 320.631187][ T867] usb 3-1: can't read configurations, error -22 [ 322.289524][ T8711] FAULT_INJECTION: forcing a failure. [ 322.289524][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 322.302574][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.4.666 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 322.313288][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.323381][ T8711] Call Trace: [ 322.326675][ T8711] [ 322.329958][ T8711] dump_stack_lvl+0x16c/0x1f0 [ 322.334663][ T8711] should_fail_ex+0x497/0x5b0 [ 322.339532][ T8711] ? fs_reclaim_acquire+0xae/0x150 [ 322.344679][ T8711] should_failslab+0xc2/0x120 [ 322.349378][ T8711] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 322.355214][ T8711] ? __alloc_skb+0x2b1/0x380 [ 322.359829][ T8711] __alloc_skb+0x2b1/0x380 [ 322.364283][ T8711] ? __pfx___alloc_skb+0x10/0x10 [ 322.369236][ T8711] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 322.375239][ T8711] netlink_alloc_large_skb+0x69/0x130 [ 322.380627][ T8711] netlink_sendmsg+0x689/0xd70 [ 322.385539][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.390869][ T8711] ? ____sys_sendmsg+0x7f8/0xc90 [ 322.395857][ T8711] ? ____sys_sendmsg+0x600/0xc90 [ 322.400821][ T8711] ____sys_sendmsg+0xaaf/0xc90 [ 322.405687][ T8711] ? copy_msghdr_from_user+0x10b/0x160 [ 322.411283][ T8711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.416597][ T8711] ___sys_sendmsg+0x135/0x1e0 [ 322.421299][ T8711] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.426541][ T8711] ? __fget_files+0x206/0x3a0 [ 322.431334][ T8711] __sys_sendmsg+0x16e/0x220 [ 322.435991][ T8711] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.441131][ T8711] ? ksys_write+0x17f/0x250 [ 322.445697][ T8711] do_syscall_64+0xcd/0x250 [ 322.450231][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.456158][ T8711] RIP: 0033:0x7fc3dcf7ff19 [ 322.460594][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.480228][ T8711] RSP: 002b:00007fc3ddcae058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.488660][ T8711] RAX: ffffffffffffffda RBX: 00007fc3dd146160 RCX: 00007fc3dcf7ff19 [ 322.496655][ T8711] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000007 [ 322.504635][ T8711] RBP: 00007fc3ddcae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 322.512615][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.520695][ T8711] R13: 0000000000000000 R14: 00007fc3dd146160 R15: 00007ffe68399a68 [ 322.528677][ T8711] [ 322.971836][ T8719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 323.792407][ T8733] FAULT_INJECTION: forcing a failure. [ 323.792407][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 323.806018][ T8733] CPU: 1 UID: 0 PID: 8733 Comm: syz.4.672 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 323.816658][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 323.826751][ T8733] Call Trace: [ 323.830054][ T8733] [ 323.833111][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 323.838005][ T8733] should_fail_ex+0x497/0x5b0 [ 323.842713][ T8733] ? fs_reclaim_acquire+0xae/0x150 [ 323.847865][ T8733] should_failslab+0xc2/0x120 [ 323.852564][ T8733] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 323.858308][ T8733] ? __d_alloc+0x31/0xaa0 [ 323.862662][ T8733] __d_alloc+0x31/0xaa0 [ 323.866931][ T8733] d_alloc+0x4a/0x1e0 [ 323.870933][ T8733] d_alloc_parallel+0xe9/0x12b0 [ 323.875820][ T8733] ? __pfx_d_alloc_parallel+0x10/0x10 [ 323.881225][ T8733] ? lockdep_init_map_type+0x16d/0x7d0 [ 323.886723][ T8733] ? lock_acquire.part.0+0x11b/0x380 [ 323.892062][ T8733] ? lockdep_init_map_type+0x16d/0x7d0 [ 323.897573][ T8733] __lookup_slow+0x194/0x460 [ 323.902226][ T8733] ? __pfx___lookup_slow+0x10/0x10 [ 323.907457][ T8733] ? walk_component+0x342/0x5b0 [ 323.912535][ T8733] ? lookup_fast+0x155/0x540 [ 323.917247][ T8733] walk_component+0x350/0x5b0 [ 323.922179][ T8733] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 323.928563][ T8733] path_openat+0x228/0x2d60 [ 323.933094][ T8733] ? __schedule+0xe60/0x5ad0 [ 323.937708][ T8733] ? __pfx_path_openat+0x10/0x10 [ 323.942675][ T8733] do_filp_open+0x20c/0x470 [ 323.947194][ T8733] ? __pfx_do_filp_open+0x10/0x10 [ 323.952273][ T8733] ? __pfx_kfree_link+0x10/0x10 [ 323.957254][ T8733] ? alloc_fd+0x41f/0x760 [ 323.961708][ T8733] do_sys_openat2+0x17a/0x1e0 [ 323.966411][ T8733] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.971671][ T8733] ? __x64_sys_openat+0x104/0x210 [ 323.976740][ T8733] __x64_sys_openat+0x175/0x210 [ 323.981631][ T8733] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.987149][ T8733] do_syscall_64+0xcd/0x250 [ 323.991677][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.997682][ T8733] RIP: 0033:0x7fc3dcf7e880 [ 324.002110][ T8733] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 324.021745][ T8733] RSP: 002b:00007fc3ddcadf30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 324.030291][ T8733] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc3dcf7e880 [ 324.038311][ T8733] RDX: 0000000000000002 RSI: 00007fc3ddcadfc0 RDI: 00000000ffffff9c [ 324.046300][ T8733] RBP: 00007fc3ddcadfc0 R08: 0000000000000000 R09: 0000000000000000 [ 324.054296][ T8733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 324.062285][ T8733] R13: 0000000000000000 R14: 00007fc3dd146160 R15: 00007ffe68399a68 [ 324.070301][ T8733] [ 324.092410][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 324.102541][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:9 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 324.113448][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.123666][ T5832] Workqueue: hci1 hci_rx_work [ 324.128398][ T5832] Call Trace: [ 324.131701][ T5832] [ 324.134661][ T5832] dump_stack_lvl+0x16c/0x1f0 [ 324.139388][ T5832] sysfs_warn_dup+0x7f/0xa0 [ 324.144006][ T5832] sysfs_create_dir_ns+0x24d/0x2b0 [ 324.149138][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 324.154812][ T5832] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.160243][ T5832] ? kobject_add_internal+0x12d/0x990 [ 324.165644][ T5832] ? do_raw_spin_unlock+0x172/0x230 [ 324.170868][ T5832] kobject_add_internal+0x2c8/0x990 [ 324.176126][ T5832] kobject_add+0x16f/0x240 [ 324.180605][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 324.185569][ T5832] ? class_to_subsys+0x3e/0x160 [ 324.190475][ T5832] ? do_raw_spin_unlock+0x172/0x230 [ 324.195722][ T5832] ? kobject_put+0xab/0x5a0 [ 324.200302][ T5832] device_add+0x289/0x1a70 [ 324.204736][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 324.209775][ T5832] ? __pfx_device_add+0x10/0x10 [ 324.214657][ T5832] ? mgmt_send_event_skb+0x2f2/0x460 [ 324.220022][ T5832] hci_conn_add_sysfs+0x17e/0x230 [ 324.225075][ T5832] le_conn_complete_evt+0x1077/0x1d60 [ 324.230471][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 324.236231][ T5832] ? __mutex_lock+0x1cc/0xa60 [ 324.241024][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 324.246615][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 324.251412][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 324.257515][ T5832] hci_event_packet+0x666/0x1180 [ 324.262513][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 324.267827][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 324.273255][ T5832] ? mark_held_locks+0x9f/0xe0 [ 324.278093][ T5832] ? kcov_remote_start+0x3cf/0x6e0 [ 324.283411][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.288650][ T5832] hci_rx_work+0x2c5/0x16b0 [ 324.293219][ T5832] ? process_one_work+0x921/0x1ba0 [ 324.298378][ T5832] process_one_work+0x9c5/0x1ba0 [ 324.303345][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 324.309010][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 324.314436][ T5832] ? rcu_is_watching+0x12/0xc0 [ 324.319289][ T5832] ? assign_work+0x1a0/0x250 [ 324.323897][ T5832] worker_thread+0x6c8/0xf00 [ 324.328510][ T5832] ? __kthread_parkme+0x148/0x220 [ 324.333656][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 324.338807][ T5832] kthread+0x2c1/0x3a0 [ 324.342914][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.348174][ T5832] ? __pfx_kthread+0x10/0x10 [ 324.352883][ T5832] ret_from_fork+0x45/0x80 [ 324.357427][ T5832] ? __pfx_kthread+0x10/0x10 [ 324.362386][ T5832] ret_from_fork_asm+0x1a/0x30 [ 324.367211][ T5832] [ 324.371011][ T5832] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 324.386352][ T5832] Bluetooth: hci1: failed to register connection device [ 324.445997][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 324.446014][ T29] audit: type=1400 audit(1733828738.905:646): avc: denied { create } for pid=8727 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 324.702591][ T29] audit: type=1400 audit(1733828739.165:647): avc: denied { read } for pid=8735 comm="syz.4.674" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 324.759616][ T29] audit: type=1400 audit(1733828739.165:648): avc: denied { open } for pid=8735 comm="syz.4.674" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 324.836511][ T29] audit: type=1400 audit(1733828739.205:649): avc: denied { ioctl } for pid=8735 comm="syz.4.674" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 324.860963][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.900137][ T29] audit: type=1400 audit(1733828739.255:650): avc: denied { write } for pid=8735 comm="syz.4.674" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 324.923000][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.004711][ T29] audit: type=1400 audit(1733828740.395:651): avc: denied { create } for pid=8748 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.024746][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.524152][ T29] audit: type=1400 audit(1733828740.395:652): avc: denied { write } for pid=8748 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.545590][ T29] audit: type=1400 audit(1733828740.405:653): avc: denied { mounton } for pid=8748 comm="syz.4.677" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 326.569605][ T29] audit: type=1400 audit(1733828740.415:654): avc: denied { mount } for pid=8748 comm="syz.4.677" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 328.796195][ T29] audit: type=1400 audit(1733828743.265:655): avc: denied { create } for pid=8778 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.873695][ T8779] capability: warning: `syz.3.686' uses deprecated v2 capabilities in a way that may be insecure [ 329.333117][ T5865] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 329.748116][ T5865] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.014336][ T8787] lo speed is unknown, defaulting to 1000 [ 330.153304][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.161454][ T5865] usb 1-1: Product: syz [ 330.196520][ T5865] usb 1-1: Manufacturer: syz [ 330.201325][ T5865] usb 1-1: SerialNumber: syz [ 330.261120][ T8777] Set syz1 is full, maxelem 65536 reached [ 330.555261][ T5865] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.597434][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 330.671439][ T5819] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.826832][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 330.826850][ T29] audit: type=1400 audit(1733828745.295:659): avc: denied { create } for pid=8794 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.866628][ T29] audit: type=1400 audit(1733828745.335:660): avc: denied { ioctl } for pid=8794 comm="syz.5.693" path="socket:[20390]" dev="sockfs" ino=20390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.891238][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.204729][ T29] audit: type=1400 audit(1733828745.335:661): avc: denied { connect } for pid=8794 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.224567][ T29] audit: type=1400 audit(1733828745.335:662): avc: denied { read } for pid=8794 comm="syz.5.693" path="socket:[20390]" dev="sockfs" ino=20390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.713306][ T5819] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 331.720743][ T5819] ath9k_htc: Failed to initialize the device [ 331.774474][ T5905] usb 1-1: USB disconnect, device number 40 [ 331.787201][ T5905] usb 1-1: ath9k_htc: USB layer deinitialized [ 332.617268][ T29] audit: type=1400 audit(1733828747.075:663): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 332.846054][ T8813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.867035][ T29] audit: type=1400 audit(1733828747.335:664): avc: denied { create } for pid=8812 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 333.134690][ T29] audit: type=1400 audit(1733828747.555:665): avc: denied { ioctl } for pid=8811 comm="syz.0.697" path="socket:[20441]" dev="sockfs" ino=20441 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.173185][ T5819] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 333.273992][ T29] audit: type=1400 audit(1733828747.555:666): avc: denied { module_request } for pid=8811 comm="syz.0.697" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 333.914215][ T29] audit: type=1400 audit(1733828748.325:667): avc: denied { sys_module } for pid=8811 comm="syz.0.697" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 333.935122][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.941818][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 333.962638][ T5819] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.001186][ T5819] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.253975][ T5819] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 335.263165][ T5819] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 335.271753][ T5819] usb 5-1: Product: syz [ 335.280186][ T5819] usb 5-1: Manufacturer: syz [ 335.312070][ T5819] hub 5-1:4.0: USB hub found [ 335.433703][ T29] audit: type=1400 audit(1733828749.895:668): avc: denied { setopt } for pid=8841 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.513122][ T5819] hub 5-1:4.0: 12 ports detected [ 335.518750][ T5819] hub 5-1:4.0: insufficient power available to use all downstream ports [ 335.533288][ T5897] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 335.693453][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 335.712302][ T5897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.717132][ T5819] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 335.733067][ T5819] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 335.804382][ T5819] usb 5-1: USB disconnect, device number 20 [ 336.267263][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.584301][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.602589][ T5897] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.747085][ T5897] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.768126][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 336.799613][ T5897] usb 6-1: Product: syz [ 337.642311][ T5897] usb 6-1: GET_CAPABILITIES returned 0 [ 337.648269][ T5897] usbtmc 6-1:16.0: can't read capabilities [ 337.843801][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 337.843820][ T29] audit: type=1400 audit(1733828752.305:673): avc: denied { write } for pid=8836 comm="syz.5.704" name="usbtmc0" dev="devtmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.882432][ T5897] usb 6-1: USB disconnect, device number 8 [ 337.899761][ T29] audit: type=1400 audit(1733828752.345:674): avc: denied { create } for pid=8836 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 337.922458][ T29] audit: type=1400 audit(1733828752.345:675): avc: denied { accept } for pid=8836 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 337.977769][ T5832] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 338.024695][ T29] audit: type=1400 audit(1733828752.355:676): avc: denied { mount } for pid=8862 comm="syz.0.711" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 338.066737][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 338.122573][ T29] audit: type=1400 audit(1733828752.425:677): avc: denied { setattr } for pid=8862 comm="syz.0.711" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.195622][ T29] audit: type=1400 audit(1733828752.425:678): avc: denied { read write } for pid=8862 comm="syz.0.711" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.216648][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.273480][ T29] audit: type=1400 audit(1733828752.425:679): avc: denied { open } for pid=8862 comm="syz.0.711" path="/150/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.367415][ T29] audit: type=1400 audit(1733828752.655:680): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 339.617240][ T8894] lo speed is unknown, defaulting to 1000 [ 340.583262][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.608001][ T8898] ======================================================= [ 340.608001][ T8898] WARNING: The mand mount option has been deprecated and [ 340.608001][ T8898] and is ignored by this kernel. Remove the mand [ 340.608001][ T8898] option from the mount to silence this warning. [ 340.608001][ T8898] ======================================================= [ 340.643084][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.686532][ T29] audit: type=1400 audit(1733828755.155:681): avc: denied { connect } for pid=8893 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.737639][ T29] audit: type=1400 audit(1733828755.195:682): avc: denied { write } for pid=8875 comm="syz.4.716" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 340.984037][ T5897] usb 3-1: device descriptor read/all, error -71 [ 341.364964][ T8913] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.373085][ T8913] netlink: 1 bytes leftover after parsing attributes in process `syz.5.725'. [ 342.164907][ T5897] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 342.211302][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.727'. [ 342.363005][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 343.058143][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 343.067974][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 343.093076][ T5819] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 343.103535][ T5897] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 343.112766][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.125950][ T5897] usb 3-1: Product: syz [ 343.131556][ T5897] usb 3-1: Manufacturer: syz [ 343.137749][ T5897] usb 3-1: SerialNumber: syz [ 343.166006][ T5897] usb 3-1: config 0 descriptor?? [ 343.211025][ T5897] usb 3-1: no audio or video endpoints found [ 343.303710][ T8923] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 343.324122][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.729'. [ 343.359846][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.386274][ T5819] usb 6-1: no configurations [ 343.395407][ T5819] usb 6-1: can't read configurations, error -22 [ 343.406322][ T5905] usb 3-1: USB disconnect, device number 21 [ 343.512713][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 343.512730][ T29] audit: type=1400 audit(1733828757.975:685): avc: denied { create } for pid=8933 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 343.663299][ T5865] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 343.846345][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 343.855595][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.877308][ T5865] usb 1-1: config 0 descriptor?? [ 343.892646][ T5865] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 343.936267][ T29] audit: type=1400 audit(1733828758.405:686): avc: denied { create } for pid=8938 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 344.023121][ T29] audit: type=1400 audit(1733828758.405:687): avc: denied { ioctl } for pid=8938 comm="syz.3.734" path="socket:[20676]" dev="sockfs" ino=20676 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 344.099182][ T8932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8932 comm=syz.0.731 [ 344.136475][ T5865] usb 1-1: USB disconnect, device number 41 [ 344.753069][ T29] audit: type=1400 audit(1733828758.565:688): avc: denied { write } for pid=8931 comm="syz.0.731" path="socket:[20681]" dev="sockfs" ino=20681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 344.925127][ T29] audit: type=1400 audit(1733828758.565:689): avc: denied { nlmsg_write } for pid=8931 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 344.946398][ T29] audit: type=1400 audit(1733828758.675:690): avc: denied { ioctl } for pid=8938 comm="syz.3.734" path="socket:[19351]" dev="sockfs" ino=19351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.990012][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.739'. [ 346.276011][ T5819] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 346.578644][ T29] audit: type=1400 audit(1733828761.045:691): avc: denied { create } for pid=8961 comm="syz.5.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 346.621484][ T8963] vlan2: entered promiscuous mode [ 346.637355][ T29] audit: type=1400 audit(1733828761.065:692): avc: denied { ioctl } for pid=8961 comm="syz.5.741" path="socket:[19440]" dev="sockfs" ino=19440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 346.637728][ T8963] vlan2: entered allmulticast mode [ 346.922822][ T8963] vlan0: entered allmulticast mode [ 346.928859][ T8963] veth0_vlan: entered allmulticast mode [ 346.934719][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 346.982362][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.018043][ T5819] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 347.042219][ T8963] vlan0: entered promiscuous mode [ 347.143122][ T29] audit: type=1400 audit(1733828761.465:693): avc: denied { setopt } for pid=8964 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.323081][ T5819] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.459854][ T8963] team0: Port device vlan2 added [ 347.491555][ T5819] usb 1-1: config 1 interface 0 has no altsetting 0 [ 347.518102][ T5819] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 347.527400][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.537620][ T5819] usb 1-1: Product: syz [ 347.557989][ T5819] usb 1-1: Manufacturer: syz [ 347.563263][ T5819] usb 1-1: SerialNumber: syz [ 347.791139][ T5865] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 347.814522][ T8977] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 347.822498][ T29] audit: type=1400 audit(1733828762.285:694): avc: denied { execute } for pid=8957 comm="syz.0.740" path="/159/cgroup.stat" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 348.018528][ T5865] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 348.033261][ T5865] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 348.059969][ T8977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 348.114622][ T5865] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 348.124798][ T5865] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 348.138020][ T5865] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 348.149104][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.171004][ T8973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 348.358019][ T8971] team0 (unregistering): Port device team_slave_0 removed [ 348.376023][ T8971] team0 (unregistering): Port device team_slave_1 removed [ 348.385564][ T8971] vlan0: left allmulticast mode [ 348.390639][ T8971] veth0_vlan: left allmulticast mode [ 348.396634][ T8971] vlan0: left promiscuous mode [ 348.412892][ T8971] team0 (unregistering): Port device vlan2 removed [ 348.423396][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.433983][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.456475][ T5865] ath6kl: Failed to submit usb control message: -71 [ 348.467888][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 348.481309][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 348.503498][ T5865] ath6kl: Unable to send get target info: -71 [ 348.512808][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 348.519449][ T5865] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 348.561884][ T5865] usb 4-1: USB disconnect, device number 20 [ 348.577824][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 348.577840][ T29] audit: type=1400 audit(1733828763.045:698): avc: denied { bind } for pid=8957 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.715978][ T5819] usbhid 1-1:1.0: can't add hid device: -71 [ 348.724426][ T5819] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 348.851498][ T8985] usb usb7: usbfs: process 8985 (syz.5.748) did not claim interface 0 before use [ 349.005197][ T5819] usb 1-1: USB disconnect, device number 42 [ 349.222680][ T8987] usb usb7: usbfs: process 8987 (syz.2.749) did not claim interface 0 before use [ 349.746424][ T29] audit: type=1400 audit(1733828764.215:699): avc: denied { read } for pid=8993 comm="syz.4.753" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 349.780963][ T29] audit: type=1400 audit(1733828764.215:700): avc: denied { open } for pid=8993 comm="syz.4.753" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 349.804276][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.928837][ T8996] FAULT_INJECTION: forcing a failure. [ 349.928837][ T8996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.942673][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.2.752 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 349.953294][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.963339][ T8996] Call Trace: [ 349.966601][ T8996] [ 349.969513][ T8996] dump_stack_lvl+0x16c/0x1f0 [ 349.974186][ T8996] should_fail_ex+0x497/0x5b0 [ 349.978861][ T8996] _copy_to_iter+0x469/0x1560 [ 349.983545][ T8996] ? __pfx__copy_to_iter+0x10/0x10 [ 349.988649][ T8996] ? __virt_addr_valid+0x1a4/0x590 [ 349.993778][ T8996] ? __virt_addr_valid+0x5e/0x590 [ 349.998839][ T8996] ? __phys_addr+0xc6/0x150 [ 350.003375][ T8996] ? __phys_addr_symbol+0x30/0x80 [ 350.008436][ T8996] ? __check_object_size+0x488/0x710 [ 350.013766][ T8996] simple_copy_to_iter+0x4f/0x80 [ 350.018734][ T8996] __skb_datagram_iter+0x5a6/0x8c0 [ 350.023873][ T8996] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 350.029552][ T8996] skb_copy_datagram_iter+0x40/0x50 [ 350.034795][ T8996] unix_stream_read_actor+0x7b/0xc0 [ 350.040035][ T8996] unix_stream_read_generic+0xe04/0x27d0 [ 350.045723][ T8996] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 350.052081][ T8996] ? __pfx_avc_has_perm+0x10/0x10 [ 350.057152][ T8996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 350.063250][ T8996] ? sock_has_perm+0x25a/0x2f0 [ 350.068051][ T8996] ? __pfx_sock_has_perm+0x10/0x10 [ 350.073203][ T8996] ? __pfx___lock_acquire+0x10/0x10 [ 350.078439][ T8996] unix_stream_recvmsg+0x192/0x1c0 [ 350.083586][ T8996] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 350.089222][ T8996] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 350.095127][ T8996] sock_recvmsg+0x1f6/0x250 [ 350.099634][ T8996] ____sys_recvmsg+0x219/0x6b0 [ 350.104409][ T8996] ? __pfx_____sys_recvmsg+0x10/0x10 [ 350.109705][ T8996] ___sys_recvmsg+0x115/0x1a0 [ 350.114381][ T8996] ? __pfx____sys_recvmsg+0x10/0x10 [ 350.119587][ T8996] ? __pfx_lock_release+0x10/0x10 [ 350.124607][ T8996] ? trace_lock_acquire+0x14e/0x1f0 [ 350.129820][ T8996] do_recvmmsg+0x2f8/0x740 [ 350.134254][ T8996] ? __pfx_do_recvmmsg+0x10/0x10 [ 350.139189][ T8996] ? vfs_write+0x306/0x1150 [ 350.143691][ T8996] ? __mutex_unlock_slowpath+0x164/0x690 [ 350.149332][ T8996] ? __fget_files+0x206/0x3a0 [ 350.154009][ T8996] __x64_sys_recvmmsg+0x239/0x290 [ 350.159036][ T8996] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 350.164836][ T8996] do_syscall_64+0xcd/0x250 [ 350.169338][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.175229][ T8996] RIP: 0033:0x7f71a637ff19 [ 350.179639][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.199255][ T8996] RSP: 002b:00007f71a7101058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 350.207665][ T8996] RAX: ffffffffffffffda RBX: 00007f71a6545fa0 RCX: 00007f71a637ff19 [ 350.215628][ T8996] RDX: 040000000000013c RSI: 00000000200034c0 RDI: 0000000000000006 [ 350.223593][ T8996] RBP: 00007f71a71010a0 R08: 0000000000000000 R09: 0000000000000000 [ 350.231554][ T8996] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 350.239515][ T8996] R13: 0000000000000000 R14: 00007f71a6545fa0 R15: 00007ffec5fb7308 [ 350.247514][ T8996] [ 351.452320][ T29] audit: type=1400 audit(1733828765.915:701): avc: denied { read } for pid=9026 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 351.524975][ T9028] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 351.538818][ T9028] pimreg3: entered allmulticast mode [ 351.542805][ T29] audit: type=1400 audit(1733828765.995:702): avc: denied { getopt } for pid=9026 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 351.582158][ T29] audit: type=1400 audit(1733828766.045:703): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 351.633644][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 351.673406][ T867] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 351.985121][ T9025] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 351.992869][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 352.110702][ T9029] netlink: 'syz.5.763': attribute type 1 has an invalid length. [ 352.118581][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.763'. [ 352.160337][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.173066][ T5897] usb 4-1: no configurations [ 352.177765][ T5897] usb 4-1: can't read configurations, error -22 [ 352.255330][ T29] audit: type=1400 audit(1733828766.715:704): avc: denied { ioctl } for pid=9053 comm="syz.0.771" path="/dev/video5" dev="devtmpfs" ino=939 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 352.283089][ T867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 352.303113][ T867] usb 6-1: no configurations [ 352.307780][ T867] usb 6-1: can't read configurations, error -22 [ 352.774675][ T9069] overlayfs: missing 'lowerdir' [ 352.827626][ T51] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 352.878257][ T29] audit: type=1400 audit(1733828767.345:705): avc: denied { ioctl } for pid=9071 comm="syz.5.778" path="socket:[21774]" dev="sockfs" ino=21774 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.940694][ T29] audit: type=1400 audit(1733828767.345:706): avc: denied { read write } for pid=9071 comm="syz.5.778" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.990837][ T29] audit: type=1400 audit(1733828767.345:707): avc: denied { open } for pid=9071 comm="syz.5.778" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.035209][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.047237][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.088542][ T51] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 353.118316][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.155017][ T51] usb 1-1: config 0 descriptor?? [ 353.258775][ T9076] FAULT_INJECTION: forcing a failure. [ 353.258775][ T9076] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 353.288673][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.5.780 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 353.299343][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.309426][ T9076] Call Trace: [ 353.312715][ T9076] [ 353.315742][ T9076] dump_stack_lvl+0x16c/0x1f0 [ 353.320446][ T9076] should_fail_ex+0x497/0x5b0 [ 353.325149][ T9076] ? fs_reclaim_acquire+0xae/0x150 [ 353.330296][ T9076] should_fail_alloc_page+0xe7/0x130 [ 353.335628][ T9076] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 353.341824][ T9076] __alloc_pages_noprof+0x190/0x25b0 [ 353.347125][ T9076] ? page_table_check_set+0x8ee/0x9c0 [ 353.352527][ T9076] ? find_held_lock+0x2d/0x110 [ 353.357317][ T9076] ? find_held_lock+0x2d/0x110 [ 353.362109][ T9076] ? hlock_class+0x4e/0x130 [ 353.366628][ T9076] ? mark_lock+0xb5/0xc60 [ 353.371069][ T9076] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 353.376826][ T9076] ? __pfx_mark_lock+0x10/0x10 [ 353.381639][ T9076] ? __pfx_mark_lock+0x10/0x10 [ 353.386439][ T9076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.392375][ T9076] ? policy_nodemask+0xea/0x4e0 [ 353.397265][ T9076] alloc_pages_mpol_noprof+0x2c9/0x610 [ 353.402770][ T9076] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 353.408778][ T9076] pte_alloc_one+0x20/0x390 [ 353.413332][ T9076] do_pte_missing+0x1ae7/0x3e00 [ 353.418222][ T9076] ? lock_vma_under_rcu+0x13e/0x980 [ 353.423462][ T9076] __handle_mm_fault+0x103c/0x2a40 [ 353.428588][ T9076] ? lock_vma_under_rcu+0x6b9/0x980 [ 353.433782][ T9076] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.439241][ T9076] handle_mm_fault+0x3fa/0xaa0 [ 353.444002][ T9076] do_user_addr_fault+0x60d/0x13f0 [ 353.449113][ T9076] exc_page_fault+0x5c/0xc0 [ 353.453618][ T9076] asm_exc_page_fault+0x26/0x30 [ 353.458475][ T9076] RIP: 0033:0x7f9a38163ffa [ 353.462927][ T9076] Code: fe 28 7f 27 62 e1 fe 28 7f 6f 01 62 e1 fe 28 7f 77 02 62 e1 fe 28 7f 7f 03 49 83 c0 1f 49 29 d0 48 8d 7c 17 61 e9 e6 04 00 00 <62> e1 fe 28 6f 1e 62 e1 fe 28 6f 56 01 62 b3 7d 20 3f c3 00 c5 fb [ 353.482575][ T9076] RSP: 002b:00007f9a38f8fc08 EFLAGS: 00010246 [ 353.488690][ T9076] RAX: 00007f9a38f8fc30 RBX: 6666666666666667 RCX: 0000000000000040 [ 353.496682][ T9076] RDX: 00000000000003ff RSI: 0000000020000040 RDI: 00007f9a38f8fc30 [ 353.504685][ T9076] RBP: 00007f9a38f8fc30 R08: 00000000000003ff R09: 0000000000000000 [ 353.512736][ T9076] R10: 0000000020000040 R11: 0000000000141101 R12: 0000000000000001 [ 353.520711][ T9076] R13: 0000000000000000 R14: 00007f9a38345fa0 R15: 00007ffd8287cb88 [ 353.528691][ T9076] [ 353.547580][ T9076] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 353.643459][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 353.889662][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 353.927030][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.220352][ T51] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 354.231074][ T51] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 354.243346][ T51] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 354.306857][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.316781][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 354.325922][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.337449][ C1] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x0, unable to proceed further with wheel init [ 354.361581][ T5905] usb 3-1: config 0 descriptor?? [ 354.781507][ T5819] usb 1-1: USB disconnect, device number 43 [ 354.879584][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 355.090153][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 355.090201][ T29] audit: type=1400 audit(1733828769.465:711): avc: denied { create } for pid=9085 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 355.092439][ T5905] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input15 [ 355.419720][ T5905] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 355.428786][ T29] audit: type=1400 audit(1733828769.875:712): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=3025 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.460090][ T29] audit: type=1400 audit(1733828769.875:713): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3025 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.553073][ T29] audit: type=1400 audit(1733828769.875:714): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3025 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.703260][ T29] audit: type=1400 audit(1733828770.075:715): avc: denied { write } for pid=9081 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 355.737226][ T29] audit: type=1400 audit(1733828770.205:716): avc: denied { ioctl } for pid=9081 comm="syz.2.783" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.762058][ T5865] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 355.825251][ T5905] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 355.923072][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 355.931180][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.942453][ T5865] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 355.983299][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 356.002799][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.012200][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.028083][ T5905] usb 6-1: config 0 has an invalid interface number: 190 but max is 0 [ 356.044145][ T5905] usb 6-1: config 0 has no interface number 0 [ 356.053581][ T5865] usb 1-1: Product: syz [ 356.058128][ T5865] usb 1-1: Manufacturer: syz [ 356.063746][ T5865] usb 1-1: SerialNumber: syz [ 356.070708][ T5905] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 356.107400][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.120047][ T5905] usb 6-1: Product: syz [ 356.125811][ T5905] usb 6-1: Manufacturer: syz [ 356.131713][ T5905] usb 6-1: SerialNumber: syz [ 356.169809][ T5905] usb 6-1: config 0 descriptor?? [ 356.201681][ T5905] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 356.224589][ T5905] dvb-usb: bulk message failed: -22 (2/0) [ 356.231169][ T5905] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 356.245956][ T5905] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 356.258123][ T5905] usb 6-1: media controller created [ 356.313473][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.337979][ T9104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.393656][ T5905] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 356.404101][ T5905] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 356.436185][ T29] audit: type=1400 audit(1733828770.905:717): avc: denied { ioctl } for pid=9099 comm="syz.5.789" path="socket:[21832]" dev="sockfs" ino=21832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 356.439860][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 356.513060][ T5905] rc_core: IR keymap rc-dtt200u not found [ 356.518864][ T5905] Registered IR keymap rc-empty [ 356.532310][ T5905] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 356.548282][ T5905] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16 [ 356.577142][ T5905] dvb-usb: schedule remote query interval to 300 msecs. [ 356.586939][ T5905] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 356.650011][ T5905] usb 6-1: USB disconnect, device number 13 [ 356.724102][ T5905] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 357.000785][ T9104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.326055][ T9121] usb usb7: usbfs: process 9121 (syz.2.795) did not claim interface 0 before use [ 357.336958][ T51] usb 3-1: USB disconnect, device number 22 [ 357.517006][ T5865] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 357.523610][ T5865] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 357.607814][ T29] audit: type=1400 audit(1733828772.075:718): avc: denied { read } for pid=9124 comm="syz.5.797" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 357.723999][ T29] audit: type=1400 audit(1733828772.105:719): avc: denied { open } for pid=9124 comm="syz.5.797" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 358.699462][ T29] audit: type=1400 audit(1733828773.165:720): avc: denied { mount } for pid=9102 comm="syz.0.791" name="/" dev="autofs" ino=20963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 359.243055][ T9139] evm: overlay not supported [ 359.504251][ T5865] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 359.657625][ T5865] cdc_ncm 1-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 359.767877][ T5865] usb 1-1: USB disconnect, device number 44 [ 359.774762][ T5865] cdc_ncm 1-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 360.112705][ T5865] ------------[ cut here ]------------ [ 360.118508][ T5865] ODEBUG: free active (active state 0) object: ffff888040a7d260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90 [ 360.146748][ T5865] WARNING: CPU: 0 PID: 5865 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 360.156510][ T5865] Modules linked in: [ 360.160446][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/0:4 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 360.171482][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.181889][ T5865] Workqueue: usb_hub_wq hub_event [ 360.187054][ T5865] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 360.192875][ T5865] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 60 e3 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 d7 d1 8b e8 6f 35 b5 fc 90 <0f> 0b 90 90 58 83 05 86 2f ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 360.212555][ T5865] RSP: 0018:ffffc90002e47458 EFLAGS: 00010282 [ 360.218755][ T5865] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90019ca8000 [ 360.227125][ T5865] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 360.235851][ T5865] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 360.244511][ T5865] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1de80 [ 360.252551][ T5865] R13: ffffffff8b6bede0 R14: ffffffff86d17c50 R15: ffffc90002e47568 [ 360.261378][ T5865] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 360.270504][ T5865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.272803][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 360.272820][ T29] audit: type=1400 audit(1733828774.745:735): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 360.277165][ T5865] CR2: 00007ffec5fb5de8 CR3: 0000000036298000 CR4: 00000000003526f0 [ 360.277189][ T5865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.277204][ T5865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.277219][ T5865] Call Trace: [ 360.277228][ T5865] [ 360.277239][ T5865] ? __warn+0xea/0x3c0 [ 360.277267][ T5865] ? preempt_schedule_notrace+0x62/0xe0 [ 360.277298][ T5865] ? debug_print_object+0x1a2/0x2b0 [ 360.277324][ T5865] ? report_bug+0x3c0/0x580 [ 360.277353][ T5865] ? handle_bug+0x54/0xa0 [ 360.277379][ T5865] ? exc_invalid_op+0x17/0x50 [ 360.363885][ T5865] ? asm_exc_invalid_op+0x1a/0x20 [ 360.368975][ T5865] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 360.375030][ T5865] ? __warn_printk+0x1a6/0x350 [ 360.379862][ T5865] ? debug_print_object+0x1a2/0x2b0 [ 360.385172][ T5865] ? debug_print_object+0x1a1/0x2b0 [ 360.390417][ T5865] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 360.396451][ T5865] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.402313][ T5865] debug_check_no_obj_freed+0x4b7/0x600 [ 360.408008][ T5865] ? __pfx_mark_lock+0x10/0x10 [ 360.412827][ T5865] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 360.419027][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.424374][ T5865] ? preempt_schedule_common+0x44/0xc0 [ 360.429900][ T5865] kfree+0x2b3/0x4b0 [ 360.433875][ T5865] ? rcu_is_watching+0x12/0xc0 [ 360.439019][ T5865] ? kvfree+0x47/0x50 [ 360.443424][ T5865] kvfree+0x47/0x50 [ 360.447257][ T5865] ? __pfx_netdev_release+0x10/0x10 [ 360.452469][ T5865] device_release+0xa1/0x240 [ 360.457190][ T5865] kobject_put+0x1e4/0x5a0 [ 360.461708][ T5865] put_device+0x1f/0x30 [ 360.465909][ T5865] free_netdev+0x4f1/0x6c0 [ 360.470348][ T5865] usbnet_disconnect+0x25c/0x500 [ 360.475354][ T5865] usb_unbind_interface+0x1e2/0x960 [ 360.480549][ T5865] ? kernfs_find_ns+0x2ee/0x3f0 [ 360.485470][ T5865] ? __pfx_usb_unbind_interface+0x10/0x10 [ 360.491190][ T5865] device_remove+0x122/0x170 [ 360.495830][ T5865] device_release_driver_internal+0x44a/0x610 [ 360.501909][ T5865] bus_remove_device+0x22f/0x420 [ 360.506956][ T5865] device_del+0x396/0x9f0 [ 360.511281][ T5865] ? __pfx_device_del+0x10/0x10 [ 360.516152][ T5865] ? kobject_put+0x210/0x5a0 [ 360.520741][ T5865] usb_disable_device+0x36c/0x7f0 [ 360.525843][ T5865] usb_disconnect+0x2e1/0x920 [ 360.530532][ T5865] hub_event+0x1da5/0x4e10 [ 360.535012][ T5865] ? lock_acquire+0x2f/0xb0 [ 360.539861][ T5865] ? __pfx_hub_event+0x10/0x10 [ 360.545016][ T5865] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 360.550658][ T5865] ? rcu_is_watching+0x12/0xc0 [ 360.555484][ T5865] ? trace_lock_acquire+0x14e/0x1f0 [ 360.560712][ T5865] ? process_one_work+0x921/0x1ba0 [ 360.566016][ T5865] ? lock_acquire+0x2f/0xb0 [ 360.570544][ T5865] ? process_one_work+0x921/0x1ba0 [ 360.575761][ T5865] process_one_work+0x9c5/0x1ba0 [ 360.580713][ T5865] ? __pfx_hub_event+0x10/0x10 [ 360.585663][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 360.591038][ T5865] ? rcu_is_watching+0x12/0xc0 [ 360.595863][ T5865] ? assign_work+0x1a0/0x250 [ 360.600465][ T5865] worker_thread+0x6c8/0xf00 [ 360.605244][ T5865] ? __kthread_parkme+0x148/0x220 [ 360.610274][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 360.615455][ T5865] kthread+0x2c1/0x3a0 [ 360.619520][ T5865] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.624794][ T5865] ? __pfx_kthread+0x10/0x10 [ 360.629411][ T5865] ret_from_fork+0x45/0x80 [ 360.633874][ T5865] ? __pfx_kthread+0x10/0x10 [ 360.638482][ T5865] ret_from_fork_asm+0x1a/0x30 [ 360.643673][ T5865] [ 360.646694][ T5865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.653969][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/0:4 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 360.664743][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.674794][ T5865] Workqueue: usb_hub_wq hub_event [ 360.679834][ T5865] Call Trace: [ 360.683102][ T5865] [ 360.686025][ T5865] dump_stack_lvl+0x3d/0x1f0 [ 360.690617][ T5865] panic+0x71d/0x800 [ 360.694521][ T5865] ? __pfx_panic+0x10/0x10 [ 360.698945][ T5865] ? show_trace_log_lvl+0x29d/0x3d0 [ 360.704156][ T5865] ? debug_print_object+0x1a2/0x2b0 [ 360.709348][ T5865] check_panic_on_warn+0xab/0xb0 [ 360.714292][ T5865] __warn+0xf6/0x3c0 [ 360.718186][ T5865] ? preempt_schedule_notrace+0x62/0xe0 [ 360.723731][ T5865] ? debug_print_object+0x1a2/0x2b0 [ 360.728937][ T5865] report_bug+0x3c0/0x580 [ 360.733269][ T5865] handle_bug+0x54/0xa0 [ 360.737452][ T5865] exc_invalid_op+0x17/0x50 [ 360.741957][ T5865] asm_exc_invalid_op+0x1a/0x20 [ 360.746815][ T5865] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 360.752623][ T5865] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 60 e3 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 d7 d1 8b e8 6f 35 b5 fc 90 <0f> 0b 90 90 58 83 05 86 2f ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 360.772230][ T5865] RSP: 0018:ffffc90002e47458 EFLAGS: 00010282 [ 360.778297][ T5865] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90019ca8000 [ 360.786270][ T5865] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 360.794247][ T5865] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 360.802211][ T5865] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1de80 [ 360.810178][ T5865] R13: ffffffff8b6bede0 R14: ffffffff86d17c50 R15: ffffc90002e47568 [ 360.818145][ T5865] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 360.824066][ T5865] ? __warn_printk+0x1a6/0x350 [ 360.828839][ T5865] ? debug_print_object+0x1a1/0x2b0 [ 360.834034][ T5865] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 360.839924][ T5865] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.845730][ T5865] debug_check_no_obj_freed+0x4b7/0x600 [ 360.851272][ T5865] ? __pfx_mark_lock+0x10/0x10 [ 360.856049][ T5865] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 360.862110][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.867314][ T5865] ? preempt_schedule_common+0x44/0xc0 [ 360.872772][ T5865] kfree+0x2b3/0x4b0 [ 360.876670][ T5865] ? rcu_is_watching+0x12/0xc0 [ 360.881432][ T5865] ? kvfree+0x47/0x50 [ 360.885410][ T5865] kvfree+0x47/0x50 [ 360.889208][ T5865] ? __pfx_netdev_release+0x10/0x10 [ 360.894398][ T5865] device_release+0xa1/0x240 [ 360.898988][ T5865] kobject_put+0x1e4/0x5a0 [ 360.903404][ T5865] put_device+0x1f/0x30 [ 360.907566][ T5865] free_netdev+0x4f1/0x6c0 [ 360.911986][ T5865] usbnet_disconnect+0x25c/0x500 [ 360.916925][ T5865] usb_unbind_interface+0x1e2/0x960 [ 360.922133][ T5865] ? kernfs_find_ns+0x2ee/0x3f0 [ 360.926984][ T5865] ? __pfx_usb_unbind_interface+0x10/0x10 [ 360.932710][ T5865] device_remove+0x122/0x170 [ 360.937306][ T5865] device_release_driver_internal+0x44a/0x610 [ 360.943392][ T5865] bus_remove_device+0x22f/0x420 [ 360.948355][ T5865] device_del+0x396/0x9f0 [ 360.952697][ T5865] ? __pfx_device_del+0x10/0x10 [ 360.957551][ T5865] ? kobject_put+0x210/0x5a0 [ 360.962154][ T5865] usb_disable_device+0x36c/0x7f0 [ 360.967192][ T5865] usb_disconnect+0x2e1/0x920 [ 360.971878][ T5865] hub_event+0x1da5/0x4e10 [ 360.976338][ T5865] ? lock_acquire+0x2f/0xb0 [ 360.980859][ T5865] ? __pfx_hub_event+0x10/0x10 [ 360.985626][ T5865] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 360.991257][ T5865] ? rcu_is_watching+0x12/0xc0 [ 360.996042][ T5865] ? trace_lock_acquire+0x14e/0x1f0 [ 361.001243][ T5865] ? process_one_work+0x921/0x1ba0 [ 361.006359][ T5865] ? lock_acquire+0x2f/0xb0 [ 361.010857][ T5865] ? process_one_work+0x921/0x1ba0 [ 361.015974][ T5865] process_one_work+0x9c5/0x1ba0 [ 361.020914][ T5865] ? __pfx_hub_event+0x10/0x10 [ 361.025682][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 361.031050][ T5865] ? rcu_is_watching+0x12/0xc0 [ 361.035821][ T5865] ? assign_work+0x1a0/0x250 [ 361.040408][ T5865] worker_thread+0x6c8/0xf00 [ 361.045001][ T5865] ? __kthread_parkme+0x148/0x220 [ 361.050038][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 361.055159][ T5865] kthread+0x2c1/0x3a0 [ 361.059231][ T5865] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.064434][ T5865] ? __pfx_kthread+0x10/0x10 [ 361.069113][ T5865] ret_from_fork+0x45/0x80 [ 361.073528][ T5865] ? __pfx_kthread+0x10/0x10 [ 361.078208][ T5865] ret_from_fork_asm+0x1a/0x30 [ 361.082992][ T5865] [ 361.086293][ T5865] Kernel Offset: disabled [ 361.090693][ T5865] Rebooting in 86400 seconds..