last executing test programs: 8m11.187675578s ago: executing program 0 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000cf00"/20, @ANYRES32=0x0, @ANYBLOB="00000000100000001400030069703667726530000000000000000000"], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000019180), 0x14000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unlink(&(0x7f0000019080)='./file0\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c"}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa7fdc0800450000280000000000019078ac1414bbac1414bb0d009078fffc00000000000000000000fffffffc"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000019280)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000019200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000191c0)={r5, 0x2, r3, 0x200}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_genetlink_get_family_id$devlink(&(0x7f0000033f80), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000340c0)={0x0, 0x0, &(0x7f0000034080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000033ec0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x1f, 0x0, "451e8b4b3c7119874511e883d2eb07078e66c24b04a2244ba447498ac786fbbdc62648a792b4c6a967ae4742eb985fc700a4ddf7db89f00edccbbc987dfe87b3", "3d14dc28af26f09628b89fa24fecb198091cbf923a6ac95c417bc35a0331d64c", [0x8, 0x5cd]}) 8m9.863762463s ago: executing program 0 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x4000000, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20) 8m8.927731681s ago: executing program 0 (id=1105): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f00000001c0)=""/85, 0x55, 0x10000000000ff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x180}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001000000000000001d00000008000300", @ANYRES32=r5, @ANYBLOB='L\x00/'], 0x68}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmsg(r6, &(0x7f0000000680)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/120, 0xa9}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000180)=""/46, 0x31}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f0000000700)=""/11, 0xffffffffffffff65}, {&(0x7f0000000940)=""/200, 0xfffffffffffffe4a}], 0x8}, 0x40012100) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2404c011) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9}, 0x18) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120008000000000904000000a058b700"], 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) 8m5.047317691s ago: executing program 0 (id=1113): dup(0xffffffffffffffff) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r1, 0x8b2d, &(0x7f0000000080)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064766d"], 0x38}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 8m4.238797905s ago: executing program 0 (id=1116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) eventfd2(0xfffd, 0x0) r7 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="2ee43a499239be693d1ccaeda33c20143d7a08826119c3425a583b8da3ba6a5bfa862d91e5974400fb3915ee77280bd759d8a69b2731c71c3429c4198add5910f517e330a8136787a6144a22db74d30b3d5d9fa0241ee3ccc829da56dc4d93d60811bed67f45c7d3705076a96fda9536e335808c5cb933c92235099d9cfffe119b729907464dbc8a2c128289521a072a3885b327198b4a980c41aa4f7a432bc19c65a46fa5b9849bf652fda4f0920edc2fa21a0b15f49facf0e026a9670767dfbec5c201a5cd79b00c81bc76a9e562478e77e9395ccb94192fa40f", 0xdb, 0xfffffffffffffff8) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x2}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001200050100000100000000e6040019"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x20000084) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000280)=0x10) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r11}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {0x0, r11, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000640), r11}}, 0x18) r12 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0xffffffffffffffff, 0x0) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 8m2.913248468s ago: executing program 0 (id=1121): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x7ffff, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m47.49334841s ago: executing program 32 (id=1121): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x7ffff, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.429948992s ago: executing program 3 (id=2725): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000005c0)='\xbe\xc2?\xf2Sy\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00B\xf6\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5\x04\x00\x00\x00\x00\x00\x00\x00\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x19\x13\xa3iR7\xd1:\xcc)\xcbc`y\xabT@\xd4\xe1+1yDl\xd2\xa40xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000800", @ANYRES32, @ANYRES8=0x0, @ANYRESDEC], 0x50) syz_emit_ethernet(0x80, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000001480), 0xe0080, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 5.747551537s ago: executing program 3 (id=2733): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="000701000800c9f1ac122221288072c28a22bff1c6f35a49c07c425c703ed4c8e354838cf3958cec60f5f58e7d27d5afd42bc32d1b84ad8908bf5f27bbf8c9305be7687ce09caa2db33927618c6070f33c4b46b5b0767b22a57ab03d1068441e874b2ac030d31d1a0194945d698d5f8e11254af5300deda3718a906264ca59f0be55932ccbbd198d4187c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.66276209s ago: executing program 4 (id=2734): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x101, &(0x7f0000000040)=0x2) 5.551475521s ago: executing program 5 (id=2736): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x44a0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x18, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x14, 0x14, 0x9d, 0xfc, 0x1, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x44004) 5.508846953s ago: executing program 4 (id=2737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, &(0x7f0000000040)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x70bd2a, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x48}, 0x1, 0x7}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000003040)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r4, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff003000000200000013059c8ab605c5affe29c3529161dd5bca", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f000000060000000000000007000000000000000500000000000000030000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff0600000000400000", @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 4.776862014s ago: executing program 1 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) (fail_nth: 2) 4.672109524s ago: executing program 4 (id=2739): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000a40)="ffff1fffd7f2866a914e19", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r3}, 0x38) 4.664408305s ago: executing program 2 (id=2740): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000005c0)='\xbe\xc2?\xf2Sy\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00B\xf6\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5\x04\x00\x00\x00\x00\x00\x00\x00\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x19\x13\xa3iR7\xd1:\xcc)\xcbc`y\xabT@\xd4\xe1+1yDl\xd2\xa40x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) 3.669695398s ago: executing program 5 (id=2742): bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) 3.668381353s ago: executing program 1 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x551802, 0x1a4) write$cgroup_pid(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x21, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed5093613507", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) lsm_list_modules(0x0, &(0x7f0000001e40), 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r8, 0x0) r9 = dup3(r8, r7, 0x0) recvmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0xfffffee5, 0x0}}], 0xf00, 0xf0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x98, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, 0xffffffff, 0xffffff00, 'team_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x4, 0x3, 0x41}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r10 = creat(&(0x7f0000000540)='./cgroup.cpu/cgroup.procs\x00', 0x0) pwrite64(r10, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000100)={0x8, @output={0x0, 0x0, {0x7}, 0x70000000, 0x7}}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x20008000) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) 3.541589196s ago: executing program 2 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.483794216s ago: executing program 4 (id=2745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.392759117s ago: executing program 2 (id=2746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvfrom$l2tp(r2, &(0x7f0000000000)=""/42, 0x2a, 0x10162, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.248826521s ago: executing program 1 (id=2747): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x101, &(0x7f0000000040)=0x2) 3.242553312s ago: executing program 2 (id=2748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ffff29bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x70}, 0xc00) 3.140822733s ago: executing program 1 (id=2749): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0xd}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setreuid(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x4000000000000f5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.519592345s ago: executing program 4 (id=2750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000c0000000000000000005e255377457a95"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0xeed) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) r4 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000140)={0x2, 0x1, 0x0, 0x400, 0x5d, 0x9b5}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0000ffffffffffe900000007000000", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bind(r1, &(0x7f0000000480)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r8}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2.246657048s ago: executing program 2 (id=2751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) kcmp(r2, 0x0, 0x1, r0, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xfffffdd9) 2.166703642s ago: executing program 3 (id=2752): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000240), 0x2000492, &(0x7f0000000900)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '\xe9%G0\x92k\x0f\xfb\x96\xcc\x94\x01\x13\x0f$\x01*\xf2\x8bZ8t\xa4k\xe5\x8c\xd5\xb7U[\x11\xd0\xda\xe84^5:\xc5\x03\x10\xddv\f\xf1\xaaa\x87\xa6\xdbTJ\x86FF\xc4\xb3\xc4\xe6\xe3\xf3e\xf6\x9a/<\b6s\xde\x17PbA\x802\xeakf\x96|\xff4\x04\x88Z\x88\xa5J\x7f\"\xd1\xe7\x17\x96i\xa5\xddb\"\xc45N\xe7\xf3\x9d\xe4\xfa`L\x8a\'w+\xfa\xf3\xc5\xa1\xf4\xbc\xf1\x1a\xbc'}}, {@cachetag={'cachetag', 0x3d, '&'}}], [{@subj_role={'subj_role', 0x3d, ']@\xba\\@+\x01$'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfsdef}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r2}}]}}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4001c00) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) 2.152375394s ago: executing program 1 (id=2753): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\x00\x00\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000d8f7f4d0db27f8103a4af6d0006bfb0000000000000000010902240001000000000904000001030000000921fffffc01"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0xcd, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x3, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "96a8dc25"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x9, 0x10}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x0, [0x5]}, @mdlm_detail={0x5e, 0x24, 0x13, 0x5, "3d82b586b88a92f5023fee31f0e681080df0d3c71ebb07696f24134711c899491075ef9bc9c43830dc96123fafe616270965bac9c1ebb396c29cab823727e6741ac200de673160473f8d0d4ec6f359f7ed2342d03ae1a2f8e312"}, @ncm={0x6, 0x24, 0x1a, 0x37c5, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x8, 0x0, 0x81}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x600, 0x1, 0x7, 0xb9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x16}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4d, 0x5, 0xbc, 0x8, 0x6}, 0xfa, &(0x7f0000000240)={0x5, 0xf, 0xfa, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x7, 0x6}, @ptm_cap={0x3}, @generic={0xb4, 0x10, 0x4, "470aa7c55049183c2aad2906160810fb7db9efbcd1a2059a5680b8898782f3ef5030d2739d2d7946a9c5df8a4c1ffe1ac2152df2ad49962f1a934da800052a1f070f7688f8523e6a3ee624b821085a0f4fe9f40c700e9633b46e2a330d5dab3e41ae770f2e8d0426b406ab232fdece0df8b0950547529602b53bb70d0735366a63d5292667c471bdb5fbb01920a7fddadcd051fcfb27b24748eef729a0252456ca7cdd16ab928a02a8a8dba7273a8940f6"}, @wireless={0xb, 0x10, 0x1, 0x6, 0xf4, 0x71, 0x7, 0x3, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x8, 0xf1451ad2f47fd304, 0x7, [0xc0c0, 0xff00c0, 0xc0c0]}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x9f, 0xf, 0x40, [0x3f00, 0xc0]}]}}) 1.55391744s ago: executing program 4 (id=2754): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20a000, 0x0) set_mempolicy(0x3, 0x0, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_setup(0x4e59, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4066, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x2ea1, &(0x7f0000000180)={0x0, 0xc632, 0x0, 0x0, 0x1ea}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) memfd_create(&(0x7f0000000000)='$\\:]&-!\x00', 0x6) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xde\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000005c0)='\xbe\xc2?\xf2Sy\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00B\xf6\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5\x04\x00\x00\x00\x00\x00\x00\x00\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x19\x13\xa3iR7\xd1:\xcc)\xcbc`y\xabT@\xd4\xe1+1yDl\xd2\xa40x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000003040)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r4, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff003000000200000013059c8ab605c5affe29c3529161dd5bca", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f000000060000000000000007000000000000000500000000000000030000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff0600000000400000", @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 248.006403ms ago: executing program 5 (id=2760): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0x877, 0x870, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x7fffffff, 0x2, 0x3e, 0x21ab, 0x0, 0x7, 0x0, 0x3, 0x2, {0x6, 0x2}, 0x2, 0x1}}) 0s ago: executing program 5 (id=2761): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0x2, 0x1, 0xffffffffffffffc0, 0x4}, @map_idx={0x18, 0x9}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) alarm(0x81) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103010000092100000001220b00090581", @ANYRES8], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) alarm(0xfff) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000380)={0x0, &(0x7f00000002c0)}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = fanotify_init(0x8, 0x80000) fanotify_mark(r8, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): 6'. [ 723.994733][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.256374][T12000] IPVS: starting estimator thread 0... [ 724.279822][T14589] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2228'. [ 724.369383][T14588] IPVS: using max 56 ests per chain, 134400 per kthread [ 724.741097][T14576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 724.748781][T14576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 724.756690][T14576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 724.789303][T14576] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 725.219972][T14597] input: syz0 as /devices/virtual/input/input75 [ 725.837068][ T45] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 726.029118][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 726.131689][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 726.451625][ T45] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 726.467184][T14613] input: syz0 as /devices/virtual/input/input76 [ 726.473629][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.626124][ T45] usb 6-1: config 0 descriptor?? [ 726.938257][ T5132] Bluetooth: hci5: command 0x0406 tx timeout [ 726.944630][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 726.950778][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 727.264790][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.276160][T12560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.385856][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.418547][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.494061][ T45] usb 6-1: string descriptor 0 read error: -71 [ 727.525007][ T45] usb 6-1: Found UVC 0.00 device (2833:0201) [ 727.641613][ T45] usb 6-1: No valid video chain found. [ 727.655181][ T45] usb 6-1: USB disconnect, device number 47 [ 727.749881][T14628] 9pnet_fd: Insufficient options for proto=fd [ 727.821843][T14628] 9pnet_fd: Insufficient options for proto=fd [ 728.295910][T12000] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 728.421617][T14641] qrtr: Invalid version 12 [ 728.928893][T12000] usb 3-1: Using ep0 maxpacket: 16 [ 728.961711][T12000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.284394][T12000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.298233][T12000] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 729.333184][T12000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.658452][T12000] usb 3-1: config 0 descriptor?? [ 729.901470][T14672] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2249'. [ 730.118580][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.129159][T14677] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2250'. [ 730.138114][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.153305][T14677] 0·: renamed from hsr0 (while UP) [ 730.159132][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.227123][T14677] 0·: entered allmulticast mode [ 730.232380][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.241768][T14677] hsr_slave_0: entered allmulticast mode [ 730.247548][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.259537][T14677] hsr_slave_1: entered allmulticast mode [ 730.265287][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.273065][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.291302][T14677] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 730.308980][ T25] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 730.312262][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.349361][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.356864][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.364544][T12000] hid-picolcd 0003:04D8:F002.0024: unknown main item tag 0x0 [ 730.435898][T12000] hid-picolcd 0003:04D8:F002.0024: No report with id 0xf4 found [ 730.448455][T12000] hid-picolcd 0003:04D8:F002.0024: No report with id 0xf3 found [ 730.462109][T12000] usb 3-1: USB disconnect, device number 111 [ 730.470797][ T25] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 730.485380][ T5957] udevd[5957]: setting mode of /dev/bus/usb/003/111 to 020664 failed: No such file or directory [ 730.518500][ T25] usb 4-1: config 0 has no interface number 0 [ 730.531216][ T5957] udevd[5957]: setting owner of /dev/bus/usb/003/111 to uid=0, gid=0 failed: No such file or directory [ 730.547218][ T25] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 730.575093][ T25] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 730.639022][ T25] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 730.716475][ T25] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 730.818623][ T25] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 730.838942][ T25] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 730.857052][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 730.866444][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.905268][ T25] usb 4-1: config 0 descriptor?? [ 730.915428][T14676] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 730.957709][T14676] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 730.974727][ T25] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 731.397699][T12000] usb 4-1: USB disconnect, device number 127 [ 731.403745][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 731.450389][T12000] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 731.613788][T14676] syz.3.2252: attempt to access beyond end of device [ 731.613788][T14676] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 731.693222][T14676] FAT-fs (loop7): unable to read boot sector [ 732.023342][T14718] wg1 speed is unknown, defaulting to 1000 [ 732.053223][T14718] wlan0 speed is unknown, defaulting to 1000 [ 732.149716][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880531b3c00: rx timeout, send abort [ 732.419465][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.535126][T14722] smc: net device bond0 applied user defined pnetid SYZ0 [ 732.657920][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880531b3c00: abort rx timeout. Force session deactivation [ 732.769651][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.798000][T14726] smc: net device bond0 erased user defined pnetid SYZ0 [ 732.868283][T14722] serio: Serial port ptm0 [ 733.001462][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2263'. [ 733.807249][T14739] 9pnet_fd: Insufficient options for proto=fd [ 734.265928][ T5868] kernel read not supported for file /dsp (pid: 5868 comm: kworker/0:5) [ 734.337723][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035d04c00: rx timeout, send abort [ 734.346381][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888035d04c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 735.216687][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888065e25400: rx timeout, send abort [ 735.225329][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888065e25400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 736.358048][ T29] audit: type=1400 audit(1740926296.697:846): avc: denied { read } for pid=14752 comm="syz.2.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 736.377371][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.759257][ T25] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 737.100233][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 737.125758][ T25] usb 2-1: config 0 has no interface number 0 [ 737.125786][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.125802][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 737.125823][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 737.125835][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.228012][ T25] usb 2-1: config 0 descriptor?? [ 737.775396][ T25] uclogic 0003:256C:006D.0025: No inputs registered, leaving [ 737.809124][ T25] uclogic 0003:256C:006D.0025: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 737.859537][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.175205][T14769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2277'. [ 738.429952][T12000] usb 2-1: USB disconnect, device number 122 [ 738.499410][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.574148][T14806] input: syz0 as /devices/virtual/input/input77 [ 738.699500][T14805] netlink: 'syz.2.2288': attribute type 39 has an invalid length. [ 740.151887][T14828] fuse: Bad value for 'fd' [ 742.865554][ T5896] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 742.870963][ T29] audit: type=1400 audit(1740926302.867:847): avc: denied { write } for pid=14850 comm="syz.3.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 743.000036][ T5896] usb 2-1: device descriptor read/64, error -71 [ 743.518486][ T29] audit: type=1400 audit(1740926303.857:848): avc: denied { getopt } for pid=14862 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 743.542338][T14863] FAULT_INJECTION: forcing a failure. [ 743.542338][T14863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.555379][T14863] CPU: 1 UID: 0 PID: 14863 Comm: syz.4.2306 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 743.555393][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 743.555400][T14863] Call Trace: [ 743.555404][T14863] [ 743.555408][T14863] dump_stack_lvl+0x16c/0x1f0 [ 743.555426][T14863] should_fail_ex+0x50a/0x650 [ 743.555444][T14863] copy_fpstate_to_sigframe+0x894/0xb20 [ 743.555462][T14863] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 743.555478][T14863] ? collect_signal+0x262/0x540 [ 743.555491][T14863] ? find_held_lock+0x2d/0x110 [ 743.555505][T14863] get_sigframe+0x4aa/0x9c0 [ 743.555519][T14863] ? __pfx_get_sigframe+0x10/0x10 [ 743.555532][T14863] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.555543][T14863] ? siginfo_layout+0x1d2/0x290 [ 743.555561][T14863] x64_setup_rt_frame+0x129/0xcf0 [ 743.555576][T14863] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 743.555592][T14863] arch_do_signal_or_restart+0x5e6/0x7e0 [ 743.555605][T14863] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 743.555621][T14863] ? ksys_write+0x1ba/0x250 [ 743.555638][T14863] ? __pfx_ksys_write+0x10/0x10 [ 743.555660][T14863] syscall_exit_to_user_mode+0x150/0x2a0 [ 743.555674][T14863] do_syscall_64+0xda/0x250 [ 743.555689][T14863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.555704][T14863] RIP: 0033:0x7fe7b3b8d167 [ 743.555713][T14863] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 743.555724][T14863] RSP: 002b:00007fe7b49b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.555734][T14863] RAX: 0000000000000001 RBX: 00007fe7b3da5fa0 RCX: 00007fe7b3b8d169 [ 743.555740][T14863] RDX: 0000000000000002 RSI: 0000400000000000 RDI: 000000000000000a [ 743.555747][T14863] RBP: 00007fe7b49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 743.555753][T14863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.555759][T14863] R13: 0000000000000000 R14: 00007fe7b3da5fa0 R15: 00007ffc598c8a58 [ 743.555772][T14863] [ 743.765377][ T5896] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 743.775107][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.819054][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 743.959899][ T5896] usb 2-1: device descriptor read/64, error -71 [ 744.004504][ T25] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 744.014193][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 744.031327][ T25] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 744.041034][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.049179][ T25] usb 4-1: Product: syz [ 744.053542][ T25] usb 4-1: Manufacturer: syz [ 744.058177][ T25] usb 4-1: SerialNumber: syz [ 744.074832][ T25] usb 4-1: config 0 descriptor?? [ 744.228753][ T5896] usb usb2-port1: attempt power cycle [ 744.269416][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.509373][ T25] mos7840 4-1:0.0: required endpoints missing [ 744.587648][ T25] usb 4-1: USB disconnect, device number 2 [ 744.664844][ T5896] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 744.791566][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2309'. [ 744.819178][ T5132] Bluetooth: hci0: command 0x1003 tx timeout [ 744.822175][T11609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 745.021148][ T5896] usb 2-1: device not accepting address 125, error -71 [ 745.084516][T14880] fuse: Bad value for 'fd' [ 745.429346][T14879] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2311'. [ 745.722215][T12000] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 745.923924][T12000] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 746.485674][T12000] usb 4-1: config 0 has no interface number 0 [ 746.536117][T12000] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.612220][T12000] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 746.651783][T12000] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 746.840786][T12000] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 746.840937][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.858183][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.936242][T12000] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 747.102791][ T29] audit: type=1400 audit(1740926307.447:849): avc: denied { setopt } for pid=14901 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 747.742095][T14906] wg1 speed is unknown, defaulting to 1000 [ 747.781466][T12000] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.798369][T14906] wlan0 speed is unknown, defaulting to 1000 [ 747.819655][ T29] audit: type=1400 audit(1740926308.127:850): avc: denied { create } for pid=14901 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 747.827080][T12000] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 747.885583][T12000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.984540][T12000] usb 4-1: config 0 descriptor?? [ 748.007471][T14888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.031589][T14888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.074431][T12000] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 748.491389][T14924] smc: net device bond0 applied user defined pnetid SYZ0 [ 748.530143][T14924] smc: net device bond0 erased user defined pnetid SYZ0 [ 748.562639][T14924] serio: Serial port ptm0 [ 748.579201][ T5896] usb 4-1: USB disconnect, device number 3 [ 748.585037][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 749.021159][T14929] input: syz0 as /devices/virtual/input/input78 [ 749.055810][T14888] syz.3.2314: attempt to access beyond end of device [ 749.055810][T14888] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 749.110657][ T5896] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 749.158937][T14888] FAT-fs (loop7): unable to read boot sector [ 749.324549][T14938] fuse: Bad value for 'fd' [ 749.384360][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.588672][T14948] 9pnet_fd: Insufficient options for proto=fd [ 749.617950][T14948] 9pnet_fd: Insufficient options for proto=fd [ 749.746275][ T5835] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 750.019219][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.074417][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 750.120678][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.280067][T14952] usb usb8: usbfs: process 14952 (syz.5.2331) did not claim interface 0 before use [ 750.336963][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 750.360958][ T5835] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 750.370718][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 751.087727][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 751.097672][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 751.105757][ T5835] usb 3-1: SerialNumber: syz [ 751.202296][T14942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.315727][T14942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.359430][ T5835] hub 3-1:1.0: bad descriptor, ignoring hub [ 751.365364][ T5835] hub 3-1:1.0: probe with driver hub failed with error -5 [ 751.542260][ T29] audit: type=1400 audit(1740926311.877:851): avc: denied { map } for pid=14966 comm="syz.1.2335" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 751.650185][T14942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.709244][T14942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.712590][ T29] audit: type=1400 audit(1740926311.907:852): avc: denied { execute } for pid=14966 comm="syz.1.2335" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 751.858720][ T29] audit: type=1400 audit(1740926312.167:853): avc: denied { ioctl } for pid=14966 comm="syz.1.2335" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 751.925399][T14974] smc: net device bond0 applied user defined pnetid SYZ0 [ 751.949481][T14974] smc: net device bond0 erased user defined pnetid SYZ0 [ 752.182654][ T5835] cdc_ether 3-1:1.0 eth5: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 752.313332][T14976] input: syz0 as /devices/virtual/input/input79 [ 752.356973][ T5835] usb 3-1: USB disconnect, device number 112 [ 752.382820][ T5835] cdc_ether 3-1:1.0 eth5: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 752.465430][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 752.476346][T14985] serio: Serial port ptm1 [ 752.640556][T14990] input: syz0 as /devices/virtual/input/input80 [ 752.995499][T14997] wg1 speed is unknown, defaulting to 1000 [ 753.047192][T14997] wlan0 speed is unknown, defaulting to 1000 [ 753.209584][T15004] fuse: Bad value for 'fd' [ 753.655423][T15012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.682272][T15012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.690332][T15012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.697372][T15012] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.572097][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 754.615489][ T971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 754.768909][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 754.775823][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.784337][ T45] usb 4-1: config 159 has an invalid interface number: 195 but max is 0 [ 754.792719][ T45] usb 4-1: config 159 has no interface number 0 [ 754.799077][ T45] usb 4-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 754.809206][ T45] usb 4-1: config 159 interface 195 has no altsetting 0 [ 754.818027][ T45] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 754.827150][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.835210][ T45] usb 4-1: Product: syz [ 754.844233][ T45] usb 4-1: Manufacturer: syz [ 754.848812][ T45] usb 4-1: SerialNumber: syz [ 754.858252][ T971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.888400][T15033] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 754.912572][ T971] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 754.957532][ T971] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.999359][T12000] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 755.055128][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.168811][T12000] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 755.179835][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.218972][T12000] usb 2-1: config 0 has no interface number 0 [ 755.248219][T12000] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.282200][T15024] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 755.300867][ T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 755.312987][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 755.314988][ T971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.321957][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 755.338759][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 755.343612][ T45] [drm] Initialized udl 0.0.1 for 4-1:159.195 on minor 2 [ 755.356787][ T45] [drm] Initialized udl on minor 2 [ 755.368424][ T45] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.382214][T12000] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 755.384081][ T45] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 755.410623][ T117] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.411881][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 755.426307][ T45] usb 4-1: USB disconnect, device number 4 [ 755.438543][ T117] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 755.491833][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 755.519616][T15045] wg1 speed is unknown, defaulting to 1000 [ 755.527188][T15045] wlan0 speed is unknown, defaulting to 1000 [ 755.559446][ T971] usb 5-1: USB disconnect, device number 13 [ 755.578773][T12000] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 755.621363][T12000] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 755.638718][T12000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.655545][T12000] usb 2-1: config 0 descriptor?? [ 755.664832][T15030] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 755.680758][T15030] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 755.699207][T11609] Bluetooth: hci4: command 0x0406 tx timeout [ 755.699572][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 755.705427][T11609] Bluetooth: hci1: command 0x0406 tx timeout [ 755.725092][T12000] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 755.789014][T15053] Bluetooth: hci5: command 0x0406 tx timeout [ 755.789742][T12560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.978439][ T29] audit: type=1400 audit(1740926316.317:854): avc: denied { create } for pid=15058 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.084980][T12000] usb 2-1: USB disconnect, device number 127 [ 756.084980][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 756.123121][T12000] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 756.182408][ T29] audit: type=1400 audit(1740926316.347:855): avc: denied { setopt } for pid=15058 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.292152][ T29] audit: type=1400 audit(1740926316.637:856): avc: denied { create } for pid=15029 comm="syz.1.2348" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 756.360617][T15030] syz.1.2348: attempt to access beyond end of device [ 756.360617][T15030] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 756.393854][T15030] FAT-fs (loop3): unable to read boot sector [ 756.429668][ T29] audit: type=1400 audit(1740926316.657:857): avc: denied { map } for pid=15029 comm="syz.1.2348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 756.455056][ T29] audit: type=1400 audit(1740926316.657:858): avc: denied { read write } for pid=15029 comm="syz.1.2348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 756.480464][ T29] audit: type=1400 audit(1740926316.677:859): avc: denied { ioctl } for pid=15064 comm="syz.2.2352" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52382 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 756.806283][T15072] 9pnet_fd: Insufficient options for proto=fd [ 756.817091][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 756.851198][T15072] 9pnet_fd: Insufficient options for proto=fd [ 759.306835][T15103] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2360'. [ 760.266942][ T29] audit: type=1400 audit(1740926320.597:860): avc: denied { bind } for pid=15107 comm="syz.1.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.374443][T15111] input: syz0 as /devices/virtual/input/input82 [ 760.380482][T15113] Cannot find add_set index 1 as target [ 760.457038][ T29] audit: type=1400 audit(1740926320.607:861): avc: denied { write } for pid=15107 comm="syz.1.2362" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.546912][ T29] audit: type=1400 audit(1740926320.627:862): avc: denied { connect } for pid=15107 comm="syz.1.2362" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.918376][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.831221][T12000] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 761.868394][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.045155][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880323d9000: rx timeout, send abort [ 762.053673][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880323d9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 762.664062][T12000] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 762.900137][T12000] usb 2-1: config 0 has no interface number 0 [ 763.016625][T15148] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2372'. [ 763.276689][T12000] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.318909][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 763.341268][T12000] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 763.382357][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 763.400382][T12000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 763.412158][T15152] fuse: Unknown parameter '' [ 763.412448][T12000] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.436554][T12000] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.802287][T12000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.850037][T12000] usb 2-1: config 0 descriptor?? [ 763.874315][T15129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 763.889220][T15129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 764.205514][T15164] syz.4.2376: attempt to access beyond end of device [ 764.205514][T15164] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 764.221256][T15164] syz.4.2376: attempt to access beyond end of device [ 764.221256][T15164] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 764.234583][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 764.246262][T15164] syz.4.2376: attempt to access beyond end of device [ 764.246262][T15164] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 764.259726][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 764.269323][T15164] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 764.276996][T15164] UDF-fs: Scanning with blocksize 512 failed [ 764.290122][T15164] syz.4.2376: attempt to access beyond end of device [ 764.290122][T15164] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 764.304775][T15164] syz.4.2376: attempt to access beyond end of device [ 764.304775][T15164] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 764.318545][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 764.329648][T15164] syz.4.2376: attempt to access beyond end of device [ 764.329648][T15164] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 764.343067][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 764.352657][T15164] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 764.360347][T15164] UDF-fs: Scanning with blocksize 1024 failed [ 764.370994][T15164] syz.4.2376: attempt to access beyond end of device [ 764.370994][T15164] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 764.386415][T15164] syz.4.2376: attempt to access beyond end of device [ 764.386415][T15164] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 764.399850][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 764.410578][T15164] syz.4.2376: attempt to access beyond end of device [ 764.410578][T15164] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 764.423939][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 764.433538][T15164] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 764.441232][T15164] UDF-fs: Scanning with blocksize 2048 failed [ 764.450872][T15164] syz.4.2376: attempt to access beyond end of device [ 764.450872][T15164] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 764.465303][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 764.476146][T15164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 764.486125][T15164] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 764.493838][T15164] UDF-fs: Scanning with blocksize 4096 failed [ 764.500021][T15164] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 764.802357][T12000] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 765.011269][T15129] FAT-fs (loop3): unable to read boot sector [ 765.022533][T12000] usb 2-1: USB disconnect, device number 2 [ 765.222695][T12000] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 766.009483][T15171] input: syz0 as /devices/virtual/input/input83 [ 766.637691][T15190] fuse: Bad value for 'fd' [ 766.883857][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.918802][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 767.285250][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.296476][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.306617][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 767.315875][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.363938][ T25] usb 2-1: config 0 descriptor?? [ 767.539498][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.596015][T15180] wg1 speed is unknown, defaulting to 1000 [ 767.616693][T15180] wlan0 speed is unknown, defaulting to 1000 [ 767.638917][ T117] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 767.659055][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 767.893223][ T117] usb 6-1: Using ep0 maxpacket: 32 [ 767.904001][ T117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.917771][ T117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.930376][ T5835] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 767.949082][ T117] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 767.962911][ T5835] usb 5-1: config 0 has no interface number 1 [ 768.492596][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 768.499879][ T5835] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 768.512228][ T117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.520730][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 768.535626][ T117] usb 6-1: config 0 descriptor?? [ 768.540778][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.551961][ T25] usb 2-1: USB disconnect, device number 3 [ 768.563375][ T5835] usb 5-1: config 0 descriptor?? [ 768.572795][ T5835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.583816][ T5835] usb 5-1: MIDIStreaming interface descriptor not found [ 768.624090][ T5835] gspca_main: spca561-2.14.0 probing abcd:cdee [ 768.704882][T15211] 9pnet_fd: Insufficient options for proto=fd [ 768.731729][T15211] 9pnet_fd: Insufficient options for proto=fd [ 768.899252][T15198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.911672][T15198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.972173][ T5835] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 769.020301][ T5835] usb 5-1: USB disconnect, device number 14 [ 769.059703][ T117] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 769.254003][T15214] 9pnet_fd: Insufficient options for proto=fd [ 769.282107][T15214] 9pnet_fd: Insufficient options for proto=fd [ 769.323092][ T117] ft260 0003:0403:6030.0026: chip code: 0000 f005 [ 769.404138][ T9254] udevd[9254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.450444][T15217] 9pnet_fd: Insufficient options for proto=fd [ 769.524896][T15217] 9pnet_fd: Insufficient options for proto=fd [ 769.525272][ T117] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 769.736472][ T117] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 770.412275][T15230] 9pnet_fd: Insufficient options for proto=fd [ 770.427814][T15230] 9pnet_fd: Insufficient options for proto=fd [ 771.787672][T15246] fuse: Bad value for 'fd' [ 772.269133][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 772.419595][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.438813][ T117] ft260 0003:0403:6030.0026: failed to retrieve status: -71 [ 772.453034][ T117] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 772.463304][ T25] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 772.473916][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 772.496911][ T117] usb 6-1: USB disconnect, device number 48 [ 772.506493][ T25] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 772.545148][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.591519][ T25] usb 5-1: Product: syz [ 772.595718][ T25] usb 5-1: Manufacturer: syz [ 772.605722][T15265] smc: net device bond0 applied user defined pnetid SYZ0 [ 772.612938][ T25] usb 5-1: SerialNumber: syz [ 772.618638][T15265] smc: net device bond0 erased user defined pnetid SYZ0 [ 772.632459][ T25] usb 5-1: config 0 descriptor?? [ 772.646885][T15265] serio: Serial port ptm0 [ 772.699773][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 772.797726][T15272] 9pnet_fd: Insufficient options for proto=fd [ 772.806701][T15272] 9pnet_fd: Insufficient options for proto=fd [ 773.531058][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.640768][ T25] mos7840 5-1:0.0: required endpoints missing [ 773.658529][ T25] usb 5-1: USB disconnect, device number 15 [ 774.045774][T15278] wg1 speed is unknown, defaulting to 1000 [ 774.087560][T15278] wlan0 speed is unknown, defaulting to 1000 [ 775.288464][T15307] FAULT_INJECTION: forcing a failure. [ 775.288464][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.304453][T15307] CPU: 0 UID: 0 PID: 15307 Comm: syz.4.2413 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 775.304475][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 775.304485][T15307] Call Trace: [ 775.304490][T15307] [ 775.304495][T15307] dump_stack_lvl+0x16c/0x1f0 [ 775.304515][T15307] should_fail_ex+0x50a/0x650 [ 775.304534][T15307] _copy_to_user+0x32/0xd0 [ 775.304546][T15307] simple_read_from_buffer+0xd0/0x160 [ 775.304564][T15307] proc_fail_nth_read+0x198/0x270 [ 775.304580][T15307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.304597][T15307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.304612][T15307] vfs_read+0x1df/0xbf0 [ 775.304629][T15307] ? __fget_files+0x1fc/0x3a0 [ 775.304640][T15307] ? __pfx___mutex_lock+0x10/0x10 [ 775.304654][T15307] ? __pfx_vfs_read+0x10/0x10 [ 775.304674][T15307] ? __fget_files+0x206/0x3a0 [ 775.304688][T15307] ksys_read+0x12b/0x250 [ 775.304704][T15307] ? __pfx_ksys_read+0x10/0x10 [ 775.304725][T15307] do_syscall_64+0xcd/0x250 [ 775.304740][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.304756][T15307] RIP: 0033:0x7fe7b3b8bb7c [ 775.304764][T15307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 775.304775][T15307] RSP: 002b:00007fe7b4974030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 775.304786][T15307] RAX: ffffffffffffffda RBX: 00007fe7b3da6160 RCX: 00007fe7b3b8bb7c [ 775.304792][T15307] RDX: 000000000000000f RSI: 00007fe7b49740a0 RDI: 0000000000000010 [ 775.304799][T15307] RBP: 00007fe7b4974090 R08: 0000000000000000 R09: 0000000000000000 [ 775.304805][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.304811][T15307] R13: 0000000000000001 R14: 00007fe7b3da6160 R15: 00007ffc598c8a58 [ 775.304823][T15307] [ 775.636023][ T117] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 775.759199][T15299] input: syz0 as /devices/virtual/input/input84 [ 775.910269][T15312] fuse: Bad value for 'fd' [ 776.708885][ T117] usb 6-1: Using ep0 maxpacket: 8 [ 776.748158][ T117] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.764099][ T117] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 776.777373][ T117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.788177][ T117] usb 6-1: config 0 descriptor?? [ 776.801873][ T117] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 776.990894][ T971] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 777.029049][ T29] audit: type=1400 audit(1740926337.327:863): avc: denied { listen } for pid=15316 comm="syz.2.2418" lport=48836 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.521724][ T117] gspca_vc032x: reg_r err -110 [ 777.526850][ T117] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 777.573674][ T29] audit: type=1400 audit(1740926337.327:864): avc: denied { accept } for pid=15316 comm="syz.2.2418" lport=48836 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.602044][ T29] audit: type=1400 audit(1740926337.337:865): avc: denied { read } for pid=15316 comm="syz.2.2418" lport=48836 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 777.631544][ T29] audit: type=1400 audit(1740926337.417:866): avc: denied { setopt } for pid=15316 comm="syz.2.2418" lport=48836 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 777.682780][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.733623][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.747979][T15328] mkiss: ax0: crc mode is auto. [ 777.754922][ T971] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 777.903823][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.910738][T15333] bio_check_eod: 3 callbacks suppressed [ 777.910750][T15333] syz.3.2423: attempt to access beyond end of device [ 777.910750][T15333] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 778.540412][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.555828][ T971] usb 2-1: config 0 descriptor?? [ 778.555998][T15333] syz.3.2423: attempt to access beyond end of device [ 778.555998][T15333] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 778.636625][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 778.700548][T15333] syz.3.2423: attempt to access beyond end of device [ 778.700548][T15333] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 778.733972][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 778.744174][T15333] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 778.752071][T15333] UDF-fs: Scanning with blocksize 512 failed [ 778.765613][T15333] syz.3.2423: attempt to access beyond end of device [ 778.765613][T15333] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 778.781785][T15333] syz.3.2423: attempt to access beyond end of device [ 778.781785][T15333] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 778.799693][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 778.810973][T15333] syz.3.2423: attempt to access beyond end of device [ 778.810973][T15333] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 778.825262][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 778.834930][T15333] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 778.842727][T15333] UDF-fs: Scanning with blocksize 1024 failed [ 778.851974][T15333] syz.3.2423: attempt to access beyond end of device [ 778.851974][T15333] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 778.865683][T15333] syz.3.2423: attempt to access beyond end of device [ 778.865683][T15333] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 778.879012][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 778.890234][T15333] syz.3.2423: attempt to access beyond end of device [ 778.890234][T15333] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 778.903712][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 778.913857][T15333] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 778.921932][T15333] UDF-fs: Scanning with blocksize 2048 failed [ 778.930525][T15333] syz.3.2423: attempt to access beyond end of device [ 778.930525][T15333] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 778.944401][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 778.954827][T15333] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 778.964753][T15333] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 778.966144][ T971] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 778.972846][T15333] UDF-fs: Scanning with blocksize 4096 failed [ 778.984766][ T971] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 778.986331][T15333] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 778.995766][ T971] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 779.025501][ T971] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 779.035753][ T971] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 779.043835][T12000] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 779.065989][ T971] hid-steam 0003:28DE:1142.0027: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 779.204829][T12000] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 779.227766][T12000] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 779.250921][ T971] usb 2-1: USB disconnect, device number 4 [ 779.266549][T12000] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 779.276121][T12000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.303546][T12000] usb 3-1: Product: syz [ 779.308066][T12000] usb 3-1: Manufacturer: syz [ 779.316481][T12000] usb 3-1: SerialNumber: syz [ 779.340463][T12000] usb 3-1: config 0 descriptor?? [ 779.557164][T12000] mos7840 3-1:0.0: required endpoints missing [ 779.565710][T12000] usb 3-1: USB disconnect, device number 113 [ 779.600398][ T971] usb 6-1: USB disconnect, device number 49 [ 780.007026][T15349] input: syz0 as /devices/virtual/input/input85 [ 780.019515][ T971] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 780.244771][ T971] usb 6-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 780.399173][ T29] audit: type=1400 audit(1740926340.687:867): avc: denied { shutdown } for pid=15351 comm="syz.1.2429" lport=48615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 780.586643][ T971] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 780.613453][T15364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2431'. [ 780.623112][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.794155][ T971] usb 6-1: Product: syz [ 780.826517][ T971] usb 6-1: Manufacturer: syz [ 780.834475][ T971] usb 6-1: SerialNumber: syz [ 781.002957][T15363] wg1 speed is unknown, defaulting to 1000 [ 781.021134][T15363] wlan0 speed is unknown, defaulting to 1000 [ 781.083428][ T971] usb 6-1: config 0 descriptor?? [ 781.192779][ T971] rndis_host 6-1:0.0: skipping garbage [ 781.198278][ T971] usb 6-1: bad CDC descriptors [ 781.239851][ T971] cdc_acm 6-1:0.0: skipping garbage [ 781.893026][ T5927] Bluetooth: hci0: Frame reassembly failed (-84) [ 781.954763][ T971] usb 6-1: USB disconnect, device number 50 [ 782.460322][ T29] audit: type=1400 audit(1740926342.807:868): avc: denied { ioctl } for pid=15389 comm="syz.1.2437" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 782.647976][T15398] tipc: Resetting bearer [ 782.715628][T15398] bond0: entered promiscuous mode [ 782.730978][T15398] bond_slave_0: entered promiscuous mode [ 782.906580][T15398] bond_slave_1: entered promiscuous mode [ 783.328932][T12000] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 783.507730][T12000] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 783.516613][T12000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 783.527421][T12000] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 783.537294][T12000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.546346][T12000] usb 5-1: Product: syz [ 783.550594][T12000] usb 5-1: Manufacturer: syz [ 783.557946][T12000] usb 5-1: SerialNumber: syz [ 783.576676][T12000] usb 5-1: config 0 descriptor?? [ 783.791776][T15053] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 783.994778][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.009211][T12000] mos7840 5-1:0.0: required endpoints missing [ 784.022403][T12000] usb 5-1: USB disconnect, device number 16 [ 784.393117][T15425] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2446'. [ 787.688598][T15448] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 787.690394][T15448] qnx6: wrong signature (magic) in superblock #1. [ 787.690409][T15448] qnx6: unable to read the first superblock [ 788.328208][T15456] input: syz0 as /devices/virtual/input/input86 [ 789.705109][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.397478][T15486] batman_adv: batadv0: Adding interface: vxlan0 [ 790.404747][T15486] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.442828][T15486] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 790.500397][T15488] FAULT_INJECTION: forcing a failure. [ 790.500397][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 790.518941][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 790.534461][T15488] CPU: 0 UID: 0 PID: 15488 Comm: syz.2.2462 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 790.534485][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.534495][T15488] Call Trace: [ 790.534502][T15488] [ 790.534509][T15488] dump_stack_lvl+0x16c/0x1f0 [ 790.534536][T15488] should_fail_ex+0x50a/0x650 [ 790.534562][T15488] ? fs_reclaim_acquire+0xae/0x150 [ 790.534590][T15488] should_failslab+0xc2/0x120 [ 790.534610][T15488] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 790.534629][T15488] ? vm_area_dup+0x53/0x2f0 [ 790.534659][T15488] vm_area_dup+0x53/0x2f0 [ 790.534684][T15488] __split_vma+0x181/0x1160 [ 790.534705][T15488] ? __pfx___split_vma+0x10/0x10 [ 790.534728][T15488] ? ima_file_mprotect+0x1b9/0x690 [ 790.534752][T15488] vma_modify.constprop.0+0x2ed/0x3b0 [ 790.534772][T15488] vma_modify_flags+0x231/0x2d0 [ 790.534789][T15488] ? __pfx_vma_modify_flags+0x10/0x10 [ 790.534822][T15488] mprotect_fixup+0x2c2/0xbe0 [ 790.534846][T15488] ? __pfx_mprotect_fixup+0x10/0x10 [ 790.534863][T15488] ? selinux_file_mprotect+0x161/0x610 [ 790.534892][T15488] do_mprotect_pkey+0x9c2/0xd30 [ 790.534917][T15488] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 790.534946][T15488] ? __fget_files+0x206/0x3a0 [ 790.534972][T15488] ? __pfx_ksys_write+0x10/0x10 [ 790.535003][T15488] __x64_sys_mprotect+0x78/0xc0 [ 790.535021][T15488] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.535042][T15488] do_syscall_64+0xcd/0x250 [ 790.535066][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.535089][T15488] RIP: 0033:0x7fe72e38d169 [ 790.535103][T15488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.535120][T15488] RSP: 002b:00007fe72f187038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 790.535137][T15488] RAX: ffffffffffffffda RBX: 00007fe72e5a6080 RCX: 00007fe72e38d169 [ 790.535148][T15488] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 000040000021f000 [ 790.535159][T15488] RBP: 00007fe72f187090 R08: 0000000000000000 R09: 0000000000000000 [ 790.535169][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.535179][T15488] R13: 0000000000000000 R14: 00007fe72e5a6080 R15: 00007ffc302a9c48 [ 790.535202][T15488] [ 791.079091][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 791.114973][ T5835] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 791.146182][ T5835] usb 2-1: config 0 has no interface number 0 [ 791.179638][ T5835] usb 2-1: config 0 interface 22 has no altsetting 0 [ 791.330312][ T5835] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 791.338498][ T5835] usb 2-1: config 0 has no interface number 0 [ 791.363439][ T5835] usb 2-1: config 0 interface 22 has no altsetting 0 [ 791.449387][ T5835] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 791.485183][ T5835] usb 2-1: config 0 has no interface number 0 [ 791.517971][ T5835] usb 2-1: config 0 interface 22 has no altsetting 0 [ 791.639602][ T5835] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 791.647710][ T5835] usb 2-1: config 0 has no interface number 0 [ 791.668240][ T5835] usb 2-1: config 0 interface 22 has no altsetting 0 [ 791.692980][ T5835] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 791.798899][ T5835] usb 2-1: config 0 has no interface number 0 [ 791.815235][ T5835] usb 2-1: config 0 interface 22 has no altsetting 0 [ 792.412114][ T5835] usb 2-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=82.89 [ 792.421473][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=223 [ 792.438898][ T5835] usb 2-1: Product: syz [ 792.479234][ T5835] usb 2-1: Manufacturer: syz [ 792.483859][ T5835] usb 2-1: SerialNumber: syz [ 792.645183][ T5835] usb 2-1: config 0 descriptor?? [ 793.621007][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.648976][ T5835] ti_usb_3410_5052 2-1:0.22: TI USB 3410 1 port adapter converter detected [ 793.705134][ T5835] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 793.769143][ T5835] usb 2-1: USB disconnect, device number 5 [ 793.794706][ T5835] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 793.830200][ T5835] ti_usb_3410_5052 2-1:0.22: device disconnected [ 793.998589][T15523] FAULT_INJECTION: forcing a failure. [ 793.998589][T15523] name failslab, interval 1, probability 0, space 0, times 0 [ 794.325968][T15523] CPU: 0 UID: 0 PID: 15523 Comm: syz.5.2474 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 794.325994][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.326005][T15523] Call Trace: [ 794.326011][T15523] [ 794.326019][T15523] dump_stack_lvl+0x16c/0x1f0 [ 794.326046][T15523] should_fail_ex+0x50a/0x650 [ 794.326072][T15523] ? fs_reclaim_acquire+0xae/0x150 [ 794.326100][T15523] should_failslab+0xc2/0x120 [ 794.326120][T15523] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 794.326139][T15523] ? __alloc_skb+0x2b1/0x380 [ 794.326165][T15523] __alloc_skb+0x2b1/0x380 [ 794.326187][T15523] ? __pfx___alloc_skb+0x10/0x10 [ 794.326218][T15523] netlink_ack+0x15f/0xb80 [ 794.326240][T15523] ? avc_has_perm_noaudit+0x61/0x3a0 [ 794.326266][T15523] netlink_rcv_skb+0x348/0x440 [ 794.326287][T15523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 794.326314][T15523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.326348][T15523] ? bpf_lsm_capable+0x9/0x10 [ 794.326369][T15523] ? security_capable+0x7e/0x260 [ 794.326390][T15523] ? ns_capable+0xd7/0x110 [ 794.326417][T15523] nfnetlink_rcv+0x1b4/0x430 [ 794.326441][T15523] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 794.326464][T15523] ? netlink_deliver_tap+0x1ae/0xd30 [ 794.326490][T15523] netlink_unicast+0x53c/0x7f0 [ 794.326516][T15523] ? __pfx_netlink_unicast+0x10/0x10 [ 794.326545][T15523] netlink_sendmsg+0x8b8/0xd70 [ 794.326571][T15523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.326603][T15523] ____sys_sendmsg+0xaaf/0xc90 [ 794.326621][T15523] ? copy_msghdr_from_user+0x10b/0x160 [ 794.326644][T15523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.326673][T15523] ___sys_sendmsg+0x135/0x1e0 [ 794.326699][T15523] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.326732][T15523] ? __pfx_lock_release+0x10/0x10 [ 794.326755][T15523] ? trace_lock_acquire+0x14e/0x1f0 [ 794.326783][T15523] ? __fget_files+0x206/0x3a0 [ 794.326807][T15523] __sys_sendmsg+0x16e/0x220 [ 794.326831][T15523] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.326870][T15523] do_syscall_64+0xcd/0x250 [ 794.326895][T15523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.326923][T15523] RIP: 0033:0x7f5c6b78d169 [ 794.326937][T15523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.326954][T15523] RSP: 002b:00007f5c6c547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.326972][T15523] RAX: ffffffffffffffda RBX: 00007f5c6b9a5fa0 RCX: 00007f5c6b78d169 [ 794.326983][T15523] RDX: 0000000000044000 RSI: 0000400000000540 RDI: 0000000000000003 [ 794.326994][T15523] RBP: 00007f5c6c547090 R08: 0000000000000000 R09: 0000000000000000 [ 794.327004][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.327015][T15523] R13: 0000000000000000 R14: 00007f5c6b9a5fa0 R15: 00007ffea2b0bcc8 [ 794.327037][T15523] [ 794.931364][T15529] smc: net device bond0 applied user defined pnetid SYZ0 [ 794.953789][T15529] smc: net device bond0 erased user defined pnetid SYZ0 [ 795.063987][T15529] serio: Serial port ptm0 [ 795.142850][ T29] audit: type=1400 audit(1740926355.487:869): avc: denied { create } for pid=15533 comm="syz.1.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 795.178152][T15532] ptrace attach of "./syz-executor exec"[10183] was attempted by "./syz-executor exec"[15532] [ 795.195528][ T29] audit: type=1400 audit(1740926355.487:870): avc: denied { setopt } for pid=15533 comm="syz.1.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 795.220743][ T29] audit: type=1400 audit(1740926355.547:871): avc: denied { bind } for pid=15533 comm="syz.1.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 795.486543][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.375865][ T29] audit: type=1400 audit(1740926356.717:872): avc: denied { bind } for pid=15517 comm="syz.3.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 798.745503][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.638773][T15598] wg1 speed is unknown, defaulting to 1000 [ 799.652663][T15598] wlan0 speed is unknown, defaulting to 1000 [ 799.825079][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880685d4000: rx timeout, send abort [ 799.838953][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880685d4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 801.219259][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.549216][ T5835] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 801.790730][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 801.815244][ T5835] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 801.920265][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 801.933668][ T5835] usb 6-1: can't read configurations, error -61 [ 802.199281][ T5835] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 802.258960][ T117] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 802.299006][ T971] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 802.819271][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 802.825344][ T5835] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 802.835592][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 802.843434][ T5835] usb 6-1: can't read configurations, error -61 [ 802.865921][ T5835] usb usb6-port1: attempt power cycle [ 802.867006][ T971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.918488][ T117] usb 3-1: Using ep0 maxpacket: 32 [ 802.925054][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.937152][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.947249][ T117] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 802.956518][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.964345][ T971] usb 5-1: config 0 has no interfaces? [ 802.972944][ T117] usb 3-1: config 0 descriptor?? [ 802.983441][ T117] hub 3-1:0.0: USB hub found [ 802.994021][ T971] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 803.012569][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.024395][ T971] usb 5-1: Product: syz [ 803.028579][ T971] usb 5-1: Manufacturer: syz [ 803.040544][ T971] usb 5-1: SerialNumber: syz [ 803.047079][ T971] usb 5-1: config 0 descriptor?? [ 803.279871][ T5835] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 803.309760][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 803.318847][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 803.320325][ T971] usb 5-1: USB disconnect, device number 17 [ 803.329090][ T117] hub 3-1:0.0: 1 port detected [ 803.335844][ T5835] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 803.380163][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 803.519703][ T5835] usb 6-1: can't read configurations, error -61 [ 803.609059][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 803.619463][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 803.628548][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.636739][ T45] usb 4-1: Product: syz [ 803.640989][ T45] usb 4-1: Manufacturer: syz [ 803.645588][ T45] usb 4-1: SerialNumber: syz [ 803.652021][ T45] usb 4-1: config 0 descriptor?? [ 803.668982][ T5835] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 803.683185][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.709920][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 803.715433][ T5835] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 803.725728][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 803.735144][ T5835] usb 6-1: can't read configurations, error -61 [ 803.742205][ T5835] usb usb6-port1: unable to enumerate USB device [ 803.798923][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 803.955530][ T5835] hub 3-1:0.0: activate --> -90 [ 803.964750][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.976059][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.986179][ T25] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 803.995484][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.009547][ T25] usb 2-1: config 0 descriptor?? [ 804.161061][T15628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.192246][T15628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.298228][T15645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15645 comm=syz.1.2504 [ 804.476771][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.517567][ T29] audit: type=1400 audit(1740926364.857:873): avc: denied { mount } for pid=15627 comm="syz.2.2498" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 804.549468][ T29] audit: type=1400 audit(1740926364.887:874): avc: denied { remount } for pid=15627 comm="syz.2.2498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 804.572444][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 804.576808][ T971] usb 4-1: USB disconnect, device number 5 [ 804.578406][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 804.604992][ T5896] usb 3-1: USB disconnect, device number 114 [ 804.606538][ T5835] usb 3-1-port1: cannot reset (err = -71) [ 804.621378][ T29] audit: type=1400 audit(1740926364.887:875): avc: denied { read } for pid=15627 comm="syz.2.2498" path="socket:[54072]" dev="sockfs" ino=54072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 804.688881][ T25] usb 2-1: USB disconnect, device number 6 [ 804.715349][ T5835] usb 3-1-port1: attempt power cycle [ 805.112898][T15662] option changes via remount are deprecated (pid=15661 comm=syz.3.2507) [ 805.124742][ T29] audit: type=1400 audit(1740926365.457:876): avc: denied { remount } for pid=15661 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 805.169711][T15662] netlink: zone id is out of range [ 805.174834][T15662] netlink: zone id is out of range [ 805.196997][T15662] netlink: zone id is out of range [ 805.218865][T15662] netlink: zone id is out of range [ 805.223974][T15662] netlink: zone id is out of range [ 805.236473][T15662] netlink: zone id is out of range [ 805.245052][T15662] netlink: zone id is out of range [ 805.275752][T15662] netlink: zone id is out of range [ 805.281690][ T29] audit: type=1400 audit(1740926365.617:877): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 805.331642][T15662] netlink: zone id is out of range [ 805.336767][T15662] netlink: zone id is out of range [ 805.658925][ T5896] IPVS: starting estimator thread 0... [ 805.671663][T15669] bond0: entered promiscuous mode [ 805.769047][T15671] IPVS: using max 57 ests per chain, 136800 per kthread [ 806.989191][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.096551][T15686] 9pnet_fd: Insufficient options for proto=fd [ 807.104814][T15680] input: syz0 as /devices/virtual/input/input87 [ 807.509059][ T25] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 807.701898][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.712239][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 807.735706][ T25] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 807.765892][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.778913][ T25] usb 3-1: Product: syz [ 807.789438][ T25] usb 3-1: Manufacturer: syz [ 807.794041][ T25] usb 3-1: SerialNumber: syz [ 807.819851][ T25] usb 3-1: config 0 descriptor?? [ 808.100139][ T971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 808.909816][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.916108][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.930575][ T5835] usb 3-1: USB disconnect, device number 119 [ 808.938915][ T29] audit: type=1400 audit(1740926368.407:878): avc: denied { connect } for pid=15704 comm="syz.5.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 809.111326][ T971] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 809.169641][ T971] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 809.381197][ T971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.399163][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.407193][ T971] usb 4-1: Product: syz [ 809.427873][ T971] usb 4-1: Manufacturer: syz [ 809.432830][ T971] usb 4-1: SerialNumber: syz [ 809.686577][ T971] cdc_ncm 4-1:1.0: bind() failure [ 809.701065][ T971] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 809.724635][ T971] cdc_ncm 4-1:1.1: bind() failure [ 809.745816][ T971] usb 4-1: USB disconnect, device number 6 [ 810.179224][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.960630][T15759] input: syz0 as /devices/virtual/input/input88 [ 814.359471][T15776] lo: entered allmulticast mode [ 814.925097][T15766] lo: left allmulticast mode [ 815.943136][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.308382][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804d197000: rx timeout, send abort [ 816.317782][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804d197000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 816.428945][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 816.581409][ T2131] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.607711][T15798] bond0: entered promiscuous mode [ 816.623805][T15798] bond_slave_0: entered promiscuous mode [ 816.658333][T15798] bond_slave_1: entered promiscuous mode [ 817.252664][T15812] input: syz0 as /devices/virtual/input/input89 [ 817.742147][ T29] audit: type=1400 audit(1740926378.087:879): avc: denied { read } for pid=5896 comm="kworker/0:6" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55302 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 817.840177][T15826] syzkaller1: entered promiscuous mode [ 817.845745][T15826] syzkaller1: entered allmulticast mode [ 818.229635][T15829] smc: net device bond0 applied user defined pnetid SYZ0 [ 818.237796][T15829] smc: net device bond0 erased user defined pnetid SYZ0 [ 818.266375][T15829] serio: Serial port ptm0 [ 818.318588][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 818.439667][T15836] smc: net device bond0 applied user defined pnetid SYZ0 [ 818.551834][T15838] smc: net device bond0 erased user defined pnetid SYZ0 [ 818.569588][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2557'. [ 818.607656][T15836] serio: Serial port ptm0 [ 818.728386][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'. [ 819.347888][ T29] audit: type=1400 audit(1740926379.617:880): avc: denied { nlmsg_read } for pid=15849 comm="syz.1.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 819.387707][ T29] audit: type=1400 audit(1740926379.687:881): avc: denied { read } for pid=15851 comm="syz.3.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 819.608553][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804d195000: rx timeout, send abort [ 819.617094][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804d195000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 820.026759][T15870] FAULT_INJECTION: forcing a failure. [ 820.026759][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 820.039591][T15870] CPU: 1 UID: 0 PID: 15870 Comm: syz.1.2566 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 820.039612][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.039628][T15870] Call Trace: [ 820.039634][T15870] [ 820.039641][T15870] dump_stack_lvl+0x16c/0x1f0 [ 820.039668][T15870] should_fail_ex+0x50a/0x650 [ 820.039693][T15870] ? fs_reclaim_acquire+0xae/0x150 [ 820.039719][T15870] ? hash_ipmark_create+0x4e3/0x13c0 [ 820.039737][T15870] should_failslab+0xc2/0x120 [ 820.039758][T15870] __kmalloc_cache_noprof+0x68/0x410 [ 820.039791][T15870] hash_ipmark_create+0x4e3/0x13c0 [ 820.039808][T15870] ? __rcu_read_unlock+0x2b4/0x580 [ 820.039836][T15870] ? __pfx_hash_ipmark_create+0x10/0x10 [ 820.039856][T15870] ip_set_create+0x7cb/0x14d0 [ 820.039888][T15870] ? __pfx_ip_set_create+0x10/0x10 [ 820.039941][T15870] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 820.039975][T15870] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 820.040005][T15870] ? __pfx___schedule+0x10/0x10 [ 820.040048][T15870] ? netlink_rcv_skb+0x2d0/0x440 [ 820.040074][T15870] netlink_rcv_skb+0x16b/0x440 [ 820.040096][T15870] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 820.040122][T15870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 820.040157][T15870] ? bpf_lsm_capable+0x9/0x10 [ 820.040178][T15870] ? security_capable+0x7e/0x260 [ 820.040200][T15870] ? ns_capable+0xd7/0x110 [ 820.040228][T15870] nfnetlink_rcv+0x1b4/0x430 [ 820.040252][T15870] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 820.040275][T15870] ? rcu_is_watching+0x12/0xc0 [ 820.040299][T15870] netlink_unicast+0x53c/0x7f0 [ 820.040324][T15870] ? __pfx_netlink_unicast+0x10/0x10 [ 820.040355][T15870] netlink_sendmsg+0x8b8/0xd70 [ 820.040381][T15870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.040414][T15870] ____sys_sendmsg+0xaaf/0xc90 [ 820.040433][T15870] ? copy_msghdr_from_user+0x10b/0x160 [ 820.040457][T15870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.040487][T15870] ___sys_sendmsg+0x135/0x1e0 [ 820.040512][T15870] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.040547][T15870] ? __pfx_lock_release+0x10/0x10 [ 820.040571][T15870] ? trace_lock_acquire+0x14e/0x1f0 [ 820.040600][T15870] ? __fget_files+0x206/0x3a0 [ 820.040629][T15870] __sys_sendmsg+0x16e/0x220 [ 820.040653][T15870] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.040694][T15870] do_syscall_64+0xcd/0x250 [ 820.040718][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.040742][T15870] RIP: 0033:0x7ff80c38d169 [ 820.040757][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.040773][T15870] RSP: 002b:00007ff80a1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.040791][T15870] RAX: ffffffffffffffda RBX: 00007ff80c5a6160 RCX: 00007ff80c38d169 [ 820.040802][T15870] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 820.040813][T15870] RBP: 00007ff80a1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 820.040824][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.040835][T15870] R13: 0000000000000000 R14: 00007ff80c5a6160 R15: 00007ffdea5d6a78 [ 820.040859][T15870] [ 820.227597][ T29] audit: type=1400 audit(1740926380.387:882): avc: denied { ioctl } for pid=15867 comm="syz.1.2566" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x4808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 820.230114][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.381203][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.523839][T15872] block device autoloading is deprecated and will be removed. [ 820.764963][T15875] 9pnet_fd: Insufficient options for proto=fd [ 820.782415][T15877] overlay: Unknown parameter 'fowner>00000000000000000000' [ 821.301017][T15885] FAULT_INJECTION: forcing a failure. [ 821.301017][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 821.882961][T15885] CPU: 1 UID: 0 PID: 15885 Comm: syz.4.2572 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 821.882988][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 821.882998][T15885] Call Trace: [ 821.883004][T15885] [ 821.883010][T15885] dump_stack_lvl+0x16c/0x1f0 [ 821.883035][T15885] should_fail_ex+0x50a/0x650 [ 821.883058][T15885] ? fs_reclaim_acquire+0xae/0x150 [ 821.883084][T15885] ? team_add_slave+0x7d8/0x2190 [ 821.883099][T15885] should_failslab+0xc2/0x120 [ 821.883118][T15885] __kmalloc_noprof+0xcb/0x510 [ 821.883133][T15885] ? __pfx_netdev_has_upper_dev+0x10/0x10 [ 821.883164][T15885] team_add_slave+0x7d8/0x2190 [ 821.883187][T15885] ? __pfx_team_add_slave+0x10/0x10 [ 821.883203][T15885] ? do_set_master+0xf8/0x230 [ 821.883220][T15885] ? __dev_get_by_index+0x15/0x140 [ 821.883240][T15885] ? __dev_get_by_index+0x5b/0x140 [ 821.883259][T15885] ? __pfx_team_add_slave+0x10/0x10 [ 821.883276][T15885] do_set_master+0x1bc/0x230 [ 821.883295][T15885] do_setlink.constprop.0+0xb5b/0x3f80 [ 821.883318][T15885] ? lockdep_hardirqs_on+0x7c/0x110 [ 821.883339][T15885] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 821.883355][T15885] ? lock_acquire.part.0+0x11b/0x380 [ 821.883374][T15885] ? __mutex_trylock_common+0xea/0x250 [ 821.883391][T15885] ? __pfx___mutex_trylock_common+0x10/0x10 [ 821.883407][T15885] ? rtnl_newlink+0x5d9/0x1d60 [ 821.883422][T15885] ? rcu_is_watching+0x12/0xc0 [ 821.883434][T15885] ? trace_contention_end+0xee/0x140 [ 821.883451][T15885] ? __mutex_lock+0x1cc/0xb10 [ 821.883465][T15885] ? rcu_is_watching+0x12/0xc0 [ 821.883476][T15885] ? rtnl_newlink+0x5d9/0x1d60 [ 821.883491][T15885] ? __pfx___mutex_lock+0x10/0x10 [ 821.883504][T15885] ? cap_capable+0xb3/0x250 [ 821.883521][T15885] ? full_name_hash+0xbc/0x110 [ 821.883535][T15885] ? netdev_name_node_lookup+0x127/0x180 [ 821.883551][T15885] rtnl_newlink+0x1306/0x1d60 [ 821.883569][T15885] ? __pfx_rtnl_newlink+0x10/0x10 [ 821.883587][T15885] ? __pfx___lock_acquire+0x10/0x10 [ 821.883602][T15885] ? cred_has_capability.isra.0+0x192/0x2f0 [ 821.883618][T15885] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 821.883641][T15885] ? find_held_lock+0x2d/0x110 [ 821.883660][T15885] ? __pfx_rtnl_newlink+0x10/0x10 [ 821.883675][T15885] rtnetlink_rcv_msg+0x95b/0xea0 [ 821.883691][T15885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 821.883713][T15885] netlink_rcv_skb+0x16b/0x440 [ 821.883728][T15885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 821.883743][T15885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.883765][T15885] ? rcu_is_watching+0x12/0xc0 [ 821.883779][T15885] netlink_unicast+0x53c/0x7f0 [ 821.883795][T15885] ? __pfx_netlink_unicast+0x10/0x10 [ 821.883813][T15885] netlink_sendmsg+0x8b8/0xd70 [ 821.883830][T15885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.883843][T15885] ? lock_acquire+0x71/0xb0 [ 821.883863][T15885] ____sys_sendmsg+0xaaf/0xc90 [ 821.883875][T15885] ? copy_msghdr_from_user+0x10b/0x160 [ 821.883893][T15885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.883910][T15885] ___sys_sendmsg+0x135/0x1e0 [ 821.883927][T15885] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.883950][T15885] ? __pfx_lock_release+0x10/0x10 [ 821.883965][T15885] ? trace_lock_acquire+0x14e/0x1f0 [ 821.883982][T15885] ? __fget_files+0x206/0x3a0 [ 821.883996][T15885] __sys_sendmsg+0x16e/0x220 [ 821.884012][T15885] ? __pfx___sys_sendmsg+0x10/0x10 [ 821.884036][T15885] do_syscall_64+0xcd/0x250 [ 821.884051][T15885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.884068][T15885] RIP: 0033:0x7fe7b3b8d169 [ 821.884077][T15885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.884088][T15885] RSP: 002b:00007fe7b49b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.884098][T15885] RAX: ffffffffffffffda RBX: 00007fe7b3da5fa0 RCX: 00007fe7b3b8d169 [ 821.884105][T15885] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 821.884112][T15885] RBP: 00007fe7b49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.884118][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.884124][T15885] R13: 0000000000000000 R14: 00007fe7b3da5fa0 R15: 00007ffc598c8a58 [ 821.884137][T15885] [ 822.292295][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.393916][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 822.422479][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 822.557236][T15896] FAULT_INJECTION: forcing a failure. [ 822.557236][T15896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.570372][T15896] CPU: 1 UID: 0 PID: 15896 Comm: syz.3.2573 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 822.570395][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.570405][T15896] Call Trace: [ 822.570411][T15896] [ 822.570418][T15896] dump_stack_lvl+0x16c/0x1f0 [ 822.570445][T15896] should_fail_ex+0x50a/0x650 [ 822.570475][T15896] _copy_from_iter+0x2a1/0x1560 [ 822.570499][T15896] ? __pfx__copy_from_iter+0x10/0x10 [ 822.570517][T15896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 822.570538][T15896] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 822.570567][T15896] ? __pfx_lock_release+0x10/0x10 [ 822.570596][T15896] copy_page_from_iter+0xa5/0x120 [ 822.570617][T15896] tun_build_skb.constprop.0+0x294/0x1120 [ 822.570650][T15896] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 822.570681][T15896] ? __pfx___lock_acquire+0x10/0x10 [ 822.570704][T15896] ? register_lock_class+0xb1/0x1240 [ 822.570737][T15896] ? __lock_acquire+0xcc5/0x3c40 [ 822.570766][T15896] tun_get_user+0x870/0x3e50 [ 822.570803][T15896] ? __pfx_tun_get_user+0x10/0x10 [ 822.570829][T15896] ? find_held_lock+0x2d/0x110 [ 822.570859][T15896] ? __pfx_lock_release+0x10/0x10 [ 822.570894][T15896] tun_chr_write_iter+0xdc/0x210 [ 822.570923][T15896] vfs_write+0x5ae/0x1150 [ 822.570950][T15896] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 822.570979][T15896] ? __pfx_vfs_write+0x10/0x10 [ 822.571007][T15896] ? __fget_files+0x40/0x3a0 [ 822.571035][T15896] ksys_write+0x12b/0x250 [ 822.571061][T15896] ? __pfx_ksys_write+0x10/0x10 [ 822.571095][T15896] do_syscall_64+0xcd/0x250 [ 822.571119][T15896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.571142][T15896] RIP: 0033:0x7fd25178bc1f [ 822.571157][T15896] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 822.571173][T15896] RSP: 002b:00007fd252588000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 822.571190][T15896] RAX: ffffffffffffffda RBX: 00007fd2519a5fa0 RCX: 00007fd25178bc1f [ 822.571202][T15896] RDX: 0000000000000046 RSI: 0000400000000340 RDI: 00000000000000c8 [ 822.571213][T15896] RBP: 00007fd252588090 R08: 0000000000000000 R09: 0000000000000000 [ 822.571224][T15896] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 822.571234][T15896] R13: 0000000000000001 R14: 00007fd2519a5fa0 R15: 00007fffffc47418 [ 822.571257][T15896] [ 822.811414][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.848441][T15898] 9pnet_fd: Insufficient options for proto=fd [ 824.489160][ T29] audit: type=1400 audit(1740926384.837:883): avc: denied { ioctl } for pid=15920 comm="syz.5.2580" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 825.208480][T15931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2581'. [ 825.495389][T15938] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2584'. [ 825.504539][T15938] tipc: Enabling of bearer rejected, failed to enable media [ 826.840199][T15952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 826.869894][T15954] dlm: plock device version mismatch: kernel (1.2.0), user (1.2540568418.4096202173) [ 826.876415][T15952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 826.879537][ T29] audit: type=1400 audit(1740926387.217:884): avc: denied { ioctl } for pid=15951 comm="syz.4.2588" path="socket:[55639]" dev="sockfs" ino=55639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 826.999667][T15954] tmpfs: Unknown parameter 'usrquota ' [ 827.479342][ T971] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 827.689469][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 827.756147][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.869329][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.004724][ T971] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 828.028878][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.061365][ T971] usb 5-1: config 0 descriptor?? [ 828.099554][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 828.112677][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 828.899144][T15053] Bluetooth: hci5: command 0x0406 tx timeout [ 829.180961][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.180990][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181010][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181031][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181051][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181071][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181091][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181111][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181132][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181152][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.181173][ T971] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 829.242018][ T971] hid-picolcd 0003:04D8:F002.0028: No report with id 0xf4 found [ 829.242043][ T971] hid-picolcd 0003:04D8:F002.0028: No report with id 0xf3 found [ 829.243844][ T971] usb 5-1: USB disconnect, device number 18 [ 829.608280][T15983] bond0: entered promiscuous mode [ 829.608318][T15983] bond_slave_0: entered promiscuous mode [ 829.609592][T15983] bond_slave_1: entered promiscuous mode [ 829.838242][ T29] audit: type=1400 audit(1740926390.077:885): avc: denied { connect } for pid=15979 comm="syz.1.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 829.862477][T15950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 831.097392][T16002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2600'. [ 831.141002][T16001] 9pnet_fd: Insufficient options for proto=fd [ 831.299146][ T117] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 831.659699][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 831.698528][ T117] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 831.762343][ T117] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.928036][ T117] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 831.964519][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.022762][ T117] usb 2-1: Product: syz [ 832.026944][ T117] usb 2-1: Manufacturer: syz [ 832.053305][ T117] usb 2-1: SerialNumber: syz [ 832.072277][ T117] usb 2-1: config 0 descriptor?? [ 832.293924][ T29] audit: type=1400 audit(1740926392.637:886): avc: denied { getopt } for pid=15995 comm="syz.1.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 832.423151][ T117] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 832.589807][ T117] usb 3-1: Using ep0 maxpacket: 8 [ 832.637139][ T117] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 832.653408][ T117] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 832.673230][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.675439][ T117] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 832.695160][T16018] smc: net device bond0 applied user defined pnetid SYZ0 [ 832.711162][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.900475][T16018] smc: net device bond0 erased user defined pnetid SYZ0 [ 833.195898][ T117] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 833.205337][ T117] usb 3-1: config 250 has no interface number 0 [ 833.211633][ T117] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.220032][ T29] audit: type=1326 audit(1740926393.567:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.1.2602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80c38d169 code=0x0 [ 833.222379][ T117] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 833.288886][ T117] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 833.328962][ T117] usb 3-1: config 250 interface 228 has no altsetting 0 [ 833.370861][ T117] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 833.417799][ T117] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 833.456276][ T117] usb 3-1: Product: syz [ 833.468739][ T117] usb 3-1: SerialNumber: syz [ 833.499944][ T117] hub 3-1:250.228: bad descriptor, ignoring hub [ 833.515668][ T117] hub 3-1:250.228: probe with driver hub failed with error -5 [ 833.699242][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 833.724094][ T117] usblp 3-1:250.228: usblp0: USB Unidirectional printer dev 120 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 833.792925][ T117] usb 3-1: USB disconnect, device number 120 [ 833.809078][ T117] usblp0: removed [ 833.859938][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 833.870953][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 833.876420][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 833.889833][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.900826][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.919186][ T5896] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 833.928245][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.950352][ T5896] usb 4-1: config 0 descriptor?? [ 834.019650][T16032] sp0: Synchronizing with TNC [ 834.278931][ T117] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 834.355755][T12000] usb 2-1: USB disconnect, device number 7 [ 834.365854][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.389826][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.399002][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.406579][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.424184][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.439169][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.456193][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.464875][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.469622][ T117] usb 5-1: Using ep0 maxpacket: 8 [ 834.481514][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.507063][ T117] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 834.507189][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.526551][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.537447][ T5896] hid-picolcd 0003:04D8:F002.0029: unknown main item tag 0x0 [ 834.604140][ T117] usb 5-1: Product: syz [ 834.609085][ T5896] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf4 found [ 834.634456][ T5896] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf3 found [ 834.650954][ T117] usb 5-1: Manufacturer: syz [ 834.661898][ T117] usb 5-1: SerialNumber: syz [ 834.675853][ T5896] usb 4-1: USB disconnect, device number 7 [ 834.677156][T16071] 9pnet_fd: Insufficient options for proto=fd [ 834.690011][ T117] usb 5-1: config 0 descriptor?? [ 834.696580][ T117] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 834.706754][T16071] 9pnet_fd: Insufficient options for proto=fd [ 835.602222][ T117] gspca_sn9c2028: read1 error -110 [ 835.618627][T16085] misc userio: The device must be registered before sending interrupts [ 835.735505][ T117] gspca_sn9c2028: read1 error -32 [ 835.755048][ T117] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 837.259035][ T5896] usb 5-1: USB disconnect, device number 19 [ 837.386336][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 838.247996][T16118] FAULT_INJECTION: forcing a failure. [ 838.247996][T16118] name failslab, interval 1, probability 0, space 0, times 0 [ 838.263095][T16118] CPU: 1 UID: 0 PID: 16118 Comm: syz.1.2625 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 838.263119][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 838.263130][T16118] Call Trace: [ 838.263135][T16118] [ 838.263143][T16118] dump_stack_lvl+0x16c/0x1f0 [ 838.263168][T16118] should_fail_ex+0x50a/0x650 [ 838.263194][T16118] ? fs_reclaim_acquire+0xae/0x150 [ 838.263221][T16118] should_failslab+0xc2/0x120 [ 838.263241][T16118] __kmalloc_node_noprof+0xd1/0x510 [ 838.263260][T16118] ? queue_work_on+0xc6/0x140 [ 838.263284][T16118] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 838.263314][T16118] __kvmalloc_node_noprof+0xad/0x1a0 [ 838.263342][T16118] recent_mt_check.isra.0+0x584/0xc30 [ 838.263365][T16118] ? __pfx_recent_mt_check.isra.0+0x10/0x10 [ 838.263390][T16118] ? hlock_class+0x4e/0x130 [ 838.263412][T16118] recent_mt_check_v0+0xf6/0x160 [ 838.263432][T16118] ? __pfx_recent_mt_check_v0+0x10/0x10 [ 838.263482][T16118] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 838.263505][T16118] ? __pfx_recent_mt_check_v0+0x10/0x10 [ 838.263526][T16118] xt_check_match+0x284/0xa50 [ 838.263550][T16118] ? is_mmconf_reserved+0x4e0/0x500 [ 838.263570][T16118] ? __pfx_xt_check_match+0x10/0x10 [ 838.263592][T16118] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 838.263621][T16118] ? xt_find_match+0x1f2/0x290 [ 838.263649][T16118] find_check_entry.constprop.0+0x34d/0xa20 [ 838.263680][T16118] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 838.263715][T16118] ? kfree+0x2c4/0x4d0 [ 838.263739][T16118] ? kvfree+0x47/0x50 [ 838.263769][T16118] translate_table+0xd06/0x17b0 [ 838.263802][T16118] ? __pfx_translate_table+0x10/0x10 [ 838.263823][T16118] ? __might_fault+0xe3/0x190 [ 838.263850][T16118] do_ip6t_set_ctl+0x926/0xbf0 [ 838.263871][T16118] ? trace_contention_end+0xee/0x140 [ 838.263896][T16118] ? __mutex_lock+0x1cc/0xb10 [ 838.263919][T16118] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 838.263942][T16118] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 838.263964][T16118] ? avc_has_perm_noaudit+0x143/0x3a0 [ 838.263984][T16118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 838.264020][T16118] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 838.264045][T16118] nf_setsockopt+0x8a/0xf0 [ 838.264069][T16118] ipv6_setsockopt+0x135/0x170 [ 838.264092][T16118] dccp_setsockopt+0x108/0xa10 [ 838.264113][T16118] ? __pfx_dccp_setsockopt+0x10/0x10 [ 838.264135][T16118] ? selinux_socket_setsockopt+0x6a/0x80 [ 838.264155][T16118] ? sock_common_setsockopt+0x2e/0xf0 [ 838.264183][T16118] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 838.264211][T16118] do_sock_setsockopt+0x222/0x480 [ 838.264239][T16118] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 838.264267][T16118] ? lock_acquire+0x2f/0xb0 [ 838.264304][T16118] __sys_setsockopt+0x1a0/0x230 [ 838.264331][T16118] __x64_sys_setsockopt+0xbd/0x160 [ 838.264353][T16118] ? do_syscall_64+0x91/0x250 [ 838.264374][T16118] ? lockdep_hardirqs_on+0x7c/0x110 [ 838.264395][T16118] do_syscall_64+0xcd/0x250 [ 838.264418][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.264442][T16118] RIP: 0033:0x7ff80c38d169 [ 838.264457][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.264479][T16118] RSP: 002b:00007ff80a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 838.264497][T16118] RAX: ffffffffffffffda RBX: 00007ff80c5a5fa0 RCX: 00007ff80c38d169 [ 838.264508][T16118] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 838.264519][T16118] RBP: 00007ff80a1f6090 R08: 00000000000005b0 R09: 0000000000000000 [ 838.264529][T16118] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.264540][T16118] R13: 0000000000000000 R14: 00007ff80c5a5fa0 R15: 00007ffdea5d6a78 [ 838.264564][T16118] [ 839.194433][T16129] FAULT_INJECTION: forcing a failure. [ 839.194433][T16129] name failslab, interval 1, probability 0, space 0, times 0 [ 839.287440][T16129] CPU: 1 UID: 0 PID: 16129 Comm: syz.3.2629 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 839.287472][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.287483][T16129] Call Trace: [ 839.287488][T16129] [ 839.287496][T16129] dump_stack_lvl+0x16c/0x1f0 [ 839.287524][T16129] should_fail_ex+0x50a/0x650 [ 839.287554][T16129] should_failslab+0xc2/0x120 [ 839.287574][T16129] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 839.287595][T16129] ? skb_clone+0x190/0x3f0 [ 839.287623][T16129] skb_clone+0x190/0x3f0 [ 839.287647][T16129] netlink_deliver_tap+0xabd/0xd30 [ 839.287680][T16129] netlink_unicast+0x5e1/0x7f0 [ 839.287705][T16129] ? __pfx_netlink_unicast+0x10/0x10 [ 839.287727][T16129] ? __phys_addr+0xc6/0x150 [ 839.287751][T16129] netlink_sendmsg+0x8b8/0xd70 [ 839.287778][T16129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.287810][T16129] sock_sendmsg+0x3d3/0x490 [ 839.287831][T16129] ? __pfx_sock_sendmsg+0x10/0x10 [ 839.287847][T16129] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.287877][T16129] ? page_cache_pipe_buf_confirm+0x80/0x430 [ 839.287905][T16129] ? page_cache_pipe_buf_confirm+0x95/0x430 [ 839.287935][T16129] splice_to_socket+0xaac/0x1040 [ 839.287974][T16129] ? __pfx_splice_to_socket+0x10/0x10 [ 839.288000][T16129] ? current_time+0x11e/0x1a0 [ 839.288028][T16129] ? atime_needs_update+0x8b/0x710 [ 839.288069][T16129] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 839.288099][T16129] ? __pfx_splice_to_socket+0x10/0x10 [ 839.288127][T16129] direct_splice_actor+0x18f/0x6c0 [ 839.288155][T16129] splice_direct_to_actor+0x346/0xa40 [ 839.288183][T16129] ? __pfx_direct_splice_actor+0x10/0x10 [ 839.288213][T16129] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 839.288239][T16129] ? __pfx_file_has_perm+0x10/0x10 [ 839.288265][T16129] do_splice_direct+0x178/0x250 [ 839.288291][T16129] ? __pfx_do_splice_direct+0x10/0x10 [ 839.288318][T16129] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 839.288344][T16129] ? bpf_lsm_file_permission+0x9/0x10 [ 839.288363][T16129] ? security_file_permission+0x71/0x210 [ 839.288390][T16129] ? rw_verify_area+0xcf/0x680 [ 839.288417][T16129] do_sendfile+0xafb/0xe40 [ 839.288447][T16129] ? __pfx_do_sendfile+0x10/0x10 [ 839.288482][T16129] __x64_sys_sendfile64+0x1da/0x220 [ 839.288501][T16129] ? ksys_write+0x1ba/0x250 [ 839.288527][T16129] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 839.288556][T16129] do_syscall_64+0xcd/0x250 [ 839.288579][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.288604][T16129] RIP: 0033:0x7fd25178d169 [ 839.288618][T16129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.288635][T16129] RSP: 002b:00007fd252588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 839.288652][T16129] RAX: ffffffffffffffda RBX: 00007fd2519a5fa0 RCX: 00007fd25178d169 [ 839.288664][T16129] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 839.288679][T16129] RBP: 00007fd252588090 R08: 0000000000000000 R09: 0000000000000000 [ 839.288689][T16129] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.288700][T16129] R13: 0000000000000000 R14: 00007fd2519a5fa0 R15: 00007fffffc47418 [ 839.288724][T16129] [ 839.610482][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 839.619942][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 839.645698][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.069630][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.081467][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.201672][ T5896] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.218390][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.228481][ T5896] usb 2-1: config 0 descriptor?? [ 841.443862][ T29] audit: type=1800 audit(1740926401.787:888): pid=16157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2638" name="bus" dev="overlay" ino=2859 res=0 errno=0 [ 841.839124][ T5896] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002A/input/input91 [ 842.384748][ T5896] uclogic 0003:256C:006D.002A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 842.935911][T16169] input: syz0 as /devices/virtual/input/input92 [ 843.137045][T16176] tipc: Started in network mode [ 843.142371][T16176] tipc: Node identity ac141441, cluster identity 4711 [ 843.160450][T16176] tipc: Enabled bearer , priority 10 [ 843.360179][T12000] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 843.762458][T16176] syz.3.2640 (16176) used greatest stack depth: 19792 bytes left [ 844.269259][ T971] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 844.276844][ T5867] tipc: Node number set to 2886997057 [ 844.467025][T16193] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2646'. [ 844.701187][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 844.709861][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.743098][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.760360][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.818928][ T971] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 844.848976][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.879776][ T971] usb 4-1: config 0 descriptor?? [ 845.303499][T16202] FAULT_INJECTION: forcing a failure. [ 845.303499][T16202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.316635][T16202] CPU: 1 UID: 0 PID: 16202 Comm: syz.1.2648 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 845.316656][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 845.316666][T16202] Call Trace: [ 845.316672][T16202] [ 845.316684][T16202] dump_stack_lvl+0x16c/0x1f0 [ 845.316710][T16202] should_fail_ex+0x50a/0x650 [ 845.316740][T16202] _copy_to_user+0x32/0xd0 [ 845.316759][T16202] simple_read_from_buffer+0xd0/0x160 [ 845.316786][T16202] proc_fail_nth_read+0x198/0x270 [ 845.316811][T16202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.316837][T16202] ? rw_verify_area+0xcf/0x680 [ 845.316861][T16202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.316885][T16202] vfs_read+0x1df/0xbf0 [ 845.316910][T16202] ? __fget_files+0x1fc/0x3a0 [ 845.316927][T16202] ? __pfx___mutex_lock+0x10/0x10 [ 845.316948][T16202] ? __pfx_vfs_read+0x10/0x10 [ 845.316982][T16202] ? __fget_files+0x206/0x3a0 [ 845.317006][T16202] ksys_read+0x12b/0x250 [ 845.317031][T16202] ? __pfx_ksys_read+0x10/0x10 [ 845.317063][T16202] do_syscall_64+0xcd/0x250 [ 845.317087][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.317111][T16202] RIP: 0033:0x7ff80c38bb7c [ 845.317125][T16202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 845.317142][T16202] RSP: 002b:00007ff80a1b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.317159][T16202] RAX: ffffffffffffffda RBX: 00007ff80c5a6160 RCX: 00007ff80c38bb7c [ 845.317170][T16202] RDX: 000000000000000f RSI: 00007ff80a1b40a0 RDI: 0000000000000007 [ 845.317180][T16202] RBP: 00007ff80a1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 845.317191][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.317202][T16202] R13: 0000000000000000 R14: 00007ff80c5a6160 R15: 00007ffdea5d6a78 [ 845.317226][T16202] [ 845.318236][ T5826] Bluetooth: hci4: unexpected event for opcode 0x080c [ 845.544741][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.552642][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.560094][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.567457][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.574960][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 845.574977][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.593825][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.628906][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.636306][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.662169][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.664833][ T5826] Bluetooth: hci4: unexpected event for opcode 0x202f [ 845.743209][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.752990][ T5896] usb 2-1: USB disconnect, device number 8 [ 845.778945][ T971] hid-picolcd 0003:04D8:F002.002B: unknown main item tag 0x0 [ 845.884577][ T971] hid-picolcd 0003:04D8:F002.002B: No report with id 0xf4 found [ 846.008215][ T971] hid-picolcd 0003:04D8:F002.002B: No report with id 0xf3 found [ 846.024499][ T971] usb 4-1: USB disconnect, device number 8 [ 846.309645][ T5896] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 846.318987][T12000] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 846.473860][ T5896] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 846.483770][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 846.496571][T12000] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 846.506137][T12000] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 846.519109][T12000] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 846.528394][ T5896] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 846.549053][T12000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.557104][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.567740][T12000] usb 2-1: Product: syz [ 846.572504][ T5896] usb 3-1: Product: syz [ 846.576775][T12000] usb 2-1: Manufacturer: syz [ 846.581793][ T5896] usb 3-1: Manufacturer: syz [ 846.586388][ T5896] usb 3-1: SerialNumber: syz [ 846.592323][T12000] usb 2-1: SerialNumber: syz [ 846.600011][ T5896] usb 3-1: config 0 descriptor?? [ 846.605216][T12000] usb 2-1: config 0 descriptor?? [ 846.639091][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 846.771013][T16228] input: syz0 as /devices/virtual/input/input93 [ 847.001853][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 847.008712][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.018541][ T25] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 847.033656][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.042331][ T25] usb 5-1: Product: syz [ 847.046570][ T25] usb 5-1: Manufacturer: syz [ 847.055180][ T25] usb 5-1: SerialNumber: syz [ 847.065691][ T25] usb 5-1: config 0 descriptor?? [ 847.190213][T12000] mos7840 2-1:0.0: required endpoints missing [ 847.284363][ T5896] mos7840 3-1:0.0: required endpoints missing [ 847.296543][ T5896] usb 3-1: USB disconnect, device number 121 [ 847.309440][T12000] usb 2-1: USB disconnect, device number 9 [ 847.406501][ T5826] Bluetooth: hci5: unexpected event for opcode 0x080c [ 847.865840][ T25] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 848.404472][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.419089][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.455189][ T25] usb 5-1: USB disconnect, device number 20 [ 849.179599][T16262] input: syz0 as /devices/virtual/input/input94 [ 849.186075][T16262] input: failed to attach handler leds to device input94, error: -6 [ 850.835169][T12560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.849220][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 851.715913][T16292] input: syz0 as /devices/virtual/input/input95 [ 851.777022][T16291] 9pnet_fd: Insufficient options for proto=fd [ 851.994044][T16291] 9pnet_fd: Insufficient options for proto=fd [ 853.262288][T16315] overlayfs: failed to resolve './file1': -2 [ 854.518706][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 854.634849][T16347] 9pnet_fd: Insufficient options for proto=fd [ 854.678687][T16347] 9pnet_fd: Insufficient options for proto=fd [ 855.692532][T16352] input: syz0 as /devices/virtual/input/input96 [ 856.082075][T16367] FAULT_INJECTION: forcing a failure. [ 856.082075][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 856.223109][T16367] CPU: 1 UID: 0 PID: 16367 Comm: syz.1.2683 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 856.223134][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 856.223144][T16367] Call Trace: [ 856.223150][T16367] [ 856.223157][T16367] dump_stack_lvl+0x16c/0x1f0 [ 856.223184][T16367] should_fail_ex+0x50a/0x650 [ 856.223210][T16367] ? fs_reclaim_acquire+0xae/0x150 [ 856.223236][T16367] ? snd_pcm_oss_change_params_locked+0x6d9/0x3a60 [ 856.223262][T16367] should_failslab+0xc2/0x120 [ 856.223282][T16367] __kmalloc_cache_noprof+0x68/0x410 [ 856.223309][T16367] ? _snd_pcm_hw_param_min+0x259/0x630 [ 856.223331][T16367] snd_pcm_oss_change_params_locked+0x6d9/0x3a60 [ 856.223352][T16367] ? rcu_is_watching+0x12/0xc0 [ 856.223373][T16367] ? __mutex_lock+0x1cc/0xb10 [ 856.223396][T16367] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 856.223415][T16367] ? __mutex_lock+0x1cc/0xb10 [ 856.223435][T16367] ? __pfx___mutex_lock+0x10/0x10 [ 856.223472][T16367] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 856.223496][T16367] snd_pcm_oss_set_channels+0x23e/0x370 [ 856.223516][T16367] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 856.223533][T16367] ? lock_acquire+0x2f/0xb0 [ 856.223557][T16367] ? __might_fault+0xe3/0x190 [ 856.223582][T16367] snd_pcm_oss_ioctl+0x218d/0x3780 [ 856.223605][T16367] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 856.223628][T16367] ? selinux_file_ioctl+0x180/0x270 [ 856.223654][T16367] ? selinux_file_ioctl+0xb4/0x270 [ 856.223681][T16367] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 856.223703][T16367] __x64_sys_ioctl+0x190/0x200 [ 856.223729][T16367] do_syscall_64+0xcd/0x250 [ 856.223753][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.223778][T16367] RIP: 0033:0x7ff80c38d169 [ 856.223792][T16367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.223809][T16367] RSP: 002b:00007ff80a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.223827][T16367] RAX: ffffffffffffffda RBX: 00007ff80c5a5fa0 RCX: 00007ff80c38d169 [ 856.223839][T16367] RDX: 0000400000000040 RSI: 00000000c0045006 RDI: 0000000000000003 [ 856.223850][T16367] RBP: 00007ff80a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 856.223860][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.223870][T16367] R13: 0000000000000000 R14: 00007ff80c5a5fa0 R15: 00007ffdea5d6a78 [ 856.223894][T16367] [ 856.467314][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 856.901020][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 856.972811][T16377] fuse: Bad value for 'fd' [ 857.494673][T16380] loop8: detected capacity change from 0 to 7 [ 857.509962][T16380] Dev loop8: unable to read RDB block 7 [ 857.518980][T16380] loop8: AHDI p1 p3 p4 [ 857.550496][T16380] loop8: partition table partially beyond EOD, truncated [ 857.563482][T16380] loop8: p1 start 975770946 is beyond EOD, truncated [ 857.571045][T16380] loop8: p3 start 6514546 is beyond EOD, truncated [ 858.337457][T16397] syzkaller1: entered promiscuous mode [ 858.343193][T16397] syzkaller1: entered allmulticast mode [ 858.559345][ T5896] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 858.930447][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 858.941441][ T5896] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 858.958319][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.968201][ T5896] usb 5-1: Product: syz [ 858.996491][ T5896] usb 5-1: Manufacturer: syz [ 859.039300][ T5896] usb 5-1: SerialNumber: syz [ 859.063642][ T5896] usb 5-1: config 0 descriptor?? [ 859.148064][T16413] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2697'. [ 859.315669][T12000] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 859.534203][ T5896] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 859.544861][ T5896] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 859.562272][ T5896] usb 5-1: USB disconnect, device number 21 [ 859.569237][T12000] usb 2-1: Using ep0 maxpacket: 16 [ 859.585569][T12000] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 859.601551][T12000] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 859.626488][T12000] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 859.638571][T12000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.647374][T12000] usb 2-1: Product: syz [ 859.652595][T12000] usb 2-1: Manufacturer: syz [ 859.657334][T12000] usb 2-1: SerialNumber: syz [ 859.674360][T12000] usb 2-1: config 0 descriptor?? [ 860.956516][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.146491][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.155971][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.559342][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.607622][ T5835] usb 2-1: USB disconnect, device number 10 [ 862.671831][ T29] audit: type=1400 audit(1740926422.997:889): avc: denied { write } for pid=16452 comm="syz.4.2704" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 863.806645][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 864.151524][T16471] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2709'. [ 864.402144][T16470] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2709'. [ 867.321478][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 867.511811][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 867.635565][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 867.780415][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 869.672108][T16546] fuse: Bad value for 'fd' [ 869.704348][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.710789][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.699696][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2731'. [ 871.120240][T16557] fuse: Bad value for 'fd' [ 872.441014][ T5835] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 872.726687][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 872.792711][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.815163][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 872.892230][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.910528][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 873.086948][ T5835] usb 4-1: config 0 descriptor?? [ 873.117247][ T5835] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 873.187844][T16582] FAULT_INJECTION: forcing a failure. [ 873.187844][T16582] name failslab, interval 1, probability 0, space 0, times 0 [ 873.239161][T16582] CPU: 1 UID: 0 PID: 16582 Comm: syz.1.2738 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 873.239186][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 873.239197][T16582] Call Trace: [ 873.239203][T16582] [ 873.239210][T16582] dump_stack_lvl+0x16c/0x1f0 [ 873.239236][T16582] should_fail_ex+0x50a/0x650 [ 873.239265][T16582] ? fs_reclaim_acquire+0xae/0x150 [ 873.239292][T16582] should_failslab+0xc2/0x120 [ 873.239311][T16582] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 873.239337][T16582] ? __alloc_skb+0x2b1/0x380 [ 873.239364][T16582] __alloc_skb+0x2b1/0x380 [ 873.239386][T16582] ? __pfx___alloc_skb+0x10/0x10 [ 873.239409][T16582] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 873.239436][T16582] netlink_alloc_large_skb+0x69/0x130 [ 873.239460][T16582] netlink_sendmsg+0x689/0xd70 [ 873.239487][T16582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.239518][T16582] ____sys_sendmsg+0xaaf/0xc90 [ 873.239536][T16582] ? copy_msghdr_from_user+0x10b/0x160 [ 873.239560][T16582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.239588][T16582] ___sys_sendmsg+0x135/0x1e0 [ 873.239612][T16582] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.239643][T16582] ? __pfx_lock_release+0x10/0x10 [ 873.239666][T16582] ? trace_lock_acquire+0x14e/0x1f0 [ 873.239693][T16582] ? __fget_files+0x206/0x3a0 [ 873.239715][T16582] __sys_sendmsg+0x16e/0x220 [ 873.239737][T16582] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.239775][T16582] do_syscall_64+0xcd/0x250 [ 873.239797][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.239819][T16582] RIP: 0033:0x7ff80c38d169 [ 873.239833][T16582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.239849][T16582] RSP: 002b:00007ff80a1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.239865][T16582] RAX: ffffffffffffffda RBX: 00007ff80c5a5fa0 RCX: 00007ff80c38d169 [ 873.239876][T16582] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 873.239886][T16582] RBP: 00007ff80a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 873.239896][T16582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.239906][T16582] R13: 0000000000000000 R14: 00007ff80c5a5fa0 R15: 00007ffdea5d6a78 [ 873.239928][T16582] [ 873.649375][ T3591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 874.195033][ T5835] gspca_vc032x: reg_w err -110 [ 874.203040][ T5835] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 874.575512][T16602] pim6reg1: entered allmulticast mode [ 874.629639][T16603] pim6reg1: entered promiscuous mode [ 875.089824][T16617] fuse: Bad value for 'fd' [ 875.689736][T12000] usb 4-1: USB disconnect, device number 9 [ 875.942692][T16634] 9pnet_fd: Insufficient options for proto=fd [ 875.991271][T16634] 9pnet_fd: Insufficient options for proto=fd [ 876.329142][T12000] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 876.488889][T12000] usb 2-1: device descriptor read/64, error -71 [ 876.496773][T16638] wg1 speed is unknown, defaulting to 1000 [ 876.512395][T16638] wlan0 speed is unknown, defaulting to 1000 [ 876.759136][T12000] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 877.489941][T12000] usb 2-1: device descriptor read/64, error -71 [ 877.609034][T12000] usb usb2-port1: attempt power cycle [ 877.673454][T16654] FAULT_INJECTION: forcing a failure. [ 877.673454][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 877.776039][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.2.2758 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 877.776063][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 877.776073][T16654] Call Trace: [ 877.776079][T16654] [ 877.776086][T16654] dump_stack_lvl+0x16c/0x1f0 [ 877.776118][T16654] should_fail_ex+0x50a/0x650 [ 877.776142][T16654] ? fs_reclaim_acquire+0xae/0x150 [ 877.776169][T16654] ? tomoyo_encode2+0x100/0x3e0 [ 877.776192][T16654] should_failslab+0xc2/0x120 [ 877.776213][T16654] __kmalloc_noprof+0xcb/0x510 [ 877.776231][T16654] ? d_absolute_path+0x137/0x1b0 [ 877.776252][T16654] ? rcu_is_watching+0x12/0xc0 [ 877.776273][T16654] tomoyo_encode2+0x100/0x3e0 [ 877.776300][T16654] tomoyo_encode+0x29/0x50 [ 877.776321][T16654] tomoyo_realpath_from_path+0x19d/0x720 [ 877.776351][T16654] tomoyo_path_number_perm+0x248/0x590 [ 877.776371][T16654] ? tomoyo_path_number_perm+0x235/0x590 [ 877.776394][T16654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 877.776438][T16654] ? __pfx_lock_release+0x10/0x10 [ 877.776462][T16654] ? trace_lock_acquire+0x14e/0x1f0 [ 877.776485][T16654] ? lock_acquire+0x2f/0xb0 [ 877.776506][T16654] ? __fget_files+0x40/0x3a0 [ 877.776526][T16654] ? __fget_files+0x206/0x3a0 [ 877.776546][T16654] security_file_ioctl+0x9b/0x240 [ 877.776571][T16654] __x64_sys_ioctl+0xb7/0x200 [ 877.776597][T16654] do_syscall_64+0xcd/0x250 [ 877.776621][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.776643][T16654] RIP: 0033:0x7fe72e38d169 [ 877.776658][T16654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.776673][T16654] RSP: 002b:00007fe72f1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.776690][T16654] RAX: ffffffffffffffda RBX: 00007fe72e5a5fa0 RCX: 00007fe72e38d169 [ 877.776702][T16654] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 877.776712][T16654] RBP: 00007fe72f1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 877.776722][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.776732][T16654] R13: 0000000000000000 R14: 00007fe72e5a5fa0 R15: 00007ffc302a9c48 [ 877.776756][T16654] [ 877.825733][T16654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 877.829705][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.889770][T16654] ------------[ cut here ]------------ [ 877.890419][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.895278][T16654] platform vkms: [drm] vblank wait timed out on crtc 0 [ 877.899909][ C0] hrtimer: interrupt took 121107725 ns [ 877.999963][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.037342][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.123841][T12000] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 878.156784][T12000] usb 2-1: device descriptor read/8, error -71 [ 878.189364][ T25] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 878.190282][T16654] WARNING: CPU: 0 PID: 16654 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550 [ 878.208362][T16654] Modules linked in: [ 878.212350][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.2.2758 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 878.224005][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 878.234137][T16654] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 878.240133][T16654] Code: 85 ed 0f 84 54 01 00 00 e8 59 f4 58 fc 4c 89 e7 e8 d1 3c 8b 00 89 e9 4c 89 ea 48 c7 c7 80 de e8 8b 48 89 c6 e8 0d 23 19 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 2e f4 58 fc 90 48 8d 7b 08 48 b8 00 [ 878.262211][T16654] RSP: 0018:ffffc90004247b28 EFLAGS: 00010286 [ 878.268335][T16654] RAX: 0000000000000000 RBX: ffff888025540000 RCX: ffffffff817a1229 [ 878.276401][T16654] RDX: ffff888030a60000 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 878.284532][T16654] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 878.293323][T16654] R10: 0000000000000001 R11: 0000000000000006 R12: ffff888142f83010 [ 878.301410][T16654] R13: ffff888024a43d00 R14: 1ffff92000848f67 R15: 000000000000c9fd [ 878.309624][T16654] FS: 00007fe72f1a86c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 878.318602][T16654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.326074][T16654] CR2: 0000001b2f51eff8 CR3: 0000000012974000 CR4: 00000000003526f0 [ 878.334170][T16654] Call Trace: [ 878.337532][T16654] [ 878.340566][T16654] ? __warn+0xea/0x3c0 [ 878.344666][T16654] ? preempt_schedule_notrace+0x62/0xe0 [ 878.351094][T16654] ? drm_wait_one_vblank+0x334/0x550 [ 878.357699][T16654] ? report_bug+0x3c0/0x580 [ 878.362305][T16654] ? handle_bug+0x54/0xa0 [ 878.366662][T16654] ? exc_invalid_op+0x17/0x50 [ 878.371439][T16654] ? asm_exc_invalid_op+0x1a/0x20 [ 878.376527][T16654] ? __warn_printk+0x199/0x350 [ 878.382110][T16654] ? __warn_printk+0x1a6/0x350 [ 878.386899][T16654] ? drm_wait_one_vblank+0x334/0x550 [ 878.392282][T16654] ? drm_wait_one_vblank+0x333/0x550 [ 878.397604][T16654] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 878.403348][T16654] ? mark_held_locks+0x9f/0xe0 [ 878.408191][T16654] ? __pfx_autoremove_wake_function+0x10/0x10 [ 878.415053][T16654] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.420530][T16654] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 878.426408][T16654] ? drm_vblank_get+0x150/0x280 [ 878.431387][T16654] drm_fb_helper_ioctl+0x156/0x1a0 [ 878.436544][T16654] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 878.442953][T16654] do_fb_ioctl+0x3d4/0x7d0 [ 878.447418][T16654] ? __pfx_do_fb_ioctl+0x10/0x10 [ 878.452469][T16654] ? do_vfs_ioctl+0x513/0x1990 [ 878.458724][T16654] ? selinux_file_ioctl+0x180/0x270 [ 878.464053][T16654] fb_ioctl+0xe5/0x150 [ 878.468154][T16654] ? __pfx_fb_ioctl+0x10/0x10 [ 878.473627][T16654] __x64_sys_ioctl+0x190/0x200 [ 878.478422][T16654] do_syscall_64+0xcd/0x250 [ 878.483037][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.489044][T16654] RIP: 0033:0x7fe72e38d169 [ 878.493487][T16654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.515243][T16654] RSP: 002b:00007fe72f1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.523751][T16654] RAX: ffffffffffffffda RBX: 00007fe72e5a5fa0 RCX: 00007fe72e38d169 [ 878.531889][T16654] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 878.531939][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 878.540155][T16654] RBP: 00007fe72f1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 878.553227][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.555959][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.561565][T16654] R13: 0000000000000000 R14: 00007fe72e5a5fa0 R15: 00007ffc302a9c48 [ 878.581613][T16654] [ 878.584655][T16654] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 878.591926][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.2.2758 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 878.602672][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 878.612700][T16654] Call Trace: [ 878.615955][T16654] [ 878.618874][T16654] dump_stack_lvl+0x3d/0x1f0 [ 878.623442][T16654] panic+0x71d/0x800 [ 878.627316][T16654] ? __pfx_panic+0x10/0x10 [ 878.631710][T16654] ? show_trace_log_lvl+0x29d/0x3d0 [ 878.636893][T16654] ? check_panic_on_warn+0x1f/0xb0 [ 878.641996][T16654] ? drm_wait_one_vblank+0x334/0x550 [ 878.647283][T16654] check_panic_on_warn+0xab/0xb0 [ 878.652202][T16654] __warn+0xf6/0x3c0 [ 878.656078][T16654] ? preempt_schedule_notrace+0x62/0xe0 [ 878.661601][T16654] ? drm_wait_one_vblank+0x334/0x550 [ 878.666867][T16654] report_bug+0x3c0/0x580 [ 878.671176][T16654] handle_bug+0x54/0xa0 [ 878.675309][T16654] exc_invalid_op+0x17/0x50 [ 878.679789][T16654] asm_exc_invalid_op+0x1a/0x20 [ 878.684620][T16654] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 878.690496][T16654] Code: 85 ed 0f 84 54 01 00 00 e8 59 f4 58 fc 4c 89 e7 e8 d1 3c 8b 00 89 e9 4c 89 ea 48 c7 c7 80 de e8 8b 48 89 c6 e8 0d 23 19 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 2e f4 58 fc 90 48 8d 7b 08 48 b8 00 [ 878.710081][T16654] RSP: 0018:ffffc90004247b28 EFLAGS: 00010286 [ 878.716124][T16654] RAX: 0000000000000000 RBX: ffff888025540000 RCX: ffffffff817a1229 [ 878.724072][T16654] RDX: ffff888030a60000 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 878.732016][T16654] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 878.739975][T16654] R10: 0000000000000001 R11: 0000000000000006 R12: ffff888142f83010 [ 878.747921][T16654] R13: ffff888024a43d00 R14: 1ffff92000848f67 R15: 000000000000c9fd [ 878.755882][T16654] ? __warn_printk+0x199/0x350 [ 878.760623][T16654] ? __warn_printk+0x1a6/0x350 [ 878.765374][T16654] ? drm_wait_one_vblank+0x333/0x550 [ 878.770650][T16654] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 878.776262][T16654] ? mark_held_locks+0x9f/0xe0 [ 878.781004][T16654] ? __pfx_autoremove_wake_function+0x10/0x10 [ 878.787050][T16654] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.792231][T16654] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 878.798014][T16654] ? drm_vblank_get+0x150/0x280 [ 878.802847][T16654] drm_fb_helper_ioctl+0x156/0x1a0 [ 878.807939][T16654] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 878.813550][T16654] do_fb_ioctl+0x3d4/0x7d0 [ 878.817946][T16654] ? __pfx_do_fb_ioctl+0x10/0x10 [ 878.822865][T16654] ? do_vfs_ioctl+0x513/0x1990 [ 878.827622][T16654] ? selinux_file_ioctl+0x180/0x270 [ 878.832803][T16654] fb_ioctl+0xe5/0x150 [ 878.836850][T16654] ? __pfx_fb_ioctl+0x10/0x10 [ 878.841507][T16654] __x64_sys_ioctl+0x190/0x200 [ 878.846251][T16654] do_syscall_64+0xcd/0x250 [ 878.850735][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.856607][T16654] RIP: 0033:0x7fe72e38d169 [ 878.860997][T16654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.880581][T16654] RSP: 002b:00007fe72f1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.888971][T16654] RAX: ffffffffffffffda RBX: 00007fe72e5a5fa0 RCX: 00007fe72e38d169 [ 878.896917][T16654] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 878.904863][T16654] RBP: 00007fe72f1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 878.912807][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.920753][T16654] R13: 0000000000000000 R14: 00007fe72e5a5fa0 R15: 00007ffc302a9c48 [ 878.928705][T16654] [ 878.931885][T16654] Kernel Offset: disabled [ 878.936261][T16654] Rebooting in 86400 seconds..