last executing test programs: 31.978764687s ago: executing program 0 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x1500000000000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 31.6606537s ago: executing program 0 (id=988): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x22, 0x2, 0x7}, 0x9c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = socket(0x1f, 0x5, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x2000000, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) connect$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 31.521649814s ago: executing program 4 (id=989): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x101800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000a0aa7697b0a300000300000084000000", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f0000000280)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 30.679634184s ago: executing program 0 (id=991): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x3, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f00000003c0)) (async) r2 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x17, 0x2, 0x0, "b43d70dde5dbbbe40f810001bbe6c9000000c67f00", 0x33524742}) 30.089575762s ago: executing program 0 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 29.927401455s ago: executing program 4 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "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"}, 0x1d1) munmap(&(0x7f0000245000/0x1000)=nil, 0x1000) 28.306208749s ago: executing program 4 (id=1003): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x5}}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setpgid(r4, 0x0) setpgid(0x0, r4) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4000, 0x400, &(0x7f0000000280)) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2941010, &(0x7f0000000540)={[{@pids_localevents}, {@subsystem='net_cls'}, {@memory_recursiveprot}, {@memory_localevents}, {@favordynmods}, {@pids_localevents}], [{@subj_user={'subj_user', 0x3d, 'net_cls'}}, {@audit}, {@flag='nomand'}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@flag='sync'}]}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 27.339210329s ago: executing program 4 (id=1006): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r6, 0x107, 0xb, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001980)={&(0x7f0000000400)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)="ddc0ea0d10d90285b2e8c080167ff90936a90801fe4ec8bf6a586ad74b1667552b90f7fd6ce3ac84ad9ec3ea386108ab466f48dbd2e5ae6b980796ec18375dbe9b787ea3bdf43a80d0daf047affacbce16c384bb11ea5870cafaeeb24222cef201169451fd7ef7cad5f2a7697915e2c11c00f597c6c436bb82d0af78f42332fceb730742d62dd87504707fb0f244bde291cb8039fa9a037bb51a5960db30651317bad46868fd307da78d4e93da0a4cfa94150f5a74c08e88bca7fea369a5bd0a49f1c1ae0acc30f59fbd0cc3d05f8b95ca0433bd3ec0d697df45d6df88b5c4f52b4e68f1f81fc74d87f6fce565", 0xed}, {&(0x7f00000005c0)="f27537f53d2626c2dfd8f65f9a62699046206640ad6ddd216b402481ee9d3a5414d66127ea1dcfe03f877c26199d1f4bcd54dd284fb3a06f791594e0885e33f971dea112", 0x44}, {&(0x7f0000000640)="60895317e3afd46a8ea019b9abe4", 0xe}, {&(0x7f0000000680)="6e1af001cfcde91c29e65a50fc2636d1bc660553c773f22351a1723098c49f775e79691e317b55d1a5b95be617076ce850364b8701830b434e6cfe4ff82624d8e125bc808f893b55ea5d004c0e43e47fabeef06de0f7b325e28fcb5f5922d716409251924d9c228f6df5d7eb2193989e773dd3bf531c73c32c5827f6ab10326f6fd0dca3fc998d1cb37449cf0e796cffe22a4dde0a32ed9ac886fb5a3ebbaa8f47", 0xa1}, {&(0x7f0000001740)="f784a9d856cb49160f4b7443676f09be511669a458588f7d45320901f40bf78e69044d23a2019e980fcff3d99177bc34e1427395e477b5f0af46cc83957213cc589a76584a08576ebab9a763a680a48cd064c7d739fc1363f078026fab6dfa021d511a6eb28d5d2a6b1cc7616c1474d74a7b9009a36450e2a237ac6781c9b979683b30caff4557c2b078e39ad91ca5b946095cd61cf27bfdcc0cd97924fee287792396c6c90d6af5f63b8423b0b70c1fe2887357708e64858108", 0xba}], 0x5, &(0x7f0000001880)=[{0xc8, 0x1, 0x4, "bd4715a103a87be4d8fa7f74d363921a803f2cf12fc6550d938718f4c685ec4840573c8e75de209b6b95d1e036f645681dd95e6e1b6f48b3abafd7860c286618bcc4670eeeef20aa5126d444091db9073e897321238974b5767797fad1e9457e4ee56f35ed99f7f989ece7da0ef521d1734b5fad58f3a59decb91b79c9bb6b2e1dbeb0c38e54fdb79be2a5b23df8c7dc27eb89813a363a0a725089c91130148fca877024628d0a74055873fd880f6fe7e798a4a1607b9de3"}], 0xc8}, 0x4091) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900, r8}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 25.601027264s ago: executing program 4 (id=1008): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x400) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x2c000004) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000200)='.\x02\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000008c0)=""/54, 0x36) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 25.459603625s ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x81, 0x4}, {0xffffffffffff0000, 0x10}, 0x5a, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7ffd, 0x400) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000040)=0x8) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x9, 0x5, 0x4, 0x1000, 0x6, {0x0, 0xea60}, {0x5, 0x0, 0x90, 0xe5, 0xba, 0x4, "c4a72a28"}, 0x7fffffff, 0x4, {&(0x7f0000000200)=[{0x8, 0x1000, {r5}}, {0x6, 0x3, {}, 0x1}]}, 0x3, 0x0, r6}) write$cgroup_int(r4, &(0x7f00000000c0)=0x1c3, 0x12) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010200000000fedbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="e8f74408430e4b65084262c4ff8f1e96e0cca06efe859ae84036308f232c0483ee4efdb89551a81b897ebe5acf1ca5895335b4be97753fa40ec9bc6cdcc927a81faf0b86431171849cf23080296796ac6416f216c74268ebbabe89f535"], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}}, 0x0) 25.367554059s ago: executing program 0 (id=1010): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xb250, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="a000000021000100000000000100000000000000000000000000000000000000fe80d6a183b8000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000000ac1e000100000000000000000500000000000000000000000000000000000000000000000000000000000000000000006c0100000635000002000200"], 0xa0}}, 0x0) 23.602561505s ago: executing program 3 (id=1016): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r1, r1, 0x0, 0xb) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) pause() 22.384966614s ago: executing program 4 (id=1017): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0xf000000}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x4000000) 20.629122375s ago: executing program 2 (id=1018): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r6, 0x107, 0xb, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001980)={&(0x7f0000000400)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)="ddc0ea0d10d90285b2e8c080167ff90936a90801fe4ec8bf6a586ad74b1667552b90f7fd6ce3ac84ad9ec3ea386108ab466f48dbd2e5ae6b980796ec18375dbe9b787ea3bdf43a80d0daf047affacbce16c384bb11ea5870cafaeeb24222cef201169451fd7ef7cad5f2a7697915e2c11c00f597c6c436bb82d0af78f42332fceb730742d62dd87504707fb0f244bde291cb8039fa9a037bb51a5960db30651317bad46868fd307da78d4e93da0a4cfa94150f5a74c08e88bca7fea369a5bd0a49f1c1ae0acc30f59fbd0cc3d05f8b95ca0433bd3ec0d697df45d6df88b5c4f52b4e68f1f81fc74d87f6fce565", 0xed}, {&(0x7f00000005c0)="f27537f53d2626c2dfd8f65f9a62699046206640ad6ddd216b402481ee9d3a5414d66127ea1dcfe03f877c26199d1f4bcd54dd284fb3a06f791594e0885e33f971dea112", 0x44}, {&(0x7f0000000640)="60895317e3afd46a8ea019b9abe4", 0xe}, {&(0x7f0000000680)="6e1af001cfcde91c29e65a50fc2636d1bc660553c773f22351a1723098c49f775e79691e317b55d1a5b95be617076ce850364b8701830b434e6cfe4ff82624d8e125bc808f893b55ea5d004c0e43e47fabeef06de0f7b325e28fcb5f5922d716409251924d9c228f6df5d7eb2193989e773dd3bf531c73c32c5827f6ab10326f6fd0dca3fc998d1cb37449cf0e796cffe22a4dde0a32ed9ac886fb5a3ebbaa8f47", 0xa1}, {&(0x7f0000001740)="f784a9d856cb49160f4b7443676f09be511669a458588f7d45320901f40bf78e69044d23a2019e980fcff3d99177bc34e1427395e477b5f0af46cc83957213cc589a76584a08576ebab9a763a680a48cd064c7d739fc1363f078026fab6dfa021d511a6eb28d5d2a6b1cc7616c1474d74a7b9009a36450e2a237ac6781c9b979683b30caff4557c2b078e39ad91ca5b946095cd61cf27bfdcc0cd97924fee287792396c6c90d6af5f63b8423b0b70c1fe2887357708e64858108", 0xba}], 0x5, &(0x7f0000001880)=[{0xc8, 0x1, 0x4, "bd4715a103a87be4d8fa7f74d363921a803f2cf12fc6550d938718f4c685ec4840573c8e75de209b6b95d1e036f645681dd95e6e1b6f48b3abafd7860c286618bcc4670eeeef20aa5126d444091db9073e897321238974b5767797fad1e9457e4ee56f35ed99f7f989ece7da0ef521d1734b5fad58f3a59decb91b79c9bb6b2e1dbeb0c38e54fdb79be2a5b23df8c7dc27eb89813a363a0a725089c91130148fca877024628d0a74055873fd880f6fe7e798a4a1607b9de3"}], 0xc8}, 0x4091) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900, r8}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 19.659935482s ago: executing program 3 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) open_tree(0xffffffffffffff9c, 0x0, 0x88100) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x5) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, 0x0, 0x0) ioctl$TCFLSH(r5, 0x8910, 0x20001114) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000000), 0x2208010, &(0x7f0000000240)) 19.468967891s ago: executing program 0 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x18, r1, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x10) 19.38428307s ago: executing program 1 (id=1021): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000108fdffffff000000080000000094bb9118dfaa4adf"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 8.290918098s ago: executing program 1 (id=1022): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x15}]}}]}, 0x3c}}, 0x0) 8.290227725s ago: executing program 3 (id=1023): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8010) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x101800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000a0aa7697b0a300000300000084000000", @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) 7.498863209s ago: executing program 2 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x300}, 0x0) 6.702273108s ago: executing program 32 (id=1017): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0xf000000}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x4000000) 5.352651106s ago: executing program 1 (id=1026): open(0x0, 0x14927e, 0x91) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {0x400000}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 5.352248852s ago: executing program 2 (id=1027): io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6}) io_uring_setup(0x2a5a, &(0x7f0000000080)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) r0 = socket$nl_route(0x10, 0x3, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000440)=""/219) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0xffffff23}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) msgget$private(0x0, 0x123) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002f5000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffffffffffff020000000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad54005fc8a29462619e13f94d39332afaefdf6217b0f432520b8fe5f8dd15cf7e70da3102e55057be9f2"], 0x98}}, 0x4048010) 4.608090723s ago: executing program 3 (id=1028): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x130) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x54}}, 0x8095) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8be6f810000280b002001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003000000"], 0x48) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) 3.162154227s ago: executing program 33 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x18, r1, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x10) 3.120745226s ago: executing program 1 (id=1030): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2a15402, &(0x7f0000000340)='barrier\x19\xfc\xc5\x1b\xb7\xe14\xedka\xff\xedx\x8f\xba\x8a\xf9\x8c\x02\r\xda\x83:\xe8\x82\x8fX\rd\xf7\xa3?+\x95\x976U\xac\xa3\xc7\xd4\x12b\xa8\x7f5gL\x1bw\x14\xe6\x04[\xa9v\xa9\xb3\x87\x9f\xce\xdb\xf6\xb7\xf1\xb7\x93;^\xdd=\xd3\x8d\x91U\xe8\x8eP\xb8]\xc0A\xa7[\xbbiU\xb8\xf0*\x0e\xaa\xeet*&\x95') connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xb4f, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYBLOB="461fa5ed80d7f7ed7e21a1c0129bd59a0c1c712dacd7d1cf7afd2d542c851565193a3973fd2c5d36336e6ff8a76f5870e7a52209869d23f9a28ce6292c6b1d05a246f5b73445dc8760408e8b1476a8f171d5d429a0201aef98f44b78646f957e94cef1024a57ef2824435c5bc30e5d57d2243253417777288861f85017f9e5a0728baf2d3f7c39f5bca0ad2fbd2c5a57aca2aa22e63a64df0ef552ddafb2e79606cdd4344cc787860c2f603508fc0e1d", @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) gettid() 2.67297369s ago: executing program 3 (id=1031): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000a00"/20, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000a2dbceba6d6de000000000000000000000000000000000000000000008111eff7d5695bdf7f05fa5ffb2d"], 0x50) timer_create(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x4, 0x303, 0x100}}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x10003, 0x0, 0x4, 0xf7c, 0xf, "01010000000000000600"}) 1.627463783s ago: executing program 1 (id=1032): mkdir(&(0x7f0000000180)='./file0\x00', 0x163) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x17) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000007c0)=""/168, 0xa8}, 0x40000040) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0x0) rseq(0x0, 0x0, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x40) close(r1) r2 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) read(r2, &(0x7f0000000300)=""/65, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000480)='syzkaller\x00', 0x4337, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x7, 0x0, 0x8}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) unshare(0x68040200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x101000, 0x10) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) 1.626851608s ago: executing program 2 (id=1033): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000108fdffffff000000080000000094bb9118dfaa4adf"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 777.993073ms ago: executing program 3 (id=1034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 125.327451ms ago: executing program 2 (id=1035): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f0000000480)=[{0x1, 0x1}, {0x3000000, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 0s ago: executing program 2 (id=1036): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500000004000000181100", @ANYRES32=0x0, @ANYBLOB="00000000002ff3f91bf4ea000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xaed\x1a\xa9\xfd\xfa\xad\xd1Ud\xc8\x85HX\xa9%\f\x1aO\xe0\b\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\x00\x00z\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xff^\xff\xf0\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioperm(0x376, 0x9, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r8, 0x101}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x2, 0x0, 0x20303159, 0x3, 0x0, [{}, {0x1}, {}, {0xfffffffe}, {}, {}, {0x0, 0x8}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x0) kernel console output (not intermixed with test programs): d" name="event6" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.124729][ T30] audit: type=1400 audit(1748153665.695:466): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.363653][ T5864] usb 1-1: USB disconnect, device number 6 [ 189.372630][ T30] audit: type=1400 audit(1748153665.695:467): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2862 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.397210][ T30] audit: type=1400 audit(1748153666.195:468): avc: denied { write } for pid=7359 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 189.472149][ T30] audit: type=1400 audit(1748153666.795:469): avc: denied { getopt } for pid=7366 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.539810][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 189.553002][ T6000] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 189.721829][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 189.759494][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 189.769261][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 189.821674][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.872390][ T6000] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 189.901027][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.931185][ T6000] usb 5-1: Product: syz [ 190.039881][ T6000] usb 5-1: Manufacturer: syz [ 190.049747][ T6000] usb 5-1: SerialNumber: syz [ 190.050826][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.062376][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.080622][ T6000] usb 5-1: config 0 descriptor?? [ 190.088228][ T7380] bridge0: entered allmulticast mode [ 190.232098][ T7383] bridge_slave_1: left allmulticast mode [ 190.337320][ T7383] bridge_slave_1: left promiscuous mode [ 190.438147][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.492135][ T6000] input input7: Device does not respond to id packet M [ 190.559972][ T7383] bridge_slave_0: left allmulticast mode [ 190.595186][ T7383] bridge_slave_0: left promiscuous mode [ 190.603791][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.179777][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 191.181348][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 191.185794][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 191.192189][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 191.207264][ T6000] input input7: Device does not respond to id packet P [ 191.232043][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 191.248552][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 191.270147][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.278030][ T6000] input input7: Device does not respond to id packet B [ 191.292995][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.299078][ T6000] input input7: Device does not respond to id packet N [ 191.316981][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.328602][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.335374][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.341758][ T6000] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 191.347771][ T6000] iforce 5-1:0.0: usb_submit_urb failed -90 [ 191.363724][ T6000] iforce 5-1:0.0: usb_submit_urb failed -90 [ 191.375357][ T6000] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 191.428748][ T6000] usb 5-1: USB disconnect, device number 5 [ 191.440245][ T5907] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 191.516088][ T7400] loop6: detected capacity change from 0 to 524287999 [ 191.591675][ T7403] netlink: 196 bytes leftover after parsing attributes in process `syz.3.394'. [ 191.630142][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.639216][ T5907] usb 3-1: not running at top speed; connect to a high speed hub [ 191.699999][ T5907] usb 3-1: config 13 has an invalid interface number: 110 but max is 1 [ 191.727709][ T5907] usb 3-1: config 13 has an invalid interface number: 96 but max is 1 [ 191.736261][ T5907] usb 3-1: config 13 has no interface number 0 [ 191.761493][ T5907] usb 3-1: config 13 has no interface number 1 [ 191.767673][ T5907] usb 3-1: config 13 interface 110 has no altsetting 0 [ 191.776396][ T5907] usb 3-1: config 13 interface 96 has no altsetting 0 [ 191.791936][ T5907] usb 3-1: New USB device found, idVendor=0db0, idProduct=3870, bcdDevice=3b.1a [ 191.809808][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.849650][ T5907] usb 3-1: Product: syz [ 191.858035][ T5907] usb 3-1: Manufacturer: syz [ 191.872939][ T5907] usb 3-1: SerialNumber: syz [ 193.827896][ T5907] usb 3-1: USB disconnect, device number 6 [ 193.839164][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.845812][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.869791][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.239824][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 194.280080][ T5861] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.288277][ T5861] usb 5-1: config 0 has no interface number 0 [ 194.307468][ T5861] usb 5-1: config 0 interface 184 has no altsetting 0 [ 194.348315][ T5861] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.361419][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.369421][ T5861] usb 5-1: Product: syz [ 194.457395][ T5861] usb 5-1: Manufacturer: syz [ 194.470491][ T5861] usb 5-1: SerialNumber: syz [ 194.477262][ T5861] usb 5-1: config 0 descriptor?? [ 194.492614][ T5861] smsc75xx v1.0.0 [ 194.753951][ T5892] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.810161][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 194.926477][ T5861] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.047937][ T7433] FAULT_INJECTION: forcing a failure. [ 195.047937][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 195.115121][ T5861] usb 5-1: USB disconnect, device number 6 [ 195.192932][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.2.402 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 195.192958][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.192969][ T7433] Call Trace: [ 195.192976][ T7433] [ 195.192983][ T7433] dump_stack_lvl+0x16c/0x1f0 [ 195.193014][ T7433] should_fail_ex+0x512/0x640 [ 195.193038][ T7433] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 195.193068][ T7433] should_failslab+0xc2/0x120 [ 195.193088][ T7433] __kmalloc_cache_noprof+0x6a/0x3e0 [ 195.193114][ T7433] ? __asan_memset+0x23/0x50 [ 195.193138][ T7433] ? alloc_netdev_mqs+0xece/0x1570 [ 195.193160][ T7433] ? __xdp_rxq_info_reg+0x14e/0x2d0 [ 195.193186][ T7433] alloc_netdev_mqs+0xece/0x1570 [ 195.193214][ T7433] rtnl_create_link+0xc10/0xfa0 [ 195.193240][ T7433] rtnl_newlink+0xb69/0x2000 [ 195.193276][ T7433] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.193295][ T7433] ? find_held_lock+0x2b/0x80 [ 195.193325][ T7433] ? avc_has_perm_noaudit+0x149/0x3b0 [ 195.193363][ T7433] ? rcu_is_watching+0x12/0xc0 [ 195.193384][ T7433] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.193409][ T7433] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.193433][ T7433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 195.193456][ T7433] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 195.193494][ T7433] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.193517][ T7433] rtnetlink_rcv_msg+0x95b/0xe90 [ 195.193541][ T7433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.193567][ T7433] ? __lock_acquire+0xaa4/0x1ba0 [ 195.193602][ T7433] netlink_rcv_skb+0x16a/0x440 [ 195.193626][ T7433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.193650][ T7433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.193672][ T7433] ? find_held_lock+0x2b/0x80 [ 195.193717][ T7433] netlink_unicast+0x53d/0x7f0 [ 195.193745][ T7433] ? __pfx_netlink_unicast+0x10/0x10 [ 195.193776][ T7433] netlink_sendmsg+0x8d1/0xdd0 [ 195.193805][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.193840][ T7433] ____sys_sendmsg+0xa95/0xc70 [ 195.193867][ T7433] ? copy_msghdr_from_user+0x10a/0x160 [ 195.193887][ T7433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.193926][ T7433] ___sys_sendmsg+0x134/0x1d0 [ 195.193949][ T7433] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.194005][ T7433] __sys_sendmsg+0x16d/0x220 [ 195.194028][ T7433] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.194058][ T7433] ? rcu_is_watching+0x12/0xc0 [ 195.194087][ T7433] do_syscall_64+0xcd/0x260 [ 195.194116][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.194134][ T7433] RIP: 0033:0x7f7e57b8e969 [ 195.194151][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.194168][ T7433] RSP: 002b:00007f7e559f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.194186][ T7433] RAX: ffffffffffffffda RBX: 00007f7e57db5fa0 RCX: 00007f7e57b8e969 [ 195.194198][ T7433] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 195.194208][ T7433] RBP: 00007f7e559f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.194219][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.194229][ T7433] R13: 0000000000000000 R14: 00007f7e57db5fa0 R15: 00007ffff7ffc548 [ 195.194261][ T7433] [ 195.574491][ T7435] netlink: 76 bytes leftover after parsing attributes in process `syz.3.403'. [ 195.713181][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.758530][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 195.789944][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 195.789958][ T30] audit: type=1400 audit(1748153673.115:477): avc: denied { mounton } for pid=7436 comm="syz.2.404" path="/74/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.814873][ T5892] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 195.892754][ T5892] usb 1-1: Manufacturer: syz [ 195.900784][ T5892] usb 1-1: SerialNumber: syz [ 195.932699][ T5892] usb 1-1: config 0 descriptor?? [ 196.064869][ T7442] loop6: detected capacity change from 0 to 524287999 [ 196.138342][ T7452] netlink: 196 bytes leftover after parsing attributes in process `syz.4.406'. [ 196.505917][ T5861] usb 1-1: USB disconnect, device number 7 [ 197.011838][ T30] audit: type=1400 audit(1748153674.245:478): avc: denied { bind } for pid=7454 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.376766][ T30] audit: type=1400 audit(1748153674.255:479): avc: denied { getopt } for pid=7454 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.479324][ T30] audit: type=1400 audit(1748153674.315:480): avc: denied { create } for pid=7454 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.608696][ T7459] xt_CT: No such helper "snmp_trap" [ 197.616849][ T30] audit: type=1400 audit(1748153674.325:481): avc: denied { write } for pid=7454 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.635973][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.188376][ T30] audit: type=1400 audit(1748153674.745:482): avc: denied { read } for pid=7457 comm="syz.4.409" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 198.239520][ T30] audit: type=1400 audit(1748153674.745:483): avc: denied { open } for pid=7457 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 198.368948][ T30] audit: type=1400 audit(1748153674.745:484): avc: denied { ioctl } for pid=7457 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 198.440352][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 198.481806][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 199.630126][ T30] audit: type=1400 audit(1748153676.725:485): avc: denied { ioctl } for pid=7483 comm="syz.4.416" path="socket:[12218]" dev="sockfs" ino=12218 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.749046][ T30] audit: type=1400 audit(1748153677.065:486): avc: denied { create } for pid=7478 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.929748][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.099159][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 200.116458][ T5864] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.136996][ T5864] usb 3-1: config 0 has no interface number 0 [ 200.196266][ T5864] usb 3-1: config 0 interface 184 has no altsetting 0 [ 200.492000][ T7497] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 201.302029][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 201.332825][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 201.348108][ T5864] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.357565][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.369887][ T5864] usb 3-1: Product: syz [ 201.374062][ T5864] usb 3-1: Manufacturer: syz [ 201.394386][ T5864] usb 3-1: SerialNumber: syz [ 201.403034][ T5864] usb 3-1: config 0 descriptor?? [ 201.430578][ T5864] smsc75xx v1.0.0 [ 201.625709][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 202.179095][ T5864] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 202.193011][ T5864] usb 3-1: USB disconnect, device number 7 [ 202.455893][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 202.455907][ T30] audit: type=1400 audit(1748153679.775:489): avc: denied { setopt } for pid=7508 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.792199][ T10] Process accounting resumed [ 202.831837][ T30] audit: type=1400 audit(1748153680.065:490): avc: denied { connect } for pid=7510 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.958761][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 203.993066][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 204.820174][ T30] audit: type=1400 audit(1748153682.135:491): avc: denied { mount } for pid=7532 comm="syz.1.431" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 204.860517][ T30] audit: type=1400 audit(1748153682.175:492): avc: denied { create } for pid=7508 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 205.022980][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.334081][ T7543] vlan2: entered allmulticast mode [ 205.339236][ T7543] macsec0: entered allmulticast mode [ 205.345338][ T30] audit: type=1400 audit(1748153682.655:493): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.407493][ T7543] veth1_macvtap: entered allmulticast mode [ 205.759741][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.795517][ T7556] pim6reg: entered allmulticast mode [ 205.823851][ T7556] pim6reg: left allmulticast mode [ 205.935244][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 205.945414][ T5892] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.052873][ T5892] usb 4-1: config 0 has no interface number 0 [ 206.059069][ T5892] usb 4-1: config 0 interface 184 has no altsetting 0 [ 206.074165][ T5892] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.085021][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.094636][ T5892] usb 4-1: Product: syz [ 206.098943][ T5892] usb 4-1: Manufacturer: syz [ 206.556741][ T5892] usb 4-1: SerialNumber: syz [ 206.577556][ T5892] usb 4-1: config 0 descriptor?? [ 206.585716][ T5892] smsc75xx v1.0.0 [ 206.658835][ T7568] xt_CT: No such helper "snmp_trap" [ 206.880392][ T5861] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 206.934760][ T7576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.231741][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 207.257310][ T5892] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 207.275302][ T5892] usb 4-1: USB disconnect, device number 10 [ 207.292739][ T7578] netlink: 596 bytes leftover after parsing attributes in process `syz.0.445'. [ 207.342490][ T5861] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 207.369789][ T5861] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 207.415281][ T5861] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 207.426049][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.717170][ T5861] usb 3-1: Product: syz [ 207.731569][ T5861] usb 3-1: Manufacturer: syz [ 207.752949][ T5861] usb 3-1: SerialNumber: syz [ 207.805778][ T7590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.887911][ T30] audit: type=1400 audit(1748153685.205:494): avc: denied { ioctl } for pid=7593 comm="syz.3.450" path="socket:[12723]" dev="sockfs" ino=12723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.165095][ T7562] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 209.301378][ T30] audit: type=1400 audit(1748153685.255:495): avc: denied { create } for pid=7593 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 209.370261][ T7595] can0: slcan on ttyS3. [ 209.374555][ T30] audit: type=1800 audit(1748153685.855:496): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.451" name="bus" dev="overlay" ino=563 res=0 errno=0 [ 209.545140][ T5861] usb 3-1: USB disconnect, device number 8 [ 210.219755][ T30] audit: type=1400 audit(1748153687.115:497): avc: denied { write } for pid=7607 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 210.553544][ T7593] can0 (unregistered): slcan off ttyS3. [ 211.446463][ T30] audit: type=1400 audit(1748153688.765:498): avc: denied { create } for pid=7629 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.781357][ T7625] infiniband syz1: set active [ 211.786136][ T7625] infiniband syz1: added bond0 [ 212.124303][ T7625] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 212.126955][ T7625] infiniband syz1: Couldn't open port 1 [ 212.433998][ T30] audit: type=1400 audit(1748153689.025:499): avc: denied { write } for pid=7624 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 212.445447][ T7625] RDS/IB: syz1: added [ 212.458295][ T7625] smc: adding ib device syz1 with port count 1 [ 212.464915][ T7625] smc: ib device syz1 port 1 has pnetid [ 212.879583][ T30] audit: type=1400 audit(1748153690.185:500): avc: denied { setattr } for pid=7629 comm="syz.2.460" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 214.855755][ T7650] mkiss: ax0: crc mode is auto. [ 215.175733][ T7669] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 215.189894][ T30] audit: type=1400 audit(1748153692.445:501): avc: denied { watch } for pid=7663 comm="syz.3.469" path="/99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 215.382320][ T30] audit: type=1400 audit(1748153692.445:502): avc: denied { watch_sb watch_reads } for pid=7663 comm="syz.3.469" path="/99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.518630][ T7671] FAULT_INJECTION: forcing a failure. [ 215.518630][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 215.614766][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.0.470 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 215.614792][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.614803][ T7671] Call Trace: [ 215.614809][ T7671] [ 215.614816][ T7671] dump_stack_lvl+0x16c/0x1f0 [ 215.614847][ T7671] should_fail_ex+0x512/0x640 [ 215.614871][ T7671] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 215.614901][ T7671] should_failslab+0xc2/0x120 [ 215.614919][ T7671] __kmalloc_cache_noprof+0x6a/0x3e0 [ 215.614945][ T7671] ? alloc_netdev_mqs+0xf3a/0x1570 [ 215.614967][ T7671] ? kasan_save_track+0x14/0x30 [ 215.614986][ T7671] alloc_netdev_mqs+0xf3a/0x1570 [ 215.615013][ T7671] rtnl_create_link+0xc10/0xfa0 [ 215.615039][ T7671] rtnl_newlink+0xb69/0x2000 [ 215.615069][ T7671] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.615088][ T7671] ? find_held_lock+0x2b/0x80 [ 215.615109][ T7671] ? avc_has_perm_noaudit+0x117/0x3b0 [ 215.615132][ T7671] ? avc_has_perm_noaudit+0x149/0x3b0 [ 215.615182][ T7671] ? find_held_lock+0x2b/0x80 [ 215.615201][ T7671] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.615221][ T7671] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.615239][ T7671] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 215.615260][ T7671] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.615280][ T7671] rtnetlink_rcv_msg+0x95b/0xe90 [ 215.615303][ T7671] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.615338][ T7671] netlink_rcv_skb+0x16a/0x440 [ 215.615361][ T7671] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.615384][ T7671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.615423][ T7671] ? netlink_deliver_tap+0x1ae/0xd30 [ 215.615449][ T7671] netlink_unicast+0x53d/0x7f0 [ 215.615473][ T7671] ? __pfx_netlink_unicast+0x10/0x10 [ 215.615504][ T7671] netlink_sendmsg+0x8d1/0xdd0 [ 215.615532][ T7671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.615564][ T7671] ____sys_sendmsg+0xa95/0xc70 [ 215.615590][ T7671] ? copy_msghdr_from_user+0x10a/0x160 [ 215.615609][ T7671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.615647][ T7671] ___sys_sendmsg+0x134/0x1d0 [ 215.615669][ T7671] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.615722][ T7671] __sys_sendmsg+0x16d/0x220 [ 215.615744][ T7671] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.615772][ T7671] ? rcu_is_watching+0x12/0xc0 [ 215.615800][ T7671] do_syscall_64+0xcd/0x260 [ 215.615827][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.615844][ T7671] RIP: 0033:0x7f741cd8e969 [ 215.615859][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.615876][ T7671] RSP: 002b:00007f741dc4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.615893][ T7671] RAX: ffffffffffffffda RBX: 00007f741cfb5fa0 RCX: 00007f741cd8e969 [ 215.615905][ T7671] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 215.615914][ T7671] RBP: 00007f741dc4f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.615924][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.615934][ T7671] R13: 0000000000000000 R14: 00007f741cfb5fa0 R15: 00007ffcd4164548 [ 215.615958][ T7671] [ 215.616193][ T7667] tipc: Enabling of bearer rejected, failed to enable media [ 216.308150][ T7681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.528069][ T30] audit: type=1400 audit(1748153693.845:503): avc: denied { create } for pid=7682 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.643856][ T30] audit: type=1400 audit(1748153693.875:504): avc: denied { write } for pid=7682 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.702128][ T7689] bridge2: entered promiscuous mode [ 216.755573][ T7689] netlink: 45 bytes leftover after parsing attributes in process `syz.1.475'. [ 216.825093][ T30] audit: type=1400 audit(1748153694.145:505): avc: denied { ioctl } for pid=7690 comm="syz.0.477" path="socket:[13738]" dev="sockfs" ino=13738 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.175153][ T7697] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 217.251112][ T30] audit: type=1400 audit(1748153694.175:506): avc: denied { read write } for pid=7688 comm="syz.1.475" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 217.553645][ T7703] mmap: syz.1.481 (7703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.555765][ T30] audit: type=1400 audit(1748153694.175:507): avc: denied { open } for pid=7688 comm="syz.1.475" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 217.701484][ T30] audit: type=1400 audit(1748153694.875:508): avc: denied { ioctl } for pid=7701 comm="syz.1.481" path="socket:[12883]" dev="sockfs" ino=12883 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.681414][ T7718] tipc: Enabling of bearer rejected, failed to enable media [ 220.518880][ T7731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.488'. [ 220.793670][ T30] audit: type=1400 audit(1748153698.095:509): avc: denied { create } for pid=7729 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.133608][ T7734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.219782][ T30] audit: type=1400 audit(1748153698.505:510): avc: denied { ioctl } for pid=7729 comm="syz.3.487" path="socket:[13809]" dev="sockfs" ino=13809 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.257924][ T30] audit: type=1400 audit(1748153698.515:511): avc: denied { connect } for pid=7729 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.676328][ T30] audit: type=1400 audit(1748153698.745:512): avc: denied { shutdown } for pid=7729 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.329273][ T30] audit: type=1400 audit(1748153699.625:513): avc: denied { unmount } for pid=7744 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.928046][ T7760] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 225.241806][ T30] audit: type=1400 audit(1748153702.565:514): avc: denied { connect } for pid=7788 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.441303][ T7790] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 225.908417][ T7799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.617605][ T7814] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 227.894910][ T5907] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 228.416647][ T5907] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 228.484446][ T5907] usb 2-1: config 0 has no interface number 0 [ 228.626187][ T7832] tipc: Enabling of bearer rejected, failed to enable media [ 228.638897][ T5907] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 228.663562][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.678242][ T5907] usb 2-1: Product: syz [ 228.686852][ T5907] usb 2-1: Manufacturer: syz [ 228.701844][ T5907] usb 2-1: SerialNumber: syz [ 228.740707][ T5907] usb 2-1: config 0 descriptor?? [ 230.119886][ T5907] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 230.168624][ T7840] xt_CT: No such helper "snmp_trap" [ 230.210060][ T5907] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 230.232305][ T5907] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 230.256617][ T5907] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 230.395544][ T30] audit: type=1400 audit(1748153707.715:515): avc: denied { create } for pid=7822 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.435562][ T5907] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 230.498353][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.508325][ T30] audit: type=1400 audit(1748153707.815:516): avc: denied { kexec_image_load } for pid=7822 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 230.576599][ T7858] netlink: 196 bytes leftover after parsing attributes in process `syz.0.518'. [ 230.670422][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.814729][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.912175][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.928030][ T7863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.177646][ T30] audit: type=1400 audit(1748153708.495:517): avc: denied { sys_module } for pid=7851 comm="syz.2.519" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 232.424343][ T5892] usb 2-1: USB disconnect, device number 7 [ 232.490461][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 232.890860][ T30] audit: type=1400 audit(1748153709.825:518): avc: denied { firmware_load } for pid=7871 comm="syz.0.522" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 232.972457][ T5892] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 233.006787][ T5892] keyspan 2-1:0.133: device disconnected [ 233.966866][ T30] audit: type=1400 audit(1748153710.725:519): avc: denied { read } for pid=7883 comm="syz.2.525" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 234.220326][ T30] audit: type=1400 audit(1748153710.725:520): avc: denied { open } for pid=7883 comm="syz.2.525" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 234.348453][ T7899] Driver unsupported XDP return value 0 on prog (id 165) dev N/A, expect packet loss! [ 234.398128][ T30] audit: type=1400 audit(1748153710.755:521): avc: denied { ioctl } for pid=7883 comm="syz.2.525" path="socket:[13991]" dev="sockfs" ino=13991 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 235.126405][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 235.221384][ T30] audit: type=1400 audit(1748153712.465:522): avc: denied { setopt } for pid=7907 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.764793][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 236.142495][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.472784][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.533185][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.550212][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 236.566959][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.880358][ T7925] FAULT_INJECTION: forcing a failure. [ 236.880358][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 236.898861][ T9] usb 4-1: config 0 descriptor?? [ 237.013088][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.2.537 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 237.013106][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.013113][ T7925] Call Trace: [ 237.013116][ T7925] [ 237.013121][ T7925] dump_stack_lvl+0x16c/0x1f0 [ 237.013149][ T7925] should_fail_ex+0x512/0x640 [ 237.013165][ T7925] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 237.013177][ T7925] should_failslab+0xc2/0x120 [ 237.013190][ T7925] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 237.013199][ T7925] ? __might_fault+0xe3/0x190 [ 237.013210][ T7925] ? __might_fault+0xe3/0x190 [ 237.013220][ T7925] ? getname_flags.part.0+0x4c/0x550 [ 237.013236][ T7925] getname_flags.part.0+0x4c/0x550 [ 237.013251][ T7925] getname_flags+0x93/0xf0 [ 237.013268][ T7925] user_path_at+0x24/0x60 [ 237.013285][ T7925] __x64_sys_mount+0x1fc/0x310 [ 237.013298][ T7925] ? __pfx___x64_sys_mount+0x10/0x10 [ 237.013310][ T7925] ? rcu_is_watching+0x12/0xc0 [ 237.013327][ T7925] do_syscall_64+0xcd/0x260 [ 237.013344][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.013355][ T7925] RIP: 0033:0x7f7e57b8e969 [ 237.013364][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.013375][ T7925] RSP: 002b:00007f7e559f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.013386][ T7925] RAX: ffffffffffffffda RBX: 00007f7e57db5fa0 RCX: 00007f7e57b8e969 [ 237.013393][ T7925] RDX: 0000200000000080 RSI: 0000200000000200 RDI: 0000000000000000 [ 237.013400][ T7925] RBP: 00007f7e559f6090 R08: 0000200000000180 R09: 0000000000000000 [ 237.013406][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.013412][ T7925] R13: 0000000000000000 R14: 00007f7e57db5fa0 R15: 00007ffff7ffc548 [ 237.013426][ T7925] [ 237.691782][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 237.772424][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.163442][ T9] usb 4-1: USB disconnect, device number 11 [ 238.233221][ T30] audit: type=1400 audit(1748153715.555:523): avc: denied { ioctl } for pid=7935 comm="syz.2.540" path="/dev/radio0" dev="devtmpfs" ino=955 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 238.287294][ T7942] loop6: detected capacity change from 0 to 524287999 [ 239.089311][ T7942] netlink: 196 bytes leftover after parsing attributes in process `syz.1.535'. [ 239.177283][ T7953] vlan2: entered allmulticast mode [ 239.283132][ T7953] macsec0: entered allmulticast mode [ 239.288631][ T7953] veth1_macvtap: entered allmulticast mode [ 239.485958][ T7959] netlink: 596 bytes leftover after parsing attributes in process `syz.0.547'. [ 241.147837][ T7979] hfsplus: unable to find HFS+ superblock [ 241.151161][ T30] audit: type=1400 audit(1748153718.455:524): avc: denied { mounton } for pid=7974 comm="syz.4.551" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 241.481952][ T30] audit: type=1400 audit(1748153718.785:525): avc: denied { read } for pid=7981 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.884333][ T30] audit: type=1326 audit(1748153719.205:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7984 comm="syz.0.554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f741cd8e969 code=0x0 [ 242.822689][ T7989] can0: slcan on ttyS3. [ 243.345441][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 244.086914][ T7985] can0 (unregistered): slcan off ttyS3. [ 244.496519][ T30] audit: type=1400 audit(1748153721.765:527): avc: denied { read } for pid=8007 comm="syz.4.560" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 244.591224][ T8010] netlink: 'syz.4.560': attribute type 10 has an invalid length. [ 245.577364][ T30] audit: type=1400 audit(1748153721.765:528): avc: denied { open } for pid=8007 comm="syz.4.560" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 246.073697][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.561'. [ 246.165071][ T8021] binder: 8017:8021 ioctl c0306201 0 returned -14 [ 246.171694][ T30] audit: type=1400 audit(1748153723.485:529): avc: denied { read } for pid=8017 comm="syz.3.561" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.195372][ T30] audit: type=1400 audit(1748153723.485:530): avc: denied { open } for pid=8017 comm="syz.3.561" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.271448][ T30] audit: type=1400 audit(1748153723.485:531): avc: denied { ioctl } for pid=8017 comm="syz.3.561" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.896761][ T8018] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 247.998789][ T8039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.728301][ T30] audit: type=1326 audit(1748153726.045:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.0.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f741cd8e969 code=0x0 [ 248.793085][ T8046] netlink: 'syz.0.568': attribute type 11 has an invalid length. [ 248.938705][ T8048] dns_resolver: Unsupported content type (152) [ 249.168667][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 249.320680][ T8051] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 250.381382][ T30] audit: type=1400 audit(1748153727.685:533): avc: denied { ioctl } for pid=8059 comm="syz.0.574" path="socket:[14427]" dev="sockfs" ino=14427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.405929][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.726914][ T8075] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 251.496495][ T8078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.866517][ T30] audit: type=1400 audit(1748153729.185:534): avc: denied { append } for pid=8079 comm="syz.4.579" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 251.889769][ T30] audit: type=1400 audit(1748153729.185:535): avc: denied { open } for pid=8079 comm="syz.4.579" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 253.119729][ T30] audit: type=1400 audit(1748153730.365:536): avc: denied { name_bind } for pid=8095 comm="syz.3.584" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 253.212429][ T30] audit: type=1400 audit(1748153730.365:537): avc: denied { node_bind } for pid=8095 comm="syz.3.584" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 253.511804][ T8105] loop6: detected capacity change from 0 to 524287999 [ 253.615838][ T8106] netlink: 196 bytes leftover after parsing attributes in process `syz.1.583'. [ 254.535672][ T8120] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 255.229869][ T30] audit: type=1400 audit(1748153731.845:538): avc: denied { create } for pid=8114 comm="syz.4.589" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.390993][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.397312][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.486709][ T30] audit: type=1400 audit(1748153732.665:539): avc: denied { unlink } for pid=5807 comm="syz-executor" name="bus" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.533695][ T8128] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 255.571844][ T30] audit: type=1400 audit(1748153732.765:540): avc: denied { setopt } for pid=8123 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 256.247638][ T8123] mmap: syz.2.591 (8123): VmData 26103808 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 256.289730][ T5864] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 256.304934][ T8141] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 256.409886][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.451694][ T5864] usb 2-1: device descriptor read/64, error -71 [ 256.483365][ T8144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.580022][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 256.910926][ T5864] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 256.924260][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.309831][ T5864] usb 2-1: device descriptor read/64, error -71 [ 257.400119][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.410563][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.422597][ T5864] usb usb2-port1: attempt power cycle [ 257.458102][ T5892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.468340][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 257.487791][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.523416][ T10] usb 5-1: config 0 descriptor?? [ 257.598667][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.649222][ T5892] usb 3-1: SerialNumber: syz [ 257.799775][ T5864] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.860586][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 257.880202][ T10] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 257.894437][ T10] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 257.894514][ T30] audit: type=1400 audit(1748153735.215:541): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.960422][ T5864] usb 2-1: device descriptor read/8, error -71 [ 257.993922][ T8157] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 258.209937][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 258.403279][ T5864] usb 2-1: device descriptor read/8, error -71 [ 258.415606][ T5892] usb 3-1: 0:2 : does not exist [ 258.438395][ T5892] usb 3-1: USB disconnect, device number 9 [ 258.508507][ T6545] udevd[6545]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.550287][ T5864] usb usb2-port1: unable to enumerate USB device [ 258.687828][ T8162] netlink: 88 bytes leftover after parsing attributes in process `syz.0.603'. [ 259.119822][ T30] audit: type=1400 audit(1748153736.435:542): avc: denied { accept } for pid=8139 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.498136][ T8199] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 261.174676][ T30] audit: type=1400 audit(1748153738.455:543): avc: denied { create } for pid=8187 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 261.382513][ T30] audit: type=1400 audit(1748153738.485:544): avc: denied { connect } for pid=8187 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.515716][ T30] audit: type=1400 audit(1748153738.485:545): avc: denied { write } for pid=8187 comm="syz.2.610" laddr=172.20.20.10 lport=2 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.528642][ T8192] input: syz0 as /devices/virtual/input/input9 [ 261.778777][ T8209] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 262.337425][ T8211] loop4: detected capacity change from 0 to 524255232 [ 265.428357][ T8240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.273148][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 266.283139][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 266.530062][ T8260] overlay: Unknown parameter 'uid' [ 267.223139][ T30] audit: type=1400 audit(1748153744.545:546): avc: denied { setopt } for pid=8278 comm="syz.4.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.669200][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 268.817290][ T8268] netlink: 196 bytes leftover after parsing attributes in process `syz.2.629'. [ 268.902776][ T8307] netlink: 88 bytes leftover after parsing attributes in process `syz.3.641'. [ 269.382405][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 270.332495][ T8339] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 270.500584][ T8341] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 271.759133][ T8345] Falling back ldisc for ptm0. [ 272.218189][ T8325] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 272.229243][ T8325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 272.238746][ T8325] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 272.414589][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 272.750562][ T8370] Cannot find add_set index 0 as target [ 272.865971][ T30] audit: type=1400 audit(1748153750.185:547): avc: denied { bind } for pid=8371 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.875601][ T8372] netlink: 124 bytes leftover after parsing attributes in process `syz.0.662'. [ 272.913473][ T8367] input: syz0 as /devices/virtual/input/input10 [ 272.919903][ T30] audit: type=1400 audit(1748153750.185:548): avc: denied { append } for pid=8371 comm="syz.0.662" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.954231][ T8374] dlm: Unknown command passed to DLM device : 0 [ 272.954231][ T8374] [ 272.960037][ T8372] netlink: 56 bytes leftover after parsing attributes in process `syz.0.662'. [ 273.042265][ T8367] netlink: 252 bytes leftover after parsing attributes in process `syz.4.661'. [ 273.074384][ T30] audit: type=1400 audit(1748153750.185:549): avc: denied { mount } for pid=8366 comm="syz.4.661" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 274.411352][ T30] audit: type=1326 audit(1748153751.735:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623fb8e969 code=0x7fc00000 [ 274.969247][ T30] audit: type=1326 audit(1748153752.275:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 274.992465][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.007703][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 275.067463][ T8397] vlan2: entered promiscuous mode [ 275.150974][ T30] audit: type=1326 audit(1748153752.275:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 275.174180][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.414018][ T30] audit: type=1326 audit(1748153752.275:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 275.438079][ T30] audit: type=1326 audit(1748153752.275:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 275.539866][ T5861] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 275.559786][ T30] audit: type=1326 audit(1748153752.275:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 275.603446][ T30] audit: type=1326 audit(1748153752.275:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2783d8e969 code=0x7ffc0000 [ 275.626555][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.790183][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.821385][ T5861] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.840166][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.932828][ T5861] usb 4-1: config 0 descriptor?? [ 275.974513][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 276.226498][ T8431] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 276.532131][ T5861] pwc: send_video_command error -71 [ 276.548486][ T5861] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 276.577461][ T5861] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 276.605204][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.617445][ T5861] usb 4-1: USB disconnect, device number 12 [ 276.850921][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 277.227315][ T24] usb 2-1: config 5 has an invalid interface number: 234 but max is 0 [ 277.229762][ T5861] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 277.772285][ T24] usb 2-1: config 5 has no interface number 0 [ 277.778425][ T24] usb 2-1: config 5 interface 234 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 277.793588][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03 [ 277.803634][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.810949][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.823134][ T5861] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.842484][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.847472][ T24] usb 2-1: Product: syz [ 277.855608][ T24] usb 2-1: Manufacturer: syz [ 277.860249][ T24] usb 2-1: SerialNumber: syz [ 277.873615][ T8433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 277.875007][ T5861] usb 4-1: config 0 descriptor?? [ 277.911981][ T24] kvaser_usb 2-1:5.234: error -EPROTO: Cannot get software info [ 277.919843][ T24] kvaser_usb 2-1:5.234: probe with driver kvaser_usb failed with error -71 [ 277.947372][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 278.132341][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.156864][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.178719][ T5907] usb 2-1: USB disconnect, device number 12 [ 278.329732][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.349913][ T5861] pwc: recv_control_msg error -32 req 02 val 2b00 [ 278.357122][ T5861] pwc: recv_control_msg error -32 req 02 val 2700 [ 278.367368][ T5861] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.383604][ T5861] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.406313][ T5861] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.413441][ T5861] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.429811][ T5861] pwc: recv_control_msg error -32 req 02 val 2000 [ 278.436993][ T5861] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.444983][ T5861] pwc: recv_control_msg error -32 req 04 val 1500 [ 278.454414][ T5861] pwc: recv_control_msg error -32 req 02 val 2500 [ 278.464303][ T5861] pwc: recv_control_msg error -32 req 02 val 2400 [ 278.521778][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 278.552553][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.570583][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.592007][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.617244][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.637327][ T24] usb 1-1: config 0 descriptor?? [ 278.676108][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.690695][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.700259][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.719983][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.739217][ T5861] pwc: Registered as video103. [ 278.772898][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 278.811320][ T8453] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 278.828258][ T5861] usb 4-1: USB disconnect, device number 13 [ 278.911664][ T8455] FAULT_INJECTION: forcing a failure. [ 278.911664][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.940426][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.1.684 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 278.940452][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.940463][ T8455] Call Trace: [ 278.940468][ T8455] [ 278.940475][ T8455] dump_stack_lvl+0x16c/0x1f0 [ 278.940506][ T8455] should_fail_ex+0x512/0x640 [ 278.940534][ T8455] _copy_from_iter+0x2a4/0x15b0 [ 278.940562][ T8455] ? __alloc_skb+0x200/0x380 [ 278.940582][ T8455] ? __pfx__copy_from_iter+0x10/0x10 [ 278.940610][ T8455] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 278.940640][ T8455] netlink_sendmsg+0x829/0xdd0 [ 278.940674][ T8455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.940709][ T8455] ____sys_sendmsg+0xa95/0xc70 [ 278.940735][ T8455] ? copy_msghdr_from_user+0x10a/0x160 [ 278.940755][ T8455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.940795][ T8455] ___sys_sendmsg+0x134/0x1d0 [ 278.940816][ T8455] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.940867][ T8455] __sys_sendmsg+0x16d/0x220 [ 278.940887][ T8455] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.940912][ T8455] ? rcu_is_watching+0x12/0xc0 [ 278.940940][ T8455] do_syscall_64+0xcd/0x260 [ 278.940967][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.940987][ T8455] RIP: 0033:0x7f2783d8e969 [ 278.941003][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.941019][ T8455] RSP: 002b:00007f2784b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.941037][ T8455] RAX: ffffffffffffffda RBX: 00007f2783fb5fa0 RCX: 00007f2783d8e969 [ 278.941048][ T8455] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 278.941059][ T8455] RBP: 00007f2784b21090 R08: 0000000000000000 R09: 0000000000000000 [ 278.941070][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.941080][ T8455] R13: 0000000000000000 R14: 00007f2783fb5fa0 R15: 00007fff18e2b238 [ 278.941103][ T8455] [ 278.996329][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 279.192277][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.205470][ T24] usb 1-1: USB disconnect, device number 8 [ 316.687724][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.694079][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.820037][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 321.850414][ T10] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 321.935608][ T10] usb 5-1: USB disconnect, device number 7 [ 378.121692][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.127995][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.422772][ T8496] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 410.533806][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 410.533823][ T30] audit: type=1400 audit(1748153887.835:572): avc: denied { connect } for pid=8501 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 410.622545][ T30] audit: type=1400 audit(1748153887.855:573): avc: denied { setopt } for pid=8501 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 410.775880][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 410.868994][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 410.909762][ T8515] FAULT_INJECTION: forcing a failure. [ 410.909762][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 411.034857][ T8515] CPU: 1 UID: 0 PID: 8515 Comm: syz.0.697 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 411.034888][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.034899][ T8515] Call Trace: [ 411.034905][ T8515] [ 411.034913][ T8515] dump_stack_lvl+0x16c/0x1f0 [ 411.034943][ T8515] should_fail_ex+0x512/0x640 [ 411.034973][ T8515] should_failslab+0xc2/0x120 [ 411.034993][ T8515] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 411.035011][ T8515] ? skb_clone+0x190/0x3f0 [ 411.035036][ T8515] skb_clone+0x190/0x3f0 [ 411.035058][ T8515] netlink_deliver_tap+0xabd/0xd30 [ 411.035086][ T8515] netlink_unicast+0x6b2/0x7f0 [ 411.035112][ T8515] ? __pfx_netlink_unicast+0x10/0x10 [ 411.035133][ T8515] ? genl_rcv_msg+0x4bb/0x800 [ 411.035165][ T8515] netlink_ack+0x696/0xb80 [ 411.035196][ T8515] netlink_rcv_skb+0x347/0x440 [ 411.035217][ T8515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.035244][ T8515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.035281][ T8515] ? __pfx_down_read+0x10/0x10 [ 411.035299][ T8515] ? netlink_deliver_tap+0x1ae/0xd30 [ 411.035325][ T8515] genl_rcv+0x28/0x40 [ 411.035347][ T8515] netlink_unicast+0x53d/0x7f0 [ 411.035373][ T8515] ? __pfx_netlink_unicast+0x10/0x10 [ 411.035409][ T8515] netlink_sendmsg+0x8d1/0xdd0 [ 411.035436][ T8515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.035470][ T8515] ____sys_sendmsg+0xa95/0xc70 [ 411.035495][ T8515] ? copy_msghdr_from_user+0x10a/0x160 [ 411.035515][ T8515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.035553][ T8515] ___sys_sendmsg+0x134/0x1d0 [ 411.035575][ T8515] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.035630][ T8515] __sys_sendmsg+0x16d/0x220 [ 411.035651][ T8515] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.035680][ T8515] ? rcu_is_watching+0x12/0xc0 [ 411.035709][ T8515] do_syscall_64+0xcd/0x260 [ 411.035737][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.035755][ T8515] RIP: 0033:0x7f741cd8e969 [ 411.035770][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.035787][ T8515] RSP: 002b:00007f741dc4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.035805][ T8515] RAX: ffffffffffffffda RBX: 00007f741cfb5fa0 RCX: 00007f741cd8e969 [ 411.035817][ T8515] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 411.035828][ T8515] RBP: 00007f741dc4f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.035838][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.035849][ T8515] R13: 0000000000000000 R14: 00007f741cfb5fa0 R15: 00007ffcd4164548 [ 411.035874][ T8515] [ 411.975371][ T8530] tipc: Enabling of bearer rejected, failed to enable media [ 412.009841][ T5863] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 412.071072][ T30] audit: type=1400 audit(1748153889.395:574): avc: denied { mounton } for pid=8536 comm="syz.2.706" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 412.107782][ T8539] FAULT_INJECTION: forcing a failure. [ 412.107782][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 412.164853][ T8539] CPU: 1 UID: 0 PID: 8539 Comm: syz.4.708 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 412.164879][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.164888][ T8539] Call Trace: [ 412.164894][ T8539] [ 412.164901][ T8539] dump_stack_lvl+0x16c/0x1f0 [ 412.164929][ T8539] should_fail_ex+0x512/0x640 [ 412.164953][ T8539] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 412.164977][ T8539] should_failslab+0xc2/0x120 [ 412.164996][ T8539] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 412.165016][ T8539] ? p9_client_create+0x4ca/0x11c0 [ 412.165046][ T8539] kstrdup+0x53/0x100 [ 412.165067][ T8539] p9_client_create+0x4ca/0x11c0 [ 412.165100][ T8539] ? __pfx_p9_client_create+0x10/0x10 [ 412.165142][ T8539] ? rcu_is_watching+0x12/0xc0 [ 412.165168][ T8539] ? lockdep_init_map_type+0x5c/0x280 [ 412.165186][ T8539] ? __raw_spin_lock_init+0x3a/0x110 [ 412.165209][ T8539] v9fs_session_init+0x1f7/0x1a80 [ 412.165240][ T8539] ? __pfx_v9fs_session_init+0x10/0x10 [ 412.165274][ T8539] v9fs_mount+0xc5/0xa30 [ 412.165297][ T8539] ? __pfx_v9fs_mount+0x10/0x10 [ 412.165322][ T8539] ? cap_capable+0xb3/0x250 [ 412.165344][ T8539] ? __pfx_v9fs_mount+0x10/0x10 [ 412.165378][ T8539] legacy_get_tree+0x10c/0x220 [ 412.165400][ T8539] vfs_get_tree+0x8b/0x340 [ 412.165424][ T8539] path_mount+0x14d4/0x1f20 [ 412.165445][ T8539] ? kmem_cache_free+0x2d4/0x4d0 [ 412.165473][ T8539] ? __pfx_path_mount+0x10/0x10 [ 412.165496][ T8539] ? putname+0x154/0x1a0 [ 412.165517][ T8539] __x64_sys_mount+0x28d/0x310 [ 412.165537][ T8539] ? __pfx___x64_sys_mount+0x10/0x10 [ 412.165554][ T8539] ? rcu_is_watching+0x12/0xc0 [ 412.165586][ T8539] do_syscall_64+0xcd/0x260 [ 412.165612][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.165630][ T8539] RIP: 0033:0x7f4a8538e969 [ 412.165645][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.165662][ T8539] RSP: 002b:00007f4a862d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 412.165680][ T8539] RAX: ffffffffffffffda RBX: 00007f4a855b5fa0 RCX: 00007f4a8538e969 [ 412.165692][ T8539] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 412.165702][ T8539] RBP: 00007f4a862d6090 R08: 0000200000000580 R09: 0000000000000000 [ 412.165713][ T8539] R10: 0000000000010048 R11: 0000000000000246 R12: 0000000000000002 [ 412.165724][ T8539] R13: 0000000000000000 R14: 00007f4a855b5fa0 R15: 00007ffe7bbb4ec8 [ 412.165749][ T8539] [ 412.421785][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 412.564176][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.692094][ T5863] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 412.768241][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.787122][ T5863] usb 2-1: config 0 descriptor?? [ 413.442902][ T5863] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 413.733533][ T30] audit: type=1400 audit(1748153891.035:575): avc: denied { block_suspend } for pid=8556 comm="syz.2.713" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.943191][ T8560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 413.976395][ T5863] usb 2-1: USB disconnect, device number 13 [ 414.294343][ T8569] loop6: detected capacity change from 0 to 524287999 [ 414.505244][ T8570] netlink: 196 bytes leftover after parsing attributes in process `syz.4.711'. [ 414.999362][ T30] audit: type=1400 audit(1748153892.315:576): avc: denied { getopt } for pid=8574 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.078342][ T8578] xt_cluster: you have exceeded the maximum number of cluster nodes (8192 > 32) [ 415.105724][ T30] audit: type=1400 audit(1748153892.315:577): avc: denied { listen } for pid=8574 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 415.749389][ T10] Process accounting resumed [ 416.186623][ T8582] mkiss: ax0: crc mode is auto. [ 416.518538][ T8599] FAULT_INJECTION: forcing a failure. [ 416.518538][ T8599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.531902][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.0.724 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 416.531925][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.531936][ T8599] Call Trace: [ 416.531942][ T8599] [ 416.531948][ T8599] dump_stack_lvl+0x16c/0x1f0 [ 416.531977][ T8599] should_fail_ex+0x512/0x640 [ 416.532005][ T8599] _copy_from_user+0x2e/0xd0 [ 416.532031][ T8599] restore_sigcontext+0xcb/0x6a0 [ 416.532054][ T8599] ? __pfx_restore_sigcontext+0x10/0x10 [ 416.532094][ T8599] ? __pfx_restore_altstack+0x10/0x10 [ 416.532121][ T8599] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.532142][ T8599] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.532175][ T8599] __do_sys_rt_sigreturn+0x1bb/0x230 [ 416.532200][ T8599] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 416.532233][ T8599] do_syscall_64+0xcd/0x260 [ 416.532261][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.532278][ T8599] RIP: 0033:0x7f741cd2ab39 [ 416.532292][ T8599] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 416.532309][ T8599] RSP: 002b:00007f741dc2d340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 416.532326][ T8599] RAX: ffffffffffffffda RBX: 00007f741cfb6080 RCX: 00007f741cd2ab39 [ 416.532337][ T8599] RDX: 00007f741dc2d340 RSI: 00007f741dc2d470 RDI: 0000000000000021 [ 416.532348][ T8599] RBP: 00007f741dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 416.532358][ T8599] R10: 0000000040000000 R11: 0000000000000206 R12: 0000000000000001 [ 416.532368][ T8599] R13: 0000000000000000 R14: 00007f741cfb6080 R15: 00007ffcd4164548 [ 416.532392][ T8599] [ 416.958163][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 417.117040][ T8605] netlink: 196 bytes leftover after parsing attributes in process `syz.3.725'. [ 417.142306][ T8603] vlan2: entered promiscuous mode [ 417.655242][ T30] audit: type=1400 audit(1748153894.975:578): avc: denied { name_bind } for pid=8613 comm="syz.2.731" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 417.705924][ T5184] udevd[5184]: worker [8558] terminated by signal 33 (Unknown signal 33) [ 417.870759][ T5907] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 418.671096][ T8628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.325059][ T30] audit: type=1400 audit(1748153896.645:579): avc: denied { mount } for pid=8629 comm="syz.0.736" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 420.080186][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 420.245200][ T8653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.440463][ T30] audit: type=1400 audit(1748153897.755:580): avc: denied { ioctl } for pid=8658 comm="syz.4.745" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 421.187037][ T30] audit: type=1400 audit(1748153898.485:581): avc: denied { read write } for pid=8672 comm="syz.4.748" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 421.331689][ T8677] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 421.680873][ T30] audit: type=1400 audit(1748153898.495:582): avc: denied { open } for pid=8672 comm="syz.4.748" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 422.570074][ T8692] FAULT_INJECTION: forcing a failure. [ 422.570074][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 422.635518][ T8692] CPU: 1 UID: 0 PID: 8692 Comm: syz.0.751 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 422.635548][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.635558][ T8692] Call Trace: [ 422.635564][ T8692] [ 422.635571][ T8692] dump_stack_lvl+0x16c/0x1f0 [ 422.635600][ T8692] should_fail_ex+0x512/0x640 [ 422.635624][ T8692] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 422.635646][ T8692] should_failslab+0xc2/0x120 [ 422.635666][ T8692] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 422.635685][ T8692] ? kstrdup+0x25/0x100 [ 422.635702][ T8692] ? p9_client_create+0x4ca/0x11c0 [ 422.635732][ T8692] kstrdup+0x53/0x100 [ 422.635752][ T8692] p9_client_create+0x4ca/0x11c0 [ 422.635785][ T8692] ? __pfx_p9_client_create+0x10/0x10 [ 422.635816][ T8692] ? rcu_is_watching+0x12/0xc0 [ 422.635842][ T8692] ? lockdep_init_map_type+0x5c/0x280 [ 422.635860][ T8692] ? __raw_spin_lock_init+0x3a/0x110 [ 422.635883][ T8692] v9fs_session_init+0x1f7/0x1a80 [ 422.635915][ T8692] ? __pfx_v9fs_session_init+0x10/0x10 [ 422.635953][ T8692] v9fs_mount+0xc5/0xa30 [ 422.635976][ T8692] ? __pfx_v9fs_mount+0x10/0x10 [ 422.636002][ T8692] ? security_capable+0x243/0x260 [ 422.636026][ T8692] ? __pfx_v9fs_mount+0x10/0x10 [ 422.636048][ T8692] legacy_get_tree+0x10c/0x220 [ 422.636068][ T8692] vfs_get_tree+0x8b/0x340 [ 422.636096][ T8692] path_mount+0x14d4/0x1f20 [ 422.636118][ T8692] ? kmem_cache_free+0x2d4/0x4d0 [ 422.636145][ T8692] ? __pfx_path_mount+0x10/0x10 [ 422.636169][ T8692] ? putname+0x154/0x1a0 [ 422.636193][ T8692] __x64_sys_mount+0x28d/0x310 [ 422.636214][ T8692] ? __pfx___x64_sys_mount+0x10/0x10 [ 422.636242][ T8692] do_syscall_64+0xcd/0x260 [ 422.636269][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.636288][ T8692] RIP: 0033:0x7f741cd8e969 [ 422.636302][ T8692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.636319][ T8692] RSP: 002b:00007f741dc4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.636336][ T8692] RAX: ffffffffffffffda RBX: 00007f741cfb5fa0 RCX: 00007f741cd8e969 [ 422.636347][ T8692] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 422.636358][ T8692] RBP: 00007f741dc4f090 R08: 0000200000000580 R09: 0000000000000000 [ 422.636369][ T8692] R10: 0000000000010048 R11: 0000000000000246 R12: 0000000000000002 [ 422.636379][ T8692] R13: 0000000000000000 R14: 00007f741cfb5fa0 R15: 00007ffcd4164548 [ 422.636403][ T8692] [ 424.811610][ T30] audit: type=1326 audit(1748153901.585:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2783d8e969 code=0x7fc00000 [ 425.278760][ T30] audit: type=1326 audit(1748153901.945:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2783d8e969 code=0x7fc00000 [ 425.933545][ T8731] xt_cluster: you have exceeded the maximum number of cluster nodes (262144 > 32) [ 425.950098][ T5907] Process accounting resumed [ 426.402115][ T8740] netlink: 88 bytes leftover after parsing attributes in process `syz.2.764'. [ 426.617871][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 426.626983][ T30] audit: type=1400 audit(1748153903.915:585): avc: denied { write } for pid=8737 comm="syz.0.765" name="snmp6" dev="proc" ino=4026533120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 427.706670][ T30] audit: type=1400 audit(1748153904.985:586): avc: denied { read } for pid=8753 comm="syz.4.769" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.976388][ T8761] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 427.998706][ T8761] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 428.344595][ T30] audit: type=1400 audit(1748153904.985:587): avc: denied { open } for pid=8753 comm="syz.4.769" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 429.160505][ T8778] netlink: 596 bytes leftover after parsing attributes in process `syz.0.775'. [ 429.574635][ T8790] netlink: 76 bytes leftover after parsing attributes in process `syz.1.779'. [ 429.630033][ T5907] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 429.682686][ T8791] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 429.990727][ T5907] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.055695][ T5907] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.088261][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.114015][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.165364][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.208044][ T5907] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.222431][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.236339][ T30] audit: type=1400 audit(1748153907.555:588): avc: denied { listen } for pid=8794 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 430.265865][ T5907] usb 5-1: Product: syz [ 430.274961][ T5907] usb 5-1: Manufacturer: syz [ 430.293334][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 430.298544][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 430.318462][ T5907] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 430.328056][ T5907] cdc_wdm 5-1:1.0: Unknown control protocol [ 430.772556][ T5864] usb 5-1: USB disconnect, device number 9 [ 430.809924][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 431.047747][ T30] audit: type=1400 audit(1748153908.365:589): avc: denied { setopt } for pid=8814 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.112165][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.127964][ T8818] netlink: 596 bytes leftover after parsing attributes in process `syz.4.787'. [ 431.131421][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.142026][ T30] audit: type=1400 audit(1748153908.455:590): avc: denied { getopt } for pid=8814 comm="syz.4.787" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.159323][ T5907] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 431.178673][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.202335][ T5907] usb 3-1: config 0 descriptor?? [ 431.419847][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 431.619872][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 431.660598][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.722589][ T24] usb 2-1: config 0 has no interface number 0 [ 431.781396][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.794989][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.811378][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 431.823961][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.824028][ T30] audit: type=1400 audit(1748153909.135:591): avc: denied { connect } for pid=8828 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 431.835848][ T24] usb 2-1: config 0 descriptor?? [ 431.875925][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.0.792'. [ 431.956234][ T8806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.765113][ T8835] Bluetooth: MGMT ver 1.23 [ 432.808452][ T30] audit: type=1400 audit(1748153909.915:592): avc: denied { getopt } for pid=8832 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 432.834317][ T5907] hid-led 0003:1D34:0004.0005: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 432.850729][ T30] audit: type=1400 audit(1748153909.975:593): avc: denied { bind } for pid=8805 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.875520][ T5907] hid-led 0003:1D34:0004.0005: Dream Cheeky Webmail Notifier initialized [ 432.887084][ T30] audit: type=1400 audit(1748153910.075:594): avc: denied { write } for pid=8832 comm="syz.3.793" path="socket:[16751]" dev="sockfs" ino=16751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.209001][ T8845] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 434.215290][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 434.224144][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 434.235559][ T24] usb 2-1: USB disconnect, device number 14 [ 435.179737][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 435.180321][ T10] usb 3-1: USB disconnect, device number 10 [ 436.217627][ T8857] xt_hashlimit: invalid rate [ 439.590514][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.714111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.875775][ T8886] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 440.952520][ T30] audit: type=1400 audit(1748153918.265:595): avc: denied { mount } for pid=8885 comm="syz.1.807" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 441.755865][ T8899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.838388][ T8905] netlink: 76 bytes leftover after parsing attributes in process `syz.4.812'. [ 441.885631][ T8901] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 442.032352][ T30] audit: type=1400 audit(1748153919.355:596): avc: denied { mount } for pid=8907 comm="syz.4.814" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 442.056735][ T8909] 9pnet_fd: Insufficient options for proto=fd [ 442.069096][ T30] audit: type=1400 audit(1748153919.375:597): avc: denied { mounton } for pid=8907 comm="syz.4.814" path="/172/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 442.134979][ T30] audit: type=1400 audit(1748153919.455:598): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 442.281255][ T30] audit: type=1326 audit(1748153919.585:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623fb85927 code=0x7ffc0000 [ 442.329132][ T8917] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 442.337051][ T8917] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 442.348018][ T8917] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 443.430563][ T30] audit: type=1326 audit(1748153919.585:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f623fb2ab39 code=0x7ffc0000 [ 443.453798][ T30] audit: type=1326 audit(1748153919.585:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623fb8e969 code=0x7ffc0000 [ 444.287131][ T30] audit: type=1326 audit(1748153919.585:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623fb85927 code=0x7ffc0000 [ 444.311088][ T30] audit: type=1326 audit(1748153919.585:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f623fb2ab39 code=0x7ffc0000 [ 444.334273][ T30] audit: type=1326 audit(1748153919.585:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623fb85927 code=0x7ffc0000 [ 444.535982][ T8928] FAULT_INJECTION: forcing a failure. [ 444.535982][ T8928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.549467][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.4.817 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 444.549490][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.549500][ T8928] Call Trace: [ 444.549505][ T8928] [ 444.549512][ T8928] dump_stack_lvl+0x16c/0x1f0 [ 444.549539][ T8928] should_fail_ex+0x512/0x640 [ 444.549566][ T8928] _copy_to_user+0x32/0xd0 [ 444.549596][ T8928] simple_read_from_buffer+0xcb/0x170 [ 444.549624][ T8928] proc_fail_nth_read+0x197/0x270 [ 444.549650][ T8928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.549677][ T8928] ? rw_verify_area+0xcf/0x680 [ 444.549698][ T8928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.549723][ T8928] vfs_read+0x1e1/0xc70 [ 444.549751][ T8928] ? __pfx___mutex_lock+0x10/0x10 [ 444.549775][ T8928] ? __pfx_vfs_read+0x10/0x10 [ 444.549804][ T8928] ? __fget_files+0x20e/0x3c0 [ 444.549829][ T8928] ksys_read+0x12a/0x240 [ 444.549853][ T8928] ? __pfx_ksys_read+0x10/0x10 [ 444.549886][ T8928] do_syscall_64+0xcd/0x260 [ 444.549913][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.549932][ T8928] RIP: 0033:0x7f4a8538d37c [ 444.549947][ T8928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 444.549964][ T8928] RSP: 002b:00007f4a862b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.549981][ T8928] RAX: ffffffffffffffda RBX: 00007f4a855b6080 RCX: 00007f4a8538d37c [ 444.549991][ T8928] RDX: 000000000000000f RSI: 00007f4a862b50a0 RDI: 0000000000000007 [ 444.550001][ T8928] RBP: 00007f4a862b5090 R08: 0000000000000000 R09: 0000000000000000 [ 444.550011][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.550021][ T8928] R13: 0000000000000000 R14: 00007f4a855b6080 R15: 00007ffe7bbb4ec8 [ 444.550046][ T8928] [ 444.730628][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.882756][ T5861] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.089787][ T5863] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 445.133578][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.143638][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.151786][ T5861] usb 3-1: Product: syz [ 445.156083][ T5861] usb 3-1: Manufacturer: syz [ 445.343852][ T5861] usb 3-1: SerialNumber: syz [ 446.365470][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 446.378100][ T5863] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.455920][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 446.464852][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 446.479122][ T8941] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 446.542236][ T5863] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.585956][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 446.673591][ T5863] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 446.701972][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.714301][ T5863] usb 4-1: config 0 descriptor?? [ 447.826960][ T5861] cdc_ncm 3-1:1.0: bind() failure [ 447.867594][ T5861] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 448.094687][ T5861] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 449.979678][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 450.070194][ T5861] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 450.096562][ T5861] usb 3-1: USB disconnect, device number 11 [ 450.181651][ T8965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.207210][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 450.236277][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.356736][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.528880][ T24] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 450.557441][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.580918][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 450.609041][ T24] usb 5-1: config 0 descriptor?? [ 450.618612][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 451.001245][ T5863] usb 4-1: USB disconnect, device number 14 [ 451.368757][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 451.461227][ T8977] No control pipe specified [ 451.511533][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 451.521661][ T24] usb 5-1: USB disconnect, device number 10 [ 452.264396][ T8987] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 452.651712][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 452.896088][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 452.896103][ T30] audit: type=1400 audit(1748153930.215:697): avc: denied { write } for pid=8985 comm="syz.2.839" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 452.897601][ T8983] vlan3: entered promiscuous mode [ 452.925228][ T30] audit: type=1400 audit(1748153930.215:698): avc: denied { ioctl } for pid=8985 comm="syz.2.839" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 452.959151][ T8983] bond0: entered promiscuous mode [ 452.989361][ T8983] bond_slave_0: entered promiscuous mode [ 453.034865][ T8983] bond_slave_1: entered promiscuous mode [ 453.166940][ T9006] netlink: 88 bytes leftover after parsing attributes in process `syz.1.844'. [ 456.663972][ T9038] bridge0: port 3(veth0_to_bridge) entered blocking state [ 456.671445][ T9038] bridge0: port 3(veth0_to_bridge) entered disabled state [ 456.692698][ T9040] loop6: detected capacity change from 0 to 524287999 [ 456.755388][ T9041] netlink: 196 bytes leftover after parsing attributes in process `syz.2.850'. [ 456.779829][ T9038] veth0_to_bridge: entered allmulticast mode [ 456.960582][ T9038] veth0_to_bridge: entered promiscuous mode [ 456.966701][ T9038] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.996295][ T9038] bridge0: port 3(veth0_to_bridge) entered blocking state [ 457.003644][ T9038] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 461.989463][ T30] audit: type=1400 audit(1748153939.305:699): avc: denied { getopt } for pid=9078 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 463.503120][ T5861] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 463.983000][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.016764][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.039753][ T5861] usb 5-1: Product: syz [ 464.043997][ T5861] usb 5-1: Manufacturer: syz [ 464.048599][ T5861] usb 5-1: SerialNumber: syz [ 465.838547][ T9117] xt_CT: No such helper "snmp_trap" [ 465.967445][ T30] audit: type=1400 audit(1748153943.285:700): avc: denied { mounton } for pid=9127 comm="syz.2.879" path="/proc/530/cgroup" dev="proc" ino=17198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 466.663307][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 466.674258][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 467.095681][ T9145] xt_cluster: you have exceeded the maximum number of cluster nodes (67108864 > 32) [ 467.096075][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 467.397826][ T5861] cdc_ncm 5-1:1.0: bind() failure [ 467.425363][ T5861] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 467.439983][ T5861] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 467.460922][ T5861] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 467.482155][ T5861] usb 5-1: USB disconnect, device number 11 [ 467.566509][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 468.724151][ T9] usb 1-1: device descriptor read/64, error -71 [ 468.786911][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.798004][ T9158] xt_CT: No such helper "snmp_trap" [ 468.805040][ T9165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.889'. [ 468.814058][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 468.854357][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.899317][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 468.943900][ T9172] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 468.948658][ T9171] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 468.989703][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.035498][ T9174] kvm: user requested TSC rate below hardware speed [ 469.039742][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.042669][ T30] audit: type=1400 audit(1748153946.375:701): avc: denied { write } for pid=9166 comm="syz.3.890" name="usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 469.073588][ T30] audit: type=1400 audit(1748153946.375:702): avc: denied { ioctl } for pid=9166 comm="syz.3.890" path="/dev/usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 469.129737][ T9] usb 1-1: device descriptor read/64, error -71 [ 469.216402][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.225625][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.233727][ T24] usb 5-1: Product: syz [ 469.237937][ T24] usb 5-1: Manufacturer: syz [ 469.240065][ T9] usb usb1-port1: attempt power cycle [ 469.242550][ T24] usb 5-1: SerialNumber: syz [ 469.255309][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.307009][ T5907] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.511319][ T30] audit: type=1400 audit(1748153946.835:703): avc: denied { read } for pid=9180 comm="syz.2.894" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 469.545046][ T30] audit: type=1400 audit(1748153946.865:704): avc: denied { open } for pid=9180 comm="syz.2.894" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 469.599832][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 469.622671][ T9] usb 1-1: device descriptor read/8, error -71 [ 469.859668][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 469.882524][ T9] usb 1-1: device descriptor read/8, error -71 [ 469.990003][ T9] usb usb1-port1: unable to enumerate USB device [ 470.436186][ T5907] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 470.446843][ T5907] ath9k_htc: Failed to initialize the device [ 470.474871][ T5907] usb 5-1: ath9k_htc: USB layer deinitialized [ 470.575986][ T30] audit: type=1400 audit(1748153947.895:705): avc: denied { create } for pid=9189 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 470.599397][ T30] audit: type=1400 audit(1748153947.915:706): avc: denied { setopt } for pid=9189 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 470.636089][ T30] audit: type=1400 audit(1748153947.935:707): avc: denied { mount } for pid=9189 comm="syz.0.897" name="/" dev="rpc_pipefs" ino=18250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 471.639791][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 471.639872][ T9181] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 471.906232][ T30] audit: type=1326 audit(1748153949.225:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9166 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623fb8e969 code=0x7fc00000 [ 472.506308][ T9181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 472.516416][ T9181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.522477][ T9181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 472.531655][ T9181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.537618][ T9181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 472.544544][ T9181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.551395][ T9181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 472.557949][ T9181] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.563980][ T9181] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 472.652893][ T5863] usb 5-1: USB disconnect, device number 12 [ 472.677715][ T30] audit: type=1400 audit(1748153949.995:709): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 472.758711][ T9201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.855014][ T9205] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 472.880557][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.887842][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.898868][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.906023][ T9205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.913440][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.920596][ T9205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.939214][ T9205] bridge0: entered promiscuous mode [ 472.947304][ T9205] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 473.877428][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 474.507573][ T9212] xt_CT: No such helper "snmp_trap" [ 474.553552][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 474.600919][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 474.600957][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 474.604618][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 474.755573][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.792075][ T30] audit: type=1400 audit(1748153952.095:710): avc: denied { connect } for pid=9219 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 475.069528][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 475.709214][ T5861] usb 5-1: device descriptor read/64, error -71 [ 475.933842][ T9241] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 476.059837][ T5861] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 476.337497][ T9243] raw_sendmsg: syz.2.904 forgot to set AF_INET. Fix it! [ 476.692612][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 476.700088][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 476.706348][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 476.712447][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 477.009678][ T5861] usb 5-1: device descriptor read/64, error -71 [ 477.831115][ T5861] usb usb5-port1: attempt power cycle [ 477.943186][ T30] audit: type=1400 audit(1748153955.235:711): avc: denied { bind } for pid=9254 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.118130][ T9260] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 478.449703][ T5863] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 478.588289][ T9268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43233 sclass=netlink_route_socket pid=9268 comm=syz.2.919 [ 478.707562][ T30] audit: type=1400 audit(1748153956.015:712): avc: denied { create } for pid=9267 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 478.739711][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 478.806514][ T5863] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 478.932512][ T5863] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.112072][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 479.511212][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.575333][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.636045][ T5863] usb 2-1: Product: Л [ 479.664128][ T5863] usb 2-1: Manufacturer: ʷ祎C乑䣤뷟謤㟒ɓ䎉鰘撇䘨밼ﺗꞕාЗ燿㾭鲹搤͸愝蛲⨩뺅瑵녊豃䬙뢂 [ 479.757722][ T5863] usb 2-1: SerialNumber: 䟻줙孁똟鮠鍆퀫䓮⏔橊ꨝ稉癷獟⋕鴠Ế泈輦ᨱ䰐趘ɰ䃕仩౬὚䢆섚⢯笡㆏ᄤꥷ힞骮ﳼꁔﾥ扺獣一힯ᜓ튍歇班큶ꋺ諴 [ 480.185945][ T30] audit: type=1400 audit(1748153957.505:713): avc: denied { append } for pid=9283 comm="syz.2.924" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 481.138182][ T5863] usb 2-1: can't set config #1, error -71 [ 481.145396][ T5863] usb 2-1: USB disconnect, device number 15 [ 481.191637][ T9291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.926'. [ 481.200731][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 483.592128][ T8808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 484.789949][ T8808] usb 4-1: Using ep0 maxpacket: 16 [ 484.933476][ T9336] ubi31: attaching mtd0 [ 484.952146][ T9336] ubi31: scanning is finished [ 484.957206][ T9336] ubi31: empty MTD device detected [ 484.994447][ T9338] fuse: Unknown parameter '0x0000000000000003' [ 485.010243][ T8808] usb 4-1: config 13 has an invalid interface number: 109 but max is 0 [ 485.018594][ T8808] usb 4-1: config 13 has no interface number 0 [ 485.132580][ T8808] usb 4-1: config 13 interface 109 altsetting 4 endpoint 0x9 has an invalid bInterval 255, changing to 11 [ 485.189824][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 485.259614][ T8808] usb 4-1: config 13 interface 109 has no altsetting 0 [ 485.308706][ T8808] usb 4-1: New USB device found, idVendor=0cf3, idProduct=0003, bcdDevice=2e.3c [ 485.335429][ T9336] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 485.349631][ T8808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.377776][ T8808] usb 4-1: Product: syz [ 485.399929][ T8808] usb 4-1: Manufacturer: syz [ 485.439628][ T8808] usb 4-1: SerialNumber: syz [ 485.882093][ T8808] usb 4-1: Could not find all expected endpoints [ 485.939700][ T8808] usb 4-1: USB disconnect, device number 15 [ 487.024585][ T9352] loop6: detected capacity change from 0 to 524287999 [ 487.089858][ T9359] netlink: 196 bytes leftover after parsing attributes in process `syz.1.942'. [ 489.127539][ T30] audit: type=1400 audit(1748153966.375:714): avc: denied { open } for pid=9378 comm="syz.0.950" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 489.179786][ T8808] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 489.799664][ T8808] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 489.807888][ T8808] usb 3-1: config 0 has no interface number 0 [ 489.814059][ T8808] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 489.829476][ T8808] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 490.074842][ T8808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.078644][ T8808] usb 3-1: Product: syz [ 491.085690][ T30] audit: type=1400 audit(1748153967.625:715): avc: denied { create } for pid=9368 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 491.112368][ T8808] usb 3-1: Manufacturer: syz [ 491.132108][ T30] audit: type=1400 audit(1748153967.635:716): avc: denied { setopt } for pid=9368 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 491.135690][ T8808] usb 3-1: SerialNumber: syz [ 491.432507][ T8808] usb 3-1: config 0 descriptor?? [ 491.457453][ T9393] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 491.498885][ T9399] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 491.505591][ T9399] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 491.629536][ T5863] IPVS: starting estimator thread 0... [ 491.672775][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.682041][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.729772][ T9403] IPVS: using max 41 ests per chain, 98400 per kthread [ 491.846843][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 491.848367][ T8808] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 491.857735][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 491.864589][ T8808] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 491.905804][ T9409] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 491.926346][ T9409] dummy0: entered promiscuous mode [ 492.563288][ T9409] dummy0: left promiscuous mode [ 492.582239][ T9409] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 492.616348][ T5863] usb 3-1: USB disconnect, device number 12 [ 492.642249][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 492.809733][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 492.822014][ T24] usb 2-1: config 13 has an invalid interface number: 109 but max is 0 [ 492.833973][ T24] usb 2-1: config 13 has no interface number 0 [ 492.847264][ T30] audit: type=1326 audit(1748153970.155:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 492.852011][ T24] usb 2-1: config 13 interface 109 altsetting 4 endpoint 0x9 has an invalid bInterval 255, changing to 11 [ 492.887249][ T24] usb 2-1: config 13 interface 109 has no altsetting 0 [ 492.896617][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=0003, bcdDevice=2e.3c [ 492.926503][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.948701][ T24] usb 2-1: Product: syz [ 492.957609][ T24] usb 2-1: Manufacturer: syz [ 492.970597][ T24] usb 2-1: SerialNumber: syz [ 493.058604][ T30] audit: type=1326 audit(1748153970.155:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.082528][ T30] audit: type=1326 audit(1748153970.165:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.105744][ T30] audit: type=1326 audit(1748153970.165:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.131097][ T30] audit: type=1326 audit(1748153970.165:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.477105][ T24] usb 2-1: Could not find all expected endpoints [ 493.601795][ T30] audit: type=1326 audit(1748153970.165:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.633049][ T24] usb 2-1: USB disconnect, device number 16 [ 493.645271][ T30] audit: type=1326 audit(1748153970.165:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8e969 code=0x7ffc0000 [ 493.783970][ T9427] netlink: 292 bytes leftover after parsing attributes in process `syz.2.963'. [ 493.929657][ T5863] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 493.997517][ T9427] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 494.519641][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 494.525646][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 494.530876][ T5863] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 494.586612][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.598008][ T9437] xt_CT: No such helper "snmp_trap" [ 494.638346][ T5863] usb 1-1: config 0 descriptor?? [ 494.653528][ T5863] gspca_main: sunplus-2.14.0 probing 041e:400b [ 494.871972][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.886385][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.547917][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.549755][ T5863] gspca_sunplus: reg_w_riv err -110 [ 495.661605][ T5863] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 495.804601][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.876297][ T5863] usb 1-1: USB disconnect, device number 13 [ 496.002391][ T9465] netlink: 'syz.4.973': attribute type 11 has an invalid length. [ 496.052393][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 496.052409][ T30] audit: type=1400 audit(1748153973.375:756): avc: denied { write } for pid=9466 comm="syz.2.974" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.089471][ T9465] netlink: 224 bytes leftover after parsing attributes in process `syz.4.973'. [ 496.103267][ T5861] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 496.129706][ T9469] netlink: 596 bytes leftover after parsing attributes in process `syz.2.974'. [ 496.226667][ T9472] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 496.269680][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 496.585732][ T5861] usb 4-1: config 9 has an invalid interface number: 191 but max is 0 [ 496.650948][ T5861] usb 4-1: config 9 has no interface number 0 [ 496.672720][ T5861] usb 4-1: config 9 interface 191 altsetting 9 bulk endpoint 0xE has invalid maxpacket 8 [ 496.696411][ T5861] usb 4-1: config 9 interface 191 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 496.708906][ T5861] usb 4-1: config 9 interface 191 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 496.722546][ T5861] usb 4-1: config 9 interface 191 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 496.859644][ T5861] usb 4-1: config 9 interface 191 has no altsetting 0 [ 496.869943][ T5861] usb 4-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=47.5e [ 496.885230][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.909776][ T5861] usb 4-1: Product: ҳퟖᬂ郈痥匑㩨〚쫨Ĥ늟Ƨ᧙ꞈ鰫࣡㰽鶀၏柦㽜ⱀ隒ᄚԼԻཀ砋꿟雷戱力쨟ꛥ℮dž㓋奰뒮廣谙쑦陀슕㉷Ẽ錣ꌁ켈㗘슦襪桢穠駭Ԍ俉渟屦ⱈ塊㏆ꮣಥ傽滘駚 [ 497.545328][ T5861] usb 4-1: Manufacturer: у [ 497.549929][ T5861] usb 4-1: SerialNumber: 깪ꡜ⛐击眛⬸ဗ῾褫诃贤쎆佬貵勞℗舠ᓂ譱ᚼ├䞴ꊃৎ퐮鄸건純熡䮼ᤒⲢ㪦ᡜ雦藢໸⽕뉲⤛၉㼑戂涎愇嵻雚ꮴ戞 [ 497.678431][ T9457] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 498.434104][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.637041][ T9488] xt_CT: No such helper "snmp_trap" [ 498.725049][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.809455][ T5861] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware [ 498.872591][ T5861] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 498.899493][ T5861] dib0700: firmware download failed at 7 with -22 [ 498.913462][ T5861] usb 4-1: USB disconnect, device number 16 [ 499.122781][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 499.157556][ T30] audit: type=1400 audit(1748153976.455:757): avc: denied { ioctl } for pid=9498 comm="syz.1.982" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 499.359660][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 499.366669][ T30] audit: type=1400 audit(1748153976.465:758): avc: denied { write } for pid=9498 comm="syz.1.982" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 499.404985][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 499.413456][ T10] usb 3-1: config 0 has no interface number 0 [ 499.419547][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 499.443310][ T30] audit: type=1400 audit(1748153976.475:759): avc: denied { open } for pid=9498 comm="syz.1.982" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 499.512980][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 499.522182][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.536130][ T10] usb 3-1: Product: syz [ 499.545660][ T10] usb 3-1: Manufacturer: syz [ 499.572886][ T10] usb 3-1: SerialNumber: syz [ 499.591659][ T10] usb 3-1: config 0 descriptor?? [ 499.608877][ T10] smsc75xx v1.0.0 [ 499.815135][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 499.840167][ T9517] mkiss: ax0: crc mode is auto. [ 499.846396][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 499.858729][ T10] usb 3-1: USB disconnect, device number 13 [ 501.013894][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.020937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.042418][ T30] audit: type=1400 audit(1748153978.365:760): avc: denied { setopt } for pid=9528 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 501.201749][ T30] audit: type=1400 audit(1748153978.385:761): avc: denied { read write } for pid=9528 comm="syz.0.991" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 502.434067][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 502.443074][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 502.457837][ T9554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 502.481266][ T9554] dummy0: entered promiscuous mode [ 502.516617][ T9554] dummy0: left promiscuous mode [ 502.523668][ T9554] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 504.200956][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 504.941045][ T9581] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 505.099713][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 505.110457][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.118707][ T10] usb 3-1: config 0 has no interface number 0 [ 505.607583][ T9576] loop6: detected capacity change from 0 to 524287999 [ 505.629685][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 505.661107][ T9584] xt_CT: No such helper "snmp_trap" [ 505.694455][ T9578] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1004'. [ 505.747237][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.756473][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.765594][ T10] usb 3-1: Product: syz [ 505.769992][ T10] usb 3-1: Manufacturer: syz [ 505.779387][ T10] usb 3-1: SerialNumber: syz [ 505.794189][ T10] usb 3-1: config 0 descriptor?? [ 505.795364][ T9588] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1007'. [ 505.811255][ T10] smsc75xx v1.0.0 [ 505.935608][ T9590] overlay: ./file1 is not a directory [ 506.129971][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 506.147193][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 506.383149][ T5861] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 506.478088][ T10] usb 3-1: USB disconnect, device number 14 [ 506.724263][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 506.781115][ T5861] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.817996][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 506.858672][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 506.997558][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.039414][ T5861] usb 2-1: config 0 descriptor?? [ 507.070119][ T9602] FAULT_INJECTION: forcing a failure. [ 507.070119][ T9602] name failslab, interval 1, probability 0, space 0, times 0 [ 507.087874][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.3.1012 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 507.087904][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.087915][ T9602] Call Trace: [ 507.087921][ T9602] [ 507.087928][ T9602] dump_stack_lvl+0x16c/0x1f0 [ 507.087958][ T9602] should_fail_ex+0x512/0x640 [ 507.087983][ T9602] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 507.088013][ T9602] should_failslab+0xc2/0x120 [ 507.088033][ T9602] __kmalloc_cache_noprof+0x6a/0x3e0 [ 507.088059][ T9602] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 507.088083][ T9602] ? bpf_prog_alloc_no_stats+0x120/0x630 [ 507.088101][ T9602] ? __vmalloc_noprof+0x6d/0x90 [ 507.088127][ T9602] bpf_prog_alloc_no_stats+0x120/0x630 [ 507.088149][ T9602] bpf_prog_alloc+0x3b/0x230 [ 507.088165][ T9602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.088185][ T9602] bpf_prog_load+0x1a04/0x2490 [ 507.088212][ T9602] ? __pfx_bpf_prog_load+0x10/0x10 [ 507.088232][ T9602] ? avc_has_perm_noaudit+0x149/0x3b0 [ 507.088271][ T9602] ? selinux_bpf+0xde/0x130 [ 507.088288][ T9602] ? bpf_lsm_bpf+0x9/0x10 [ 507.088316][ T9602] __sys_bpf+0x433c/0x4d80 [ 507.088342][ T9602] ? __pfx___sys_bpf+0x10/0x10 [ 507.088365][ T9602] ? ksys_write+0x190/0x240 [ 507.088395][ T9602] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 507.088438][ T9602] ? fput+0x70/0xf0 [ 507.088457][ T9602] ? ksys_write+0x1b9/0x240 [ 507.088482][ T9602] ? __pfx_ksys_write+0x10/0x10 [ 507.088513][ T9602] __x64_sys_bpf+0x78/0xc0 [ 507.088534][ T9602] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.088558][ T9602] do_syscall_64+0xcd/0x260 [ 507.088586][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.088604][ T9602] RIP: 0033:0x7f623fb8e969 [ 507.088618][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.088635][ T9602] RSP: 002b:00007f6240ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.088652][ T9602] RAX: ffffffffffffffda RBX: 00007f623fdb5fa0 RCX: 00007f623fb8e969 [ 507.088664][ T9602] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 507.088674][ T9602] RBP: 00007f6240ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 507.088684][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.088694][ T9602] R13: 0000000000000001 R14: 00007f623fdb5fa0 R15: 00007ffe626440e8 [ 507.088719][ T9602] [ 507.345542][ T9269] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 507.605197][ T9269] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.628043][ T9269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.652538][ T9608] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 507.669111][ T9269] usb 1-1: Product: syz [ 507.673437][ T9269] usb 1-1: Manufacturer: syz [ 507.678086][ T9269] usb 1-1: SerialNumber: syz [ 510.693160][ T9595] block device autoloading is deprecated and will be removed. [ 511.666674][ T9269] cdc_ncm 1-1:1.0: bind() failure [ 511.874417][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 511.880663][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 511.894746][ T9269] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 512.105830][ T5861] usb 2-1: USB disconnect, device number 17 [ 512.124820][ T9269] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 512.273201][ T9269] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 522.781367][ T9626] xt_CT: No such helper "snmp_trap" [ 522.928738][ C1] sched: DL replenish lagged too much [ 523.431293][ T9269] usb 1-1: USB disconnect, device number 14 [ 524.908615][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.917118][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.933667][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.941728][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.953202][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.973994][ T30] audit: type=1400 audit(1748154002.285:762): avc: denied { mounton } for pid=9644 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 525.867798][ T9642] tipc: Enabling of bearer rejected, failed to enable media [ 527.009805][ T5827] Bluetooth: hci5: command tx timeout [ 527.480339][ T30] audit: type=1400 audit(1748154004.795:763): avc: denied { mount } for pid=9653 comm="syz.3.1028" name="/" dev="ramfs" ino=20450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 528.623489][ T30] audit: type=1400 audit(1748154005.935:764): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 528.966058][ T9661] nfs: Unknown parameter ' ' [ 529.146490][ T5827] Bluetooth: hci5: command tx timeout [ 529.921700][ T30] audit: type=1326 audit(1748154007.245:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2783d8e969 code=0x0 [ 530.099756][ T9269] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 530.244780][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.253800][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.261247][ T9269] usb 3-1: Using ep0 maxpacket: 32 [ 530.270108][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.279067][ T9269] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 530.290462][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.298054][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.332763][ T9269] usb 3-1: config 0 has no interface number 0 [ 530.352040][ T9269] usb 3-1: config 0 interface 184 has no altsetting 0 [ 530.381534][ T9269] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 530.400029][ T9269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.400051][ T9269] usb 3-1: Product: syz [ 530.400067][ T9269] usb 3-1: Manufacturer: syz [ 530.400081][ T9269] usb 3-1: SerialNumber: syz [ 530.405408][ T9269] usb 3-1: config 0 descriptor?? [ 530.407396][ T9269] smsc75xx v1.0.0 [ 530.647159][ T9269] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 530.699407][ T9269] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 530.750814][ T9269] usb 3-1: USB disconnect, device number 15 [ 531.089341][ T9644] chnl_net:caif_netlink_parms(): no params data found [ 531.162724][ T5124] Bluetooth: hci5: command tx timeout [ 532.863111][ T5124] Bluetooth: hci0: command tx timeout [ 533.293778][ T5124] Bluetooth: hci5: command tx timeout [ 535.078212][ T5124] Bluetooth: hci0: command tx timeout [ 537.197321][ T5124] Bluetooth: hci0: command tx timeout [ 539.401316][ T5124] Bluetooth: hci0: command tx timeout [ 563.527489][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.544123][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.360780][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.161597][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.939527][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 640.946566][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9686/1:b..l [ 640.954881][ C0] rcu: (detected by 0, t=10503 jiffies, g=26349, q=427 ncpus=2) [ 640.962595][ C0] task:syz.2.1036 state:R running task stack:27288 pid:9686 tgid:9685 ppid:5812 task_flags:0x40054c flags:0x00404006 [ 640.976791][ C0] Call Trace: [ 640.980073][ C0] [ 640.983005][ C0] __schedule+0x116f/0x5de0 [ 640.987529][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 640.992482][ C0] ? __pfx___schedule+0x10/0x10 [ 640.997344][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 641.002377][ C0] ? mark_held_locks+0x49/0x80 [ 641.007154][ C0] preempt_schedule_irq+0x51/0x90 [ 641.012198][ C0] irqentry_exit+0x36/0x90 [ 641.016618][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.022611][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 641.027996][ C0] Code: 8b 05 a8 20 e9 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c 16 00 00 85 c0 74 4f <8b> 82 18 16 00 00 83 f8 03 75 44 48 8b 82 20 16 00 00 8b 92 1c 16 [ 641.047607][ C0] RSP: 0018:ffffc90003b678e8 EFLAGS: 00000246 [ 641.053680][ C0] RAX: 0000000080000000 RBX: 0000000000047fc0 RCX: ffffffff822c2dba [ 641.061650][ C0] RDX: ffff888034228000 RSI: 000000000007ffff RDI: 0000000000000007 [ 641.069634][ C0] RBP: 0000000000000008 R08: 0000000000000007 R09: 000000000007ffff [ 641.077610][ C0] R10: 0000000000000008 R11: 0000000000000000 R12: ffffea00011ff000 [ 641.085579][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.093559][ C0] ? lookup_page_ext+0x3a/0x190 [ 641.098418][ C0] lookup_page_ext+0x3a/0x190 [ 641.103093][ C0] page_ext_get+0x58/0x1a0 [ 641.107510][ C0] __reset_page_owner+0x2b/0x1a0 [ 641.112447][ C0] __free_frozen_pages+0x69d/0xff0 [ 641.117574][ C0] __put_partials+0x16d/0x1c0 [ 641.122260][ C0] qlist_free_all+0x4e/0x120 [ 641.126860][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 641.132333][ C0] __kasan_slab_alloc+0x69/0x90 [ 641.137194][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 641.142651][ C0] ? __pfx_acct_collect+0x10/0x10 [ 641.147673][ C0] ? taskstats_exit+0x654/0xbe0 [ 641.152527][ C0] taskstats_exit+0x654/0xbe0 [ 641.157209][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 641.162415][ C0] ? hrtimer_try_to_cancel+0x3a/0x2f0 [ 641.167793][ C0] do_exit+0x85f/0x2c30 [ 641.171955][ C0] ? __pfx___might_resched+0x10/0x10 [ 641.177264][ C0] ? __pfx_do_exit+0x10/0x10 [ 641.181860][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 641.186884][ C0] ? find_held_lock+0x2b/0x80 [ 641.191566][ C0] do_group_exit+0xd3/0x2a0 [ 641.196077][ C0] get_signal+0x2673/0x26d0 [ 641.200587][ C0] ? kmem_cache_free+0x2d4/0x4d0 [ 641.205539][ C0] ? __pfx_get_signal+0x10/0x10 [ 641.210400][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 641.215951][ C0] ? __fget_files+0x20e/0x3c0 [ 641.220636][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 641.226801][ C0] ? __pfx_do_writev+0x10/0x10 [ 641.231570][ C0] ? rcu_is_watching+0x12/0xc0 [ 641.236341][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 641.241980][ C0] do_syscall_64+0xda/0x260 [ 641.246492][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.252383][ C0] RIP: 0033:0x7f7e57b8e969 [ 641.256794][ C0] RSP: 002b:00007f7e559f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 641.265208][ C0] RAX: 0000000000002af7 RBX: 00007f7e57db5fa0 RCX: 00007f7e57b8e969 [ 641.273176][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000007 [ 641.281151][ C0] RBP: 00007f7e57c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 641.289123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.297088][ C0] R13: 0000000000000000 R14: 00007f7e57db5fa0 R15: 00007ffff7ffc548 [ 641.305066][ C0]