last executing test programs: 9m44.04338161s ago: executing program 3 (id=2760): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f00000004c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf2fe, 0x0, 0x1, 0x250}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r4, 0x8aa, 0x0, 0x4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m43.229854905s ago: executing program 3 (id=2764): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="826c88feceda", 0x6}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x40020000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 9m43.091231848s ago: executing program 3 (id=2765): socket$packet(0x11, 0x3, 0x300) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0xf7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3], 0x38}}, 0x0) 9m42.51788345s ago: executing program 3 (id=2768): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xfffffff8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="170000001500010000000000000000000a"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x1e8) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0x0) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000280)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r0, @ANYBLOB="01000000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) 9m41.299240733s ago: executing program 3 (id=2772): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xffffffff) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x101) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 9m40.313000052s ago: executing program 3 (id=2776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(r1, 0x10, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 9m25.047067821s ago: executing program 32 (id=2776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(r1, 0x10, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 19.9669289s ago: executing program 2 (id=4715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pause() getpid() 18.991261069s ago: executing program 2 (id=4718): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4e797b41) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@md0, 0x0, &(0x7f00000002c0)='efivarfs\x00', 0xa988b1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x6, r2, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) 16.996865671s ago: executing program 4 (id=4725): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x3}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x6c, 0x5, 0x8, 0x3405aca5, 0xfffffffffffffffc, 0x3, 0xf96, 0x8000000000000000, 0x4}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c800) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$sndseq(r4, &(0x7f00000002c0)=[{0x3, 0x3, 0x7f, 0xbb, @tick=0x9, {0xa, 0x2}, {0x7, 0xa6}, @note={0x2, 0x0, 0x8, 0x7, 0x7}}, {0x2, 0x0, 0x3, 0x9, @time={0xe1f, 0xa}, {0x1, 0x6}, {0x7, 0x2}, @raw32={[0x0, 0x9, 0x4]}}], 0x38) 16.543328937s ago: executing program 0 (id=4727): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x4}], {0x4, 0x1}, [], {0x10, 0x2}}, 0x2c, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r6 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) ftruncate(r6, 0x3000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) read$msr(r5, &(0x7f00000001c0)=""/62, 0x3e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) sendfile(r5, r6, 0x0, 0x80000001) 15.862079683s ago: executing program 4 (id=4728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 14.690785236s ago: executing program 0 (id=4734): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@huge_always}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@huge_always}]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183, 0x0) (async) 14.061211616s ago: executing program 0 (id=4736): eventfd(0x1e8) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x400002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 14.030884609s ago: executing program 2 (id=4738): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a000100feffffff0043000002000000000400000000000005001b0001000000"], 0x24}}, 0x24008800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x82001, 0x1d1) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400800, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 13.851279382s ago: executing program 5 (id=4739): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x3}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$sndseq(r3, &(0x7f00000002c0)=[{0x3, 0x3, 0x7f, 0xbb, @tick=0x9, {0xa, 0x2}, {0x7, 0xa6}, @note={0x2, 0x0, 0x8, 0x7, 0x7}}, {0x2, 0x0, 0x3, 0x9, @time={0xe1f, 0xa}, {0x1, 0x6}, {0x7, 0x2}, @raw32={[0x0, 0x9, 0x4]}}], 0x38) 13.724625133s ago: executing program 5 (id=4740): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x100000, 0x0, 0x32315842, 0x0, 0x0, [{}, {0x0, 0x200}, {}, {0x0, 0x401}, {}, {0xfff}, {0x6}]}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 12.827402203s ago: executing program 0 (id=4742): syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7112c000) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0), &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x123240, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') 12.725510303s ago: executing program 4 (id=4743): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @empty}, 0x1c) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x2, 0xfffffffc, 0xc, 0x7f, 0x5, 0x2c}) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) write$FUSE_LSEEK(r3, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f00000000c0)='k', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0) syz_clone3(&(0x7f0000000480)={0x4010000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1, {r6}}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 12.249782802s ago: executing program 5 (id=4744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400ee800c00018006000600800a000008000280040072800800050064"], 0x34}}, 0xc000) 12.179346289s ago: executing program 1 (id=4745): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r2, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) shutdown(0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40150000000900020073797a31000000000900010073797a300000000008000540000000150c00098008000140fffffffb0800084000000001"], 0x98}}, 0x0) 8.549343116s ago: executing program 1 (id=4746): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delqdisc={0x34, 0x25, 0x233a33e334f0ae99, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xffe0, 0x3}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) io_uring_setup(0x7c3d, 0x0) setpriority(0x2, 0x0, 0x4) 8.44479608s ago: executing program 5 (id=4747): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0xffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(0x0, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) 6.815359238s ago: executing program 2 (id=4748): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x800) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6.73440568s ago: executing program 5 (id=4749): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = socket(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x20040051) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000240)=""/262, 0x106, 0x20, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x4) 6.652455704s ago: executing program 1 (id=4750): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x804c0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x0) 6.50442775s ago: executing program 4 (id=4751): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x2000012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 3) 6.398194812s ago: executing program 0 (id=4752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a000100feffffff0043000002000000000400000000000005001b0001000000"], 0x24}}, 0x24008800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x82001, 0x1d1) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400800, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mount(&(0x7f0000000040)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000300)={{0x0, 0xffffffff, 0x8000000000000000, 0xffff, 0x90000000, 0x3, 0x5, 0x8, 0x0, 0x5, 0xffffffc0, 0x3, 0xfffffffffffffffc, 0x0, 0xfd}, 0x18, [0x0, 0x0, 0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.217399632s ago: executing program 1 (id=4753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r4, 0x0, 0x607a9e0a432a4785) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000000300)={0x1, 0xfffffff3}) mount$9p_rdma(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000680)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x401}}, {@sq={'sq', 0x3d, 0x7fffffff}}], [{@obj_role={'obj_role', 0x3d, '+'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '\'#'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d206ee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 5.613939254s ago: executing program 4 (id=4754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x3, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200000, 0x0) 5.265873387s ago: executing program 5 (id=4755): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4521], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcec, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="2f0000000001"], 0x20) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f00000002c0)='/dev/rtc#\x00', 0xa) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xfb27}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, 'o'}, @global=@item_4={0x3, 0x1, 0x3, "976e4f7a"}]}}, 0x0}, 0x0) 4.873012383s ago: executing program 1 (id=4756): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r4, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) shutdown(0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40150000000900020073797a31000000000900010073797a300000000008000540000000150c00098008000140fffffffb0800084000000001"], 0x98}}, 0x0) 4.797752562s ago: executing program 2 (id=4757): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x100000, 0x0, 0x32315842, 0x0, 0x0, [{}, {0x0, 0x200}, {}, {0x0, 0x401}, {}, {0xfff}, {0x6}]}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file0\x00') 4.435354701s ago: executing program 4 (id=4758): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r2, 0x107, 0x13, 0x0, 0x4) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) fadvise64(r3, 0xfd5, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080200000", @ANYRES32=0x1, @ANYBLOB="0000000000d24b4dcb79986f543aeb809ed7031fbb000000000000000000000000000000e86b78c4f35a213ecd172a62a84b671d3e353b24c215e7d5608c784af13d12245b2d033b98ba7b58b64e7ea0cebe901d61b7fa1a941d5971c37ecd2fe5ac4b103ec5ffb61fcefc88f3a0b4849340fe5beec3f490a7b3a2099bbaff33423683561b5fb47bb3f17cd379a7820e", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) 4.212379501s ago: executing program 1 (id=4759): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0xffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(0x0, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) 2.682680123s ago: executing program 2 (id=4760): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delqdisc={0x34, 0x25, 0x233a33e334f0ae99, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xffe0, 0x3}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) io_uring_setup(0x7c3d, 0x0) setpriority(0x2, 0x0, 0x4) 0s ago: executing program 0 (id=4761): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(r2, 0xfffffe41, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000480)={{0x0, 0x2, 0x4, 0x2, 0x80000000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000202070020000000000d3ec539da20421c7000000bfa100000000000007010000f8ffb0d68ffedb5a5f86ff9d27ffc59cffffb702000008f393ab930e91"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="100000000000000084000000000000001000000000000000000000000100010070000000000000000f010000050000009b61b0fd4fc0411a1beb13f4917e994b7637b6dc35805755297e68d9fd905c23020399b89d5571a7842d5d128fb4b91c5a93e2ad47e8d3660611647c9ed7e697ab7dbe8e1f9c79e7b900000000000000"], 0x90}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x1008}, {&(0x7f0000001580)=""/238, 0xf0}], 0x5, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) kernel console output (not intermixed with test programs): ing em28xx [ 1112.989745][T15877] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.278045][ T26] em28xx 3-1:0.0: Freeing device [ 1113.303537][T15877] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1113.419016][T15877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.443483][T15877] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1113.521649][T20094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1114.120073][T20104] ceph: No mds server is up or the cluster is laggy [ 1114.133178][ T970] libceph: connect (1)[c::]:6789 error -101 [ 1114.206777][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 1114.345204][ T30] audit: type=1400 audit(1741559896.610:1358): avc: denied { write } for pid=20103 comm="syz.5.4054" path="socket:[66763]" dev="sockfs" ino=66763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1114.393065][ T30] audit: type=1400 audit(1741559896.650:1359): avc: denied { setopt } for pid=20103 comm="syz.5.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1114.478885][ T5144] Bluetooth: hci0: command 0x0405 tx timeout [ 1115.210108][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.216499][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.428085][ T5868] usb 2-1: USB disconnect, device number 82 [ 1118.455123][ T30] audit: type=1400 audit(1741559900.720:1360): avc: denied { listen } for pid=20159 comm="syz.0.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1118.526372][ T30] audit: type=1400 audit(1741559900.720:1361): avc: denied { write } for pid=20159 comm="syz.0.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1120.112843][T20172] lo speed is unknown, defaulting to 1000 [ 1120.119661][T20172] lo speed is unknown, defaulting to 1000 [ 1120.743140][T20181] lo speed is unknown, defaulting to 1000 [ 1120.760905][T20181] lo speed is unknown, defaulting to 1000 [ 1120.768545][T20181] lo speed is unknown, defaulting to 1000 [ 1121.139397][T20181] infiniband sz1: set active [ 1121.144145][T20181] infiniband sz1: added lo [ 1121.186764][T20183] : renamed from lo (while UP) [ 1121.215250][T12445] speed is unknown, defaulting to 1000 [ 1121.224337][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 1121.234248][T20181] RDS/IB: sz1: added [ 1121.238287][T20181] smc: adding ib device sz1 with port count 1 [ 1121.244831][T20181] smc: ib device sz1 port 1 has pnetid [ 1121.252464][T20181] speed is unknown, defaulting to 1000 [ 1121.328664][T20181] speed is unknown, defaulting to 1000 [ 1121.405740][T20181] speed is unknown, defaulting to 1000 [ 1121.480858][T20181] speed is unknown, defaulting to 1000 [ 1121.558623][T20181] speed is unknown, defaulting to 1000 [ 1121.635868][T20182] siw: device registration error -23 [ 1121.636267][T12445] speed is unknown, defaulting to 1000 [ 1122.143620][T20197] rdma_rxe: rxe_newlink: failed to add lo [ 1122.150419][T20197] siw: device registration error -23 [ 1122.156618][T20197] : renamed from lo (while UP) [ 1122.403177][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4079'. [ 1123.207728][T20215] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1124.181990][ T30] audit: type=1400 audit(1741559906.430:1362): avc: denied { getattr } for pid=20221 comm="syz.0.4085" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=67807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1124.678840][T20233] netlink: 'syz.5.4087': attribute type 1 has an invalid length. [ 1124.787706][T20233] bond3: entered promiscuous mode [ 1124.883009][T20233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1125.055025][T20236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1125.068493][ T30] audit: type=1400 audit(1741559907.320:1363): avc: denied { read } for pid=20238 comm="syz.1.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1125.129901][T20236] bond3: (slave bond4): making interface the new active one [ 1125.137361][T20236] bond4: entered promiscuous mode [ 1125.163602][T20236] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1126.303728][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1127.748516][ T5868] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1127.909488][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 1127.916556][ T5868] usb 5-1: config 0 has no interfaces? [ 1127.927062][ T5868] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1127.954296][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.962546][ T5868] usb 5-1: Product: syz [ 1127.966828][ T5868] usb 5-1: Manufacturer: syz [ 1127.971472][ T5868] usb 5-1: SerialNumber: syz [ 1127.977716][ T5868] usb 5-1: config 0 descriptor?? [ 1127.999682][ T30] audit: type=1400 audit(1741559910.270:1364): avc: denied { read append } for pid=20281 comm="syz.1.4102" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1128.025999][ T30] audit: type=1400 audit(1741559910.270:1365): avc: denied { open } for pid=20281 comm="syz.1.4102" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1129.251416][T20299] netlink: 566 bytes leftover after parsing attributes in process `syz.2.4108'. [ 1130.104030][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1130.115422][T20306] FAULT_INJECTION: forcing a failure. [ 1130.115422][T20306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.128495][T20306] CPU: 0 UID: 0 PID: 20306 Comm: syz.1.4109 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1130.128516][T20306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1130.128526][T20306] Call Trace: [ 1130.128533][T20306] [ 1130.128539][T20306] dump_stack_lvl+0x16c/0x1f0 [ 1130.128567][T20306] should_fail_ex+0x50a/0x650 [ 1130.128598][T20306] _copy_from_user+0x2e/0xd0 [ 1130.128617][T20306] move_addr_to_kernel+0x68/0x160 [ 1130.128638][T20306] __sys_sendto+0x1ba/0x4f0 [ 1130.128660][T20306] ? __pfx___sys_sendto+0x10/0x10 [ 1130.128701][T20306] ? ksys_write+0x1ba/0x250 [ 1130.128718][T20306] ? __pfx_ksys_write+0x10/0x10 [ 1130.128737][T20306] __x64_sys_sendto+0xe0/0x1c0 [ 1130.128763][T20306] ? do_syscall_64+0x91/0x250 [ 1130.128786][T20306] ? lockdep_hardirqs_on+0x7c/0x110 [ 1130.128806][T20306] do_syscall_64+0xcd/0x250 [ 1130.128829][T20306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.128853][T20306] RIP: 0033:0x7fdd9658d169 [ 1130.128866][T20306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.128882][T20306] RSP: 002b:00007fdd97439038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1130.128898][T20306] RAX: ffffffffffffffda RBX: 00007fdd967a6160 RCX: 00007fdd9658d169 [ 1130.128909][T20306] RDX: 000000000000002e RSI: 0000400000000a00 RDI: 000000000000000a [ 1130.128919][T20306] RBP: 00007fdd97439090 R08: 0000400000000140 R09: 0000000000000014 [ 1130.128930][T20306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.128939][T20306] R13: 0000000000000000 R14: 00007fdd967a6160 R15: 00007ffe8d67efc8 [ 1130.128961][T20306] [ 1131.425095][ T5868] usb 5-1: USB disconnect, device number 87 [ 1132.256082][T20326] FAULT_INJECTION: forcing a failure. [ 1132.256082][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.270183][T20326] CPU: 1 UID: 0 PID: 20326 Comm: syz.0.4117 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1132.270207][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1132.270217][T20326] Call Trace: [ 1132.270222][T20326] [ 1132.270230][T20326] dump_stack_lvl+0x16c/0x1f0 [ 1132.270256][T20326] should_fail_ex+0x50a/0x650 [ 1132.270284][T20326] should_failslab+0xc2/0x120 [ 1132.270304][T20326] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1132.270321][T20326] ? skb_clone+0x190/0x3f0 [ 1132.270346][T20326] skb_clone+0x190/0x3f0 [ 1132.270370][T20326] netlink_deliver_tap+0xabd/0xd30 [ 1132.270396][T20326] netlink_unicast+0x5e1/0x7f0 [ 1132.270419][T20326] ? __pfx_netlink_unicast+0x10/0x10 [ 1132.270447][T20326] netlink_sendmsg+0x8b8/0xd70 [ 1132.270472][T20326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.270502][T20326] sock_write_iter+0x4fe/0x5b0 [ 1132.270520][T20326] ? __pfx_sock_write_iter+0x10/0x10 [ 1132.270544][T20326] ? bpf_lsm_file_permission+0x9/0x10 [ 1132.270563][T20326] ? security_file_permission+0x71/0x210 [ 1132.270590][T20326] ? rw_verify_area+0xcf/0x680 [ 1132.270617][T20326] vfs_write+0x5ae/0x1150 [ 1132.270633][T20326] ? __pfx_sock_write_iter+0x10/0x10 [ 1132.270655][T20326] ? __pfx_vfs_write+0x10/0x10 [ 1132.270672][T20326] ? __fget_files+0x40/0x3a0 [ 1132.270702][T20326] ksys_write+0x207/0x250 [ 1132.270718][T20326] ? __pfx_ksys_write+0x10/0x10 [ 1132.270742][T20326] do_syscall_64+0xcd/0x250 [ 1132.270775][T20326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.270800][T20326] RIP: 0033:0x7fbe5a38d169 [ 1132.270814][T20326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.270830][T20326] RSP: 002b:00007fbe5b215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1132.270847][T20326] RAX: ffffffffffffffda RBX: 00007fbe5a5a5fa0 RCX: 00007fbe5a38d169 [ 1132.270858][T20326] RDX: 000000000000033a RSI: 0000400000000040 RDI: 0000000000000005 [ 1132.270868][T20326] RBP: 00007fbe5b215090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.270877][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.270886][T20326] R13: 0000000000000000 R14: 00007fbe5a5a5fa0 R15: 00007ffc2a767fc8 [ 1132.270906][T20326] [ 1132.270925][T20326] netlink: 566 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1132.418566][ T970] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1132.638773][T12445] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1132.688793][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 1132.699568][ T970] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1132.715465][ T970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.787115][T12445] usb 5-1: device descriptor read/64, error -71 [ 1132.809355][ T970] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1132.991150][ T970] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1133.015933][ T970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1133.025328][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.038456][ T970] usb 2-1: Product: syz [ 1133.038520][T12445] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1133.042677][ T970] usb 2-1: Manufacturer: syz [ 1133.055087][ T970] usb 2-1: SerialNumber: syz [ 1133.278996][ T970] usb 2-1: USB disconnect, device number 83 [ 1133.866630][T20345] siw: device registration error -23 [ 1133.880316][T12445] usb 5-1: device descriptor read/64, error -71 [ 1134.022783][T12445] usb usb5-port1: attempt power cycle [ 1134.428559][T12445] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1134.486790][T12445] usb 5-1: device descriptor read/8, error -71 [ 1134.522916][T20351] lo speed is unknown, defaulting to 1000 [ 1134.530316][T20351] lo speed is unknown, defaulting to 1000 [ 1134.549528][T20351] speed is unknown, defaulting to 1000 [ 1134.661473][T20357] pim6reg: entered allmulticast mode [ 1134.677052][T20357] pim6reg: left allmulticast mode [ 1135.224790][ T30] audit: type=1400 audit(1741559917.100:1366): avc: denied { write } for pid=20354 comm="syz.2.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1135.278653][T12445] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1135.321352][T20357] Bluetooth: MGMT ver 1.23 [ 1135.333917][T20357] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 1135.488647][T12445] usb 5-1: device not accepting address 91, error -71 [ 1135.496213][T12445] usb usb5-port1: unable to enumerate USB device [ 1135.824152][T20369] proc: Unknown parameter '' [ 1135.891136][T20374] lo speed is unknown, defaulting to 1000 [ 1135.918926][T20374] lo speed is unknown, defaulting to 1000 [ 1135.925030][T20374] speed is unknown, defaulting to 1000 [ 1137.039717][ T54] Bluetooth: hci4: Frame reassembly failed (-84) [ 1137.297494][ T30] audit: type=1400 audit(1741559919.550:1367): avc: denied { unmount } for pid=20386 comm="syz.0.4133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1138.012028][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 1138.564462][T20401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=20401 comm=syz.1.4134 [ 1138.866998][T20381] qrtr: Invalid version 0 [ 1139.045713][ T55] Bluetooth: hci4: command 0x1003 tx timeout [ 1139.053979][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1139.201340][ T30] audit: type=1400 audit(1741559921.080:1368): avc: denied { setopt } for pid=20370 comm="syz.2.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1139.407730][T20409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.707636][ T30] audit: type=1400 audit(1741559921.970:1369): avc: denied { setopt } for pid=20410 comm="syz.5.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1139.874751][ T30] audit: type=1400 audit(1741559922.010:1370): avc: denied { ioctl } for pid=20410 comm="syz.5.4138" path="socket:[67457]" dev="sockfs" ino=67457 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1140.318207][ T30] audit: type=1400 audit(1741559922.580:1371): avc: denied { append } for pid=20417 comm="syz.2.4142" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1141.333088][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1141.339956][ T30] audit: type=1400 audit(1741559923.600:1372): avc: denied { connect } for pid=20426 comm="syz.1.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1141.480869][T20431] vlan2: entered allmulticast mode [ 1141.507279][T20431] gretap0: entered allmulticast mode [ 1144.049870][T20469] netlink: 'syz.1.4157': attribute type 21 has an invalid length. [ 1144.191923][T20469] netlink: 'syz.1.4157': attribute type 20 has an invalid length. [ 1144.220448][T20472] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1144.812823][T20479] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2307 [ 1146.146321][T20494] lo speed is unknown, defaulting to 1000 [ 1146.149312][T20494] lo speed is unknown, defaulting to 1000 [ 1146.152398][T20494] speed is unknown, defaulting to 1000 [ 1146.799795][T20500] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4165'. [ 1147.864563][ T30] audit: type=1400 audit(1741559929.660:1373): avc: denied { bind } for pid=20505 comm="syz.2.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1148.048971][ T30] audit: type=1400 audit(1741559930.320:1374): avc: denied { accept } for pid=20512 comm="syz.2.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1149.038606][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1149.045086][ T55] Bluetooth: hci4: command 0x1003 tx timeout [ 1149.308226][ T30] audit: type=1400 audit(1741559931.560:1375): avc: denied { setopt } for pid=20530 comm="syz.2.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1149.343029][ T30] audit: type=1400 audit(1741559931.580:1376): avc: denied { write } for pid=20530 comm="syz.2.4174" lport=54926 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1149.368496][ T30] audit: type=1400 audit(1741559931.580:1377): avc: denied { setopt } for pid=20530 comm="syz.2.4174" lport=54926 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1149.804055][ T5144] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 1150.068994][T20556] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1150.092970][T20557] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1150.688454][ T30] audit: type=1400 audit(1741559932.950:1378): avc: denied { override_creds } for pid=20561 comm="syz.0.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1150.977341][ T30] audit: type=1400 audit(1741559932.980:1379): avc: denied { override_creds } for pid=20561 comm="syz.0.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1152.958578][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1153.089035][ T30] audit: type=1400 audit(1741559935.350:1380): avc: denied { accept } for pid=20580 comm="syz.1.4190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1154.098833][T20602] lo speed is unknown, defaulting to 1000 [ 1154.108122][T20602] lo speed is unknown, defaulting to 1000 [ 1154.117286][T20602] speed is unknown, defaulting to 1000 [ 1155.429432][T20614] openvswitch: netlink: EtherType 50a is less than min 600 [ 1155.520395][ T30] audit: type=1400 audit(1741559937.790:1381): avc: denied { map } for pid=20615 comm="syz.0.4200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1155.563667][ T30] audit: type=1400 audit(1741559937.790:1382): avc: denied { execute } for pid=20615 comm="syz.0.4200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1156.108223][ T30] audit: type=1400 audit(1741559938.370:1383): avc: denied { read } for pid=20608 comm="syz.4.4196" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1156.130628][ T30] audit: type=1400 audit(1741559938.370:1384): avc: denied { open } for pid=20608 comm="syz.4.4196" path="/159/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1156.348493][ T5852] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1156.530771][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 1156.549591][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1156.712863][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1156.779708][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1156.798564][ T5852] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1156.817989][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.846313][ T5852] usb 5-1: config 0 descriptor?? [ 1156.858977][T20609] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1156.876586][ T5852] hub 5-1:0.0: USB hub found [ 1157.445698][T20609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.461404][T20609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.480950][T20609] syz.4.4196 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1157.518932][ T5852] hub 5-1:0.0: 8 ports detected [ 1157.531836][ T5852] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1157.566567][T20653] tmpfs: Unknown parameter '00000000000000000004' [ 1157.744898][ T5852] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1157.752696][ T5852] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1157.770554][ T5852] usbhid 5-1:0.0: can't add hid device: -71 [ 1157.776552][ T5852] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1157.839744][T20657] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1157.907135][ T5852] usb 5-1: USB disconnect, device number 92 [ 1157.958611][ T5829] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1157.981953][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4212'. [ 1158.108542][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 1158.114886][ T5829] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1158.123281][ T5829] usb 2-1: config 2 has no interface number 0 [ 1158.129564][ T5829] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1158.139310][ T5829] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1158.148559][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.156933][ T5829] usb 2-1: Product: syz [ 1158.161226][ T5829] usb 2-1: Manufacturer: syz [ 1158.165830][ T5829] usb 2-1: SerialNumber: syz [ 1158.463036][T20669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1159.062440][T20647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1159.077081][ T5829] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1159.101607][ T5829] usb 2-1: USB disconnect, device number 84 [ 1159.140137][T20687] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1159.738595][ T30] audit: type=1400 audit(1741559941.420:1385): avc: denied { ioctl } for pid=20678 comm="syz.4.4216" path="socket:[69842]" dev="sockfs" ino=69842 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1159.763319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.885361][T20697] netlink: 'syz.0.4221': attribute type 10 has an invalid length. [ 1159.894385][T20697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4221'. [ 1159.905902][T20697] batadv0: entered promiscuous mode [ 1159.911395][T20697] batadv0: entered allmulticast mode [ 1159.917557][T20697] bridge0: port 3(batadv0) entered blocking state [ 1159.927702][T20697] bridge0: port 3(batadv0) entered disabled state [ 1160.015675][T20697] bridge0: port 3(batadv0) entered blocking state [ 1160.022205][T20697] bridge0: port 3(batadv0) entered forwarding state [ 1160.070160][T20701] Cannot find del_set index 4 as target [ 1160.077001][T20702] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 262145, id = 0 [ 1160.145097][T20703] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1160.178131][ T5852] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1160.308898][ T6403] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1160.319089][ T6403] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1160.348448][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 1160.431360][ T5852] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 1160.466443][ T5852] usb 5-1: config 0 has no interface number 0 [ 1160.477870][ T5852] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.496080][ T5852] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1160.505950][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.520501][ T5852] usb 5-1: Product: syz [ 1160.524745][ T5852] usb 5-1: Manufacturer: syz [ 1160.537459][ T5852] usb 5-1: SerialNumber: syz [ 1160.549441][ T5852] usb 5-1: config 0 descriptor?? [ 1160.595773][ T5852] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1160.715809][T20724] input: syz0 as /devices/virtual/input/input44 [ 1160.905714][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.960548][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.990951][T16785] usb 5-1: Failed to submit usb control message: -71 [ 1160.991387][ T5871] usb 5-1: USB disconnect, device number 93 [ 1161.004817][T16785] usb 5-1: unable to send the bmi data to the device: -71 [ 1161.012295][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4230'. [ 1161.018497][T16785] usb 5-1: unable to get target info from device [ 1161.042456][T16785] usb 5-1: could not get target info (-71) [ 1161.048343][T16785] usb 5-1: could not probe fw (-71) [ 1161.233053][ T30] audit: type=1400 audit(1741559943.460:1386): avc: denied { setcurrent } for pid=20737 comm="syz.2.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1161.252860][ T5852] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1161.428474][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 1161.440730][ T5852] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 1161.458528][ T5852] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 1161.471042][ T5852] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1161.484233][ T5852] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1161.495956][ T5852] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40 [ 1161.506177][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.514728][ T5852] usb 2-1: Product: syz [ 1161.519854][ T5852] usb 2-1: Manufacturer: syz [ 1161.525223][ T5852] usb 2-1: SerialNumber: syz [ 1161.535982][T20733] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1161.757173][ T5852] usbhid 2-1:1.0: can't add hid device: -71 [ 1161.766303][ T5852] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1161.778631][ T5852] usb 2-1: USB disconnect, device number 85 [ 1161.997514][ T5871] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1162.241802][ T5871] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1162.262795][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1162.290974][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1162.308856][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.337301][ T5871] usb 5-1: Product: syz [ 1162.397997][ T5871] usb 5-1: Manufacturer: syz [ 1162.418473][ T5871] usb 5-1: SerialNumber: syz [ 1162.432598][ T5871] usb 5-1: config 0 descriptor?? [ 1162.837552][ T5871] usb 5-1: selecting invalid altsetting 0 [ 1163.175810][T20761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4240'. [ 1163.193338][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 1164.776955][ T5829] usb 5-1: USB disconnect, device number 94 [ 1164.843782][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4246'. [ 1165.016105][T20789] veth0_vlan: entered allmulticast mode [ 1165.309452][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 1165.448673][ T5829] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1165.504090][T20794] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1166.678679][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 1166.872213][ T5829] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 1166.889916][ T5829] usb 5-1: config 0 has no interface number 0 [ 1166.901805][ T5829] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=c6.bb [ 1166.901833][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.901851][ T5829] usb 5-1: Product: syz [ 1166.901864][ T5829] usb 5-1: Manufacturer: syz [ 1166.901878][ T5829] usb 5-1: SerialNumber: syz [ 1166.902885][ T5829] usb 5-1: config 0 descriptor?? [ 1166.903842][ T5829] kvaser_usb 5-1:0.92: error -ENODEV: Cannot get usb endpoint(s) [ 1167.196031][ T5852] usb 5-1: USB disconnect, device number 95 [ 1167.804707][ T30] audit: type=1400 audit(1741559950.070:1387): avc: denied { write } for pid=20807 comm="syz.5.4255" path="socket:[69555]" dev="sockfs" ino=69555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1168.141734][ T30] audit: type=1400 audit(1741559950.410:1388): avc: denied { mount } for pid=20832 comm="syz.0.4260" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1168.162971][T20833] input: syz0 as /devices/virtual/input/input46 [ 1168.595948][T20807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.713370][T20837] Malformed UNC in devname [ 1168.713370][T20837] [ 1168.713615][T20837] CIFS: VFS: Malformed UNC in devname [ 1169.056605][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'. [ 1169.970836][T20851] lo speed is unknown, defaulting to 1000 [ 1170.011769][T20851] lo speed is unknown, defaulting to 1000 [ 1170.020996][T20851] speed is unknown, defaulting to 1000 [ 1171.579072][T20871] lo speed is unknown, defaulting to 1000 [ 1171.579739][T20871] lo speed is unknown, defaulting to 1000 [ 1171.580416][T20871] speed is unknown, defaulting to 1000 [ 1171.638503][ T5852] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1171.994050][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 1172.071701][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1172.361653][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1172.401874][ T5852] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1172.425427][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.988569][ T5852] usb 3-1: Product: syz [ 1172.992774][ T5852] usb 3-1: Manufacturer: syz [ 1173.022448][ T5852] usb 3-1: SerialNumber: syz [ 1173.028792][ T5852] usb 3-1: config 0 descriptor?? [ 1173.212989][ T5852] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1173.225007][ T5852] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1173.782902][T20858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.835244][T20858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.868720][ T5852] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1173.875475][ T5852] em28xx 3-1:0.0: Config register raw data: 0x2b [ 1173.895169][ T5852] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1173.916058][ T5852] em28xx 3-1:0.0: No AC97 audio processor [ 1174.767603][ T5852] usb 3-1: USB disconnect, device number 40 [ 1174.917486][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'. [ 1175.234856][ T30] audit: type=1400 audit(1741559957.500:1389): avc: denied { read } for pid=20907 comm="syz.5.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1176.640646][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.647013][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.963380][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4281'. [ 1177.012136][T20923] veth3: entered promiscuous mode [ 1177.046147][T20923] veth3: entered allmulticast mode [ 1177.557627][T20942] lo speed is unknown, defaulting to 1000 [ 1177.564347][T20942] lo speed is unknown, defaulting to 1000 [ 1177.570867][T20942] speed is unknown, defaulting to 1000 [ 1178.899353][T20957] lo speed is unknown, defaulting to 1000 [ 1178.908302][T20957] lo speed is unknown, defaulting to 1000 [ 1178.947245][T20957] speed is unknown, defaulting to 1000 [ 1180.128231][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 1180.164408][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4294'. [ 1180.892454][T20976] netlink: 'syz.1.4294': attribute type 7 has an invalid length. [ 1180.978915][T20987] netlink: 'syz.2.4298': attribute type 9 has an invalid length. [ 1180.986741][T20987] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4298'. [ 1181.645286][ T30] audit: type=1400 audit(1741559963.910:1390): avc: denied { write } for pid=20975 comm="syz.1.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1181.698555][T20993] ubi31: attaching mtd0 [ 1181.718195][T20993] ubi31: scanning is finished [ 1181.737853][T20993] ubi31: empty MTD device detected [ 1182.592357][T20993] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1182.603240][T20993] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1182.622616][T20993] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1182.637539][T20993] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1182.655394][T20993] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1182.699380][T20993] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1182.850696][T21013] input: syz0 as /devices/virtual/input/input47 [ 1182.986045][T20993] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3904330458 [ 1183.052569][T20993] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1183.251275][T21007] ubi31: background thread "ubi_bgt31d" started, PID 21007 [ 1187.589171][T16785] Bluetooth: hci4: Frame reassembly failed (-84) [ 1187.620754][T21060] netlink: zone id is out of range [ 1187.690743][ T30] audit: type=1400 audit(1741559969.950:1391): avc: denied { connect } for pid=21053 comm="syz.1.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1188.289983][T21071] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1188.310204][T21071] siw: device registration error -23 [ 1188.439076][T21073] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1189.102228][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1189.109051][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1189.598586][ T55] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1189.598612][T21084] Bluetooth: hci4: command 0x1003 tx timeout [ 1189.627029][T21096] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1189.653646][T21096] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1189.677149][T21096] openvswitch: netlink: Message has 1275 unknown bytes. [ 1189.684477][T21096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.137718][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 1191.983407][ T5144] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1191.988543][ T30] audit: type=1400 audit(1741559973.400:1392): avc: denied { read } for pid=21104 comm="syz.0.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1192.748583][T21111] lo speed is unknown, defaulting to 1000 [ 1192.755017][T21111] lo speed is unknown, defaulting to 1000 [ 1192.761553][T21111] speed is unknown, defaulting to 1000 [ 1193.519409][T21122] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1193.559803][ T6176] Bluetooth: hci4: Frame reassembly failed (-84) [ 1193.838590][T12445] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1193.888541][ T5868] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1193.989750][T12445] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1193.999469][T12445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.008475][T12445] usb 2-1: config 0 descriptor?? [ 1194.015217][T12445] cp210x 2-1:0.0: cp210x converter detected [ 1194.048540][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 1194.058087][ T5868] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1194.067179][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.079487][ T5868] usb 5-1: config 0 descriptor?? [ 1194.086413][ T5868] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1194.216686][T12445] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1194.224341][T12445] cp210x 2-1:0.0: querying part number failed [ 1194.232715][T12445] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1195.004137][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4336'. [ 1195.249731][T21146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.258768][T21146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.310162][ T5868] gspca_nw80x: reg_w err -71 [ 1195.315175][ T5868] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 1195.324342][ T5868] usb 5-1: USB disconnect, device number 96 [ 1195.599662][ T55] Bluetooth: hci4: command 0x1003 tx timeout [ 1195.606924][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1195.662346][T21150] Unknown options in mask 6000 [ 1196.092480][T21156] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1196.666507][ T5829] usb 2-1: USB disconnect, device number 86 [ 1196.675835][ T5829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1196.689759][ T5829] cp210x 2-1:0.0: device disconnected [ 1196.709341][ T30] audit: type=1400 audit(1741559978.980:1393): avc: denied { read } for pid=21169 comm="syz.0.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.906716][ T30] audit: type=1400 audit(1741559979.030:1394): avc: denied { read } for pid=21169 comm="syz.0.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1200.940427][ T30] audit: type=1400 audit(1741559983.160:1395): avc: denied { getopt } for pid=21215 comm="syz.0.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1201.068713][T21225] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1201.176769][ T30] audit: type=1400 audit(1741559983.240:1396): avc: denied { ioctl } for pid=21214 comm="syz.4.4358" path="socket:[71988]" dev="sockfs" ino=71988 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1202.794069][T21253] FAULT_INJECTION: forcing a failure. [ 1202.794069][T21253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.839880][T21253] CPU: 0 UID: 0 PID: 21253 Comm: syz.4.4366 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1202.839910][T21253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1202.839925][T21253] Call Trace: [ 1202.839930][T21253] [ 1202.839935][T21253] dump_stack_lvl+0x16c/0x1f0 [ 1202.839955][T21253] should_fail_ex+0x50a/0x650 [ 1202.839973][T21253] _copy_from_user+0x2e/0xd0 [ 1202.839984][T21253] copy_msghdr_from_user+0x99/0x160 [ 1202.840000][T21253] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1202.840013][T21253] ? __lock_acquire+0xcc5/0x3c40 [ 1202.840033][T21253] ___sys_sendmsg+0xff/0x1e0 [ 1202.840048][T21253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1202.840068][T21253] ? trace_lock_acquire+0x14e/0x1f0 [ 1202.840087][T21253] __sys_sendmmsg+0x201/0x420 [ 1202.840103][T21253] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1202.840122][T21253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1202.840140][T21253] ? fput+0x67/0x440 [ 1202.840153][T21253] ? ksys_write+0x1ba/0x250 [ 1202.840162][T21253] ? __pfx_ksys_write+0x10/0x10 [ 1202.840173][T21253] __x64_sys_sendmmsg+0x9c/0x100 [ 1202.840187][T21253] ? lockdep_hardirqs_on+0x7c/0x110 [ 1202.840200][T21253] do_syscall_64+0xcd/0x250 [ 1202.840215][T21253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.840230][T21253] RIP: 0033:0x7f51f958d169 [ 1202.840239][T21253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.840250][T21253] RSP: 002b:00007f51f73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1202.840260][T21253] RAX: ffffffffffffffda RBX: 00007f51f97a5fa0 RCX: 00007f51f958d169 [ 1202.840267][T21253] RDX: 00000000000003ef RSI: 0000400000000180 RDI: 0000000000000003 [ 1202.840273][T21253] RBP: 00007f51f73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.840278][T21253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.840284][T21253] R13: 0000000000000000 R14: 00007f51f97a5fa0 R15: 00007ffd9e02b348 [ 1202.840295][T21253] [ 1203.306036][ T5829] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1203.912488][T21271] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1203.931678][T21271] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1205.319376][ T5829] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1205.388146][T21290] lo speed is unknown, defaulting to 1000 [ 1205.388855][T21290] lo speed is unknown, defaulting to 1000 [ 1205.389514][T21290] speed is unknown, defaulting to 1000 [ 1206.578596][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 1207.046181][T21304] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1207.072937][T21305] lo speed is unknown, defaulting to 1000 [ 1207.079705][T21305] lo speed is unknown, defaulting to 1000 [ 1207.086283][T21305] speed is unknown, defaulting to 1000 [ 1207.725011][T21311] lo speed is unknown, defaulting to 1000 [ 1207.731835][T21311] lo speed is unknown, defaulting to 1000 [ 1207.738554][T21311] speed is unknown, defaulting to 1000 [ 1208.465127][ T5829] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1208.472932][ T5829] usb 5-1: can't read configurations, error -71 [ 1209.673778][T21339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1209.682819][T21339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1209.696761][T21339] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1209.705351][ T30] audit: type=1326 audit(1741559991.960:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1209.750348][T21317] syz.5.4383: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1209.778295][T21317] CPU: 1 UID: 0 PID: 21317 Comm: syz.5.4383 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1209.778317][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1209.778324][T21317] Call Trace: [ 1209.778328][T21317] [ 1209.778332][T21317] dump_stack_lvl+0x16c/0x1f0 [ 1209.778351][T21317] warn_alloc+0x24d/0x3a0 [ 1209.778364][T21317] ? __pfx_warn_alloc+0x10/0x10 [ 1209.778385][T21317] ? __get_vm_area_node+0x1b0/0x2f0 [ 1209.778407][T21317] ? __get_vm_area_node+0x1dc/0x2f0 [ 1209.778432][T21317] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1209.778462][T21317] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1209.778489][T21317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1209.778509][T21317] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1209.778524][T21317] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1209.778538][T21317] vmalloc_user_noprof+0x6b/0x90 [ 1209.778553][T21317] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1209.778568][T21317] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1209.778583][T21317] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1209.778597][T21317] __vb2_queue_alloc+0x896/0x1230 [ 1209.778618][T21317] vb2_core_reqbufs+0xa73/0xfb0 [ 1209.778634][T21317] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1209.778655][T21317] __vb2_init_fileio+0x3f3/0x1110 [ 1209.778673][T21317] vb2_core_poll+0x5ec/0x700 [ 1209.778688][T21317] vb2_poll+0x33/0x150 [ 1209.778700][T21317] vb2_fop_poll+0x10f/0x2c0 [ 1209.778714][T21317] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1209.778726][T21317] v4l2_poll+0x160/0x320 [ 1209.778737][T21317] ? __pfx_v4l2_poll+0x10/0x10 [ 1209.778746][T21317] do_sys_poll+0x524/0xde0 [ 1209.778767][T21317] ? __pfx_do_sys_poll+0x10/0x10 [ 1209.778793][T21317] ? schedule+0xf1/0x350 [ 1209.778806][T21317] ? futex_wait_queue+0x103/0x1f0 [ 1209.778823][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778840][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778856][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778872][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778890][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778907][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778923][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778939][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778956][T21317] ? __pfx_pollwake+0x10/0x10 [ 1209.778972][T21317] ? do_futex+0x123/0x350 [ 1209.778985][T21317] ? __pfx_do_futex+0x10/0x10 [ 1209.778996][T21317] ? set_user_sigmask+0x217/0x2a0 [ 1209.779011][T21317] ? __pfx_set_user_sigmask+0x10/0x10 [ 1209.779028][T21317] __x64_sys_ppoll+0x25a/0x2d0 [ 1209.779039][T21317] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1209.779048][T21317] ? ksys_write+0x1ba/0x250 [ 1209.779068][T21317] do_syscall_64+0xcd/0x250 [ 1209.779089][T21317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.779111][T21317] RIP: 0033:0x7fd5c338d169 [ 1209.779125][T21317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.779147][T21317] RSP: 002b:00007fd5c42d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1209.779163][T21317] RAX: ffffffffffffffda RBX: 00007fd5c35a5fa0 RCX: 00007fd5c338d169 [ 1209.779174][T21317] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00004000000000c0 [ 1209.779185][T21317] RBP: 00007fd5c340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.779195][T21317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.779205][T21317] R13: 0000000000000000 R14: 00007fd5c35a5fa0 R15: 00007fff1ce78458 [ 1209.779226][T21317] [ 1210.130881][ T30] audit: type=1326 audit(1741559991.960:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1210.185568][T21317] Mem-Info: [ 1210.188877][T21317] active_anon:13328 inactive_anon:0 isolated_anon:0 [ 1210.188877][T21317] active_file:2751 inactive_file:57641 isolated_file:0 [ 1210.188877][T21317] unevictable:1794 dirty:343 writeback:0 [ 1210.188877][T21317] slab_reclaimable:12124 slab_unreclaimable:104522 [ 1210.188877][T21317] mapped:36310 shmem:7149 pagetables:830 [ 1210.188877][T21317] sec_pagetables:0 bounce:0 [ 1210.188877][T21317] kernel_misc_reclaimable:0 [ 1210.188877][T21317] free:1258140 free_pcp:12085 free_cma:0 [ 1210.276359][T21317] Node 0 active_anon:41756kB inactive_anon:0kB active_file:11004kB inactive_file:230456kB unevictable:5640kB isolated(anon):0kB isolated(file):0kB mapped:133772kB dirty:1380kB writeback:0kB shmem:15580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10844kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 1210.315493][T21317] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1210.347151][T21317] Node 0 DMA free:15348kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1210.382517][T21317] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1210.388274][T21317] Node 0 DMA32 free:1126660kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:41756kB inactive_anon:0kB active_file:11004kB inactive_file:230356kB unevictable:5640kB writepending:1380kB present:3129332kB managed:2547368kB mlocked:4104kB bounce:0kB free_pcp:38616kB local_pcp:26268kB free_cma:0kB [ 1210.419229][T21317] lowmem_reserve[]: 0 0 0 0 0 [ 1210.423914][T21317] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1210.478677][ T30] audit: type=1326 audit(1741559991.960:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1210.780436][T21317] lowmem_reserve[]: 0 0 0 0 0 [ 1210.953808][T21317] Node 1 Normal free:3890368kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21772kB local_pcp:21772kB free_cma:0kB [ 1210.983318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.001429][ T30] audit: type=1326 audit(1741559991.960:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.110502][ T30] audit: type=1326 audit(1741559991.960:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.160589][ T30] audit: type=1326 audit(1741559991.960:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.194276][ T30] audit: type=1326 audit(1741559991.960:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.222016][ T30] audit: type=1326 audit(1741559991.960:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.248916][ T30] audit: type=1326 audit(1741559991.960:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.274997][T21317] lowmem_reserve[]: 0 0 0 0 0 [ 1211.279816][ T30] audit: type=1326 audit(1741559991.970:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21333 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x7ffc0000 [ 1211.308825][T21317] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15348kB [ 1211.370617][T21317] Node 0 DMA32: 56*4kB (UME) 83*8kB (UME) 562*16kB (UME) 625*32kB (UME) 326*64kB (UME) 116*128kB (UME) 102*256kB (UME) 254*512kB (UME) 175*1024kB (UME) 20*2048kB (UME) 175*4096kB (UM) = 1158712kB [ 1211.480376][T21317] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1211.508501][T21317] Node 1 Normal: 5*4kB (UME) 56*8kB (UME) 38*16kB (UE) 210*32kB (UE) 82*64kB (UM) 34*128kB (UM) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 6*2048kB (UM) 941*4096kB (UM) = 3890420kB [ 1211.555342][T21317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.588514][T21317] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1211.619045][T21317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.658753][T21317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1211.678543][T21317] 66296 total pagecache pages [ 1211.697072][T21317] 0 pages in swap cache [ 1211.718108][T21317] Free swap = 120448kB [ 1211.733920][T21317] Total swap = 124996kB [ 1211.738087][T21317] 2097051 pages RAM [ 1211.752076][T21317] 0 pages HighMem/MovableOnly [ 1211.772001][T21317] 428551 pages reserved [ 1211.787230][T21317] 0 pages cma reserved [ 1212.375815][T21362] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1212.425040][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1212.499799][T21366] sg_write: data in/out 778202192/14 bytes for SCSI command 0x0-- guessing data in; [ 1212.499799][T21366] program syz.1.4396 not setting count and/or reply_len properly [ 1212.779023][T21362] team0 (unregistering): Port device team_slave_0 removed [ 1212.797554][T21362] team0 (unregistering): Port device team_slave_1 removed [ 1214.824287][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 1215.154424][T21391] lo speed is unknown, defaulting to 1000 [ 1215.163499][T21391] lo speed is unknown, defaulting to 1000 [ 1215.172498][T21391] speed is unknown, defaulting to 1000 [ 1216.686372][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1217.050387][T21411] QAT: Invalid ioctl -1071581943 [ 1218.628522][ T5829] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1218.869982][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 1218.876661][ T5829] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1218.885615][ T5829] usb 2-1: config 0 has no interface number 0 [ 1218.893616][ T5829] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1218.902732][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.910847][ T5829] usb 2-1: Product: syz [ 1218.915098][ T5829] usb 2-1: Manufacturer: syz [ 1218.920072][ T5829] usb 2-1: SerialNumber: syz [ 1218.931846][ T5829] usb 2-1: config 0 descriptor?? [ 1219.656581][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1219.656595][ T30] audit: type=1400 audit(1741560001.920:1411): avc: denied { setattr } for pid=21440 comm="syz.0.4421" name="" dev="pipefs" ino=73284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1219.704435][T21429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.727685][T21429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.898733][ T5829] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1219.905710][ T5829] usb 2-1: No streaming interface found for terminal 6. [ 1219.939862][ T5829] usb 2-1: USB disconnect, device number 87 [ 1221.259278][T21456] lo speed is unknown, defaulting to 1000 [ 1221.268305][T21456] lo speed is unknown, defaulting to 1000 [ 1221.277460][T21456] speed is unknown, defaulting to 1000 [ 1221.678981][ T970] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1221.898515][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 1221.907001][T21462] vivid-004: ================= START STATUS ================= [ 1221.918577][T21462] vivid-004: Radio HW Seek Mode: Bounded [ 1221.928189][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.944858][T21462] [ 1221.947978][T21462] vivid-004: Radio Programmable HW Seek: false [ 1221.955151][T21462] vivid-004: RDS Rx I/O Mode: Block I/O [ 1222.169080][ T970] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1222.188845][T21462] vivid-004: Generate RBDS Instead of RDS: false [ 1222.200267][T21462] vivid-004: RDS Reception: true [ 1222.205661][T21462] vivid-004: RDS Program Type: 0 inactive [ 1222.228642][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.246036][T21462] vivid-004: RDS PS Name: inactive [ 1222.251538][T21462] vivid-004: RDS Radio Text: inactive [ 1222.259334][T21462] vivid-004: RDS Traffic Announcement: false inactive [ 1222.266286][T21462] vivid-004: RDS Traffic Program: false inactive [ 1222.272854][T21462] vivid-004: RDS Music: false inactive [ 1222.393892][T21464] lo speed is unknown, defaulting to 1000 [ 1222.400106][T21464] lo speed is unknown, defaulting to 1000 [ 1222.406264][T21464] speed is unknown, defaulting to 1000 [ 1222.493423][ T970] usb 2-1: config 0 descriptor?? [ 1222.511598][T21462] vivid-004: ================== END STATUS ================== [ 1223.974950][T21486] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1224.715223][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 1224.758700][ T970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1224.819319][ T970] usb 2-1: USB disconnect, device number 88 [ 1225.336937][T21499] lo speed is unknown, defaulting to 1000 [ 1225.349868][T21499] lo speed is unknown, defaulting to 1000 [ 1225.362183][T21499] speed is unknown, defaulting to 1000 [ 1226.053737][ T30] audit: type=1400 audit(1741560008.300:1412): avc: denied { watch watch_reads } for pid=21504 comm="syz.5.4439" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 1226.938518][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4441'. [ 1227.161231][ T30] audit: type=1400 audit(1741560009.410:1413): avc: denied { read } for pid=21494 comm="syz.1.4438" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 1227.380060][ T30] audit: type=1400 audit(1741560009.410:1414): avc: denied { open } for pid=21494 comm="syz.1.4438" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 1227.944108][T21520] dccp_invalid_packet: P.Data Offset(10) too large [ 1227.956254][T21487] warn_alloc: 1 callbacks suppressed [ 1227.963814][T21487] syz.2.4433: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1228.020717][T21487] CPU: 1 UID: 0 PID: 21487 Comm: syz.2.4433 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1228.020748][T21487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1228.020755][T21487] Call Trace: [ 1228.020759][T21487] [ 1228.020764][T21487] dump_stack_lvl+0x16c/0x1f0 [ 1228.020782][T21487] warn_alloc+0x24d/0x3a0 [ 1228.020795][T21487] ? __pfx_warn_alloc+0x10/0x10 [ 1228.020810][T21487] ? __get_vm_area_node+0x1b0/0x2f0 [ 1228.020825][T21487] ? __get_vm_area_node+0x1dc/0x2f0 [ 1228.020843][T21487] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1228.020864][T21487] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1228.020882][T21487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1228.020902][T21487] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1228.020917][T21487] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1228.020930][T21487] vmalloc_user_noprof+0x6b/0x90 [ 1228.020946][T21487] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1228.020960][T21487] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1228.020975][T21487] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1228.020989][T21487] __vb2_queue_alloc+0x896/0x1230 [ 1228.021010][T21487] vb2_core_reqbufs+0xa73/0xfb0 [ 1228.021026][T21487] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1228.021047][T21487] __vb2_init_fileio+0x3f3/0x1110 [ 1228.021065][T21487] vb2_core_poll+0x5ec/0x700 [ 1228.021080][T21487] vb2_poll+0x33/0x150 [ 1228.021093][T21487] vb2_fop_poll+0x10f/0x2c0 [ 1228.021106][T21487] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1228.021119][T21487] v4l2_poll+0x160/0x320 [ 1228.021130][T21487] ? __pfx_v4l2_poll+0x10/0x10 [ 1228.021138][T21487] do_sys_poll+0x524/0xde0 [ 1228.021159][T21487] ? __pfx_do_sys_poll+0x10/0x10 [ 1228.021185][T21487] ? schedule+0xf1/0x350 [ 1228.021197][T21487] ? futex_wait_queue+0x103/0x1f0 [ 1228.021215][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021231][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021247][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021264][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021280][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021296][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021312][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021329][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021345][T21487] ? __pfx_pollwake+0x10/0x10 [ 1228.021361][T21487] ? do_futex+0x123/0x350 [ 1228.021373][T21487] ? __pfx_do_futex+0x10/0x10 [ 1228.021385][T21487] ? set_user_sigmask+0x217/0x2a0 [ 1228.021399][T21487] ? __pfx_set_user_sigmask+0x10/0x10 [ 1228.021417][T21487] __x64_sys_ppoll+0x25a/0x2d0 [ 1228.021428][T21487] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1228.021438][T21487] ? rcu_is_watching+0x12/0xc0 [ 1228.021453][T21487] do_syscall_64+0xcd/0x250 [ 1228.021468][T21487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.021483][T21487] RIP: 0033:0x7f1c32f8d169 [ 1228.021492][T21487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.021502][T21487] RSP: 002b:00007f1c33de1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1228.021513][T21487] RAX: ffffffffffffffda RBX: 00007f1c331a6080 RCX: 00007f1c32f8d169 [ 1228.021519][T21487] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00004000000000c0 [ 1228.021525][T21487] RBP: 00007f1c3300e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.021531][T21487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.021536][T21487] R13: 0000000000000000 R14: 00007f1c331a6080 R15: 00007ffe36b7d948 [ 1228.021549][T21487] [ 1228.021553][T21487] Mem-Info: [ 1228.373186][T21526] syz.0.4442: attempt to access beyond end of device [ 1228.373186][T21526] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1228.388491][T21526] SQUASHFS error: Failed to read block 0x0: -5 [ 1228.394742][T21526] unable to read squashfs_super_block [ 1228.400947][T21487] active_anon:12873 inactive_anon:0 isolated_anon:0 [ 1228.400947][T21487] active_file:2751 inactive_file:58995 isolated_file:0 [ 1228.400947][T21487] unevictable:2815 dirty:1574 writeback:0 [ 1228.400947][T21487] slab_reclaimable:12133 slab_unreclaimable:104181 [ 1228.400947][T21487] mapped:36056 shmem:7130 pagetables:826 [ 1228.400947][T21487] sec_pagetables:0 bounce:0 [ 1228.400947][T21487] kernel_misc_reclaimable:0 [ 1228.400947][T21487] free:1263511 free_pcp:5705 free_cma:0 [ 1228.764204][T21487] Node 0 active_anon:53592kB inactive_anon:0kB active_file:11004kB inactive_file:233180kB unevictable:7680kB isolated(anon):0kB isolated(file):0kB mapped:119688kB dirty:3608kB writeback:0kB shmem:26984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10964kB pagetables:3304kB sec_pagetables:0kB all_unreclaimable? no [ 1228.871719][T21487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2800kB unevictable:3580kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:288kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1228.917992][T21487] Node 0 DMA free:15348kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1228.988592][T21487] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1228.994768][T21487] Node 0 DMA32 free:1146096kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33892kB inactive_anon:0kB active_file:11004kB inactive_file:230480kB unevictable:7680kB writepending:1008kB present:3129332kB managed:2547368kB mlocked:6144kB bounce:0kB free_pcp:29376kB local_pcp:7888kB free_cma:0kB [ 1229.036358][T21487] lowmem_reserve[]: 0 0 0 0 0 [ 1229.044336][T21487] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1229.099012][T21528] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4444'. [ 1229.253741][T21487] lowmem_reserve[]: 0 0 0 0 0 [ 1229.473401][T21487] Node 1 Normal free:3886892kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1540kB writepending:0kB present:4194300kB managed:4111164kB mlocked:4kB bounce:0kB free_pcp:25132kB local_pcp:19720kB free_cma:0kB [ 1229.548984][T21487] lowmem_reserve[]: 0 0 0 0 0 [ 1229.559581][T21539] netlink: 393 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1229.572130][T21539] netlink: 'syz.5.4449': attribute type 2 has an invalid length. [ 1229.580063][T21539] netlink: 16138 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1229.599623][T21539] loop6: detected capacity change from 0 to 524287999 [ 1229.676470][T21487] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15348kB [ 1229.692093][T21487] Node 0 DMA32: 2*4kB (UE) 23*8kB (ME) 175*16kB (UME) 651*32kB (UME) 306*64kB (UME) 112*128kB (UME) 117*256kB (UME) 252*512kB (UME) 173*1024kB (UME) 20*2048kB (UME) 178*4096kB (UM) = 1163920kB [ 1229.717726][T21487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1229.733777][T21542] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1229.819397][T21539] loop6: detected capacity change from 524287999 to 0 [ 1229.854283][T21487] Node 1 Normal: 1*4kB (E) 23*8kB (U) 39*16kB (UM) 208*32kB (U) 82*64kB (UME) 33*128kB (U) 7*256kB (UE) 1*512kB (U) 3*1024kB (UME) 5*2048kB (UM) 941*4096kB (UM) = 3886892kB [ 1229.872824][T21487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.882493][T21487] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1229.892054][T21487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.902055][T21487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1230.500850][T21487] 64699 total pagecache pages [ 1230.515994][T21487] 0 pages in swap cache [ 1230.523050][T21487] Free swap = 120532kB [ 1230.680075][T21487] Total swap = 124996kB [ 1230.699127][T21556] netlink: 'syz.1.4454': attribute type 1 has an invalid length. [ 1230.716799][T21487] 2097051 pages RAM [ 1230.722299][T21487] 0 pages HighMem/MovableOnly [ 1230.882611][T21487] 428551 pages reserved [ 1230.888870][ T30] audit: type=1400 audit(1741560013.130:1415): avc: denied { mount } for pid=21554 comm="syz.1.4454" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1230.934883][ T5868] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1231.032237][ T30] audit: type=1400 audit(1741560013.150:1416): avc: denied { remount } for pid=21554 comm="syz.1.4454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1231.107085][T21487] 0 pages cma reserved [ 1231.171116][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 1231.192952][ T30] audit: type=1400 audit(1741560013.460:1417): avc: denied { unmount } for pid=16689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1231.229687][ T5144] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 1231.236641][ T5868] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1231.248050][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.281492][ T5868] usb 5-1: config 0 descriptor?? [ 1231.296973][ T5868] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1231.697369][T21550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.705904][T21550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.713800][ T5868] gspca_nw80x: reg_r err -32 [ 1231.718826][T21550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.727256][T21550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.735125][ T5868] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 1232.493928][ T30] audit: type=1326 audit(1741560014.760:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21572 comm="syz.2.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c32f8d169 code=0x7fc00000 [ 1232.765196][ T30] audit: type=1326 audit(1741560014.790:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21572 comm="syz.2.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c32f8d169 code=0x7fc00000 [ 1232.821722][ T30] audit: type=1326 audit(1741560014.790:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21572 comm="syz.2.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c32f8d169 code=0x7fc00000 [ 1232.838559][T21587] netlink: 'syz.1.4462': attribute type 2 has an invalid length. [ 1232.845231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.290526][ T30] audit: type=1400 audit(1741560015.560:1421): avc: denied { watch } for pid=21599 comm="syz.1.4465" path="/252/file1" dev="tmpfs" ino=1409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1233.313576][ T30] audit: type=1400 audit(1741560015.580:1422): avc: denied { write } for pid=21589 comm="syz.2.4463" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1233.447176][ T30] audit: type=1400 audit(1741560015.580:1423): avc: denied { open } for pid=21589 comm="syz.2.4463" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1233.647933][ T9] usb 5-1: USB disconnect, device number 99 [ 1233.888140][T21611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4470'. [ 1233.907823][T21613] overlayfs: missing 'lowerdir' [ 1234.921226][T21634] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1236.908717][ T9] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1236.965146][ T30] audit: type=1400 audit(1741560019.200:1424): avc: denied { name_connect } for pid=21649 comm="syz.2.4482" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1237.143112][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.159981][ T30] audit: type=1326 audit(1741560019.430:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21660 comm="syz.4.4486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f958d169 code=0x0 [ 1237.163481][ T9] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1237.781880][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1237.810838][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.843300][ T9] usb 2-1: Product: syz [ 1237.862370][ T9] usb 2-1: Manufacturer: syz [ 1237.922158][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'. [ 1237.944300][ T9] usb 2-1: SerialNumber: syz [ 1238.103557][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.112515][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.328524][ T9] usb 2-1: selecting invalid altsetting 1 [ 1238.358454][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1238.365531][ T9] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1238.385121][ T9] usb 2-1: USB disconnect, device number 89 [ 1240.752706][T21696] lo speed is unknown, defaulting to 1000 [ 1240.753070][T21696] lo speed is unknown, defaulting to 1000 [ 1240.753413][T21696] speed is unknown, defaulting to 1000 [ 1240.811076][T21700] lo speed is unknown, defaulting to 1000 [ 1240.813077][T21700] lo speed is unknown, defaulting to 1000 [ 1240.813739][T21700] speed is unknown, defaulting to 1000 [ 1241.346652][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1241.537850][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1241.756679][T21723] netlink: del zone limit has 8 unknown bytes [ 1242.864994][ T30] audit: type=1400 audit(1741560025.030:1426): avc: denied { map } for pid=21726 comm="syz.0.4501" path="socket:[74075]" dev="sockfs" ino=74075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1243.129500][T21739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4506'. [ 1244.262304][T21750] lo speed is unknown, defaulting to 1000 [ 1244.271762][T21750] lo speed is unknown, defaulting to 1000 [ 1244.313533][T21750] speed is unknown, defaulting to 1000 [ 1244.921697][T21763] SELinux: failed to load policy [ 1245.950954][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1246.484221][T21782] can0: slcan on ttyS3. [ 1246.538861][T21782] can0 (unregistered): slcan off ttyS3. [ 1248.902385][T15877] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1249.003838][T21818] lo speed is unknown, defaulting to 1000 [ 1249.026685][T21818] lo speed is unknown, defaulting to 1000 [ 1249.058499][T21818] speed is unknown, defaulting to 1000 [ 1249.695150][T15877] usb 3-1: Using ep0 maxpacket: 8 [ 1249.703332][T21816] lo speed is unknown, defaulting to 1000 [ 1249.704579][T21816] lo speed is unknown, defaulting to 1000 [ 1249.705236][T21816] speed is unknown, defaulting to 1000 [ 1249.758421][T15877] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1249.781389][T15877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.800310][T15877] usb 3-1: Product: syz [ 1249.805979][T15877] usb 3-1: Manufacturer: syz [ 1249.815436][T15877] usb 3-1: SerialNumber: syz [ 1249.824679][T15877] usb 3-1: config 0 descriptor?? [ 1249.915525][T21831] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1250.058536][T15877] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1251.313723][T15877] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1251.373662][T15877] usb 3-1: USB disconnect, device number 41 [ 1252.208497][T12445] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1252.702987][T12445] usb 2-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.896883][T21876] lo speed is unknown, defaulting to 1000 [ 1252.905358][T21876] lo speed is unknown, defaulting to 1000 [ 1252.914433][T21876] speed is unknown, defaulting to 1000 [ 1253.258951][T12445] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1253.265744][T12445] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1253.279127][T12445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.310032][T12445] usb 2-1: config 0 descriptor?? [ 1253.904020][ T30] audit: type=1400 audit(1741560036.110:1427): avc: denied { ioctl } for pid=21866 comm="syz.1.4540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1253.931580][T12445] holtek_mouse 0003:04D9:A072.0011: unknown main item tag 0x4 [ 1253.962475][T12445] holtek_mouse 0003:04D9:A072.0011: unknown main item tag 0x3 [ 1254.093405][ T30] audit: type=1400 audit(1741560036.200:1428): avc: denied { create } for pid=21887 comm="syz.0.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1254.094829][T12445] holtek_mouse 0003:04D9:A072.0011: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input0 [ 1254.114141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.114999][ T30] audit: type=1400 audit(1741560036.240:1429): avc: denied { execmem } for pid=21887 comm="syz.0.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1254.143023][T21867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1255.125017][ T30] audit: type=1400 audit(1741560036.400:1430): avc: denied { read } for pid=21866 comm="syz.1.4540" dev="nsfs" ino=4026533248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1255.160358][ T30] audit: type=1400 audit(1741560036.400:1431): avc: denied { open } for pid=21866 comm="syz.1.4540" path="net:[4026533248]" dev="nsfs" ino=4026533248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1255.183666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.308495][ T30] audit: type=1400 audit(1741560036.400:1432): avc: denied { create } for pid=21866 comm="syz.1.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1255.373022][T12445] usb 2-1: USB disconnect, device number 90 [ 1255.425717][ T30] audit: type=1400 audit(1741560036.410:1433): avc: denied { bind } for pid=21866 comm="syz.1.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1255.469480][ T30] audit: type=1400 audit(1741560036.410:1434): avc: denied { setopt } for pid=21866 comm="syz.1.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1255.547533][ T30] audit: type=1400 audit(1741560036.480:1435): avc: denied { prog_load } for pid=21887 comm="syz.0.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1255.574461][ T30] audit: type=1400 audit(1741560036.480:1436): avc: denied { bpf } for pid=21887 comm="syz.0.4545" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1255.896622][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4549'. [ 1258.445086][T21938] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1258.449351][T21936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.689441][T21936] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1258.932614][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1258.932628][ T30] audit: type=1400 audit(1741560041.200:1504): avc: denied { ioctl } for pid=21956 comm="syz.5.4561" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75805 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1259.525043][ T30] audit: type=1400 audit(1741560041.310:1505): avc: denied { mounton } for pid=21952 comm="syz.2.4560" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1260.473604][ T30] audit: type=1400 audit(1741560041.400:1506): avc: denied { unlink } for pid=21952 comm="syz.2.4560" name="#48" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1260.528520][ T30] audit: type=1400 audit(1741560041.430:1507): avc: denied { mount } for pid=21952 comm="syz.2.4560" name="/" dev="overlay" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1260.572472][ T30] audit: type=1400 audit(1741560041.770:1508): avc: denied { read write } for pid=21951 comm="syz.0.4559" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1260.607455][ T30] audit: type=1400 audit(1741560041.770:1509): avc: denied { open } for pid=21951 comm="syz.0.4559" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1260.697737][ T30] audit: type=1400 audit(1741560041.770:1510): avc: denied { mount } for pid=21951 comm="syz.0.4559" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1261.117138][ T30] audit: type=1400 audit(1741560042.730:1511): avc: denied { unmount } for pid=17488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1261.462612][T21988] pim6reg: entered allmulticast mode [ 1261.658549][ T30] audit: type=1400 audit(1741560042.740:1512): avc: denied { unmount } for pid=14195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1261.739593][ T30] audit: type=1400 audit(1741560042.820:1513): avc: denied { write } for pid=21941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.713207][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1264.713224][ T30] audit: type=1400 audit(1741560046.980:1545): avc: denied { setopt } for pid=22032 comm="syz.4.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1264.750725][ T30] audit: type=1400 audit(1741560047.010:1546): avc: denied { write } for pid=22032 comm="syz.4.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1264.778265][T22033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1264.903677][ T30] audit: type=1400 audit(1741560047.040:1547): avc: denied { wake_alarm } for pid=22032 comm="syz.4.4579" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1264.927871][ T30] audit: type=1400 audit(1741560047.040:1548): avc: denied { mount } for pid=22032 comm="syz.4.4579" name="/" dev="ocfs2_dlmfs" ino=76014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1264.958083][ T30] audit: type=1400 audit(1741560047.220:1549): avc: denied { read write } for pid=22032 comm="syz.4.4579" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1264.985200][T22043] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1265.115850][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1265.355935][ T30] audit: type=1400 audit(1741560047.220:1550): avc: denied { open } for pid=22032 comm="syz.4.4579" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1265.545203][ T30] audit: type=1400 audit(1741560047.280:1551): avc: denied { ioctl } for pid=22032 comm="syz.4.4579" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1266.651264][ T30] audit: type=1400 audit(1741560048.920:1552): avc: denied { read } for pid=22062 comm="syz.2.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1266.987121][ T30] audit: type=1400 audit(1741560049.250:1553): avc: denied { create } for pid=22080 comm="syz.0.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1267.103280][ T30] audit: type=1400 audit(1741560049.250:1554): avc: denied { setopt } for pid=22080 comm="syz.0.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1267.817490][T22095] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1267.827048][T22095] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1268.864616][T22104] lo speed is unknown, defaulting to 1000 [ 1268.868055][T22104] lo speed is unknown, defaulting to 1000 [ 1268.871494][T22104] speed is unknown, defaulting to 1000 [ 1270.540932][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1270.540948][ T30] audit: type=1400 audit(1741560052.800:1571): avc: denied { read } for pid=22114 comm="syz.5.4593" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1270.541083][T22118] sd 0:0:1:0: PR command failed: 1026 [ 1270.574858][T22118] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1270.581670][T22118] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1270.594754][ T30] audit: type=1400 audit(1741560052.800:1572): avc: denied { open } for pid=22114 comm="syz.5.4593" path="/358/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1270.893611][ T30] audit: type=1400 audit(1741560052.810:1573): avc: denied { ioctl } for pid=22114 comm="syz.5.4593" path="/358/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1271.171104][ T30] audit: type=1400 audit(1741560053.440:1574): avc: denied { connect } for pid=22123 comm="syz.4.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1271.275976][ T30] audit: type=1400 audit(1741560053.530:1575): avc: denied { sys_chroot } for pid=22134 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1271.341348][ T30] audit: type=1400 audit(1741560053.530:1576): avc: denied { setgid } for pid=22134 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1271.365576][ T30] audit: type=1400 audit(1741560053.530:1577): avc: denied { setrlimit } for pid=22134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1271.370668][T22139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1271.992111][T22139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.999859][T22139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.018614][ T30] audit: type=1400 audit(1741560053.600:1578): avc: denied { name_connect } for pid=22123 comm="syz.4.4596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1272.061369][ T30] audit: type=1400 audit(1741560053.630:1579): avc: denied { ioctl } for pid=22135 comm="syz.5.4598" path="socket:[75673]" dev="sockfs" ino=75673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1272.118299][ T30] audit: type=1400 audit(1741560054.320:1580): avc: denied { listen } for pid=22123 comm="syz.4.4596" lport=49617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1272.371689][T22153] gtp0: entered promiscuous mode [ 1273.049363][T22163] lo speed is unknown, defaulting to 1000 [ 1273.058575][T22163] lo speed is unknown, defaulting to 1000 [ 1273.067724][T22163] speed is unknown, defaulting to 1000 [ 1274.148857][T22179] lo speed is unknown, defaulting to 1000 [ 1274.155315][T22179] lo speed is unknown, defaulting to 1000 [ 1274.162079][T22179] speed is unknown, defaulting to 1000 [ 1274.724184][T22196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4615'. [ 1276.179997][T22206] [U]  [ 1276.183324][T22206] [U] K{ [ 1276.186355][T22206] [U] t 1ŠFfˊ`GJgo/mC [ 1276.199390][T22206] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1276.322371][T22206] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1276.362590][T22206] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1276.458512][T22206] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1276.511815][T22206] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1276.536241][T22206] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1276.564349][T22206] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1276.658873][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4618'. [ 1276.674294][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 1276.702884][T22206] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1276.720524][T22217] ipvlan2: entered promiscuous mode [ 1276.725899][T22206] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1276.792712][T22206] [U] 22Ʃx?0;3u [ 1276.836554][T22206] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1276.876124][T22206] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1276.886522][T22206] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1276.897702][T22206] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1276.906711][T22206] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1276.944054][T22206] [U] ec [ 1276.947197][T22206] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1276.984090][T22209] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1277.178473][ T970] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1277.403462][T22234] lo speed is unknown, defaulting to 1000 [ 1277.412690][T22234] lo speed is unknown, defaulting to 1000 [ 1277.422005][T22234] speed is unknown, defaulting to 1000 [ 1277.888438][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 1277.897637][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.909425][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.920628][ T970] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1277.936963][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.963131][ T970] usb 3-1: config 0 descriptor?? [ 1278.197370][T22250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22250 comm=syz.5.4626 [ 1278.211770][T22249] netlink: 'syz.5.4626': attribute type 29 has an invalid length. [ 1278.238545][T12445] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1278.399451][T12445] usb 5-1: Using ep0 maxpacket: 16 [ 1278.478448][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1278.478465][ T30] audit: type=1400 audit(1741560060.730:1594): avc: denied { execute_no_trans } for pid=22248 comm="syz.5.4626" path="/366/file1" dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1278.562396][T12445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.752825][ T970] steelseries 0003:1038:1410.0012: missing HID_OUTPUT_REPORT 0 [ 1278.798544][T12445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.809089][ T30] audit: type=1400 audit(1741560060.890:1595): avc: denied { create } for pid=22219 comm="syz.2.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1278.829126][T12445] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1278.842145][T12445] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1278.851363][T12445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.861229][T12445] usb 5-1: config 0 descriptor?? [ 1280.525684][T12445] microsoft 0003:045E:07DA.0013: item fetching failed at offset 32/34 [ 1280.538060][ T5829] usb 3-1: USB disconnect, device number 42 [ 1280.539206][T22243] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1280.600684][T12445] microsoft 0003:045E:07DA.0013: parse failed [ 1280.607531][T12445] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 1280.610321][T22243] netlink: 'syz.4.4624': attribute type 9 has an invalid length. [ 1280.901172][T22243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1281.543753][ T30] audit: type=1400 audit(1741560063.810:1596): avc: denied { create } for pid=22268 comm="syz.5.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1281.566355][T22272] netlink: 'syz.5.4632': attribute type 2 has an invalid length. [ 1281.574173][T22272] netlink: 'syz.5.4632': attribute type 8 has an invalid length. [ 1281.581999][T22272] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4632'. [ 1281.583865][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1281.656862][ T30] audit: type=1400 audit(1741560063.830:1597): avc: denied { mount } for pid=22268 comm="syz.5.4632" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1281.740819][ T9] usb 5-1: USB disconnect, device number 100 [ 1281.790763][T22266] netlink: 892 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1281.848486][T22288] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1024 sclass=netlink_xfrm_socket pid=22288 comm=syz.0.4635 [ 1281.863441][T22275] netlink: 892 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1282.127014][T22304] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1282.154456][T22301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22301 comm=syz.4.4638 [ 1282.168465][T22301] netlink: 'syz.4.4638': attribute type 29 has an invalid length. [ 1282.259908][T22299] netlink: 'syz.4.4638': attribute type 29 has an invalid length. [ 1282.590044][T22312] lo speed is unknown, defaulting to 1000 [ 1282.601405][T22312] lo speed is unknown, defaulting to 1000 [ 1282.613098][T22312] speed is unknown, defaulting to 1000 [ 1282.976454][ T30] audit: type=1400 audit(1741560065.240:1598): avc: denied { read append } for pid=22300 comm="syz.5.4639" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1283.088291][ T30] audit: type=1400 audit(1741560065.240:1599): avc: denied { open } for pid=22300 comm="syz.5.4639" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1283.121967][ T5144] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1283.135348][ T30] audit: type=1400 audit(1741560065.330:1600): avc: denied { write } for pid=22300 comm="syz.5.4639" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1283.276852][T22317] netlink: 'syz.5.4639': attribute type 3 has an invalid length. [ 1283.319578][T22317] netlink: 'syz.5.4639': attribute type 3 has an invalid length. [ 1283.328648][ T30] audit: type=1400 audit(1741560065.540:1601): avc: denied { append } for pid=22300 comm="syz.5.4639" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1283.329076][T22317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4639'. [ 1284.873288][T22340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22340 comm=syz.2.4645 [ 1284.890804][T22340] netlink: 'syz.2.4645': attribute type 29 has an invalid length. [ 1284.940142][T22335] netlink: 'syz.2.4645': attribute type 29 has an invalid length. [ 1285.791170][T22348] input: syz0 as /devices/virtual/input/input52 [ 1285.806887][T22347] kAFS: unable to lookup cell '/' [ 1285.867179][ T30] audit: type=1400 audit(1741560068.120:1602): avc: denied { read } for pid=22350 comm="syz.2.4649" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1285.944764][T22353] netlink: 912 bytes leftover after parsing attributes in process `syz.0.4650'. [ 1285.948500][ T30] audit: type=1400 audit(1741560068.120:1603): avc: denied { open } for pid=22350 comm="syz.2.4649" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1286.028604][ T30] audit: type=1400 audit(1741560068.120:1604): avc: denied { ioctl } for pid=22350 comm="syz.2.4649" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1286.075041][ T30] audit: type=1400 audit(1741560068.190:1605): avc: denied { ioctl } for pid=22349 comm="syz.0.4650" path="socket:[76630]" dev="sockfs" ino=76630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1286.138504][ T30] audit: type=1400 audit(1741560068.400:1606): avc: denied { map } for pid=22357 comm="syz.2.4651" path="socket:[76643]" dev="sockfs" ino=76643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1286.284563][ T30] audit: type=1400 audit(1741560068.400:1607): avc: denied { read accept } for pid=22357 comm="syz.2.4651" path="socket:[76643]" dev="sockfs" ino=76643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1286.368519][ T30] audit: type=1400 audit(1741560068.550:1608): avc: denied { write } for pid=22368 comm="syz.1.4653" name="001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1286.394304][ T30] audit: type=1400 audit(1741560068.550:1609): avc: denied { map } for pid=22368 comm="syz.1.4653" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1286.418873][T22376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22376 comm=syz.0.4654 [ 1286.432166][T22371] netlink: 'syz.0.4654': attribute type 29 has an invalid length. [ 1286.972480][ T30] audit: type=1326 audit(1741560069.240:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22372 comm="syz.2.4655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c32f8d169 code=0x0 [ 1287.036212][ T30] audit: type=1400 audit(1741560069.290:1611): avc: denied { read } for pid=22372 comm="syz.2.4655" dev="sockfs" ino=76680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1287.326929][T22387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4658'. [ 1287.339340][T22387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4658'. [ 1287.400331][T22390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.988168][T22398] lo speed is unknown, defaulting to 1000 [ 1287.998973][T22398] lo speed is unknown, defaulting to 1000 [ 1288.010051][T22398] speed is unknown, defaulting to 1000 [ 1289.564714][T22414] FAULT_INJECTION: forcing a failure. [ 1289.564714][T22414] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.577486][T22414] CPU: 1 UID: 0 PID: 22414 Comm: syz.5.4664 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1289.577509][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1289.577520][T22414] Call Trace: [ 1289.577526][T22414] [ 1289.577533][T22414] dump_stack_lvl+0x16c/0x1f0 [ 1289.577562][T22414] should_fail_ex+0x50a/0x650 [ 1289.577589][T22414] ? fs_reclaim_acquire+0xae/0x150 [ 1289.577617][T22414] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1289.577642][T22414] should_failslab+0xc2/0x120 [ 1289.577664][T22414] __kmalloc_noprof+0xcb/0x510 [ 1289.577682][T22414] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1289.577712][T22414] tomoyo_realpath_from_path+0xb9/0x720 [ 1289.577737][T22414] ? tomoyo_path_number_perm+0x235/0x590 [ 1289.577761][T22414] ? tomoyo_path_number_perm+0x235/0x590 [ 1289.577786][T22414] tomoyo_path_number_perm+0x248/0x590 [ 1289.577807][T22414] ? tomoyo_path_number_perm+0x235/0x590 [ 1289.577832][T22414] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1289.577877][T22414] ? __pfx_lock_release+0x10/0x10 [ 1289.577900][T22414] ? trace_lock_acquire+0x14e/0x1f0 [ 1289.577924][T22414] ? lock_acquire+0x2f/0xb0 [ 1289.577945][T22414] ? __fget_files+0x40/0x3a0 [ 1289.577966][T22414] ? __fget_files+0x206/0x3a0 [ 1289.577987][T22414] security_file_ioctl+0x9b/0x240 [ 1289.578013][T22414] __x64_sys_ioctl+0xb7/0x200 [ 1289.578040][T22414] do_syscall_64+0xcd/0x250 [ 1289.578066][T22414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.578089][T22414] RIP: 0033:0x7fd5c338d169 [ 1289.578105][T22414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.578121][T22414] RSP: 002b:00007fd5c4291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.578137][T22414] RAX: ffffffffffffffda RBX: 00007fd5c35a6160 RCX: 00007fd5c338d169 [ 1289.578148][T22414] RDX: 0000400000000400 RSI: 00000000c008561c RDI: 000000000000000d [ 1289.578158][T22414] RBP: 00007fd5c4291090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.578168][T22414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.578178][T22414] R13: 0000000000000000 R14: 00007fd5c35a6160 R15: 00007fff1ce78458 [ 1289.578201][T22414] [ 1289.578209][T22414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1290.532969][ T6403] Bluetooth: hci4: Frame reassembly failed (-84) [ 1290.618258][T22424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22424 comm=syz.1.4668 [ 1290.632517][T22423] netlink: 'syz.1.4668': attribute type 29 has an invalid length. [ 1291.512865][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1291.512880][ T30] audit: type=1400 audit(1741560073.780:1620): avc: denied { create } for pid=22428 comm="syz.1.4669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1291.518524][ T5829] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1291.557254][ T30] audit: type=1400 audit(1741560073.820:1621): avc: denied { setopt } for pid=22426 comm="syz.0.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1291.758661][ T5829] usb 3-1: device descriptor read/64, error -71 [ 1292.008655][ T5829] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1292.268471][ T5829] usb 3-1: device descriptor read/64, error -71 [ 1292.294842][ T30] audit: type=1400 audit(1741560074.560:1622): avc: denied { setopt } for pid=22439 comm="syz.4.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1292.422248][T22449] FAULT_INJECTION: forcing a failure. [ 1292.422248][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.435395][T22449] CPU: 0 UID: 0 PID: 22449 Comm: syz.1.4674 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1292.435418][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1292.435428][T22449] Call Trace: [ 1292.435434][T22449] [ 1292.435441][T22449] dump_stack_lvl+0x16c/0x1f0 [ 1292.435468][T22449] should_fail_ex+0x50a/0x650 [ 1292.435498][T22449] _copy_from_user+0x2e/0xd0 [ 1292.435518][T22449] kvm_vm_ioctl+0x537/0x3d70 [ 1292.435544][T22449] ? __pv_queued_spin_lock_slowpath+0x28a/0xc90 [ 1292.435573][T22449] ? find_held_lock+0x2d/0x110 [ 1292.435592][T22449] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1292.435618][T22449] ? finish_task_switch.isra.0+0x212/0xcc0 [ 1292.435643][T22449] ? __pfx_lock_release+0x10/0x10 [ 1292.435665][T22449] ? rcu_is_watching+0x12/0xc0 [ 1292.435686][T22449] ? finish_task_switch.isra.0+0x160/0xcc0 [ 1292.435713][T22449] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1292.435736][T22449] ? lockdep_hardirqs_on+0x7c/0x110 [ 1292.435757][T22449] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1292.435781][T22449] ? __switch_to+0x749/0x1190 [ 1292.435802][T22449] ? __schedule+0xf4b/0x5890 [ 1292.435818][T22449] ? tomoyo_path_number_perm+0x46d/0x590 [ 1292.435850][T22449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1292.435889][T22449] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 1292.435918][T22449] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1292.435953][T22449] ? selinux_file_ioctl+0x60/0x270 [ 1292.435984][T22449] ? selinux_file_ioctl+0x180/0x270 [ 1292.436009][T22449] ? selinux_file_ioctl+0xb4/0x270 [ 1292.436036][T22449] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1292.436062][T22449] __x64_sys_ioctl+0x190/0x200 [ 1292.436088][T22449] do_syscall_64+0xcd/0x250 [ 1292.436112][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.436140][T22449] RIP: 0033:0x7fdd9658d169 [ 1292.436153][T22449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.436169][T22449] RSP: 002b:00007fdd97439038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.436186][T22449] RAX: ffffffffffffffda RBX: 00007fdd967a6160 RCX: 00007fdd9658d169 [ 1292.436197][T22449] RDX: 0000400000000800 RSI: 000000004068aea3 RDI: 0000000000000008 [ 1292.436207][T22449] RBP: 00007fdd97439090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.436217][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.436227][T22449] R13: 0000000000000000 R14: 00007fdd967a6160 R15: 00007ffe8d67efc8 [ 1292.436249][T22449] [ 1292.609833][ T5829] usb usb3-port1: attempt power cycle [ 1292.642329][ T55] Bluetooth: hci4: command 0x1003 tx timeout [ 1292.658532][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1292.711980][ T30] audit: type=1400 audit(1741560074.980:1623): avc: denied { mounton } for pid=22439 comm="syz.4.4673" path="/239/file0" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1293.126488][ T5829] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1293.724605][T22463] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 1293.758503][ T5829] usb 3-1: device descriptor read/8, error -71 [ 1293.937335][T22475] netlink: 'syz.1.4678': attribute type 19 has an invalid length. [ 1293.945954][T22477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=22477 comm=syz.5.4680 [ 1293.966881][T22472] netlink: 'syz.5.4680': attribute type 29 has an invalid length. [ 1294.846678][ T30] audit: type=1400 audit(1741560077.110:1624): avc: denied { write } for pid=22489 comm="syz.2.4683" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1294.874320][ T30] audit: type=1400 audit(1741560077.140:1625): avc: denied { open } for pid=22489 comm="syz.2.4683" path="/442/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1295.273678][T22492] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1295.697492][ T30] audit: type=1400 audit(1741560077.960:1626): avc: denied { unmount } for pid=14195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1295.800115][T22499] Invalid logical block size (917504) [ 1295.990633][T22502] FAULT_INJECTION: forcing a failure. [ 1295.990633][T22502] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.003563][T22502] CPU: 0 UID: 0 PID: 22502 Comm: syz.2.4688 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1296.003584][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1296.003592][T22502] Call Trace: [ 1296.003595][T22502] [ 1296.003599][T22502] dump_stack_lvl+0x16c/0x1f0 [ 1296.003617][T22502] should_fail_ex+0x50a/0x650 [ 1296.003633][T22502] ? fs_reclaim_acquire+0xae/0x150 [ 1296.003649][T22502] ? kernfs_get_tree+0xcc/0xb20 [ 1296.003664][T22502] should_failslab+0xc2/0x120 [ 1296.003676][T22502] __kmalloc_cache_noprof+0x68/0x410 [ 1296.003692][T22502] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1296.003706][T22502] kernfs_get_tree+0xcc/0xb20 [ 1296.003720][T22502] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1296.003736][T22502] ? __pfx_kernfs_get_tree+0x10/0x10 [ 1296.003750][T22502] ? rcu_is_watching+0x12/0xc0 [ 1296.003765][T22502] cgroup_do_get_tree+0x10f/0x750 [ 1296.003780][T22502] cgroup_get_tree+0xad/0x390 [ 1296.003794][T22502] vfs_get_tree+0x8b/0x340 [ 1296.003808][T22502] vfs_cmd_create+0xd7/0x2a0 [ 1296.003821][T22502] __do_sys_fsconfig+0x7ba/0xbe0 [ 1296.003834][T22502] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1296.003853][T22502] do_syscall_64+0xcd/0x250 [ 1296.003867][T22502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.003882][T22502] RIP: 0033:0x7f1c32f8d169 [ 1296.003890][T22502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.003900][T22502] RSP: 002b:00007f1c33de1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1296.003909][T22502] RAX: ffffffffffffffda RBX: 00007f1c331a6080 RCX: 00007f1c32f8d169 [ 1296.003915][T22502] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 1296.003921][T22502] RBP: 00007f1c33de1090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.003927][T22502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.003932][T22502] R13: 0000000000000000 R14: 00007f1c331a6080 R15: 00007ffe36b7d948 [ 1296.003945][T22502] [ 1298.682138][T22530] tmpfs: Unknown parameter '' [ 1298.718584][ T30] audit: type=1400 audit(1741560080.980:1627): avc: denied { create } for pid=22529 comm="syz.0.4698" name="#56" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1298.833060][ T30] audit: type=1400 audit(1741560080.980:1628): avc: denied { link } for pid=22529 comm="syz.0.4698" name="#56" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1298.880394][ T30] audit: type=1400 audit(1741560080.980:1629): avc: denied { rename } for pid=22529 comm="syz.0.4698" name="#57" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1298.946119][ T30] audit: type=1400 audit(1741560080.990:1630): avc: denied { read } for pid=22527 comm="syz.5.4695" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1298.973310][ T30] audit: type=1400 audit(1741560080.990:1631): avc: denied { open } for pid=22527 comm="syz.5.4695" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1299.313081][ T30] audit: type=1400 audit(1741560081.420:1632): avc: denied { ioctl } for pid=22537 comm="syz.4.4700" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1299.332100][T22551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1299.549262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.556184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.597699][T22545] wireguard0: entered promiscuous mode [ 1299.603282][T22545] wireguard0: entered allmulticast mode [ 1299.797633][ T30] audit: type=1400 audit(1741560082.050:1633): avc: denied { read write } for pid=17488 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1299.962636][ T30] audit: type=1400 audit(1741560082.050:1634): avc: denied { open } for pid=17488 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1299.985938][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.018526][ T30] audit: type=1400 audit(1741560082.050:1635): avc: denied { ioctl } for pid=17488 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3226 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1300.538737][ T5829] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1300.552389][T22565] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1300.560488][T22565] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1300.567666][ T30] audit: type=1400 audit(1741560082.820:1636): avc: denied { ioctl } for pid=22564 comm="syz.0.4709" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1300.568623][T22565] veth0_to_bridge: entered allmulticast mode [ 1300.610306][T22565] veth0_to_bridge: entered promiscuous mode [ 1300.619667][T22565] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1300.646287][T22565] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1300.653480][T22565] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1300.782085][ T5829] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1300.798284][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.814216][ T5829] usb 5-1: Product: syz [ 1300.820915][ T5829] usb 5-1: Manufacturer: syz [ 1300.845198][T22588] lo speed is unknown, defaulting to 1000 [ 1300.846876][ T5829] usb 5-1: SerialNumber: syz [ 1300.862943][T22588] lo speed is unknown, defaulting to 1000 [ 1300.867635][ T5829] usb 5-1: config 0 descriptor?? [ 1300.886700][T22588] speed is unknown, defaulting to 1000 [ 1301.609534][ T5829] usb 5-1: Firmware: major: 0, minor: 4, hardware type: ATUSB (0) [ 1301.817173][ T5829] usb 5-1: failed to fetch extended address, random address set [ 1301.849815][ T5829] usb 5-1: USB disconnect, device number 101 [ 1302.469622][T22610] fuse: Unknown parameter 'fm' [ 1304.304819][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1304.304835][ T30] audit: type=1400 audit(1741560086.570:1642): avc: denied { unmount } for pid=16689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1304.521994][ T30] audit: type=1400 audit(1741560086.610:1643): avc: denied { ioctl } for pid=22623 comm="syz.0.4723" path="socket:[77473]" dev="sockfs" ino=77473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1305.307168][ T30] audit: type=1400 audit(1741560087.570:1644): avc: denied { write } for pid=22624 comm="syz.4.4725" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1306.390776][ T30] audit: type=1400 audit(1741560088.660:1645): avc: denied { read write } for pid=22657 comm="syz.1.4732" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1306.490009][ T30] audit: type=1400 audit(1741560088.660:1646): avc: denied { open } for pid=22657 comm="syz.1.4732" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1306.549435][ T30] audit: type=1400 audit(1741560088.660:1647): avc: denied { ioctl } for pid=22657 comm="syz.1.4732" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1307.308801][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4737'. [ 1307.327921][ T30] audit: type=1400 audit(1741560089.590:1648): avc: denied { write } for pid=22672 comm="syz.5.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1307.519009][ T30] audit: type=1804 audit(1741560089.720:1649): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4736" name="/newroot/279/file1" dev="fuse" ino=1 res=1 errno=0 [ 1307.637175][ T30] audit: type=1800 audit(1741560089.720:1650): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4736" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1308.079597][ T5852] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1308.360611][ T5852] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1308.416002][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1308.452630][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1308.472030][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1308.507402][ T5852] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1308.526764][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.545455][ T5852] usb 2-1: config 0 descriptor?? [ 1308.561221][T22689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1308.811477][ T30] audit: type=1400 audit(1741560091.070:1651): avc: denied { mount } for pid=22688 comm="syz.1.4741" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1308.911121][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 1308.917129][ T5852] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1309.115940][ T5852] usb 2-1: USB disconnect, device number 91 [ 1309.618632][T22704] xt_bpf: check failed: parse error [ 1310.920759][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1310.920823][ T30] audit: type=1400 audit(1741560093.180:1655): avc: denied { mount } for pid=22693 comm="syz.0.4742" name="/" dev="ramfs" ino=77533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1311.358550][ T5144] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1311.676175][ T5144] Bluetooth: hci1: Injecting HCI hardware error event [ 1311.709185][ T55] Bluetooth: hci1: hardware error 0x00 [ 1312.970931][T22705] Process accounting resumed [ 1314.428646][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1315.027134][T22726] FAULT_INJECTION: forcing a failure. [ 1315.027134][T22726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.090590][ T30] audit: type=1400 audit(1741560097.130:1656): avc: denied { unmount } for pid=17488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1315.111074][T22726] CPU: 0 UID: 0 PID: 22726 Comm: syz.4.4751 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1315.111099][T22726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1315.111109][T22726] Call Trace: [ 1315.111115][T22726] [ 1315.111122][T22726] dump_stack_lvl+0x16c/0x1f0 [ 1315.111148][T22726] should_fail_ex+0x50a/0x650 [ 1315.111181][T22726] _copy_to_user+0x32/0xd0 [ 1315.111201][T22726] simple_read_from_buffer+0xd0/0x160 [ 1315.111227][T22726] proc_fail_nth_read+0x198/0x270 [ 1315.111252][T22726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1315.111283][T22726] ? rw_verify_area+0xcf/0x680 [ 1315.111306][T22726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1315.111330][T22726] vfs_read+0x1df/0xbf0 [ 1315.111356][T22726] ? __fget_files+0x1fc/0x3a0 [ 1315.111373][T22726] ? __pfx___mutex_lock+0x10/0x10 [ 1315.111396][T22726] ? __pfx_vfs_read+0x10/0x10 [ 1315.111428][T22726] ? __fget_files+0x206/0x3a0 [ 1315.111451][T22726] ksys_read+0x12b/0x250 [ 1315.111466][T22726] ? __pfx_ksys_read+0x10/0x10 [ 1315.111489][T22726] do_syscall_64+0xcd/0x250 [ 1315.111512][T22726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.111535][T22726] RIP: 0033:0x7f51f958bb7c [ 1315.111548][T22726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1315.111564][T22726] RSP: 002b:00007f51f73f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1315.111581][T22726] RAX: ffffffffffffffda RBX: 00007f51f97a5fa0 RCX: 00007f51f958bb7c [ 1315.111593][T22726] RDX: 000000000000000f RSI: 00007f51f73f60a0 RDI: 0000000000000003 [ 1315.111603][T22726] RBP: 00007f51f73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.111612][T22726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.111622][T22726] R13: 0000000000000001 R14: 00007f51f97a5fa0 R15: 00007ffd9e02b348 [ 1315.111645][T22726] [ 1315.598079][ T30] audit: type=1400 audit(1741560097.400:1657): avc: denied { write } for pid=22720 comm="syz.5.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1315.660032][ T30] audit: type=1400 audit(1741560097.640:1658): avc: denied { connect } for pid=22720 comm="syz.5.4749" lport=25 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1315.733517][T22732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4753'. [ 1315.751480][T22732] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1316.490250][T22739] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1318.831844][T22753] xt_connbytes: Forcing CT accounting to be enabled [ 1318.838802][T22753] --map-set only usable from mangle table [ 1328.013728][ C0] sched: DL replenish lagged too much [ 1427.523538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.536695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.549847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.562887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.576060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.589301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.602497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.615641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.628738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.641935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1428.718320][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1428.725313][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22746/1:b..l [ 1428.734148][ C1] rcu: (detected by 1, t=10503 jiffies, g=99257, q=310 ncpus=2) [ 1428.741876][ C1] task:syz.4.4758 state:R running task stack:26048 pid:22746 tgid:22746 ppid:17679 task_flags:0x40044c flags:0x00004006 [ 1428.757520][ C1] Call Trace: [ 1428.760819][ C1] [ 1428.763757][ C1] __schedule+0xf43/0x5890 [ 1428.768191][ C1] ? hlock_class+0x4e/0x130 [ 1428.772702][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1428.777914][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1428.782692][ C1] ? __pfx___schedule+0x10/0x10 [ 1428.787552][ C1] ? find_held_lock+0x2d/0x110 [ 1428.792343][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1428.797775][ C1] preempt_schedule_common+0x44/0xc0 [ 1428.803082][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1428.808302][ C1] _raw_spin_unlock+0x3e/0x50 [ 1428.812985][ C1] unmap_page_range+0xee3/0x4350 [ 1428.817959][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1428.823347][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1428.828297][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1428.832977][ C1] unmap_single_vma+0x194/0x2b0 [ 1428.837873][ C1] unmap_vmas+0x22f/0x490 [ 1428.842220][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1428.847083][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1428.852052][ C1] exit_mmap+0x1c1/0xba0 [ 1428.856304][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1428.861098][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1428.865894][ C1] __mmput+0x12a/0x410 [ 1428.870006][ C1] mmput+0x62/0x70 [ 1428.873739][ C1] do_exit+0x9ba/0x2d70 [ 1428.877901][ C1] ? get_signal+0x8f7/0x26c0 [ 1428.882499][ C1] ? __pfx_do_exit+0x10/0x10 [ 1428.887092][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1428.892124][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1428.897505][ C1] do_group_exit+0xd3/0x2a0 [ 1428.902021][ C1] get_signal+0x24ed/0x26c0 [ 1428.906547][ C1] ? __pfx_get_signal+0x10/0x10 [ 1428.911442][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1428.917002][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1428.923179][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 1428.928912][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1428.934555][ C1] do_syscall_64+0xda/0x250 [ 1428.939074][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.944977][ C1] RIP: 0033:0x7f51f958d169 [ 1428.949397][ C1] RSP: 002b:00007ffd9e02b4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1428.957814][ C1] RAX: 0000000000000000 RBX: 00007f51f97a7ba0 RCX: 00007f51f958d169 [ 1428.965793][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1428.973772][ C1] RBP: 00007f51f97a7ba0 R08: 0000000000000220 R09: 0000001e9e02b79f [ 1428.981750][ C1] R10: 00007f51f97a7ac0 R11: 0000000000000246 R12: 00000000001421f6 [ 1428.989724][ C1] R13: 00007f51f97a6080 R14: ffffffffffffffff R15: 00007ffd9e02b5c0 [ 1428.997712][ C1] [ 1429.000734][ C1] rcu: rcu_preempt kthread starved for 8537 jiffies! g99257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1429.011845][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1429.021818][ C1] rcu: RCU grace-period kthread stack dump: [ 1429.027705][ C1] task:rcu_preempt state:R running task stack:27552 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1429.041210][ C1] Call Trace: [ 1429.044495][ C1] [ 1429.047431][ C1] __schedule+0xf43/0x5890 [ 1429.051860][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1429.057088][ C1] ? __pfx___schedule+0x10/0x10 [ 1429.061953][ C1] ? schedule+0x298/0x350 [ 1429.066287][ C1] ? __pfx_lock_release+0x10/0x10 [ 1429.071332][ C1] ? lock_acquire+0x2f/0xb0 [ 1429.075842][ C1] ? schedule+0x1fd/0x350 [ 1429.080190][ C1] schedule+0xe7/0x350 [ 1429.084268][ C1] schedule_timeout+0x124/0x280 [ 1429.089122][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1429.094498][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1429.099793][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1429.105609][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1429.111083][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1429.115860][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1429.121156][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1429.125842][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1429.131058][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1429.136879][ C1] rcu_gp_kthread+0x271/0x380 [ 1429.141570][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1429.146781][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1429.151988][ C1] ? __kthread_parkme+0x148/0x220 [ 1429.157018][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1429.162234][ C1] kthread+0x3af/0x750 [ 1429.166310][ C1] ? __pfx_kthread+0x10/0x10 [ 1429.170912][ C1] ? __pfx_kthread+0x10/0x10 [ 1429.175509][ C1] ret_from_fork+0x45/0x80 [ 1429.179956][ C1] ? __pfx_kthread+0x10/0x10 [ 1429.184553][ C1] ret_from_fork_asm+0x1a/0x30 [ 1429.189329][ C1] [ 1429.192348][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1429.198671][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 1429.208998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1429.219063][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 1429.224453][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 1429.244079][ C1] RSP: 0018:ffffc90000a27e48 EFLAGS: 00000246 [ 1429.250156][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8933082a [ 1429.258134][ C1] RDX: ffff88801da88000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1429.266109][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1429.274088][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: ffff888012ce5000 [ 1429.282067][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1429.290049][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1429.298989][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.305578][ C1] CR2: 0000001b2e71eff8 CR3: 000000007ccd8000 CR4: 00000000003526f0 [ 1429.313556][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1429.321531][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1429.329507][ C1] Call Trace: [ 1429.332789][ C1] [ 1429.335654][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1429.341989][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1429.347202][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1429.352673][ C1] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 1429.359365][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1429.365006][ C1] ? tmigr_requires_handle_remote+0x140/0x310 [ 1429.371082][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 1429.377506][ C1] ? find_held_lock+0x2d/0x110 [ 1429.382286][ C1] ? hrtimer_run_queues+0x97/0x500 [ 1429.387406][ C1] ? update_process_times+0x178/0x2d0 [ 1429.392792][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1429.398522][ C1] ? read_tsc+0x9/0x20 [ 1429.402598][ C1] ? ktime_get+0x1a7/0x310 [ 1429.407021][ C1] ? tick_nohz_handler+0x376/0x530 [ 1429.412146][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1429.417608][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1429.423010][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1429.428734][ C1] ? read_tsc+0x9/0x20 [ 1429.432818][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 1429.437948][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1429.444140][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1429.449959][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.456146][ C1] ? trace_netif_rx_exit+0x6a/0x220 [ 1429.461354][ C1] ? write_comp_data+0x8b/0x90 [ 1429.466128][ C1] trace_netif_rx_exit+0x6a/0x220 [ 1429.471164][ C1] __netif_rx+0x91/0xb0 [ 1429.475331][ C1] veth_xmit+0x833/0xad0 [ 1429.479584][ C1] dev_hard_start_xmit+0x9a/0x7b0 [ 1429.484620][ C1] __dev_queue_xmit+0x7f0/0x43e0 [ 1429.489570][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1429.494889][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1429.500131][ C1] ? ebt_do_table+0x1bd1/0x21b0 [ 1429.504992][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1429.510291][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1429.515689][ C1] ? find_held_lock+0x2d/0x110 [ 1429.520466][ C1] ? nf_hook+0x4a3/0x7d0 [ 1429.524719][ C1] ? __pfx_lock_release+0x10/0x10 [ 1429.529754][ C1] ? br_nf_post_routing+0x59f/0x11b0 [ 1429.535048][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1429.540254][ C1] ? nf_hook_slow+0x132/0x200 [ 1429.544968][ C1] br_dev_queue_push_xmit+0x274/0x8a0 [ 1429.550354][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1429.554961][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1429.560862][ C1] ? find_held_lock+0x2d/0x110 [ 1429.565638][ C1] br_forward_finish+0xf5/0x130 [ 1429.570497][ C1] br_nf_hook_thresh+0x303/0x410 [ 1429.575439][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.580911][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1429.586373][ C1] ? nf_hook+0x4bf/0x810 [ 1429.590621][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.596092][ C1] ? __pfx_lock_release+0x10/0x10 [ 1429.601131][ C1] br_nf_forward_finish+0x66a/0xba0 [ 1429.606330][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.611799][ C1] br_nf_forward+0x16da/0x1bd0 [ 1429.616568][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1429.621691][ C1] nf_hook_slow+0xbb/0x200 [ 1429.626126][ C1] nf_hook+0x474/0x7d0 [ 1429.630209][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.635684][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1429.640285][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.645750][ C1] ? __asan_memcpy+0x3c/0x60 [ 1429.650360][ C1] __br_forward+0x1be/0x5b0 [ 1429.654868][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1429.660339][ C1] deliver_clone+0x5b/0xa0 [ 1429.664763][ C1] maybe_deliver+0xa7/0x120 [ 1429.669276][ C1] br_flood+0x17b/0x5e0 [ 1429.673445][ C1] br_handle_frame_finish+0xea2/0x1c90 [ 1429.678910][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1429.684813][ C1] ? __pfx_lock_release+0x10/0x10 [ 1429.689855][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1429.695076][ C1] ? net_generic+0xf4/0x2a0 [ 1429.699590][ C1] ? br_nf_pre_routing+0x867/0x15b0 [ 1429.704796][ C1] br_handle_frame+0xd90/0x14a0 [ 1429.709655][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1429.714945][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1429.720841][ C1] ? mark_lock+0xb5/0xc60 [ 1429.725177][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1429.730381][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1429.735666][ C1] __netif_receive_skb_core.constprop.0+0xa20/0x4330 [ 1429.742351][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1429.747033][ C1] ? dst_release+0x10/0x280 [ 1429.751541][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1429.758654][ C1] ? hlock_class+0x4e/0x130 [ 1429.763159][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 1429.768116][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1429.773333][ C1] ? process_backlog+0x3f1/0x15f0 [ 1429.778363][ C1] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1429.784176][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1429.790596][ C1] ? rcu_is_watching+0x12/0xc0 [ 1429.795366][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.800736][ C1] ? process_backlog+0x3f1/0x15f0 [ 1429.805771][ C1] ? process_backlog+0x3f1/0x15f0 [ 1429.810803][ C1] __netif_receive_skb+0x1d/0x160 [ 1429.815837][ C1] process_backlog+0x443/0x15f0 [ 1429.820701][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1429.826080][ C1] net_rx_action+0xa94/0x1010 [ 1429.830777][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1429.835895][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1429.841702][ C1] ? __hrtimer_run_queues+0x92c/0xae0 [ 1429.847096][ C1] handle_softirqs+0x213/0x8f0 [ 1429.851879][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1429.857175][ C1] __irq_exit_rcu+0x109/0x170 [ 1429.861856][ C1] irq_exit_rcu+0x9/0x30 [ 1429.866103][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1429.871746][ C1] [ 1429.874676][ C1] [ 1429.877608][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.883597][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1429.888895][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 08 38 ac 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 1b 87 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1429.908513][ C1] RSP: 0018:ffffc900001b7d58 EFLAGS: 00000246 [ 1429.914588][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b578469 [ 1429.922566][ C1] RDX: 0000000000000001 RSI: ffff88801eabf800 RDI: ffff88801eabf864 [ 1429.930544][ C1] RBP: ffff88801eabf864 R08: 0000000000000001 R09: ffffed10170e6f85 [ 1429.938518][ C1] R10: ffff8880b8737c2b R11: 0000000000000000 R12: ffff88801f3b2800 [ 1429.946492][ C1] R13: ffffffff8ee2e920 R14: 0000000000000001 R15: 0000000000000000 [ 1429.954475][ C1] ? ct_kernel_exit+0x139/0x190 [ 1429.959344][ C1] acpi_idle_enter+0xc5/0x160 [ 1429.964033][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 1429.969066][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1429.974884][ C1] cpuidle_enter+0x4e/0xa0 [ 1429.979306][ C1] do_idle+0x310/0x3f0 [ 1429.983381][ C1] ? __pfx_do_idle+0x10/0x10 [ 1429.987981][ C1] cpu_startup_entry+0x4f/0x60 [ 1429.992751][ C1] start_secondary+0x222/0x2b0 [ 1429.997524][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1430.002822][ C1] common_startup_64+0x13e/0x148 [ 1430.007780][ C1] [ 1432.528940][ C0] net_ratelimit: 5386 callbacks suppressed [ 1432.528954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.547622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.560662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.573312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.586432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.599623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.612672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.625753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.638886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.651982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.538553][ C0] net_ratelimit: 6101 callbacks suppressed [ 1437.538572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.557556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.570602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.583292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.596316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.609501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.622598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.635765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.648841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.661952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)