last executing test programs: 14.252755265s ago: executing program 3 (id=981): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x14}], 0x1}, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x5a0, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) 13.276949835s ago: executing program 3 (id=982): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xc8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 11.224762102s ago: executing program 2 (id=987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x404c050) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x36}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) syz_emit_ethernet(0x4f2, &(0x7f0000000ac0)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "0afbce", 0x4bc, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[@routing={0x3c, 0x8, 0x0, 0x3, 0x0, [@mcast1, @empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x1, 0xe, 0x4, 0x7, 0x60, 0x8, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x87, 0x39, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xee}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xb26}, @generic={0x7, 0xba, "a3fdfee2b42f38eafdd7880f83e560c2090fbe3a47311652768cc75e4e5f81a41b6cbc885974d19fb5fd534684884be19b29a6fc5fc8d2543cab77d20ea6c0bcf196b2cd4f361247c88b24a576fbb4213e6de91029c955679775cf221b1a13e329b36f336fb3ca2b731f519ca85f4d7cf7cb631342dcbb5b39f31e3293bedd4dbabaa7b3e815c6860d362f787ecbb14be5dad08ca5cd3a29ca2c79fb0235308a8c2e88d3a29bb43c6187339a0800564a7139d4d0d9dc5438a464"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x2, 0xea, "484984996ea46c2a001022100685ee1909b7bb7e0dacb20e57d2d93244b6883bcb522ef69b55c4cf9380d6cda768a65d8dcda45e9bca2476bae5d6fbb975fb499ddb801dc00c3fa3499ed44e7a02d4b8ef53c4b31e90d5568617bdeba14b3a5f58921b0445b662ab05daf9033399cf4496dca650130f04647b3efd09d1ddc92938f8a86c80da6b5f191af40840493b0f5b85fb51911b8a1f386e053fddf80f3f1d0e5a2a38228a91c4aa9ad5a835e616d19157f2051c7642b26f3bdf7422490b5990f31f3b335f28fb14a12c87742aef39ed7620118dc363dcc6dd2ca1b299d41baedbffe87fa9148a13"}, @pad1]}, @routing={0x0, 0x2, 0x2, 0x5, 0x0, [@empty]}, @dstopts={0x33, 0x15, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0xfff, [0x8, 0x8001, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x3, 0x4, [0x3, 0x7, 0x71, 0x40, 0x1, 0x10000000006, 0x0, 0x1, 0xfff]}}]}, @dstopts={0x0, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x68}, @fragment={0x6, 0x0, 0xcd, 0x0, 0x0, 0xa, 0x67}, @dstopts={0x87, 0x0, '\x00', [@pad1, @pad1]}, @routing={0x2b, 0xa, 0x1, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00']}], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x0, 0x7, 0xd, 0x4, 0x4e24, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x1}, [{0x2, 0x1, 0x1, 0x5, 0x1, 0xe0f4, 0xf, 0x2}, {0x9, 0x1000, 0x8b4, 0x6fc, 0x8ed1, 0x37c, 0x0, 0x9}, {0x6, 0x17df, 0xf21, 0x8, 0xff, 0x1, 0x7, 0x2}, {0x9, 0x0, 0x81, 0x2, 0x7, 0x0, 0x5, 0xfffffff}, {0x3, 0x8000, 0x2, 0x1000, 0x0, 0xf98, 0xb, 0x2}]}}}}}}, 0x0) 10.237562931s ago: executing program 2 (id=992): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 10.12201504s ago: executing program 2 (id=994): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x2, 0x80805, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1f, 0x6, 0x3fc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_setup(0x2460, &(0x7f00000003c0)={0x0, 0xfdcf, 0x20, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, r3, r4, 0xa000000, 0x80000001, 0x80000001, 0x0, 0x2, 0x4000000, 0xd, 0x20000}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x33b40}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 8.54489921s ago: executing program 3 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 7.737740781s ago: executing program 3 (id=996): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 7.725557809s ago: executing program 4 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10004800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) timer_create(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0x12, 0x884, &(0x7f0000000140)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = openat$cgroup_ro(r3, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) getpid() read$FUSE(r7, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, r8, {0x7, 0x2b, 0x10000, 0x20000, 0x6, 0x2, 0xdd3, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) getpid() 7.593426848s ago: executing program 4 (id=999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000400000400001d00000001000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0xffffffff, 0xec0}, {0xa, 0x6}]}, 0x14, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6.585540611s ago: executing program 4 (id=1001): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x406}], 0x1}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000017f000/0x4000)=nil, 0x4000, 0xb, 0x10, r1, 0x2000) madvise(&(0x7f000033b000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 6.331073864s ago: executing program 0 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x404c050) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x36}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) syz_emit_ethernet(0x4f2, &(0x7f0000000ac0)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "0afbce", 0x4bc, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[@routing={0x3c, 0x8, 0x0, 0x3, 0x0, [@mcast1, @empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x1, 0xe, 0x4, 0x7, 0x60, 0x8, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x87, 0x39, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xee}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xb26}, @generic={0x7, 0xba, "a3fdfee2b42f38eafdd7880f83e560c2090fbe3a47311652768cc75e4e5f81a41b6cbc885974d19fb5fd534684884be19b29a6fc5fc8d2543cab77d20ea6c0bcf196b2cd4f361247c88b24a576fbb4213e6de91029c955679775cf221b1a13e329b36f336fb3ca2b731f519ca85f4d7cf7cb631342dcbb5b39f31e3293bedd4dbabaa7b3e815c6860d362f787ecbb14be5dad08ca5cd3a29ca2c79fb0235308a8c2e88d3a29bb43c6187339a0800564a7139d4d0d9dc5438a464"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x2, 0xea, "484984996ea46c2a001022100685ee1909b7bb7e0dacb20e57d2d93244b6883bcb522ef69b55c4cf9380d6cda768a65d8dcda45e9bca2476bae5d6fbb975fb499ddb801dc00c3fa3499ed44e7a02d4b8ef53c4b31e90d5568617bdeba14b3a5f58921b0445b662ab05daf9033399cf4496dca650130f04647b3efd09d1ddc92938f8a86c80da6b5f191af40840493b0f5b85fb51911b8a1f386e053fddf80f3f1d0e5a2a38228a91c4aa9ad5a835e616d19157f2051c7642b26f3bdf7422490b5990f31f3b335f28fb14a12c87742aef39ed7620118dc363dcc6dd2ca1b299d41baedbffe87fa9148a13"}, @pad1]}, @routing={0x0, 0x2, 0x2, 0x5, 0x0, [@empty]}, @dstopts={0x33, 0x15, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0xfff, [0x8, 0x8001, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x3, 0x4, [0x3, 0x7, 0x71, 0x40, 0x1, 0x10000000006, 0x0, 0x1, 0xfff]}}]}, @dstopts={0x0, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x68}, @fragment={0x6, 0x0, 0xcd, 0x0, 0x0, 0xa, 0x67}, @dstopts={0x87, 0x0, '\x00', [@pad1, @pad1]}, @routing={0x2b, 0xa, 0x1, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00']}], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x0, 0x7, 0xd, 0x4, 0x4e24, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x1}, [{0x2, 0x1, 0x1, 0x5, 0x1, 0xe0f4, 0xf, 0x2}, {0x9, 0x1000, 0x8b4, 0x6fc, 0x8ed1, 0x37c, 0x0, 0x9}, {0x6, 0x17df, 0xf21, 0x8, 0xff, 0x1, 0x7, 0x2}, {0x9, 0x0, 0x81, 0x2, 0x7, 0x0, 0x5, 0xfffffff}, {0x3, 0x8000, 0x2, 0x1000, 0x0, 0xf98, 0xb, 0x2}]}}}}}}, 0x0) 6.330428929s ago: executing program 2 (id=1004): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e7600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(r0, 0x0, r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.729901062s ago: executing program 1 (id=1005): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xc8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.705448632s ago: executing program 2 (id=1006): getpgid(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010b8e) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@s}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x36, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xc0000000}, @snprintf, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x0, 0x1, 0xb, 0x8, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x80000) ioctl$MON_IOCX_GETX(r7, 0xc0109207, 0x0) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/cgroup\x00') r9 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000140)=0xec62, 0x4) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) 4.011445131s ago: executing program 0 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 3.922512554s ago: executing program 0 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68c97000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) ppoll(&(0x7f0000000000)=[{r1, 0x6008}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='ext3\x00', 0x20004c, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x80000000) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x37, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xfff9, 0x0, 0x2}}}}}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r7, &(0x7f0000000240)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) 3.808533454s ago: executing program 2 (id=1009): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000000640)=""/23, 0x17}], 0xa}, 0x1}, {{&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/111, 0x6f}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/99, 0x63}, {&(0x7f0000000900)=""/7, 0x7}, {&(0x7f0000000940)=""/148, 0x94}, {&(0x7f0000000a00)=""/222, 0xde}], 0x4}, 0xa}, {{&(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000000bc0)=""/242, 0xf2}, {&(0x7f0000000cc0)=""/146, 0x92}, {&(0x7f0000000d80)=""/216, 0xd8}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005880)=""/133, 0x85}, {&(0x7f0000005080)=""/100, 0x64}, {&(0x7f0000005100)=""/128, 0x80}], 0x7, &(0x7f0000005200)=""/66, 0x42}, 0x7}, {{&(0x7f0000005280)=@sco, 0x80, &(0x7f0000005300), 0x0, &(0x7f0000005340)=""/74, 0x4a}, 0x44d5f078}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sched_setattr(0x0, 0x0, 0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.496725135s ago: executing program 3 (id=1010): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x1000, 0x34325842, 0x500, 0x2d0, 0x0, @discrete={0x7, 0x4}}) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x161}, &(0x7f0000000240), &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100f4ff00000000bf91000000000000b5020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3.075480332s ago: executing program 3 (id=1011): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000000b0400000005100f001c2528c7b39af4fafeacf83c4c51b580f513d0c09603a10125f1625c632b7e5bdb8383fdebb4406a51e47ff20e78d0e560609f3e9c6390e032eda87ad41a54"], 0x0) 2.94961996s ago: executing program 1 (id=1012): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 2.755787257s ago: executing program 4 (id=1013): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 2.744103313s ago: executing program 0 (id=1014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) accept4$netrom(r0, 0x0, 0x0, 0x80000) syz_open_procfs$namespace(0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r5, 0x1ad72f7) accept4$netrom(r5, 0x0, 0x0, 0x80000) (async) accept4$netrom(r5, 0x0, 0x0, 0x80000) accept4(r5, 0x0, 0x0, 0x80800) (async) r7 = accept4(r5, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x46692000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x46692000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.558612521s ago: executing program 1 (id=1015): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x1000, 0x34325842, 0x500, 0x2d0, 0x0, @discrete={0x7, 0x4}}) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x161}, &(0x7f0000000240), &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100f4ff00000000bf91000000000000b5020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000580)={0x4, 0x40, "1f14dcbf2f27ec39797b4896095e2c8b70d402d52071b470", {0x8, 0x9}, 0x6}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.727737576s ago: executing program 4 (id=1016): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x1000, 0x34325842, 0x500, 0x2d0, 0x0, @discrete={0x7, 0x4}}) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x161}, &(0x7f0000000240), &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100f4ff00000000bf91000000000000b5020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.496827988s ago: executing program 0 (id=1017): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x406}], 0x1}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000017f000/0x4000)=nil, 0x4000, 0xb, 0x10, r1, 0x2000) madvise(&(0x7f000033b000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 1.359770891s ago: executing program 4 (id=1018): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'pim6reg\x00', {0x81}, 0x7ff}) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) socket(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$video(0x0, 0x9, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r4 = dup2(r3, r3) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x300}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1800, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x6e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 1.358156538s ago: executing program 1 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 1.112933417s ago: executing program 1 (id=1020): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000100)) 27.491765ms ago: executing program 0 (id=1021): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x1000, 0x34325842, 0x500, 0x2d0, 0x0, @discrete={0x7, 0x4}}) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x161}, &(0x7f0000000240), &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100f4ff00000000bf91000000000000b5020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=1022): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x29, 0x0, &(0x7f0000000040)) shutdown(r2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r5 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001200985b26bd7000fddbdf2507000000", @ANYRESHEX=r5, @ANYBLOB="5340000a00000004"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40905}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0xf1e3) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): dev loop6, logical block 0, async page read [ 233.382451][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.390754][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.407147][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.415662][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.424361][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.432729][ T7723] ldm_validate_partition_table(): Disk read failed. [ 233.439651][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.451851][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.501622][ T7723] Dev loop6: unable to read RDB block 0 [ 233.509430][ T7723] loop6: unable to read partition table [ 233.516034][ T7723] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 233.647344][ T7712] dccp_xmit_packet: Payload too large (65475) for featneg. [ 233.691657][ T7724] ldm_validate_partition_table(): Disk read failed. [ 233.699102][ T30] audit: type=1400 audit(1744790486.693:277): avc: denied { name_bind } for pid=7711 comm="syz.1.458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 233.719735][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.828857][ T7724] Dev loop6: unable to read RDB block 0 [ 233.835913][ T30] audit: type=1400 audit(1744790486.693:278): avc: denied { node_bind } for pid=7711 comm="syz.1.458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 233.856649][ T30] audit: type=1400 audit(1744790486.703:279): avc: denied { listen } for pid=7711 comm="syz.1.458" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 233.877781][ T30] audit: type=1400 audit(1744790486.713:280): avc: denied { setopt } for pid=7711 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.302041][ T7724] loop6: unable to read partition table [ 234.329888][ T7724] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 234.350788][ T30] audit: type=1400 audit(1744790486.763:281): avc: denied { connect } for pid=7711 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.394992][ T30] audit: type=1400 audit(1744790486.773:282): avc: denied { name_connect } for pid=7711 comm="syz.1.458" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 234.910446][ T30] audit: type=1400 audit(1744790486.893:283): avc: denied { setopt } for pid=7717 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.931079][ T30] audit: type=1400 audit(1744790486.893:284): avc: denied { bind } for pid=7717 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.837690][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.405622][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 236.414970][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.429570][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.446717][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.524028][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.553745][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.566846][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.212835][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 237.223371][ T9] usbtmc 4-1:16.0: can't read capabilities [ 237.275436][ T5865] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 237.468075][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 237.479077][ T5865] usb 5-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 237.487456][ T9] usb 4-1: USB disconnect, device number 15 [ 237.496207][ T5865] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.512510][ T5865] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 237.538437][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.560949][ T5865] usb 5-1: Product: syz [ 237.568739][ T5865] usb 5-1: Manufacturer: syz [ 237.578113][ T5865] usb 5-1: SerialNumber: syz [ 237.669486][ T5865] usb 5-1: config 0 descriptor?? [ 237.858754][ T7765] syz.1.471 uses obsolete (PF_INET,SOCK_PACKET) [ 238.433244][ T9] usb 5-1: USB disconnect, device number 12 [ 238.439328][ T7771] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 238.468664][ T7771] wg2: entered promiscuous mode [ 238.473701][ T7771] wg2: entered allmulticast mode [ 239.272486][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 239.272541][ T30] audit: type=1326 audit(1744790492.933:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 239.342770][ T30] audit: type=1326 audit(1744790492.943:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 239.388855][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.593485][ T30] audit: type=1326 audit(1744790492.943:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 239.666123][ T30] audit: type=1326 audit(1744790492.943:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 239.689363][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.743185][ T30] audit: type=1326 audit(1744790492.943:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 240.088080][ T30] audit: type=1326 audit(1744790492.953:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 240.116968][ T30] audit: type=1326 audit(1744790492.953:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 240.140151][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.155315][ T30] audit: type=1326 audit(1744790492.953:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 240.180217][ T30] audit: type=1326 audit(1744790492.953:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 240.204016][ T30] audit: type=1326 audit(1744790492.953:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd542b8e169 code=0x7ffc0000 [ 241.859077][ T7813] FAULT_INJECTION: forcing a failure. [ 241.859077][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 241.873788][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.1.485 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 241.873812][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.873822][ T7813] Call Trace: [ 241.873827][ T7813] [ 241.873833][ T7813] dump_stack_lvl+0x16c/0x1f0 [ 241.873860][ T7813] should_fail_ex+0x512/0x640 [ 241.873876][ T7813] ? fs_reclaim_acquire+0xae/0x150 [ 241.873901][ T7813] ? tomoyo_encode2+0x100/0x3e0 [ 241.873922][ T7813] should_failslab+0xc2/0x120 [ 241.873941][ T7813] __kmalloc_noprof+0xd2/0x510 [ 241.873963][ T7813] tomoyo_encode2+0x100/0x3e0 [ 241.873989][ T7813] tomoyo_encode+0x29/0x50 [ 241.874009][ T7813] tomoyo_realpath_from_path+0x18f/0x6e0 [ 241.874033][ T7813] ? tomoyo_profile+0x47/0x60 [ 241.874048][ T7813] tomoyo_path_number_perm+0x245/0x580 [ 241.874066][ T7813] ? tomoyo_path_number_perm+0x237/0x580 [ 241.874087][ T7813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.874108][ T7813] ? find_held_lock+0x2b/0x80 [ 241.874152][ T7813] ? find_held_lock+0x2b/0x80 [ 241.874171][ T7813] ? hook_file_ioctl_common+0x145/0x410 [ 241.874194][ T7813] ? __fget_files+0x20e/0x3c0 [ 241.874220][ T7813] security_file_ioctl+0x9b/0x240 [ 241.874244][ T7813] __x64_sys_ioctl+0xb7/0x200 [ 241.874270][ T7813] do_syscall_64+0xcd/0x260 [ 241.874295][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.874312][ T7813] RIP: 0033:0x7f31e658e169 [ 241.874325][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.874340][ T7813] RSP: 002b:00007f31e73a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.874357][ T7813] RAX: ffffffffffffffda RBX: 00007f31e67b6080 RCX: 00007f31e658e169 [ 241.874368][ T7813] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000008 [ 241.874378][ T7813] RBP: 00007f31e73a9090 R08: 0000000000000000 R09: 0000000000000000 [ 241.874387][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.874397][ T7813] R13: 0000000000000000 R14: 00007f31e67b6080 R15: 00007fff300fed78 [ 241.874420][ T7813] [ 241.874726][ T7813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.036961][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.136750][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.416096][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 243.423547][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.451665][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.471854][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.494785][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.527012][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.546002][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.953652][ T7848] 9pnet_fd: Insufficient options for proto=fd [ 244.392038][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 244.402960][ T9] usbtmc 5-1:16.0: can't read capabilities [ 244.525925][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 244.525944][ T30] audit: type=1400 audit(1744790498.193:377): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.659207][ T9] usb 5-1: USB disconnect, device number 13 [ 245.248897][ T30] audit: type=1400 audit(1744790498.853:378): avc: denied { getopt } for pid=7854 comm="syz.2.497" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.356073][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.666900][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 245.679404][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 245.705247][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.729470][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.757860][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.818921][ T5868] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 245.870581][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.881765][ T5868] usb 2-1: Product: syz [ 246.415894][ T5868] usb 2-1: Manufacturer: syz [ 246.435929][ T5868] usb 2-1: SerialNumber: syz [ 246.477559][ T5868] usb 2-1: config 0 descriptor?? [ 246.496959][ T7863] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.673526][ T30] audit: type=1400 audit(1744790500.353:379): avc: denied { getopt } for pid=7877 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.713589][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.732767][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.809306][ T30] audit: type=1400 audit(1744790500.433:380): avc: denied { accept } for pid=7877 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 246.934923][ T7884] ubi31: attaching mtd0 [ 246.978548][ T7884] ubi31: scanning is finished [ 246.980413][ T30] audit: type=1400 audit(1744790500.503:381): avc: denied { append } for pid=7862 comm="syz.1.500" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.987139][ T7884] ubi31: empty MTD device detected [ 247.637515][ T7884] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 247.645334][ T7884] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 247.652817][ T7884] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 247.660091][ T7884] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 247.667654][ T7884] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 247.674581][ T7884] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 247.685304][ T7884] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1147052916 [ 247.702508][ T7884] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 247.755332][ T7892] ubi31: background thread "ubi_bgt31d" started, PID 7892 [ 247.949678][ T5868] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 247.958852][ T5868] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 247.965280][ T5938] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 248.024191][ T7898] 9pnet_fd: Insufficient options for proto=fd [ 248.135304][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 248.547987][ C0] powermate: config urb returned -71 [ 248.553483][ C0] powermate: config urb returned -71 [ 248.558882][ C0] powermate: config urb returned -71 [ 248.564224][ C0] powermate: config urb returned -71 [ 248.583492][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.599026][ T5868] usb 2-1: USB disconnect, device number 10 [ 248.604958][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 248.745234][ T5938] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 248.803305][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.840452][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 248.851635][ T7903] batman_adv: batadv0: Adding interface: vxlan0 [ 248.857970][ T7903] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.883114][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.889822][ T7902] nbd: socks must be embedded in a SOCK_ITEM attr [ 248.903763][ T30] audit: type=1400 audit(1744790502.523:382): avc: denied { create } for pid=7900 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.954882][ T30] audit: type=1400 audit(1744790502.523:383): avc: denied { create } for pid=7900 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.974287][ T5938] usb 3-1: Product: syz [ 248.974306][ T5938] usb 3-1: Manufacturer: syz [ 248.974320][ T5938] usb 3-1: SerialNumber: syz [ 248.979301][ T7903] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 249.000668][ T5938] usb 3-1: config 0 descriptor?? [ 249.289123][ T5938] cdc_ether 3-1:0.0: skipping garbage [ 249.481141][ T5938] usb 3-1: bad CDC descriptors [ 249.814345][ T7922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.880875][ T5938] usb 3-1: unsupported MDLM descriptors [ 250.396288][ T5938] usb 3-1: USB disconnect, device number 14 [ 250.407037][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.475340][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 250.527311][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.635285][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 250.657007][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.678092][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.771552][ T30] audit: type=1400 audit(1744790504.363:384): avc: denied { create } for pid=7930 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.798800][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.809211][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.825739][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.834842][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.847646][ T30] audit: type=1400 audit(1744790504.533:385): avc: denied { setopt } for pid=7930 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.682448][ T7937] ip6t_srh: unknown srh invflags 7863 [ 252.290452][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 252.298728][ T9] usbtmc 4-1:16.0: can't read capabilities [ 252.576306][ T9] usb 4-1: USB disconnect, device number 16 [ 252.615364][ T5938] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 252.685555][ T1201] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 252.778770][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.965402][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.975371][ T5938] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 252.984392][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.993949][ T1201] usb 1-1: config 2 has an invalid interface number: 169 but max is 0 [ 254.006207][ T5938] usb 5-1: config 0 descriptor?? [ 254.011635][ T1201] usb 1-1: config 2 has no interface number 0 [ 254.026122][ T1201] usb 1-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.027763][ T5938] xbox_remote_probe: endpoint_in message size==0? [ 254.095929][ T1201] usb 1-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.179659][ T7967] FAULT_INJECTION: forcing a failure. [ 254.179659][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 254.179730][ T1201] usb 1-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 60280, setting to 64 [ 254.195021][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.2.532 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 254.195042][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.195050][ T7967] Call Trace: [ 254.195055][ T7967] [ 254.195061][ T7967] dump_stack_lvl+0x16c/0x1f0 [ 254.195085][ T7967] should_fail_ex+0x512/0x640 [ 254.195101][ T7967] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 254.195119][ T7967] should_failslab+0xc2/0x120 [ 254.195135][ T7967] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 254.195149][ T7967] ? __pfx_selinux_socket_create+0x10/0x10 [ 254.195173][ T7967] ? sock_alloc_inode+0x25/0x1c0 [ 254.195196][ T7967] ? __pfx_sock_alloc_inode+0x10/0x10 [ 254.195214][ T7967] sock_alloc_inode+0x25/0x1c0 [ 254.195238][ T7967] alloc_inode+0x61/0x240 [ 254.195256][ T7967] sock_alloc+0x40/0x280 [ 254.195275][ T7967] __sock_create+0xc1/0x8d0 [ 254.195301][ T7967] udp_sock_create4+0xa6/0x450 [ 254.195319][ T7967] ? __pfx_udp_sock_create4+0x10/0x10 [ 254.195340][ T7967] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.195359][ T7967] ? crng_make_state+0x48e/0x6d0 [ 254.195377][ T7967] rxrpc_open_socket+0x4f5/0x6b0 [ 254.195396][ T7967] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 254.195423][ T7967] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 254.195442][ T7967] ? rcu_is_watching+0x12/0xc0 [ 254.195463][ T7967] rxrpc_lookup_local+0xa01/0x1220 [ 254.195485][ T7967] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 254.195505][ T7967] ? __local_bh_enable_ip+0xa4/0x120 [ 254.195527][ T7967] rxrpc_sendmsg+0x375/0x5f0 [ 254.195550][ T7967] ____sys_sendmsg+0xa95/0xc70 [ 254.195573][ T7967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.195605][ T7967] ___sys_sendmsg+0x134/0x1d0 [ 254.195623][ T7967] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.195667][ T7967] __sys_sendmsg+0x16d/0x220 [ 254.195685][ T7967] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.195708][ T7967] ? rcu_is_watching+0x12/0xc0 [ 254.195732][ T7967] do_syscall_64+0xcd/0x260 [ 254.195752][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.195766][ T7967] RIP: 0033:0x7f71bf58e169 [ 254.195779][ T7967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.195792][ T7967] RSP: 002b:00007f71c04c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.195806][ T7967] RAX: ffffffffffffffda RBX: 00007f71bf7b5fa0 RCX: 00007f71bf58e169 [ 254.195816][ T7967] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 254.195824][ T7967] RBP: 00007f71c04c5090 R08: 0000000000000000 R09: 0000000000000000 [ 254.195832][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.195840][ T7967] R13: 0000000000000000 R14: 00007f71bf7b5fa0 R15: 00007fff1715a068 [ 254.195859][ T7967] [ 254.197634][ T7967] socket: no more sockets [ 254.233149][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 254.317246][ T30] audit: type=1400 audit(1744790507.973:386): avc: denied { connect } for pid=7968 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.322036][ T1201] usb 1-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.556535][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.569272][ T5938] usb 5-1: USB disconnect, device number 14 [ 254.602212][ T1201] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 254.611399][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.709097][ T7947] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 254.813209][ T1201] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected [ 255.010257][ T7947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 255.044827][ T1201] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 255.066070][ T1201] usb 1-1: USB disconnect, device number 4 [ 255.074953][ T1201] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 255.094774][ T1201] cypress_m8 1-1:2.169: device disconnected [ 255.124537][ T7977] ceph: No mds server is up or the cluster is laggy [ 255.287269][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.325470][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.249260][ T30] audit: type=1400 audit(1744790509.693:387): avc: denied { mount } for pid=7986 comm="syz.2.535" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 256.775507][ T30] audit: type=1400 audit(1744790510.423:388): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 258.055249][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.221523][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 258.792419][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 258.798500][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 258.813950][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 258.828127][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.915442][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.925437][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.935578][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.958730][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.981978][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.011861][ T8023] ceph: No mds server is up or the cluster is laggy [ 259.042989][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 259.201385][ T30] audit: type=1400 audit(1744790512.883:389): avc: denied { name_bind } for pid=8037 comm="syz.1.551" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 261.094594][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 261.474115][ T5914] usb 3-1: usb_control_msg returned -71 [ 261.482785][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 261.516711][ T5914] usb 3-1: USB disconnect, device number 15 [ 262.547030][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 262.715272][ T5914] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 263.529544][ T5914] usb 5-1: config index 0 descriptor too short (expected 64920, got 72) [ 263.566315][ T5914] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 263.665164][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.695001][ T5914] usb 5-1: Product: syz [ 263.700801][ T971] libceph: connect (1)[c::]:6789 error -101 [ 263.707017][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 263.715269][ T5914] usb 5-1: Manufacturer: syz [ 263.719962][ T8071] ceph: No mds server is up or the cluster is laggy [ 263.725457][ T5914] usb 5-1: SerialNumber: syz [ 263.736333][ T5914] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 263.749545][ T30] audit: type=1400 audit(1744790517.433:390): avc: denied { firmware_load } for pid=971 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 263.796330][ T971] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.075793][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 264.083028][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 264.280804][ T30] audit: type=1400 audit(1744790517.963:391): avc: denied { listen } for pid=8082 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.281371][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.315477][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.350032][ T30] audit: type=1400 audit(1744790518.023:392): avc: denied { setopt } for pid=8082 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.393809][ T30] audit: type=1400 audit(1744790518.023:393): avc: denied { write } for pid=8082 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.420212][ T1201] usb 5-1: USB disconnect, device number 15 [ 264.435835][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 264.575519][ T5914] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.806788][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 264.834621][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 264.854715][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 264.881299][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 264.905053][ T5914] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 264.929091][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.028805][ T5914] usb 3-1: Product: syz [ 265.095232][ T5914] usb 3-1: Manufacturer: syz [ 265.121673][ T5914] usb 3-1: SerialNumber: syz [ 265.137426][ T971] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 265.300717][ T971] ath9k_htc: Failed to initialize the device [ 265.310543][ T5914] usb 3-1: config 0 descriptor?? [ 265.352168][ T5914] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 265.525833][ T1201] usb 5-1: ath9k_htc: USB layer deinitialized [ 265.581205][ T5914] scsi host1: usb-storage 3-1:0.0 [ 265.593963][ T5914] usb 3-1: USB disconnect, device number 16 [ 267.387274][ T8114] : renamed from macvlan0 (while UP) [ 267.417754][ T1201] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 267.428923][ T8114] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 267.549391][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 268.068482][ T30] audit: type=1400 audit(1744790521.733:394): avc: denied { relabelfrom } for pid=8110 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 268.147620][ T30] audit: type=1400 audit(1744790521.733:395): avc: denied { relabelto } for pid=8110 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 268.305251][ T1201] usb 4-1: Using ep0 maxpacket: 8 [ 269.859665][ T8131] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 269.895078][ T1201] usb 4-1: device descriptor read/all, error -71 [ 270.842159][ T30] audit: type=1400 audit(1744790524.523:396): avc: denied { write } for pid=8147 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 271.989891][ T8163] dlm: non-version read from control device 8224 [ 272.035723][ T30] audit: type=1400 audit(1744790525.713:397): avc: denied { bind } for pid=8161 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.946705][ T8181] block device autoloading is deprecated and will be removed. [ 274.975381][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.125391][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 275.165195][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.246865][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.305967][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.367509][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.447868][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.502812][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.619869][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 276.641303][ T9] usbtmc 4-1:16.0: can't read capabilities [ 276.929227][ T58] usb 4-1: USB disconnect, device number 19 [ 276.939260][ T30] audit: type=1400 audit(1744790530.623:398): avc: denied { bind } for pid=8203 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.795383][ T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 279.671556][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 279.947164][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.604'. [ 279.970371][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 280.141244][ T8243] tmpfs: Unknown parameter 'rootcontextsr' [ 281.167604][ T58] usb 1-1: device descriptor read/all, error -71 [ 283.006648][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 283.195250][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 283.380988][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.404922][ T8283] Bluetooth: MGMT ver 1.23 [ 283.436546][ T30] audit: type=1400 audit(1744790537.083:399): avc: denied { create } for pid=8279 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 283.760658][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.775911][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.786290][ T30] audit: type=1400 audit(1744790537.083:400): avc: denied { read } for pid=8279 comm="syz.3.615" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 283.809512][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.823024][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.833587][ T30] audit: type=1400 audit(1744790537.083:401): avc: denied { open } for pid=8279 comm="syz.3.615" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 283.857297][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.868050][ T30] audit: type=1400 audit(1744790537.083:402): avc: denied { ioctl } for pid=8279 comm="syz.3.615" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 284.245908][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 284.251433][ T9] usbtmc 3-1:16.0: can't read capabilities [ 284.260498][ T30] audit: type=1400 audit(1744790537.103:403): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.035243][ T58] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 285.919012][ T5868] usb 3-1: USB disconnect, device number 17 [ 286.178740][ T30] audit: type=1400 audit(1744790539.863:404): avc: denied { write } for pid=8306 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 286.197847][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.259377][ T5828] block nbd3: Receive control failed (result -107) [ 286.290903][ T8306] block nbd3: shutting down sockets [ 286.495480][ T5868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 286.715654][ T5868] usb 3-1: device descriptor read/64, error -71 [ 286.765253][ T971] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 287.855481][ T5868] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.878012][ T971] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 287.887821][ T971] usb 2-1: config 0 has no interface number 0 [ 287.894220][ T971] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.912591][ T971] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.922973][ T971] usb 2-1: config 0 interface 2 has no altsetting 0 [ 287.934863][ T971] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 287.960051][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.972849][ T971] usb 2-1: config 0 descriptor?? [ 287.985419][ T5868] usb 3-1: device descriptor read/64, error -71 [ 288.566429][ T5868] usb usb3-port1: attempt power cycle [ 288.811934][ T30] audit: type=1400 audit(1744790542.493:405): avc: denied { create } for pid=8317 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 288.831167][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.920529][ T5868] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 289.058807][ T5868] usb 3-1: device descriptor read/8, error -71 [ 289.315288][ T5868] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 289.675012][ T30] audit: type=1400 audit(1744790543.353:406): avc: denied { connect } for pid=8317 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.804290][ T8350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.875581][ T5868] usb 3-1: device descriptor read/8, error -71 [ 290.657808][ T5868] usb usb3-port1: unable to enumerate USB device [ 291.605538][ T5868] usb 2-1: USB disconnect, device number 11 [ 291.646375][ T971] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 291.685945][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 291.695107][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 291.704048][ T30] audit: type=1400 audit(1744790545.363:407): avc: denied { listen } for pid=8365 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.794329][ T30] audit: type=1400 audit(1744790545.363:408): avc: denied { setopt } for pid=8365 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.886385][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 291.969214][ T971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.990814][ T971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.022714][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 292.045018][ T971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.047247][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 292.075367][ T971] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.106377][ T971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.209214][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.291332][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 292.304963][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 292.421628][ T971] usb 1-1: GET_CAPABILITIES returned 0 [ 292.475949][ T971] usbtmc 1-1:16.0: can't read capabilities [ 294.176041][ T971] usb 1-1: USB disconnect, device number 8 [ 294.309853][ T30] audit: type=1400 audit(1744790547.993:409): avc: denied { getopt } for pid=8396 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.474096][ T30] audit: type=1400 audit(1744790548.153:410): avc: denied { write } for pid=8398 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.302640][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 295.514082][ T30] audit: type=1400 audit(1744790548.653:411): avc: denied { ioctl } for pid=8407 comm="syz.0.644" path="socket:[18424]" dev="sockfs" ino=18424 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.885331][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 300.257000][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 300.373167][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.386391][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.399874][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.410087][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.424502][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.433787][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.715467][ T5868] usb 3-1: GET_CAPABILITIES returned 0 [ 300.730966][ T5868] usbtmc 3-1:16.0: can't read capabilities [ 300.930117][ T30] audit: type=1400 audit(1744790554.453:412): avc: denied { mount } for pid=8464 comm="syz.4.659" name="/" dev="ramfs" ino=19517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 301.158019][ T58] usb 3-1: USB disconnect, device number 22 [ 301.411985][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 301.633801][ T30] audit: type=1400 audit(1744790555.313:413): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 302.553040][ T30] audit: type=1400 audit(1744790556.233:414): avc: denied { setopt } for pid=8471 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.553324][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 302.696877][ T8478] tipc: Started in network mode [ 302.864133][ T8478] tipc: Node identity dabbc0ee3d61, cluster identity 4711 [ 302.900962][ T8478] tipc: Enabled bearer , priority 0 [ 303.278709][ T8471] tipc: Resetting bearer [ 304.007954][ T5868] tipc: Node number set to 3889873134 [ 304.135134][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 304.144482][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 304.658330][ T8506] FAULT_INJECTION: forcing a failure. [ 304.658330][ T8506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.671591][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.2.668 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 304.671613][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.671623][ T8506] Call Trace: [ 304.671629][ T8506] [ 304.671635][ T8506] dump_stack_lvl+0x16c/0x1f0 [ 304.671663][ T8506] should_fail_ex+0x512/0x640 [ 304.671684][ T8506] _copy_to_user+0x32/0xd0 [ 304.671705][ T8506] copy_to_sockptr_offset+0x15c/0x1b0 [ 304.671722][ T8506] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 304.671748][ T8506] ? __pfx_copy_to_sockptr_offset+0x10/0x10 [ 304.671766][ T8506] ? find_held_lock+0x2b/0x80 [ 304.671791][ T8506] sk_getsockopt+0x27a/0x2b50 [ 304.671818][ T8506] ? __pfx_sk_getsockopt+0x10/0x10 [ 304.671841][ T8506] ? __pfx_avc_has_perm+0x10/0x10 [ 304.671861][ T8506] ? __lock_acquire+0xaa4/0x1ba0 [ 304.671880][ T8506] ? sock_has_perm+0x259/0x2f0 [ 304.671905][ T8506] ? find_held_lock+0x2b/0x80 [ 304.671923][ T8506] ? __might_fault+0xe3/0x190 [ 304.671939][ T8506] ? __might_fault+0xe3/0x190 [ 304.671952][ T8506] ? __might_fault+0x13b/0x190 [ 304.671976][ T8506] do_sock_getsockopt+0x645/0x800 [ 304.672004][ T8506] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.672026][ T8506] ? __fget_files+0x204/0x3c0 [ 304.672053][ T8506] __sys_getsockopt+0x12f/0x260 [ 304.672077][ T8506] __x64_sys_getsockopt+0xbd/0x160 [ 304.672095][ T8506] ? do_syscall_64+0x91/0x260 [ 304.672117][ T8506] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.672138][ T8506] do_syscall_64+0xcd/0x260 [ 304.672161][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.672177][ T8506] RIP: 0033:0x7f71bf58e169 [ 304.672191][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.672206][ T8506] RSP: 002b:00007f71c0483038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.672222][ T8506] RAX: ffffffffffffffda RBX: 00007f71bf7b6160 RCX: 00007f71bf58e169 [ 304.672233][ T8506] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000005 [ 304.672242][ T8506] RBP: 00007f71c0483090 R08: 0000200000000300 R09: 0000000000000000 [ 304.672252][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.672262][ T8506] R13: 0000000000000000 R14: 00007f71bf7b6160 R15: 00007fff1715a068 [ 304.672283][ T8506] [ 304.902880][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.923886][ T8471] tipc: Disabling bearer [ 306.100225][ T30] audit: type=1400 audit(1744790559.783:415): avc: denied { map } for pid=8516 comm="syz.3.670" path="socket:[18707]" dev="sockfs" ino=18707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.124970][ T30] audit: type=1400 audit(1744790559.803:416): avc: denied { write } for pid=8516 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.145037][ T30] audit: type=1400 audit(1744790559.803:417): avc: denied { nlmsg_write } for pid=8516 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.679696][ T8533] FAULT_INJECTION: forcing a failure. [ 307.679696][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.695748][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.4.677 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 307.695770][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.695780][ T8533] Call Trace: [ 307.695785][ T8533] [ 307.695792][ T8533] dump_stack_lvl+0x16c/0x1f0 [ 307.695818][ T8533] should_fail_ex+0x512/0x640 [ 307.695839][ T8533] _copy_from_iter+0x2a4/0x15b0 [ 307.695860][ T8533] ? __alloc_skb+0x200/0x380 [ 307.695880][ T8533] ? __pfx__copy_from_iter+0x10/0x10 [ 307.695901][ T8533] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 307.695931][ T8533] netlink_sendmsg+0x829/0xdd0 [ 307.695957][ T8533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.695988][ T8533] ____sys_sendmsg+0xa95/0xc70 [ 307.696014][ T8533] ? copy_msghdr_from_user+0x10a/0x160 [ 307.696033][ T8533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.696065][ T8533] ___sys_sendmsg+0x134/0x1d0 [ 307.696085][ T8533] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.696133][ T8533] __sys_sendmsg+0x16d/0x220 [ 307.696153][ T8533] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.696180][ T8533] ? rcu_is_watching+0x12/0xc0 [ 307.696208][ T8533] do_syscall_64+0xcd/0x260 [ 307.696232][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.696248][ T8533] RIP: 0033:0x7fd542b8e169 [ 307.696261][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.696277][ T8533] RSP: 002b:00007fd543a95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.696292][ T8533] RAX: ffffffffffffffda RBX: 00007fd542db6080 RCX: 00007fd542b8e169 [ 307.696302][ T8533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 307.696311][ T8533] RBP: 00007fd543a95090 R08: 0000000000000000 R09: 0000000000000000 [ 307.696320][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.696329][ T8533] R13: 0000000000000000 R14: 00007fd542db6080 R15: 00007ffd61633c98 [ 307.696350][ T8533] [ 308.205452][ T30] audit: type=1400 audit(1744790561.873:418): avc: denied { read } for pid=8545 comm="syz.2.680" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.385953][ T971] libceph: connect (1)[c::]:6789 error -101 [ 308.401582][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 308.446148][ T30] audit: type=1400 audit(1744790561.873:419): avc: denied { open } for pid=8545 comm="syz.2.680" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.490247][ T30] audit: type=1400 audit(1744790561.953:420): avc: denied { ioctl } for pid=8545 comm="syz.2.680" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.680315][ T30] audit: type=1400 audit(1744790562.363:421): avc: denied { create } for pid=8552 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 308.700603][ T30] audit: type=1400 audit(1744790562.363:422): avc: denied { write } for pid=8552 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 308.723944][ T9] libceph: connect (1)[c::]:6789 error -101 [ 308.731363][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 309.260778][ T9] libceph: connect (1)[c::]:6789 error -101 [ 309.285914][ T8548] ceph: No mds server is up or the cluster is laggy [ 309.305456][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 311.309040][ T30] audit: type=1400 audit(1744790564.993:423): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 311.798768][ T30] audit: type=1400 audit(1744790565.483:424): avc: denied { kexec_image_load } for pid=8593 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 312.125344][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 312.506021][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.532015][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.545537][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.550531][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 312.553549][ T9] usb 1-1: Manufacturer: syz [ 312.566615][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 312.580396][ T9] usb 1-1: config 0 descriptor?? [ 312.792673][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.806159][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.862673][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 312.871578][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 312.880611][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 313.191805][ T8604] ceph: No mds server is up or the cluster is laggy [ 313.192298][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 313.242282][ T9] usb 1-1: USB disconnect, device number 9 [ 313.286277][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 314.417008][ T5865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 315.011828][ T8632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=8632 comm=syz.3.702 [ 315.059726][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 315.378245][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 315.437246][ T5865] usb 5-1: device descriptor read/all, error -71 [ 315.708620][ T30] audit: type=1400 audit(1744790569.393:425): avc: denied { write } for pid=8634 comm="syz.0.703" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 315.755228][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 315.768059][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.796474][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.806546][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.816920][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.832389][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.841580][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.985990][ T5868] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 316.056851][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 316.067658][ T9] usbtmc 2-1:16.0: can't read capabilities [ 316.080075][ T30] audit: type=1400 audit(1744790569.763:426): avc: denied { create } for pid=8641 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.188509][ T5868] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 316.205062][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.216085][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.227935][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.236097][ T5868] usb 4-1: Product: syz [ 316.240410][ T5868] usb 4-1: Manufacturer: syz [ 316.245080][ T5868] usb 4-1: SerialNumber: syz [ 316.688289][ T5868] usb 4-1: 0:2 : does not exist [ 316.708117][ T5868] usb 4-1: USB disconnect, device number 20 [ 316.738734][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.795493][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.838546][ T30] audit: type=1400 audit(1744790570.523:427): avc: denied { read } for pid=8647 comm="syz.4.707" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 318.119885][ T5868] usb 2-1: USB disconnect, device number 12 [ 320.025371][ T5868] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 321.629369][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 321.659397][ T5868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.698469][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.729570][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.765586][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.784257][ T5868] usb 5-1: Product: syz [ 321.790340][ T5868] usb 5-1: Manufacturer: syz [ 321.798362][ T5868] usb 5-1: SerialNumber: syz [ 321.935455][ T8697] FAULT_INJECTION: forcing a failure. [ 321.935455][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 321.960735][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.3.721 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 321.960761][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.960771][ T8697] Call Trace: [ 321.960777][ T8697] [ 321.960784][ T8697] dump_stack_lvl+0x16c/0x1f0 [ 321.960814][ T8697] should_fail_ex+0x512/0x640 [ 321.960836][ T8697] should_failslab+0xc2/0x120 [ 321.960855][ T8697] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 321.960873][ T8697] ? skb_clone+0x190/0x3f0 [ 321.960898][ T8697] skb_clone+0x190/0x3f0 [ 321.960919][ T8697] netlink_deliver_tap+0xabd/0xd30 [ 321.960947][ T8697] netlink_unicast+0x5df/0x7f0 [ 321.960973][ T8697] ? __pfx_netlink_unicast+0x10/0x10 [ 321.961003][ T8697] netlink_sendmsg+0x8d1/0xdd0 [ 321.961029][ T8697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.961062][ T8697] ____sys_sendmsg+0xa95/0xc70 [ 321.961088][ T8697] ? copy_msghdr_from_user+0x10a/0x160 [ 321.961107][ T8697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.961144][ T8697] ___sys_sendmsg+0x134/0x1d0 [ 321.961170][ T8697] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.961223][ T8697] __sys_sendmsg+0x16d/0x220 [ 321.961243][ T8697] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.961271][ T8697] ? rcu_is_watching+0x12/0xc0 [ 321.961300][ T8697] do_syscall_64+0xcd/0x260 [ 321.961324][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.961341][ T8697] RIP: 0033:0x7f2d0298e169 [ 321.961354][ T8697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.961370][ T8697] RSP: 002b:00007f2d03780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.961386][ T8697] RAX: ffffffffffffffda RBX: 00007f2d02bb5fa0 RCX: 00007f2d0298e169 [ 321.961396][ T8697] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 321.961406][ T8697] RBP: 00007f2d03780090 R08: 0000000000000000 R09: 0000000000000000 [ 321.961416][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.961425][ T8697] R13: 0000000000000000 R14: 00007f2d02bb5fa0 R15: 00007fff79c95c98 [ 321.961448][ T8697] [ 322.172297][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.061575][ T30] audit: type=1400 audit(1744790577.603:428): avc: denied { create } for pid=8713 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 324.673919][ T5868] usb 5-1: 0:2 : does not exist [ 324.723705][ T5868] usb 5-1: USB disconnect, device number 18 [ 324.793335][ T30] audit: type=1400 audit(1744790578.473:429): avc: denied { connect } for pid=8724 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 324.895538][ T1201] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 325.130667][ T1201] usb 3-1: Using ep0 maxpacket: 8 [ 325.170259][ T1201] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.181046][ T1201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.192517][ T1201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.204470][ T1201] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.220805][ T1201] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.229918][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.848566][ T1201] usb 3-1: GET_CAPABILITIES returned 0 [ 326.184762][ T1201] usbtmc 3-1:16.0: can't read capabilities [ 326.357259][ T30] audit: type=1400 audit(1744790579.973:430): avc: denied { write } for pid=8749 comm="syz.3.736" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.638105][ T8759] @: renamed from vlan0 (while UP) [ 326.794574][ T5938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 326.984217][ T30] audit: type=1400 audit(1744790580.323:431): avc: denied { ioctl } for pid=8749 comm="syz.3.736" path="socket:[20217]" dev="sockfs" ino=20217 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.195245][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 327.235772][ T5868] usb 3-1: USB disconnect, device number 23 [ 327.551132][ T5938] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 327.859423][ T5938] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.917816][ T5938] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 327.944213][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.987079][ T5938] usb 2-1: Product: syz [ 327.987192][ T8765] nvme_fabrics: missing parameter 'transport=%s' [ 327.991328][ T5938] usb 2-1: Manufacturer: syz [ 327.997989][ T8765] nvme_fabrics: missing parameter 'nqn=%s' [ 328.016152][ T5938] usb 2-1: SerialNumber: syz [ 328.070230][ T5938] usb 2-1: config 0 descriptor?? [ 328.171978][ T5938] usb 2-1: can't set config #0, error -71 [ 328.203784][ T5938] usb 2-1: USB disconnect, device number 13 [ 328.454667][ T8772] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[8772] [ 328.925938][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 329.378762][ T30] audit: type=1400 audit(1744790583.063:432): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 329.750916][ T10] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 329.759178][ T10] usb 2-1: config 0 has no interface number 0 [ 329.767500][ T10] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 330.399802][ T10] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 330.413807][ T10] usb 2-1: config 0 interface 255 has no altsetting 0 [ 330.573300][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.649982][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.683597][ T10] usb 2-1: config 0 descriptor?? [ 330.700420][ T10] cp210x 2-1:0.255: cp210x converter detected [ 331.051004][ T5868] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 331.192843][ T8811] Driver unsupported XDP return value 0 on prog (id 116) dev N/A, expect packet loss! [ 331.612955][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.621611][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.645605][ T10] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 331.655749][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 331.687547][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 331.719817][ T10] usb 2-1: USB disconnect, device number 14 [ 331.725800][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 331.752973][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.766161][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.773947][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.791715][ T10] cp210x 2-1:0.255: device disconnected [ 331.803303][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.815341][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 331.825517][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.835571][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 331.857498][ T58] usb 3-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 331.870195][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.870561][ T58] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.879319][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.907375][ T58] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 331.916967][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.925139][ T58] usb 3-1: Product: syz [ 331.933747][ T58] usb 3-1: Manufacturer: syz [ 331.939114][ T58] usb 3-1: SerialNumber: syz [ 331.955020][ T58] usb 3-1: config 0 descriptor?? [ 332.016900][ T5938] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 332.025328][ T5938] usb 1-1: config 0 has no interface number 0 [ 332.048932][ T5938] usb 1-1: config 0 interface 141 altsetting 9 endpoint 0x2 has invalid maxpacket 16734, setting to 1024 [ 332.081175][ T5938] usb 1-1: config 0 interface 141 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 332.099683][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 332.106271][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 332.115273][ T5938] usb 1-1: config 0 interface 141 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 332.135534][ T5938] usb 1-1: config 0 interface 141 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 332.155291][ T5938] usb 1-1: config 0 interface 141 has no altsetting 0 [ 332.253726][ T5938] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0123, bcdDevice=62.2d [ 332.350285][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.426420][ T30] audit: type=1400 audit(1744790586.073:433): avc: denied { bind } for pid=8812 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.450607][ T8815] netlink: 52 bytes leftover after parsing attributes in process `syz.1.751'. [ 332.479153][ T8815] netlink: 'syz.1.751': attribute type 58 has an invalid length. [ 332.491946][ T30] audit: type=1400 audit(1744790586.073:434): avc: denied { write } for pid=8812 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.512758][ T5938] usb 1-1: config 0 descriptor?? [ 333.331266][ T5868] usb 4-1: USB disconnect, device number 21 [ 334.105579][ T5938] usb 1-1: string descriptor 0 read error: -71 [ 334.545049][ T5938] option 1-1:0.141: GSM modem (1-port) converter detected [ 334.585271][ T30] audit: type=1400 audit(1744790588.243:435): avc: denied { write } for pid=8837 comm="syz.1.758" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 334.851605][ T5938] usb 1-1: USB disconnect, device number 10 [ 335.444401][ T5938] option 1-1:0.141: device disconnected [ 335.473849][ T1201] usb 3-1: USB disconnect, device number 24 [ 336.084535][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 336.519021][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.553378][ T5938] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 336.579898][ T5938] usb 1-1: can't read configurations, error -71 [ 337.608759][ T58] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 337.778758][ T5865] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 338.305382][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 338.504570][ T5938] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 338.593783][ T58] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 338.631779][ T58] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.669288][ T58] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 338.700355][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 338.718297][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.785441][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 338.925290][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 338.976558][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.130235][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.146769][ T5938] usb 3-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 339.157133][ T58] usb 4-1: Product: syz [ 339.157152][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 339.161272][ T58] usb 4-1: Manufacturer: syz [ 339.161291][ T58] usb 4-1: SerialNumber: syz [ 339.162493][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.185599][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.195040][ T58] usb 4-1: config 0 descriptor?? [ 339.208198][ T5938] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 339.222251][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.232281][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.245371][ T5938] usb 3-1: Product: syz [ 339.249528][ T5938] usb 3-1: Manufacturer: syz [ 339.254137][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.264780][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 339.296115][ T10] usb 1-1: config 0 has no interface number 0 [ 339.302357][ T5938] usb 3-1: SerialNumber: syz [ 339.302635][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 339.319786][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.319840][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.341895][ T5938] usb 3-1: config 0 descriptor?? [ 339.350797][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.364833][ T10] usb 1-1: Product: syz [ 339.372134][ T10] usb 1-1: Manufacturer: syz [ 339.382221][ T10] usb 1-1: SerialNumber: syz [ 339.391961][ T10] usb 1-1: config 0 descriptor?? [ 339.439322][ T10] smsc75xx v1.0.0 [ 339.689053][ T5865] usb 2-1: GET_CAPABILITIES returned 0 [ 339.706839][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 340.307472][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 340.343956][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 341.033457][ T9] usb 4-1: USB disconnect, device number 22 [ 341.507746][ T8907] FAULT_INJECTION: forcing a failure. [ 341.507746][ T8907] name failslab, interval 1, probability 0, space 0, times 0 [ 341.521098][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.4.774 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 341.521114][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.521120][ T8907] Call Trace: [ 341.521124][ T8907] [ 341.521128][ T8907] dump_stack_lvl+0x16c/0x1f0 [ 341.521152][ T8907] should_fail_ex+0x512/0x640 [ 341.521169][ T8907] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 341.521204][ T8907] should_failslab+0xc2/0x120 [ 341.521220][ T8907] __kmalloc_cache_noprof+0x6a/0x3e0 [ 341.521235][ T8907] ? arch_stack_walk+0xa6/0x100 [ 341.521249][ T8907] ? kvm_arch_vcpu_ioctl+0x232e/0x4f00 [ 341.521266][ T8907] kvm_arch_vcpu_ioctl+0x232e/0x4f00 [ 341.521283][ T8907] ? stack_trace_save+0x8e/0xc0 [ 341.521305][ T8907] ? stack_depot_save_flags+0x28/0xa50 [ 341.521322][ T8907] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 341.521340][ T8907] ? __lock_acquire+0xaa4/0x1ba0 [ 341.521358][ T8907] ? kasan_save_stack+0x42/0x60 [ 341.521369][ T8907] ? kasan_save_stack+0x33/0x60 [ 341.521377][ T8907] ? kasan_save_track+0x14/0x30 [ 341.521386][ T8907] ? kasan_save_free_info+0x3b/0x60 [ 341.521399][ T8907] ? __kasan_slab_free+0x51/0x70 [ 341.521408][ T8907] ? kfree+0x2b6/0x4d0 [ 341.521421][ T8907] ? tomoyo_path_number_perm+0x470/0x580 [ 341.521438][ T8907] ? security_file_ioctl+0x9b/0x240 [ 341.521458][ T8907] ? __x64_sys_ioctl+0xb7/0x200 [ 341.521481][ T8907] ? __lock_acquire+0xaa4/0x1ba0 [ 341.521503][ T8907] ? __mutex_trylock_common+0xe9/0x250 [ 341.521515][ T8907] ? __pfx___mutex_trylock_common+0x10/0x10 [ 341.521525][ T8907] ? __pfx___might_resched+0x10/0x10 [ 341.521540][ T8907] ? rcu_is_watching+0x12/0xc0 [ 341.521553][ T8907] ? trace_contention_end+0xdd/0x130 [ 341.521563][ T8907] ? __mutex_lock+0x1ca/0xb90 [ 341.521583][ T8907] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 341.521609][ T8907] ? __pfx___mutex_lock+0x10/0x10 [ 341.521637][ T8907] ? tomoyo_path_number_perm+0x18d/0x580 [ 341.521656][ T8907] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 341.521670][ T8907] kvm_vcpu_ioctl+0x1232/0x1680 [ 341.521687][ T8907] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 341.521707][ T8907] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 341.521731][ T8907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 341.521762][ T8907] ? hook_file_ioctl_common+0x145/0x410 [ 341.521792][ T8907] ? selinux_file_ioctl+0x180/0x270 [ 341.521808][ T8907] ? selinux_file_ioctl+0xb4/0x270 [ 341.521823][ T8907] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 341.521840][ T8907] __x64_sys_ioctl+0x190/0x200 [ 341.521855][ T8907] do_syscall_64+0xcd/0x260 [ 341.521878][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.521897][ T8907] RIP: 0033:0x7fd542b8e169 [ 341.521910][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.521924][ T8907] RSP: 002b:00007fd543ab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.521939][ T8907] RAX: ffffffffffffffda RBX: 00007fd542db5fa0 RCX: 00007fd542b8e169 [ 341.521950][ T8907] RDX: 0000200000000ac0 RSI: 000000008400ae8e RDI: 0000000000000005 [ 341.521959][ T8907] RBP: 00007fd543ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.521969][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.521978][ T8907] R13: 0000000000000000 R14: 00007fd542db5fa0 R15: 00007ffd61633c98 [ 341.521998][ T8907] [ 341.873684][ T5868] usb 2-1: USB disconnect, device number 15 [ 342.003790][ T5938] usb 3-1: USB disconnect, device number 25 [ 342.082206][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 342.662932][ T8920] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 342.682267][ T30] audit: type=1400 audit(1744790595.903:436): avc: denied { read } for pid=8909 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.684821][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 342.712409][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 342.722070][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 342.733281][ T10] usb 1-1: USB disconnect, device number 13 [ 342.748513][ T58] IPVS: starting estimator thread 0... [ 342.792234][ T30] audit: type=1400 audit(1744790595.973:437): avc: denied { connect } for pid=8909 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.846745][ T30] audit: type=1400 audit(1744790595.983:438): avc: denied { write } for pid=8909 comm="syz.3.775" path="socket:[21701]" dev="sockfs" ino=21701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.895361][ T8922] IPVS: using max 77 ests per chain, 184800 per kthread [ 343.270032][ T30] audit: type=1400 audit(1744790596.943:439): avc: denied { bind } for pid=8925 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.290121][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.106724][ T30] audit: type=1400 audit(1744790598.783:440): avc: denied { listen } for pid=8936 comm="syz.1.781" lport=37721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.185256][ T30] audit: type=1400 audit(1744790598.853:441): avc: denied { accept } for pid=8936 comm="syz.1.781" lport=37721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.208036][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.775404][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 345.815253][ T5868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 345.986112][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 346.038502][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 346.045203][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.064820][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.074911][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.114967][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 346.145189][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.155351][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.167729][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.185876][ T10] usb 5-1: config 0 descriptor?? [ 346.205391][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.225321][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.592122][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 346.615712][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 346.844438][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.855431][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.856684][ T10] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 346.901408][ T10] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 346.936339][ T10] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 346.959043][ T10] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 347.004098][ T10] stadia 0003:18D1:9400.0004: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.4-1/input0 [ 347.070494][ T10] stadia 0003:18D1:9400.0004: no inputs found [ 347.091568][ T10] stadia 0003:18D1:9400.0004: force feedback init failed [ 347.150758][ T10] usb 5-1: USB disconnect, device number 19 [ 348.119952][ T30] audit: type=1400 audit(1744790601.803:442): avc: denied { ioctl } for pid=8988 comm="syz.0.795" path="socket:[21879]" dev="sockfs" ino=21879 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 349.131811][ T30] audit: type=1400 audit(1744790602.193:443): avc: denied { read } for pid=8988 comm="syz.0.795" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.403152][ T10] usb 4-1: USB disconnect, device number 23 [ 349.413929][ T30] audit: type=1400 audit(1744790602.193:444): avc: denied { open } for pid=8988 comm="syz.0.795" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.434844][ T8994] binfmt_misc: register: failed to install interpreter file ./file0 [ 349.437336][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.464055][ T8996] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 349.484815][ T30] audit: type=1400 audit(1744790602.193:445): avc: denied { create } for pid=8988 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 349.504375][ T30] audit: type=1400 audit(1744790602.193:446): avc: denied { accept } for pid=8988 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 349.534240][ T30] audit: type=1400 audit(1744790602.193:447): avc: denied { ioctl } for pid=8988 comm="syz.0.795" path="socket:[20936]" dev="sockfs" ino=20936 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 349.607975][ T8996] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 349.929155][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.133131][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.361482][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.375289][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.384487][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.465275][ T30] audit: type=1400 audit(1744790604.123:448): avc: denied { read write } for pid=9008 comm="syz.2.800" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 350.489634][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.510930][ T8994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.518534][ T30] audit: type=1400 audit(1744790604.123:449): avc: denied { open } for pid=9008 comm="syz.2.800" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 350.520830][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.696016][ T9016] ======================================================= [ 350.696016][ T9016] WARNING: The mand mount option has been deprecated and [ 350.696016][ T9016] and is ignored by this kernel. Remove the mand [ 350.696016][ T9016] option from the mount to silence this warning. [ 350.696016][ T9016] ======================================================= [ 350.731389][ T30] audit: type=1400 audit(1744790604.383:450): avc: denied { remount } for pid=9013 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 350.852105][ T30] audit: type=1400 audit(1744790604.533:451): avc: denied { write } for pid=9019 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.117517][ T1201] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 351.276790][ T1201] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.294770][ T1201] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.319127][ T1201] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.362140][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.402932][ T9020] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 351.420122][ T1201] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.960266][ T1201] usb 4-1: USB disconnect, device number 24 [ 352.216661][ T971] usb 2-1: USB disconnect, device number 16 [ 352.335376][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.058738][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.071880][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.082351][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.082460][ T1201] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 353.091340][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 353.091366][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 353.129973][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.142831][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.151839][ T10] usb 1-1: Product: syz [ 353.160551][ T10] usb 1-1: Manufacturer: syz [ 353.169135][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 353.209925][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 353.217340][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 353.223392][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 353.278876][ T1201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.338351][ T1201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.415017][ T1201] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.445178][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.498486][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.538700][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.565361][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 353.596746][ T1201] usb 3-1: SerialNumber: syz [ 354.709965][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 355.753373][ T1201] usb 3-1: can't set config #1, error -71 [ 355.761376][ T1201] usb 3-1: USB disconnect, device number 26 [ 355.958699][ T9061] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 356.022420][ T9061] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 356.058987][ T24] usb 5-1: device descriptor read/all, error -71 [ 356.825464][ T9069] Cannot find del_set index 4 as target [ 356.855269][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 356.855306][ T30] audit: type=1400 audit(1744790610.483:454): avc: denied { ioctl } for pid=9067 comm="syz.1.816" path="socket:[21129]" dev="sockfs" ino=21129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.130179][ T10] usb 1-1: USB disconnect, device number 14 [ 357.208421][ T9068] bridge0: port 3(netdevsim2) entered blocking state [ 357.215132][ T9068] bridge0: port 3(netdevsim2) entered disabled state [ 357.221966][ T9068] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 357.230088][ T9068] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 357.237790][ T9068] bridge0: port 3(netdevsim2) entered blocking state [ 357.244618][ T9068] bridge0: port 3(netdevsim2) entered forwarding state [ 357.379150][ T1201] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 357.400090][ T9068] nvme_fabrics: missing parameter 'transport=%s' [ 357.406474][ T9068] nvme_fabrics: missing parameter 'nqn=%s' [ 357.527351][ T9084] lo: entered promiscuous mode [ 357.547073][ T1201] usb 3-1: Using ep0 maxpacket: 16 [ 357.553583][ T1201] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 357.645225][ T58] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.689754][ T9084] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 358.412667][ T1201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.518764][ T1201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.607026][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 358.620043][ T1201] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.704893][ T58] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 358.738671][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.769787][ T58] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.779825][ T1201] usb 3-1: Product: syz [ 358.783995][ T1201] usb 3-1: Manufacturer: syz [ 358.834249][ T1201] usb 3-1: SerialNumber: syz [ 359.066039][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.109883][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.139955][ T30] audit: type=1400 audit(1744790612.823:455): avc: denied { append } for pid=9099 comm="syz.1.823" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 359.304060][ T58] usb 4-1: string descriptor 0 read error: -71 [ 359.313653][ T9105] netlink: 11 bytes leftover after parsing attributes in process `syz.2.817'. [ 359.774495][ T58] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 359.791658][ T1201] usb 3-1: 0:2 : does not exist [ 360.092866][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.107335][ T1201] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 360.120327][ T58] usb 4-1: config 0 descriptor?? [ 360.172952][ T1201] usb 3-1: USB disconnect, device number 27 [ 360.185496][ T58] usb 4-1: can't set config #0, error -71 [ 360.235359][ T58] usb 4-1: USB disconnect, device number 25 [ 360.268958][ T30] audit: type=1400 audit(1744790613.953:456): avc: denied { remount } for pid=9113 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 361.665268][ T1201] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 361.875245][ T1201] usb 2-1: Using ep0 maxpacket: 8 [ 361.902423][ T1201] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.921697][ T1201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.940576][ T1201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.978776][ T9139] tipc: New replicast peer: 255.255.255.255 [ 361.987125][ T9139] tipc: Enabled bearer , priority 10 [ 362.334602][ T1201] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.371933][ T1201] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.389518][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.661333][ T1201] usb 2-1: GET_CAPABILITIES returned 0 [ 362.671362][ T1201] usbtmc 2-1:16.0: can't read capabilities [ 362.688604][ T9145] FAULT_INJECTION: forcing a failure. [ 362.688604][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 362.724033][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.3.835 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 362.724061][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.724070][ T9145] Call Trace: [ 362.724076][ T9145] [ 362.724082][ T9145] dump_stack_lvl+0x16c/0x1f0 [ 362.724111][ T9145] should_fail_ex+0x512/0x640 [ 362.724128][ T9145] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 362.724149][ T9145] should_failslab+0xc2/0x120 [ 362.724167][ T9145] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 362.724185][ T9145] ? __alloc_skb+0x2b2/0x380 [ 362.724206][ T9145] __alloc_skb+0x2b2/0x380 [ 362.724223][ T9145] ? __pfx___alloc_skb+0x10/0x10 [ 362.724243][ T9145] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 362.724269][ T9145] netlink_alloc_large_skb+0x69/0x130 [ 362.724292][ T9145] netlink_sendmsg+0x6a1/0xdd0 [ 362.724321][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.724350][ T9145] ____sys_sendmsg+0xa95/0xc70 [ 362.724374][ T9145] ? copy_msghdr_from_user+0x10a/0x160 [ 362.724392][ T9145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.724426][ T9145] ___sys_sendmsg+0x134/0x1d0 [ 362.724446][ T9145] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.724511][ T9145] __sys_sendmsg+0x16d/0x220 [ 362.724531][ T9145] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.724559][ T9145] ? rcu_is_watching+0x12/0xc0 [ 362.724586][ T9145] do_syscall_64+0xcd/0x260 [ 362.724610][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.724628][ T9145] RIP: 0033:0x7f2d0298e169 [ 362.724642][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.724657][ T9145] RSP: 002b:00007f2d03780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.724674][ T9145] RAX: ffffffffffffffda RBX: 00007f2d02bb5fa0 RCX: 00007f2d0298e169 [ 362.724684][ T9145] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 362.724694][ T9145] RBP: 00007f2d03780090 R08: 0000000000000000 R09: 0000000000000000 [ 362.724704][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.724713][ T9145] R13: 0000000000000000 R14: 00007f2d02bb5fa0 R15: 00007fff79c95c98 [ 362.724735][ T9145] [ 362.981517][ T971] usb 2-1: USB disconnect, device number 17 [ 363.022821][ T30] audit: type=1400 audit(1744790616.703:457): avc: denied { create } for pid=9146 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 363.606984][ T30] audit: type=1400 audit(1744790617.293:458): avc: denied { setopt } for pid=9150 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.880166][ T30] audit: type=1400 audit(1744790617.563:459): avc: denied { read write } for pid=9158 comm="syz.0.840" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 363.904248][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.869861][ T5868] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 364.877600][ T30] audit: type=1400 audit(1744790617.593:460): avc: denied { open } for pid=9158 comm="syz.0.840" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 364.901579][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.078345][ T5868] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 365.109057][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.376661][ T5868] usb 4-1: Product: syz [ 365.432087][ T5868] usb 4-1: Manufacturer: syz [ 365.452929][ T5868] usb 4-1: SerialNumber: syz [ 365.476992][ T5868] usb 4-1: config 0 descriptor?? [ 365.494581][ T5868] ch341 4-1:0.0: ch341-uart converter detected [ 365.613179][ T30] audit: type=1400 audit(1744790619.223:461): avc: denied { mount } for pid=9178 comm="syz.1.844" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 365.634938][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.154820][ T9170] ceph: No mds server is up or the cluster is laggy [ 366.618829][ T5868] usb 4-1: failed to receive control message: -110 [ 366.625406][ T30] audit: type=1400 audit(1744790620.293:462): avc: denied { connect } for pid=9183 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.626898][ T9188] FAULT_INJECTION: forcing a failure. [ 366.626898][ T9188] name failslab, interval 1, probability 0, space 0, times 0 [ 366.659434][ T5868] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 366.673036][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.2.847 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 366.673060][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.673070][ T9188] Call Trace: [ 366.673075][ T9188] [ 366.673082][ T9188] dump_stack_lvl+0x16c/0x1f0 [ 366.673109][ T9188] should_fail_ex+0x512/0x640 [ 366.673126][ T9188] ? fs_reclaim_acquire+0xae/0x150 [ 366.673151][ T9188] ? tomoyo_encode2+0x100/0x3e0 [ 366.673173][ T9188] should_failslab+0xc2/0x120 [ 366.673193][ T9188] __kmalloc_noprof+0xd2/0x510 [ 366.673209][ T9188] ? d_absolute_path+0x136/0x1a0 [ 366.673234][ T9188] tomoyo_encode2+0x100/0x3e0 [ 366.673260][ T9188] tomoyo_encode+0x29/0x50 [ 366.673282][ T9188] tomoyo_realpath_from_path+0x18f/0x6e0 [ 366.673312][ T9188] tomoyo_path_number_perm+0x245/0x580 [ 366.673332][ T9188] ? tomoyo_path_number_perm+0x237/0x580 [ 366.673354][ T9188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.673376][ T9188] ? find_held_lock+0x2b/0x80 [ 366.673420][ T9188] ? find_held_lock+0x2b/0x80 [ 366.673440][ T9188] ? hook_file_ioctl_common+0x145/0x410 [ 366.673497][ T9188] ? __fget_files+0x20e/0x3c0 [ 366.673518][ T9188] security_file_ioctl+0x9b/0x240 [ 366.673542][ T9188] __x64_sys_ioctl+0xb7/0x200 [ 366.673566][ T9188] do_syscall_64+0xcd/0x260 [ 366.673591][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.673608][ T9188] RIP: 0033:0x7f71bf58e169 [ 366.673620][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.673636][ T9188] RSP: 002b:00007f71c04c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.673652][ T9188] RAX: ffffffffffffffda RBX: 00007f71bf7b5fa0 RCX: 00007f71bf58e169 [ 366.673664][ T9188] RDX: 0000000000000000 RSI: 0000000000005385 RDI: 0000000000000003 [ 366.673673][ T9188] RBP: 00007f71c04c5090 R08: 0000000000000000 R09: 0000000000000000 [ 366.673682][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.673691][ T9188] R13: 0000000000000000 R14: 00007f71bf7b5fa0 R15: 00007fff1715a068 [ 366.673752][ T9188] [ 366.673777][ T9188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.697569][ T30] audit: type=1400 audit(1744790620.383:463): avc: denied { ioctl } for pid=9189 comm="syz.4.848" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.060656][ T5938] usb 4-1: USB disconnect, device number 26 [ 367.093214][ T5938] ch341 4-1:0.0: device disconnected [ 368.215203][ T5868] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 368.305418][ T5938] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 368.627240][ T5868] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.694912][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 368.971800][ T5868] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.981792][ T5868] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 368.990896][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.003238][ T5938] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.014746][ T30] audit: type=1400 audit(1744790622.683:464): avc: denied { ioctl } for pid=9204 comm="syz.3.854" path="socket:[23557]" dev="sockfs" ino=23557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 369.057575][ T5938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.234458][ T9212] infiniband syz1: set down [ 369.239140][ T9212] infiniband syz1: added syzkaller0 [ 369.364108][ T5938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.388895][ T5938] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.403347][ T5938] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.413455][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.458203][ T9212] RDS/IB: syz1: added [ 369.462643][ T9212] smc: adding ib device syz1 with port count 1 [ 369.469650][ T9212] smc: ib device syz1 port 1 has pnetid [ 370.163182][ T5938] usb 3-1: GET_CAPABILITIES returned 0 [ 370.172629][ T5938] usbtmc 3-1:16.0: can't read capabilities [ 370.212242][ T6520] smc: removing ib device syz1 [ 370.383483][ T10] usb 3-1: USB disconnect, device number 28 [ 370.560690][ T971] libceph: connect (1)[c::]:6789 error -101 [ 370.575382][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 370.592005][ T971] libceph: connect (1)[c::]:6789 error -101 [ 370.604750][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 370.637201][ T9226] ceph: No mds server is up or the cluster is laggy [ 370.757652][ T9233] IPv6: NLM_F_REPLACE set, but no existing node found! [ 371.144041][ T5868] usb 1-1: string descriptor 0 read error: -71 [ 371.194762][ T5868] usb 1-1: USB disconnect, device number 15 [ 371.368131][ T9235] [U] tU =L [ 371.371969][ T9235] [U] 559#__FV!-׽9 C_T PM΍D*^Tce+Rt/JgB(\Iy$Â:^݀@&,<[ZG-G:4c p]gL2<2}݁. [ 371.390198][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.437677][ T9234] [U] k!cL./W HHtx5M@.b$ C3DqK [ 371.804311][ T30] audit: type=1400 audit(1744790625.483:465): avc: denied { mount } for pid=9242 comm="syz.3.862" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 372.381367][ T9259] fuse: Unknown parameter 'f' [ 373.223322][ T30] audit: type=1400 audit(1744790626.903:466): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.842979][ T30] audit: type=1400 audit(1744790627.523:467): avc: denied { ioctl } for pid=9274 comm="syz.0.871" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.892353][ T5868] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 374.136112][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 374.192434][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.207934][ T30] audit: type=1400 audit(1744790627.713:468): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.747544][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.791588][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.807722][ T30] audit: type=1400 audit(1744790627.713:469): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.834205][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.870123][ T30] audit: type=1400 audit(1744790627.723:470): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.899271][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.914196][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.002612][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 376.008919][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 376.125252][ T971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 376.221077][ T5938] usb 4-1: USB disconnect, device number 27 [ 377.585076][ T9306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.475562][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.481878][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.803895][ T9327] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.165295][ T971] usb 5-1: device descriptor read/64, error -71 [ 379.665440][ T971] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 379.835178][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 379.843674][ T971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 379.864021][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 379.877601][ T971] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 379.887964][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.896342][ T971] usb 5-1: Product: syz [ 379.901664][ T971] usb 5-1: Manufacturer: syz [ 379.906971][ T971] usb 5-1: SerialNumber: syz [ 379.918558][ T971] usb 5-1: config 0 descriptor?? [ 380.195031][ T971] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 380.222368][ T971] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 380.303473][ T971] usb 5-1: USB disconnect, device number 23 [ 381.045313][ T58] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 381.295779][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 381.361943][ T58] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.474788][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.593875][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.746410][ T58] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.688884][ T58] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.716403][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.946825][ T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 383.081600][ T58] usb 3-1: GET_CAPABILITIES returned 0 [ 383.102844][ T58] usbtmc 3-1:16.0: can't read capabilities [ 383.208554][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 383.225276][ T24] usb 5-1: config 0 has no interface number 0 [ 383.231379][ T24] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.267205][ T58] usb 3-1: USB disconnect, device number 30 [ 383.318940][ T24] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.345200][ T24] usb 5-1: config 0 interface 2 has no altsetting 0 [ 383.357659][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 383.465196][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.486904][ T24] usb 5-1: config 0 descriptor?? [ 383.733368][ T30] audit: type=1400 audit(1744790637.413:471): avc: denied { connect } for pid=9372 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.000686][ T9379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.461497][ T24] usb 5-1: USB disconnect, device number 24 [ 385.699406][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 385.986176][ T9399] syz_tun: entered allmulticast mode [ 385.992368][ T9397] syz_tun: left allmulticast mode [ 387.925526][ T1201] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 388.415338][ T1201] usb 4-1: Using ep0 maxpacket: 8 [ 388.426129][ T1201] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.445187][ T1201] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.473823][ T9425] veth0_vlan: entered allmulticast mode [ 388.490714][ T9425] veth0_vlan: left promiscuous mode [ 388.497422][ T9425] veth0_vlan: entered promiscuous mode [ 388.510612][ T1201] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.713574][ T1201] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.727790][ T1201] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.736926][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.152826][ T1201] usb 4-1: GET_CAPABILITIES returned 0 [ 389.182630][ T1201] usbtmc 4-1:16.0: can't read capabilities [ 389.385674][ T1201] usb 4-1: USB disconnect, device number 28 [ 389.543207][ T9439] loop0: detected capacity change from 0 to 7 [ 389.566518][ T9439] Dev loop0: unable to read RDB block 7 [ 389.572236][ T9439] loop0: unable to read partition table [ 389.579472][ T9439] loop0: partition table beyond EOD, truncated [ 389.585994][ T9439] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 389.585994][ T9439] ) failed (rc=-5) [ 389.683058][ T9439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=126 sclass=netlink_route_socket pid=9439 comm=syz.0.914 [ 389.698661][ T30] audit: type=1400 audit(1744790643.363:472): avc: denied { append } for pid=9437 comm="syz.0.914" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 390.543141][ T9437] delete_channel: no stack [ 390.701995][ T30] audit: type=1400 audit(1744790644.383:473): avc: denied { ioctl } for pid=9450 comm="syz.3.918" path="socket:[23186]" dev="sockfs" ino=23186 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 391.370745][ T9445] block nbd2: shutting down sockets [ 392.165276][ T30] audit: type=1400 audit(1744790645.833:474): avc: denied { ioctl } for pid=9466 comm="syz.4.922" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 392.416259][ T971] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 393.371547][ T971] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 393.390711][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.406124][ T30] audit: type=1400 audit(1744790647.093:475): avc: denied { shutdown } for pid=9478 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.548373][ T971] usb 1-1: Product: syz [ 394.289594][ T971] usb 1-1: Manufacturer: syz [ 394.294686][ T971] usb 1-1: SerialNumber: syz [ 394.299452][ T30] audit: type=1400 audit(1744790647.403:476): avc: denied { setopt } for pid=9478 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 394.325289][ T971] usb 1-1: config 0 descriptor?? [ 394.515911][ T971] libceph: connect (1)[c::]:6789 error -101 [ 394.665186][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 394.750695][ T971] usb 1-1: USB disconnect, device number 16 [ 394.867068][ T9494] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 394.879894][ T9494] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 394.894991][ T9494] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 394.920218][ T9494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 394.955724][ T9230] libceph: connect (1)[c::]:6789 error -101 [ 395.032599][ T9230] libceph: mon0 (1)[c::]:6789 connect error [ 395.731055][ T9496] syz.1.929 (9496): drop_caches: 2 [ 395.740666][ T9488] ceph: No mds server is up or the cluster is laggy [ 399.196744][ T9530] batman_adv: batadv0: Adding interface: gretap1 [ 399.203367][ T9530] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 399.421933][ T971] libceph: connect (1)[c::]:6789 error -101 [ 399.442103][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 399.743226][ T9230] libceph: connect (1)[c::]:6789 error -101 [ 399.771351][ T9230] libceph: mon0 (1)[c::]:6789 connect error [ 399.920688][ T9532] ceph: No mds server is up or the cluster is laggy [ 399.931157][ T971] libceph: connect (1)[c::]:6789 error -101 [ 399.943879][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 400.225572][ T9230] libceph: connect (1)[c::]:6789 error -101 [ 400.231737][ T9230] libceph: mon0 (1)[c::]:6789 connect error [ 400.850294][ T9230] libceph: connect (1)[c::]:6789 error -101 [ 400.856426][ T9230] libceph: mon0 (1)[c::]:6789 connect error [ 400.869477][ T9546] ceph: No mds server is up or the cluster is laggy [ 401.655031][ T30] audit: type=1400 audit(1744790654.953:477): avc: denied { name_bind } for pid=9559 comm="syz.2.946" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 401.896033][ T30] audit: type=1400 audit(1744790655.013:478): avc: denied { read write } for pid=9559 comm="syz.2.946" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 401.921876][ T30] audit: type=1400 audit(1744790655.013:479): avc: denied { open } for pid=9559 comm="syz.2.946" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 402.889417][ T30] audit: type=1400 audit(1744790656.573:480): avc: denied { mount } for pid=9570 comm="syz.0.948" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 403.058049][ T30] audit: type=1400 audit(1744790656.733:481): avc: denied { unmount } for pid=9570 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 404.231579][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 404.428503][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 404.438703][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'. [ 404.450113][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 404.460739][ T9603] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 404.487618][ T9603] batman_adv: batadv0: Adding interface: team0 [ 404.518270][ T9606] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 404.518977][ T9603] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.605385][ T9606] netlink: 2 bytes leftover after parsing attributes in process `syz.0.958'. [ 404.622995][ T9603] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 404.686232][ T30] audit: type=1400 audit(1744790658.373:482): avc: denied { bind } for pid=9602 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 404.795251][ T9606] team0: entered promiscuous mode [ 404.800312][ T9606] team_slave_0: entered promiscuous mode [ 404.949211][ T9606] team_slave_1: entered promiscuous mode [ 405.004253][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.120273][ T9606] batman_adv: batadv0: Interface activated: team0 [ 405.135418][ T9606] batman_adv: batadv0: Interface deactivated: team0 [ 405.142111][ T9606] batman_adv: batadv0: Removing interface: team0 [ 405.448872][ T9606] bridge0: port 3(team0) entered blocking state [ 405.467665][ T9606] bridge0: port 3(team0) entered disabled state [ 405.474094][ T9606] team0: entered allmulticast mode [ 405.488543][ T9606] team_slave_0: entered allmulticast mode [ 405.494362][ T9606] team_slave_1: entered allmulticast mode [ 405.536572][ T9606] bridge0: port 3(team0) entered blocking state [ 405.543707][ T9606] bridge0: port 3(team0) entered forwarding state [ 406.908977][ T30] audit: type=1400 audit(1744790660.583:483): avc: denied { ioctl } for pid=9632 comm="syz.2.966" path="socket:[24628]" dev="sockfs" ino=24628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.954619][ T9635] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 406.978916][ T9635] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 408.214951][ T5868] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 408.565242][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 408.648667][ T5868] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 408.735471][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.778854][ T971] libceph: connect (1)[c::]:6789 error -101 [ 408.795066][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 408.803122][ T5868] usb 3-1: Product: syz [ 408.808739][ T5868] usb 3-1: Manufacturer: syz [ 408.867646][ T5868] usb 3-1: SerialNumber: syz [ 409.583944][ T971] libceph: connect (1)[c::]:6789 error -101 [ 409.715465][ T5868] usb 3-1: config 0 descriptor?? [ 409.725207][ T9659] ceph: No mds server is up or the cluster is laggy [ 409.732038][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 409.746971][ T5868] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 409.865968][ T9230] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 410.055660][ T9230] usb 5-1: Using ep0 maxpacket: 8 [ 410.073403][ T9230] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.093480][ T9230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.124630][ T9230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.157886][ T9230] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.194103][ T9230] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.203863][ T9230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.247637][ T9680] input: syz1 as /devices/virtual/input/input8 [ 410.280436][ T9680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.980'. [ 410.483170][ T5868] gspca_stk1135: reg_w 0x0 err -110 [ 410.494116][ T9230] usb 5-1: GET_CAPABILITIES returned 0 [ 410.500950][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.507460][ T9230] usbtmc 5-1:16.0: can't read capabilities [ 410.513381][ T5868] gspca_stk1135: Sensor write failed [ 410.533208][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.615376][ T30] audit: type=1400 audit(1744790664.283:484): avc: denied { write } for pid=9685 comm="syz.3.981" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 410.937731][ T5868] gspca_stk1135: Sensor write failed [ 410.943262][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.949619][ T5868] gspca_stk1135: Sensor read failed [ 410.954809][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.961125][ T5868] gspca_stk1135: Sensor read failed [ 410.966404][ T5868] gspca_stk1135: Detected sensor type unknown (0x0) [ 410.972985][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.979305][ T5868] gspca_stk1135: Sensor read failed [ 410.984505][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 410.990832][ T5868] gspca_stk1135: Sensor read failed [ 410.996218][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 411.002528][ T5868] gspca_stk1135: Sensor write failed [ 411.010699][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 411.017039][ T5868] gspca_stk1135: Sensor write failed [ 411.022403][ T5868] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 411.069359][ T5868] usb 5-1: USB disconnect, device number 25 [ 413.524561][ T971] usb 3-1: USB disconnect, device number 31 [ 414.290064][ T9714] ceph: No mds server is up or the cluster is laggy [ 414.421372][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 414.439681][ T9729] macvtap1: entered allmulticast mode [ 414.445614][ T9729] veth0_macvtap: entered allmulticast mode [ 414.665197][ T971] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 414.815481][ T5865] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 415.095633][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 415.146520][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.227836][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.316721][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.516990][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.840784][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.915296][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 415.919176][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.237328][ T5865] usb 3-1: GET_CAPABILITIES returned 0 [ 416.286659][ T5865] usbtmc 3-1:16.0: can't read capabilities [ 416.473344][ T971] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 416.481800][ T971] usb 1-1: config 0 has no interface number 0 [ 416.495198][ T971] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 416.507776][ T971] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 416.586396][ T971] usb 1-1: New USB device found, idVendor=13d3, idProduct=3350, bcdDevice=8d.e5 [ 416.655636][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.665340][ T971] usb 1-1: Product: syz [ 416.675875][ T971] usb 1-1: Manufacturer: syz [ 416.682166][ T971] usb 1-1: SerialNumber: syz [ 416.837835][ T5865] usb 3-1: USB disconnect, device number 32 [ 416.838310][ T971] usb 1-1: config 0 descriptor?? [ 416.954999][ T30] audit: type=1400 audit(1744790670.633:485): avc: denied { create } for pid=9743 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 416.974949][ T30] audit: type=1400 audit(1744790670.633:486): avc: denied { write } for pid=9743 comm="syz.1.998" path="socket:[24462]" dev="sockfs" ino=24462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 417.017153][ T9744] syz.1.998 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 417.446704][ T9752] FAULT_INJECTION: forcing a failure. [ 417.446704][ T9752] name failslab, interval 1, probability 0, space 0, times 0 [ 417.459480][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.1.1000 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 417.459527][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.459537][ T9752] Call Trace: [ 417.459543][ T9752] [ 417.459552][ T9752] dump_stack_lvl+0x16c/0x1f0 [ 417.459579][ T9752] should_fail_ex+0x512/0x640 [ 417.459597][ T9752] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 417.459617][ T9752] should_failslab+0xc2/0x120 [ 417.459635][ T9752] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 417.459653][ T9752] ? getname_flags.part.0+0x4c/0x550 [ 417.459678][ T9752] getname_flags.part.0+0x4c/0x550 [ 417.459701][ T9752] getname_flags+0x93/0xf0 [ 417.459727][ T9752] __x64_sys_renameat2+0xc7/0x130 [ 417.459747][ T9752] do_syscall_64+0xcd/0x260 [ 417.459776][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.459793][ T9752] RIP: 0033:0x7f31e658e169 [ 417.459806][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.459821][ T9752] RSP: 002b:00007f31e7388038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 417.459838][ T9752] RAX: ffffffffffffffda RBX: 00007f31e67b6160 RCX: 00007f31e658e169 [ 417.459849][ T9752] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 417.459859][ T9752] RBP: 00007f31e7388090 R08: 0000000000000002 R09: 0000000000000000 [ 417.459869][ T9752] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 417.459879][ T9752] R13: 0000000000000000 R14: 00007f31e67b6160 R15: 00007fff300fed78 [ 417.459902][ T9752] [ 418.104847][ T971] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 418.123137][ T971] usb 1-1: USB disconnect, device number 17 [ 419.713848][ T971] libceph: connect (1)[c::]:6789 error -101 [ 419.760217][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 420.184803][ T971] libceph: connect (1)[c::]:6789 error -101 [ 420.205317][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 420.343833][ T30] audit: type=1400 audit(1744790674.023:487): avc: denied { ioctl } for pid=9776 comm="syz.2.1006" path="cgroup:[4026532937]" dev="nsfs" ino=4026532937 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.466637][ T9768] ceph: No mds server is up or the cluster is laggy [ 421.796038][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 421.834608][ T9798] macvtap1: entered allmulticast mode [ 421.868308][ T9798] veth0_macvtap: entered allmulticast mode [ 421.898624][ T30] audit: type=1400 audit(1744790675.583:488): avc: denied { listen } for pid=9800 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 422.016407][ T30] audit: type=1400 audit(1744790675.703:489): avc: denied { accept } for pid=9800 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 424.936166][ T9835] [ 424.936391][ T30] audit: type=1400 audit(1744790678.603:490): avc: denied { ioctl } for pid=9834 comm="syz.1.1022" path="socket:[25656]" dev="sockfs" ino=25656 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 424.938507][ T9835] ====================================================== [ 424.938516][ T9835] WARNING: possible circular locking dependency detected [ 424.938523][ T9835] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 424.984098][ T9835] ------------------------------------------------------ [ 424.991113][ T9835] syz.1.1022/9835 is trying to acquire lock: [ 424.997083][ T9835] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 425.006123][ T9835] [ 425.006123][ T9835] but task is already holding lock: [ 425.013467][ T9835] ffff8880509cad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 425.023460][ T9835] [ 425.023460][ T9835] which lock already depends on the new lock. [ 425.023460][ T9835] [ 425.033856][ T9835] [ 425.033856][ T9835] the existing dependency chain (in reverse order) is: [ 425.042853][ T9835] [ 425.042853][ T9835] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 425.051442][ T9835] __mutex_lock+0x199/0xb90 [ 425.056461][ T9835] smc_switch_to_fallback+0x2d/0x9f0 [ 425.062257][ T9835] smc_sendmsg+0x13d/0x520 [ 425.067185][ T9835] __sys_sendto+0x495/0x510 [ 425.072196][ T9835] __x64_sys_sendto+0xe0/0x1c0 [ 425.077472][ T9835] do_syscall_64+0xcd/0x260 [ 425.082480][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.088880][ T9835] [ 425.088880][ T9835] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 425.096528][ T9835] lock_sock_nested+0x41/0xf0 [ 425.101720][ T9835] sockopt_lock_sock+0x54/0x70 [ 425.107002][ T9835] do_ip_setsockopt+0xfe/0x3240 [ 425.112371][ T9835] ip_setsockopt+0x59/0xf0 [ 425.117294][ T9835] raw_setsockopt+0xb7/0x2a0 [ 425.122387][ T9835] do_sock_setsockopt+0x221/0x470 [ 425.127921][ T9835] __sys_setsockopt+0x1a0/0x230 [ 425.133284][ T9835] __x64_sys_setsockopt+0xbd/0x160 [ 425.138904][ T9835] do_syscall_64+0xcd/0x260 [ 425.143920][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.150317][ T9835] [ 425.150317][ T9835] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 425.157522][ T9835] __lock_acquire+0x1173/0x1ba0 [ 425.162874][ T9835] lock_acquire+0x179/0x350 [ 425.167895][ T9835] __mutex_lock+0x199/0xb90 [ 425.172917][ T9835] do_ip_getsockopt+0x1843/0x2220 [ 425.178448][ T9835] ip_getsockopt+0x9b/0x1e0 [ 425.183451][ T9835] tcp_getsockopt+0x9e/0x100 [ 425.188544][ T9835] smc_getsockopt+0x162/0x370 [ 425.193730][ T9835] do_sock_getsockopt+0x3fc/0x800 [ 425.199266][ T9835] __sys_getsockopt+0x12f/0x260 [ 425.204621][ T9835] __x64_sys_getsockopt+0xbd/0x160 [ 425.210240][ T9835] do_syscall_64+0xcd/0x260 [ 425.215249][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.221649][ T9835] [ 425.221649][ T9835] other info that might help us debug this: [ 425.221649][ T9835] [ 425.231857][ T9835] Chain exists of: [ 425.231857][ T9835] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 425.231857][ T9835] [ 425.245401][ T9835] Possible unsafe locking scenario: [ 425.245401][ T9835] [ 425.252833][ T9835] CPU0 CPU1 [ 425.258174][ T9835] ---- ---- [ 425.263515][ T9835] lock(&smc->clcsock_release_lock); [ 425.268870][ T9835] lock(sk_lock-AF_INET); [ 425.275783][ T9835] lock(&smc->clcsock_release_lock); [ 425.283656][ T9835] lock(rtnl_mutex); [ 425.287615][ T9835] [ 425.287615][ T9835] *** DEADLOCK *** [ 425.287615][ T9835] [ 425.295738][ T9835] 1 lock held by syz.1.1022/9835: [ 425.300737][ T9835] #0: ffff8880509cad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 425.311156][ T9835] [ 425.311156][ T9835] stack backtrace: [ 425.317020][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.1.1022 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 425.317038][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.317046][ T9835] Call Trace: [ 425.317051][ T9835] [ 425.317055][ T9835] dump_stack_lvl+0x116/0x1f0 [ 425.317074][ T9835] print_circular_bug+0x275/0x350 [ 425.317097][ T9835] check_noncircular+0x14c/0x170 [ 425.317119][ T9835] __lock_acquire+0x1173/0x1ba0 [ 425.317134][ T9835] lock_acquire+0x179/0x350 [ 425.317146][ T9835] ? do_ip_getsockopt+0x1843/0x2220 [ 425.317160][ T9835] ? __pfx___might_resched+0x10/0x10 [ 425.317180][ T9835] __mutex_lock+0x199/0xb90 [ 425.317198][ T9835] ? do_ip_getsockopt+0x1843/0x2220 [ 425.317209][ T9835] ? __might_fault+0xe3/0x190 [ 425.317223][ T9835] ? __might_fault+0xe3/0x190 [ 425.317235][ T9835] ? __might_fault+0x13b/0x190 [ 425.317247][ T9835] ? do_ip_getsockopt+0x1843/0x2220 [ 425.317259][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 425.317278][ T9835] ? _copy_from_user+0x59/0xd0 [ 425.317295][ T9835] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 425.317318][ T9835] ? do_ip_getsockopt+0x1843/0x2220 [ 425.317330][ T9835] ? rtnl_lock+0x9/0x20 [ 425.317341][ T9835] do_ip_getsockopt+0x1843/0x2220 [ 425.317354][ T9835] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 425.317366][ T9835] ? register_lock_class+0x41/0x4c0 [ 425.317380][ T9835] ? __lock_acquire+0xaa4/0x1ba0 [ 425.317392][ T9835] ? __pfx_slow_avc_audit+0x10/0x10 [ 425.317407][ T9835] ? __mutex_trylock_common+0xe9/0x250 [ 425.317419][ T9835] ? __pfx___mutex_trylock_common+0x10/0x10 [ 425.317432][ T9835] ? __pfx___might_resched+0x10/0x10 [ 425.317451][ T9835] ? rcu_is_watching+0x12/0xc0 [ 425.317467][ T9835] ? trace_contention_end+0xdd/0x130 [ 425.317479][ T9835] ? __mutex_lock+0x1ca/0xb90 [ 425.317498][ T9835] ip_getsockopt+0x9b/0x1e0 [ 425.317509][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 425.317527][ T9835] ? __pfx_ip_getsockopt+0x10/0x10 [ 425.317541][ T9835] tcp_getsockopt+0x9e/0x100 [ 425.317557][ T9835] smc_getsockopt+0x162/0x370 [ 425.317569][ T9835] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 425.317589][ T9835] ? __pfx_smc_getsockopt+0x10/0x10 [ 425.317602][ T9835] ? __pfx_smc_getsockopt+0x10/0x10 [ 425.317615][ T9835] do_sock_getsockopt+0x3fc/0x800 [ 425.317635][ T9835] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 425.317660][ T9835] ? __fget_files+0x204/0x3c0 [ 425.317677][ T9835] __sys_getsockopt+0x12f/0x260 [ 425.317694][ T9835] __x64_sys_getsockopt+0xbd/0x160 [ 425.317709][ T9835] ? do_syscall_64+0x91/0x260 [ 425.317726][ T9835] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.317743][ T9835] do_syscall_64+0xcd/0x260 [ 425.317761][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.317775][ T9835] RIP: 0033:0x7f31e658e169 [ 425.317787][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.317801][ T9835] RSP: 002b:00007f31e73ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 425.317814][ T9835] RAX: ffffffffffffffda RBX: 00007f31e67b5fa0 RCX: 00007f31e658e169 [ 425.317823][ T9835] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 425.317831][ T9835] RBP: 00007f31e6610a68 R08: 0000200000000040 R09: 0000000000000000 [ 425.317839][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.317847][ T9835] R13: 0000000000000000 R14: 00007f31e67b5fa0 R15: 00007fff300fed78 [ 425.317860][ T9835] [ 425.672357][ T30] audit: type=1400 audit(1744790678.623:491): avc: denied { getopt } for pid=9834 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.809820][ T30] audit: type=1400 audit(1744790679.493:492): avc: denied { shutdown } for pid=9834 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1