last executing test programs: 3m23.931852186s ago: executing program 3 (id=3216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0x4001, 0x80000101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x23425}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffffd0, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x61}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005", @ANYRES32], 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xffffffc0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x6060b4d6e6bf8352) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x29, 0xfd, 0x1, 0x4857, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x8000, 0x88, 0x8, 0x2}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x42, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='contention_end\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000b40)={0x1000, "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"}) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f00000001c0)={0x0, 'nr0\x00', {0x1}, 0x696f}) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x30, r1, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'c\x01\x00'/15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x30}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x4010) 3m19.965703655s ago: executing program 3 (id=3224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) prlimit64(r0, 0x6, &(0x7f0000000000)={0x6f8d66de, 0x7}, &(0x7f0000000040)) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}], 0x1, 0x7fff, 0x0, 0x0, 0x0, 0x3c}) writev(r5, &(0x7f0000000100)=[{0x0}], 0x1) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.026085487s ago: executing program 3 (id=3231): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0xff) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r5, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) (async) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) ioctl$TUNGETFILTER(r6, 0x801054db, 0x0) r7 = getpgid(0x0) capset(&(0x7f0000000100)={0x0, r7}, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x8000081, 0xfffffffb, 0x80000000}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000feffffff009c4356bbe4000000000018", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000007d000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x48082, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fcntl$setstatus(r10, 0x4, 0x2400) 3m16.459796938s ago: executing program 3 (id=3232): clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000c80)={0x1, 0x10000}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x49, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x0, 0xfc}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2107, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0xac7d90ea84bdeba3}]}}}]}, 0x3c}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "e672db30"}]}}, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x52ad, 0x1993, 0x6, &(0x7f0000000cc0)={[0x2]}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xd8, 0x9a, 0x40, 0x20, 0x2013, 0x259, 0x6e0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0xeb, 0x7f, 0x80, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0x25, 0xc8, 0x4d, 0xf, [], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0x1, 0x5, 0x1, [@generic={0x3, 0x9, "ce"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0x4, 0x3}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x7f, 0x9, 0x3, 0xff, 0x8}, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x6, [{0xcf, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, {0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "a24ec38e793cd9b02c20cd3cc8c84667ce7aa6ddfca15d621707ffa7c1f1407c2f2e70eb67b9e6debc9b5946e0bc01b7799a75a993afedeb7bda3b551f75f8ffca7d4f5e975031b1033921c3abc4c8593a5e954c485210f8074001481b802d425b0d655545b54a9584231e36732384f86d83f10f1a8b319b8243c0b937ca447d43447aa1cadea516d137c867a9a0fed722188a566a6943e2727012ea91dd265a9a74e3a61638773b86228d8109057c177749d8cea54ff4b91a31bc6d0e9f7ee5f257820912306c457417dc1cf26378573c6736205acd9c97005c437daf4ce17ad21d86740e0f4d0d001a07f4806910cd"}}, {0xc3, &(0x7f0000000b00)=@string={0xc3, 0x3, "3f33f04020f1c0c4fb2cfd2dc95a7282c8b5f20a0df260d3179bdf1e6d51f5a45495f924a17de73cb4cae483fdf6e2f651679b6c2fd197d81551a3d994a4cc589a0286b9fddb3b1248778d95f4a085a1c71297b179b3c44bb59ff9ba4f22a19cd7723efa5eebea91a7e16d02aec66f0cc585131d137755d83980f12cf15d1129ef1e79c1e6fba0e3d99f54dc16506fdc30f29d870f01751555f0e48705cbd9eaa128963fff22917a6e4d134b99f8093f7f661ee5dc0af3a71da9c2e0a288393690"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x102, &(0x7f0000000000)=@string={0x102, 0x3, "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"}}]}) 3m12.616484028s ago: executing program 3 (id=3243): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3m10.705921898s ago: executing program 3 (id=3247): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000340)={0x10}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r11 = socket$kcm(0x10, 0x1, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="5c00000035006bab9e3fe3d86e6c1d000014a10dfe00005a000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf936701006289b4fa51f60a64c9f4080003000601000004000200110000", 0x5f}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20044041) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r14 = dup(r13) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_GETXATTR(r14, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r14]) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d \x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 2m55.415506783s ago: executing program 32 (id=3247): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000340)={0x10}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r11 = socket$kcm(0x10, 0x1, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="5c00000035006bab9e3fe3d86e6c1d000014a10dfe00005a000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf936701006289b4fa51f60a64c9f4080003000601000004000200110000", 0x5f}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20044041) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r14 = dup(r13) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_GETXATTR(r14, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r14]) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d \x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 44.506096621s ago: executing program 1 (id=3492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000480)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x18) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000300), 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$sndseq(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c4cd38c9633b5540c05e8c011f725abcc88b273e47bbde362c406f9ab6128c347d7ad0000"]) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000003000000feff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000000000003"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) 40.601135044s ago: executing program 1 (id=3503): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) unlinkat(r3, 0x0, 0x200) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nr0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 37.749717998s ago: executing program 1 (id=3509): socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000280)=0x14) read(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='cpuhp_multi_enter\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x400, 0x1, 0x2, 0x1, 0x1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYRESOCT=r9], 0x0) 34.373939009s ago: executing program 1 (id=3514): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x40001) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000100)=""/208) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0/file0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800e53700000000000000000014000780080011400000000005001500020000000500050000000000050001000700000005000400000000000900020073797a31000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 32.957973327s ago: executing program 1 (id=3516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xffffffff}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x40, 0x3, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x427, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x10000, 0x8, 0xfff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 29.126101578s ago: executing program 1 (id=3528): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd24, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x400809a) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000001af92219195e229aa6094554ca7e1da6f3204c4765fe6e842cad60ef3b9953cea1e8c84a6f38bbaf4e63", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 16.98476494s ago: executing program 2 (id=3553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2a15402, &(0x7f0000000340)='barrier\x19\xfc\xc5\x1b\xb7\xe14\xedka\xff\xedx\x8f\xba\x8a\xf9\x8c\x02\r\xda\x83:\xe8\x82\x8fX\rd\xf7\xa3?+\x95\x976U\xac\xa3\xc7\xd4\x12b\xa8\x7f5gL\x1bw\x14\xe6\x04[\xa9v\xa9\xb3\x87\x9f\xce\xdb\xf6\xb7\xf1\xb7\x93;^\xdd=\xd3\x8d\x91U\xe8\x8eP\xb8]\xc0A\xa7[\xbbiU\xb8\xf0*\x0e\xaa\xeet*&\x95') syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x98, 0x7, 0xffffffffffffffff, 0x0, 0xff5cf8d14f463131, 0x0, 0x4, 0x29f340, 0x334e8b}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, &(0x7f0000000600)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x40, 0xfffffffb, 0x3, {0x40000, 0x7fff, 0x5, 0xffff, 0x4, 0x1, 0x0, 0x11, 0x0, 0x1000, 0x0, 0x0, 0xee01, 0xfffffff9, 0x1}}}}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x795be000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000280)) lstat(&(0x7f0000007500)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x800) 12.715845309s ago: executing program 2 (id=3558): syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x200) socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x1c, 0x7, 0x6, 0x101, 0xfffffc00, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 12.714959249s ago: executing program 4 (id=3559): r0 = syz_open_dev$video(0x0, 0x485, 0x40500) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x78) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0xa, 0x80000001, 0x2009, 0x9, 0xc, 0x3, 0x0, 0x6}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x10000000, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x8}, 0x8) mknod$loop(0x0, 0x0, 0x1) inotify_init() r6 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x100) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000080)={0x700, 0x35315258, 0xf00, 0x870, 0x0, @stepwise}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x0, [0x6, 0x7]}, {0x80000000, 0x0, 0x0, [0x1, 0x6]}, 0x0, [0x637ac06e, 0xb]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000003100"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.031297205s ago: executing program 5 (id=3560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) unlinkat(r3, 0x0, 0x200) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nr0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 10.813993866s ago: executing program 2 (id=3561): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="014b9f"], 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = gettid() r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x108) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioperm(0x64b8, 0x9, 0x7) bpf$MAP_CREATE_TAIL_CALL(0x1d, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 10.547144256s ago: executing program 5 (id=3563): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000bfd50000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'memory'}]}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f0000006f00)="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", 0x2000, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="3e8658"]) 10.492126705s ago: executing program 4 (id=3564): syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x200) socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x1c, 0x7, 0x6, 0x101, 0xfffffc00, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 9.919383286s ago: executing program 4 (id=3565): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) 9.521660122s ago: executing program 5 (id=3566): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_kvm_add_vcpu$x86(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000004c0)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) r6 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000280)='nl802154\x00', &(0x7f0000000a40)="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", 0x7c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000000000000000000004000180"], 0x18}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000080)={0x10201, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0xffffff8b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) close(r2) 9.379183426s ago: executing program 2 (id=3568): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x8000000003, 0x228000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80002, 0xc) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e010000092100000001220500090581", @ANYRES32=r1], 0x0) r2 = msgget$private(0x0, 0x5) r3 = getuid() getgroups(0x7, &(0x7f0000000f80)=[0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01]) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e700000010a0d76124aaa29d4880000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0xd}, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_ZEROPAGE(r5, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000954000/0x3000)=nil, 0x3000}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file1\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001040)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001080)={0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000010c0)={{0x1, r3, r4, r9, r10, 0x24, 0x3}, 0x0, 0x0, 0x9, 0x2, 0x4e24, 0x8, 0x752dd9bc, 0xf, 0x4, 0x5, r11, r12}) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r13}, 0x18) r14 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r14, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r14, 0x3000) 8.747811871s ago: executing program 4 (id=3569): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000079, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20000005, 0x0, 0x0, 0x61900, 0x2a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x1cc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x40000011) ioctl$TCFLSH(0xffffffffffffffff, 0x8910, 0xbffffffffffffffb) 7.68703522s ago: executing program 5 (id=3570): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 2) 7.614431503s ago: executing program 4 (id=3571): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x8000000003, 0x228000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80002, 0xc) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e010000092100000001220500090581", @ANYRES32=r1], 0x0) r2 = msgget$private(0x0, 0x5) r3 = getuid() getgroups(0x7, &(0x7f0000000f80)=[0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee01]) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e700000010a0d76124aaa29d4880000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0xd}, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_ZEROPAGE(r5, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000954000/0x3000)=nil, 0x3000}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file1\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001040)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001080)={0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000010c0)={{0x1, r3, r4, r9, r10, 0x24, 0x3}, 0x0, 0x0, 0x9, 0x2, 0x4e24, 0x8, 0x752dd9bc, 0xf, 0x4, 0x5, r11, r12}) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r13}, 0x18) r14 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r14, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r14, 0x3000) 7.293147508s ago: executing program 5 (id=3572): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000010000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x3227, &(0x7f0000000180)={0x0, 0x7206, 0x0, 0x8003, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000042c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 5.879567103s ago: executing program 2 (id=3574): syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x200) socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x1c, 0x7, 0x6, 0x101, 0xfffffc00, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 5.530811439s ago: executing program 2 (id=3575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000480)="12673b114d945cbd9eff645efb2af0881c7e3a30bd", 0x15}], 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x4100) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000001200090002000000", 0x24) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) socket(0xa, 0x3, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x240, 0x0) timer_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r6, r7+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffdffffffd, 0x0, 0x8, 0xffffffff80000001, 0x2}, 0x0, &(0x7f0000000280)={0x3ff, 0x2000, 0x0, 0xc, 0x0, 0xff, 0x466, 0x7}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x70, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.653244901s ago: executing program 0 (id=3576): mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 2) 4.333876212s ago: executing program 0 (id=3577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev, @local}, &(0x7f0000000200)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = eventfd2(0x0, 0x0) writev(r2, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x2a, 0x80000, 0x0, &(0x7f00000002c0)) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 4.320765215s ago: executing program 4 (id=3578): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) 3.883204278s ago: executing program 0 (id=3579): syz_emit_ethernet(0x0, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f0000000500)="fc1c286ff80fd31416c6b67b60277a7c000000000000000067022ba0a24baaff5699ae75052d7ca4edd96b8e80129ade2599273f7203c0f00fd13d6ffb5c8541c66e5cfbc5c5964c25da9d33a3802067", 0x50, 0x0, 0x0, 0x0) 2.645278304s ago: executing program 0 (id=3580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002000010027bd7000fddbdf250a108010000000081600000014000200fc02000000000000000000000020"], 0x30}}, 0x40080) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) userfaultfd(0x801) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="03000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000020000000900010073797a32000000000900030073797a3100000000"], 0x2c}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r9, &(0x7f0000004980), 0x0, 0x20008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000089f000/0x18000)=nil, &(0x7f00000014c0)=[@text16={0x10, &(0x7f0000000440)="6766c7442400009800006766c7442402327400006766c7442406000000002e627700363e360f2086baa10066b80038000066eff32e0f076567660f38828a65e20000650f01df0f7e07f40fc71ab821010f00d8", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.971089642s ago: executing program 0 (id=3581): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000089}, 0x24000080) r4 = socket(0x15, 0x800, 0x1c00) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getsa={0x54, 0x12, 0x300, 0x70bd29, 0x25dfdbfc, {@in=@empty, 0x4d6, 0x2, 0xff}, [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@multicast2, 0x0, 0xa}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4050) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10020, 0x0) 949.984889ms ago: executing program 0 (id=3582): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f00000001c0)={0x20, 0xd, 0x5, "fcfa7eca9a"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=3583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x8b, "5037442413078de3d800d2da4c8f0af5748ed861b69919ae0fb5bdffaea4593e1456a3f9e7fda7af52164a15b4166cc432ddd04c2068acfa00bed92bd4366214ccb574d04d5449079b2ecdfc7d5fdee1cb5d1a1c07964b2b5c188bd11b4bae2a3fcb84bac78040ab7c3cc4bfca57fea08627ac6ca3a488cc1013cadbf497f486a5ce128d294075b72b6b78"}, &(0x7f0000000000)=0x93) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)={0x318, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa255861a661c4038c587fd2b713d51951cc13119d59ac83917d117a1008fc62"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @remote, 0xffffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xd, @empty, 0x83}}]}, {0x4}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bb0bf33ec5ca402b26fc0daa41bf51098951a74933cddb762db15af6d64fdc15"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2eeafd37c18c76595e25d3c6de55503d5cb3362d927e08060eee4f4bde7484e8"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000000, @loopback, 0x73dbce72}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x1b0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x400, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x401}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6e15b7798fd18c0e1705a4467e335362e6d9f5d966c1465e1b26db40555567e"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x1, 0x200000, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x318}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001a40)={0x0, @initdev, @multicast2}, &(0x7f0000001a80)=0xc) sendmmsg$inet6(r2, &(0x7f0000001c00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xa4, @remote, 0x404f97f}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="0ca568543699ab2bff42688f495ed2541e7d6557120689e20045a82beff0f85c3f3c355ea2bbb008c9c7aab651be", 0x2e}], 0x1, &(0x7f0000000380)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @pad1, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x8e8}]}}}], 0x30}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x1, @mcast2, 0x3}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000004c0)="ccb30a33079a311187f25dd8fd2f028d0abd598bd987f385954bebb51f3dae9c0cb773e62232311517b0959aa672d0518a59447bd1e87a49ad0e480a5891983b6eb4592364720d708b9eee9546c13479fde783be78b64e25b75894fa016807ceb75d8bd292e262154ee58ace158b494bddf0da0589d07f825bf258bb7d85582616830e8255684cab89c671dea2aa0ed2aceac81eb17109f622970301ae39dafe16e597512f75549369997632f0", 0xad}, {&(0x7f0000000580)="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", 0xfa}, {&(0x7f0000000400)="52de62cb26f9622c230d481a0e6788bf1a58ccb1ab86c57edcbcb6ad191a170b4447e48822383c734b1e675553983e86581c1e0fff35c9a91a4dc359b88446b2d9981f762ec7c5576be104a5aec2aef724eff62b1a6ea72d0e2d64efe80e01c8d954ee95df85f4497707ffaa5411", 0x6e}, {&(0x7f0000000680)="966a59d350744c16934d48493c721fd02b", 0x11}, {&(0x7f00000006c0)="508e5ba86405dbb1363ec95d556fc317da882d72", 0x14}, {&(0x7f0000000700)="5f60ae446162e09e6ef1a2bbfdc2df10ed03943189bcf765f5b171b154249d590c77f1c191bbc99982dbd756c7b16206d69e56a3f6bede6b3b9e3e972f7c30", 0x3f}], 0x6, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x6, 0xa, 0x0, 0x1, 0x0, [@loopback, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xa1}}, @dstopts={{0x30, 0x29, 0x37, {0x3a, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x101}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7f, 0x5, [0xfffffffffffffff7]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x30}, @generic={0x64}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xb7, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}]}}}], 0x158}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000980)="bbb1a0587a9318c89c22f009b179f774feaf7c0b55a996757ce8d4b5b472b025b5a74362b8199df716d73e6a63760e1d985c9874fbeacde8cd47af4a0f08018fff0acc9db82f22ab08c1c2b91422c990de8c56ed0575aa0c7933cfbbcc0fe78b699791ebe2ea2ae94ddbbaf6f35c536277c9a47cdff49cb9afdb33b116c65cc23ef979ac1db807bdd10331f9ff57bacc71bfbccaa413e3a7f12f64fb6104baa91a1a0d28855fefa2d4fe70ab1b48f41a5906a4a0ce1f1bd019973ddb0f42851c710f5f57c98df0dc13b8044733e5921c02b2f7da316129b328da", 0xda}, {&(0x7f0000000a80)="c30a950d7cb9179867092350ae91cafebe36e71c23e36ae6718ab348e382279911a2325252eadd0ccd3f8cdd435b12f0b95e122fcdb0f56910fd719bec963d1f45c640bd3b229cdb808a6e8acd76305e18788cd6ebe50dbf0d88600ef15f6cdc63104e7df90adcd55dcb6c57bfe96a48d1e7117c029ffd26752688a0b933740d39c0239c557e177fc13e448e540b25", 0x8f}, {&(0x7f0000000b40)="ed6208ed34e1a1c99625eb1a5226708cc8212d0a15eb935f8952a3ccc42e66a4c96e6fa27d1dde425f6868043e5ce0965390d0977398873c19a8d8cfa82703841bd5bedb269ea5f5aff9cd8ab53a54a523bf3683b8a93455d85cc9a6d4d96d5a2f2245a8fcba35ec5773b846a807298ec0e2", 0x72}, {&(0x7f0000000bc0)="6f5c2a328b45c04823a03465f2c7af3aa470150e32d0a5cc76fe09d403fdd6aab906df9b2ca41608f60869987a9ed731e95fbebe55b12b223cb76878cc82a7f6000d39a2b562610d845b9abfb322faf18688a3723afd605262a086d8c149ad68a1483bfd3b097b43aa1fcd5437922c842ccc5a89d320379bc9b0aba3c21c5b1a913f3dc2ab91c3e4ed05adbfd21860d4c01637bb2c6209bf9833a22795a56aa54d7f98df6d63567dc8348d2525b9a20500b97c2dd001eddccd2ff6a3d43a0d5bac3f8a4a212b211960267074e0e7be9de94294b54d78939bb80f8eeeb267aabe", 0xe0}], 0x4, &(0x7f0000000d00)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2b, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0xe7}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x98}}, {{&(0x7f0000000dc0)={0xa, 0x4e23, 0x5c55e707, @private2, 0x3}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000e00)="68ca547b03b451c774c3569c87273354c517e7a0b40385c559639067498aa911dfa17d1955cf7e62408b98fa993f5132c32e05826500d2ce9cadf8d89a5788550f9bfe68e1262d500d95ecf4ec3b831c8b296d68edbe271d3d0d234e214d4082f708a5ec22f1e35412e05458125d9c6777c2213ea211d1327990ff68d36b4b14b8e84c637662af7bdb94522b2aefed184020a08f3b8a93c8418b4392f3121133e94e60e558fb317ef801c7a02f8e18d99d0932ab91ec01443cf5a109e330120713f60fad26e20a2b5abc6ce8d70f5d3d7889d338", 0xd4}, {&(0x7f0000000f00)="79172c5e315c5de5b3e2aa85735347112a06af9b18f91b9d19d8ea105d675f745e37b83ada79b04de9554e49e8702708e12e18fe6dcf7e202fd85fa450c63f258389303c5ca537dd727e8e91e583f338a5664420613f06ae", 0x58}], 0x2}}, {{&(0x7f0000000fc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000001000)="0374335f9f2706a2465b402772b75a3ddedb9b14c02c93b51f84fdc34ed212623e1ff30d8b92f4b3fb4717656be3c0e9f03f", 0x32}, {&(0x7f0000001040)="01b4a5c8d7089ae8a43c5929b0654357f381bbacb468ad1660421cff356b05e44ca4bf100369b6f9da989066b0de6eddf4088bc3d38067470cc8bc77a9920d35a4f80dd75114f2b101022e92bc5459225549a8c92f0347f9df6bdb59ce7db5a611a2118a22d334eb2b4a106a2efa77ceb57f11187ae45fd2f7d64c98fa609412f49ebf126b1b11d46937eec0f50510ca41a962906943c41e6e48110b96209cae1fa0924d36ddd21a96710fea20526b009fb45a0fa38125b310c1ff5cfff7c5c8dea80c", 0xc3}], 0x2, &(0x7f0000001180)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x5c, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x3, [0x400, 0x3, 0x9]}}, @generic={0x9, 0x39, "0049142c76f2a6697db79d719631149ce6e4cd234b82ebd9e516f6c4e2aa4a3c086cb741e951024abdccad031dba15968fdb666ed709f421a6"}, @pad1]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x21, 0x5, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x2, [0x3, 0x3]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xb}, @jumbo={0xc2, 0x4, 0x4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffff01}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0xad, 0xc, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x3, 0x10, [0x80, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x0, 0x9, 0x4]}}, @enc_lim, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x6c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xb1}, @padn={0x1, 0x1, [0x0]}]}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001480)="5c5af1209aa0ba93803d83422d39ee7b719654e56f2c4d330c195b70f806d077670c6db244237520efaa0a8c07e3a4ea445d8561eae4d34f4a78fa3d084636a44db2a408e2d31cb6f6522a3c3ffaf07856c5a7c25ebea312e758481561560b850fe8b6947ff15e42e49236afdbcaff3da443933fe7b327f2bae65edabcc63891b9359889ddb9477d63c61bcf57396045d387326afe01908d62a1f2651aec590d6781a7466093a5f969f907afae09144738e9e423fa8a6c7b1dcf758588043b2521d4fb", 0xc3}, {&(0x7f0000001580)="9cfe214c39babd0675a418cc68924c65d0c59ad9c4e2c9c00d2aaf6afb0a0a0702a1c9fe38dbf8cd18fe0615777972890404be11e61a22d2336e6b04faa0602e7c12", 0x42}, {&(0x7f0000001600)="1aa2338d0bad7dad5c203a5515a323bea8f63dfbedd8708e1aae4ed459a0c91dc721076e070595a47a6b1c7ccf8d82e7ed073838808126ee40b25e74a4460cd7efb641735439c8156751f8c5c853b68c2b855426", 0x54}], 0x3, &(0x7f0000001680)=[@dstopts={{0xa0, 0x29, 0x37, {0x11, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0xd}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x3, 0xa, 0xb, 0x1, [0xb, 0x48e8, 0x3, 0x4, 0xd]}}, @generic={0xa, 0x12, "9765b0b60b021e363d97f0fcaf60277eec2d"}, @ra={0x5, 0x2, 0xe}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x800, [0x4f4, 0x3, 0x0, 0x2, 0x9]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0x6, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0xd8}}, {{&(0x7f0000001780)={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000019c0)=[{&(0x7f00000017c0)="e22b7ac9fa5eadd5bcb4f5261a86dfd4546b884d68a17d900567766aee81a7324e8e796e3decd50d4a2572e3854cd86497a65986d8fe", 0x36}, {&(0x7f0000001800)="631b8e95740bb205cfaf2ae8af070c8b4605d7f9b96574cf97fdbfe29e51c72f3c529f6ced35c9a6e16374ad06be2095a5ecf8bbd622c17e504714077835dee401bea70c8434ecc782c23eb539122f948768d518f63e9de6a6cba04ab81cbc71d3fa0627f8bbbb3b1bead4cbbc894f3f93f35d2ec8f873d028eb09726159f1245284cf2431a1b58f7770ec2fab219350f825cc0b02d1e1b746d32980ed76abdb663f2afdc790cc271768e52f", 0xac}, {&(0x7f00000018c0)="ef02a49a36aa4a0259ab2f73f5e83708c0fb73eb812a102591bc0de708856d374be7f3b2dbb435bbdbfaf8e25c46c37d9a568eb909e347edfe04d6835773a87f31cf65af45e74fbf3055a4f0e7b076da12083658fea81e0bd202aa", 0x5b}, {&(0x7f0000001940)="2c984547896fa837a898bdb34c5d8709ea5d212f69c47feff66062a8088bd990ed2621cf0670668ef5a4d1ac7607ef18223bef2327d4e5c30e", 0x39}, {&(0x7f0000001980)}], 0x5, &(0x7f0000001ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @hopopts={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@generic={0xf8, 0x3d, "f4019e4b650451a3fac5c4b44df6b5cfef35212735124316ac7075323e902cc3c29c4a5c045c5fce785a7ef61036d02201bdda55d6c52a25c72b4289b2"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x88, 0x10, 0x1, 0x1, 0x0, [@mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00', @empty, @private1]}}}], 0x138}}], 0x7, 0x50) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f0000001dc0)={0x80100, 0x4, 0x14}, 0x18) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r6) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r13, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): 24 comm="syz.1.3308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1575.493136][ T30] audit: type=1400 audit(1747630489.208:1070): avc: denied { write } for pid=19824 comm="syz.1.3308" name="file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1575.524343][ T30] audit: type=1400 audit(1747630489.238:1071): avc: denied { open } for pid=19824 comm="syz.1.3308" path="/576/file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1575.586055][T19834] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1575.638678][ T1205] usb 5-1: USB disconnect, device number 78 [ 1575.858304][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1575.875925][ T30] audit: type=1400 audit(1747630489.568:1072): avc: denied { ioctl } for pid=19840 comm="syz.4.3313" path="socket:[54075]" dev="sockfs" ino=54075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1577.337750][T19853] netlink: 'syz.4.3315': attribute type 10 has an invalid length. [ 1577.388340][T19853] team0: Device veth1_macvtap failed to register rx_handler [ 1578.099428][T12256] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1578.289547][T12256] usb 6-1: Using ep0 maxpacket: 16 [ 1578.308104][T12256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.328789][T12256] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1578.372914][T12256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.426372][T12256] usb 6-1: config 0 descriptor?? [ 1578.501154][T12256] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1578.538483][T12256] usb 6-1: No valid video chain found. [ 1578.956257][ T1205] usb 6-1: USB disconnect, device number 2 [ 1579.135327][ T30] audit: type=1400 audit(1747630492.848:1073): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1579.845439][ T30] audit: type=1400 audit(1747630493.548:1074): avc: denied { open } for pid=19866 comm="syz.5.3320" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1579.985379][ T30] audit: type=1400 audit(1747630493.698:1075): avc: denied { read } for pid=19873 comm="syz.4.3321" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1580.156777][ T30] audit: type=1400 audit(1747630493.698:1076): avc: denied { open } for pid=19873 comm="syz.4.3321" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1580.993243][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1581.145796][T19874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1581.653693][T19888] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 1581.720317][T19888] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1581.865826][T19883] bond20: (slave wlan0): Enslaving as an active interface with a down link [ 1581.960128][T19894] siw: device registration error -23 [ 1582.772465][T19868] delete_channel: no stack [ 1583.279309][T12256] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1583.385171][T19876] ALSA: mixer_oss: invalid OSS volume '' [ 1583.403848][T19909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.435842][T12256] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1583.453461][T12256] usb 5-1: too many endpoints for config 1 interface 0 altsetting 78: 238, using maximum allowed: 30 [ 1583.464491][T19909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1583.490069][T19909] bridge0: port 3(bond1) entered blocking state [ 1583.499296][T19909] bridge0: port 3(bond1) entered disabled state [ 1583.500691][T12256] usb 5-1: config 1 interface 0 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 1583.505866][T19909] bond1: entered allmulticast mode [ 1583.527998][T19909] bond1: entered promiscuous mode [ 1583.539840][T19909] bridge0: port 3(bond1) entered blocking state [ 1583.546362][T19909] bridge0: port 3(bond1) entered forwarding state [ 1583.571132][T12256] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1583.598451][T12256] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 1583.619204][T12256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.649878][T12256] usb 5-1: Product: 荬鹄쁍ᬛ珶쿿ޭ燾ᨨ睑㊼࿀箿鮧돒鋇̮贄댑刘鬠㬊讒阆ꀨ㹈ዪ椇减颯擩⣬➯퇘원졏朩戭ꎤ➋뤮烚碣숌漋꿞⤊䑇G쟭즧ⓓ௦놪ޫ莥ჹ⁁턤誗┫ [ 1583.696367][T12256] usb 5-1: Manufacturer: 룑䊐顒膐巌₾Ꮑ柈뱔ဇ䱖⩂䌻|ᨧ扔 [ 1583.715582][T12256] usb 5-1: SerialNumber: ခ [ 1583.818788][ T13] bridge0: port 3(bond1) entered disabled state [ 1584.203832][T12512] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1584.229989][T12512] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1584.808288][T12256] usb 5-1: USB disconnect, device number 79 [ 1585.009135][T19936] fido_id[19936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1585.159309][ T30] audit: type=1400 audit(1747630498.868:1077): avc: denied { write } for pid=19920 comm="syz.1.3328" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1585.387516][T19942] vivid-002: disconnect [ 1586.174048][T19960] netlink: 'syz.2.3327': attribute type 10 has an invalid length. [ 1586.187030][T19960] team0: Device veth1_macvtap failed to register rx_handler [ 1587.259724][ T30] audit: type=1400 audit(1747630500.978:1078): avc: denied { write } for pid=19961 comm="syz.5.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1587.308863][ T30] audit: type=1400 audit(1747630501.018:1079): avc: denied { read } for pid=19961 comm="syz.5.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1588.105485][T19953] syz.0.3333 (19953): drop_caches: 2 [ 1588.347344][ T30] audit: type=1400 audit(1747630502.038:1080): avc: denied { mount } for pid=19968 comm="syz.5.3338" name="/" dev="rpc_pipefs" ino=55310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1588.595714][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1588.739393][ T5865] usb 6-1: device descriptor read/64, error -71 [ 1589.227068][ T5864] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1589.359343][ T5865] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1589.399328][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 1589.410662][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.456999][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.499219][ T5864] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1589.519245][ T5865] usb 6-1: device descriptor read/64, error -71 [ 1589.534020][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.595162][ T5864] usb 5-1: config 0 descriptor?? [ 1590.291954][ T5864] hub 5-1:0.0: USB hub found [ 1590.306896][ T5865] usb usb6-port1: attempt power cycle [ 1590.451419][T19920] vivid-002: reconnect [ 1590.541798][ T5864] hub 5-1:0.0: 1 port detected [ 1590.719350][ T5865] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1590.760168][ T5865] usb 6-1: device descriptor read/8, error -71 [ 1591.333525][ T5865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1591.458203][T19981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1591.473765][ T30] audit: type=1400 audit(1747630505.188:1081): avc: denied { append } for pid=19980 comm="syz.5.3340" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1591.525689][T19981] ieee802154 phy0 wpan0: encryption failed: -22 [ 1591.553935][ T30] audit: type=1400 audit(1747630505.188:1082): avc: denied { ioctl } for pid=19980 comm="syz.5.3340" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1591.584120][ T5864] usb 5-1: USB disconnect, device number 80 [ 1591.590112][ T5917] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1591.605564][ T5865] usb 6-1: device not accepting address 6, error -71 [ 1591.629643][ T5865] usb usb6-port1: unable to enumerate USB device [ 1591.659199][ T30] audit: type=1400 audit(1747630505.238:1083): avc: denied { write } for pid=19980 comm="syz.5.3340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1591.699234][ T30] audit: type=1400 audit(1747630505.258:1084): avc: denied { read append } for pid=19980 comm="syz.5.3340" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1591.759535][ T30] audit: type=1400 audit(1747630505.258:1085): avc: denied { open } for pid=19980 comm="syz.5.3340" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1591.955403][ T30] audit: type=1400 audit(1747630505.668:1086): avc: denied { append } for pid=19985 comm="syz.1.3341" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1592.032712][T19990] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3343'. [ 1592.203995][T19993] Can't find a SQUASHFS superblock on nullb0 [ 1592.532606][T12512] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1592.577399][T20002] siw: device registration error -23 [ 1593.126935][T12512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1593.159308][T12512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.169079][T12512] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1593.198556][T12512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.403871][T12512] usb 6-1: config 0 descriptor?? [ 1593.656302][T12256] IPVS: starting estimator thread 0... [ 1593.750103][T20008] IPVS: using max 32 ests per chain, 76800 per kthread [ 1595.034585][ T30] audit: type=1400 audit(1747630508.748:1087): avc: denied { name_bind } for pid=20012 comm="syz.4.3349" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1595.141617][T12512] usbhid 6-1:0.0: can't add hid device: -71 [ 1595.151434][T12512] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1595.169267][ T1205] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1595.182212][T12512] usb 6-1: USB disconnect, device number 7 [ 1595.320664][ T5864] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1595.335469][ T1205] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1595.343652][ T1205] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1595.352656][ T1205] usb 2-1: config 0 has no interface number 0 [ 1595.358925][ T1205] usb 2-1: config 0 interface 41 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1595.370457][ T1205] usb 2-1: config 0 interface 41 altsetting 0 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 1595.394082][ T5865] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1595.480528][ T5864] usb 5-1: config 1 has no interfaces? [ 1595.491076][ T5864] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1595.509374][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.527558][ T5864] usb 5-1: Product: syz [ 1595.537650][ T5864] usb 5-1: Manufacturer: syz [ 1595.547747][ T5864] usb 5-1: SerialNumber: syz [ 1595.616765][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 1595.626924][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1595.647095][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1595.668854][ T5865] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1595.678886][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.729779][ T5865] usb 3-1: config 0 descriptor?? [ 1595.738121][T20017] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1595.763522][ T5865] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 1595.774214][ T5865] usb 3-1: No valid video chain found. [ 1595.918449][T20023] vivid-000: disconnect [ 1596.339929][ T1205] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0173, bcdDevice=51.e4 [ 1596.359224][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.383655][ T1205] usb 2-1: config 0 descriptor?? [ 1596.419992][ T1205] usb 2-1: can't set config #0, error -71 [ 1596.438156][ T1205] usb 2-1: USB disconnect, device number 49 [ 1596.452692][T20020] vivid-000: reconnect [ 1596.487616][T20031] FAULT_INJECTION: forcing a failure. [ 1596.487616][T20031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1596.542653][T20031] CPU: 1 UID: 0 PID: 20031 Comm: syz.1.3354 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1596.542679][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.542692][T20031] Call Trace: [ 1596.542699][T20031] [ 1596.542708][T20031] dump_stack_lvl+0x16c/0x1f0 [ 1596.542739][T20031] should_fail_ex+0x512/0x640 [ 1596.542770][T20031] should_fail_alloc_page+0xe7/0x130 [ 1596.542795][T20031] prepare_alloc_pages+0x3c2/0x610 [ 1596.542826][T20031] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1596.542865][T20031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1596.542886][T20031] ? find_held_lock+0x2b/0x80 [ 1596.542911][T20031] ? process_measurement+0x4a6/0x23e0 [ 1596.542938][T20031] ? down_write+0x14d/0x200 [ 1596.542960][T20031] ? up_write+0x1b2/0x520 [ 1596.542987][T20031] ? process_measurement+0x1e6/0x23e0 [ 1596.543013][T20031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1596.543036][T20031] ? policy_nodemask+0xea/0x4e0 [ 1596.543061][T20031] alloc_pages_mpol+0x1fb/0x550 [ 1596.543083][T20031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1596.543114][T20031] folio_alloc_noprof+0x20/0x2d0 [ 1596.543139][T20031] fuse_readdir_uncached+0x184/0x1af0 [ 1596.543163][T20031] ? find_held_lock+0x2b/0x80 [ 1596.543187][T20031] ? is_bpf_text_address+0x8a/0x1a0 [ 1596.543208][T20031] ? bpf_ksym_find+0x127/0x1c0 [ 1596.543232][T20031] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1596.543258][T20031] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 1596.543278][T20031] ? kernel_text_address+0x8d/0x100 [ 1596.543300][T20031] ? __kernel_text_address+0xd/0x40 [ 1596.543321][T20031] ? unwind_get_return_address+0x59/0xa0 [ 1596.543346][T20031] ? arch_stack_walk+0xa6/0x100 [ 1596.543382][T20031] ? __lock_acquire+0xaa4/0x1ba0 [ 1596.543407][T20031] ? _parse_integer_limit+0x17f/0x1d0 [ 1596.543435][T20031] ? _kstrtoull+0x145/0x200 [ 1596.543455][T20031] ? __pfx__kstrtoull+0x10/0x10 [ 1596.543479][T20031] ? look_up_lock_class+0x6b/0x150 [ 1596.543507][T20031] ? register_lock_class+0x41/0x4c0 [ 1596.543541][T20031] ? look_up_lock_class+0x59/0x150 [ 1596.543572][T20031] ? register_lock_class+0x41/0x4c0 [ 1596.543638][T20031] fuse_readdir+0x964/0x1ce0 [ 1596.543659][T20031] ? down_read_killable+0x220/0x4b0 [ 1596.543680][T20031] ? __pfx_down_read_killable+0x10/0x10 [ 1596.543699][T20031] ? avc_policy_seqno+0x9/0x20 [ 1596.543717][T20031] ? selinux_file_permission+0x11f/0x580 [ 1596.543755][T20031] iterate_dir+0x296/0xb40 [ 1596.543787][T20031] __x64_sys_getdents64+0x14d/0x2d0 [ 1596.543813][T20031] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1596.543842][T20031] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1596.543870][T20031] ? __pfx_filldir64+0x10/0x10 [ 1596.543896][T20031] ? syscall_trace_enter+0x1cb/0x260 [ 1596.543920][T20031] ? rcu_is_watching+0x12/0xc0 [ 1596.543947][T20031] do_syscall_64+0xcd/0x260 [ 1596.543977][T20031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.543997][T20031] RIP: 0033:0x7f9a6af8e969 [ 1596.544014][T20031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.544032][T20031] RSP: 002b:00007f9a6bdce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1596.544051][T20031] RAX: ffffffffffffffda RBX: 00007f9a6b1b5fa0 RCX: 00007f9a6af8e969 [ 1596.544065][T20031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1596.544077][T20031] RBP: 00007f9a6bdce090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.544089][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.544102][T20031] R13: 0000000000000000 R14: 00007f9a6b1b5fa0 R15: 00007fffcd868758 [ 1596.544132][T20031] [ 1596.895984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.169246][T12512] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1597.325557][T12512] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.336029][T12512] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1597.349512][T12512] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1597.358772][T12512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.395236][T12512] usb 6-1: config 0 descriptor?? [ 1597.482179][T20038] FAULT_INJECTION: forcing a failure. [ 1597.482179][T20038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.495305][T20038] CPU: 0 UID: 0 PID: 20038 Comm: syz.1.3357 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1597.495320][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1597.495328][T20038] Call Trace: [ 1597.495333][T20038] [ 1597.495337][T20038] dump_stack_lvl+0x16c/0x1f0 [ 1597.495358][T20038] should_fail_ex+0x512/0x640 [ 1597.495376][T20038] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1597.495396][T20038] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1597.495414][T20038] _copy_to_user+0x32/0xd0 [ 1597.495433][T20038] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1597.495450][T20038] __do_sys_clock_adjtime+0x1ee/0x290 [ 1597.495468][T20038] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1597.495501][T20038] ? syscall_trace_enter+0x1cb/0x260 [ 1597.495515][T20038] ? rcu_is_watching+0x12/0xc0 [ 1597.495531][T20038] do_syscall_64+0xcd/0x260 [ 1597.495549][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.495561][T20038] RIP: 0033:0x7f9a6af8e969 [ 1597.495571][T20038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.495582][T20038] RSP: 002b:00007f9a6bdce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1597.495593][T20038] RAX: ffffffffffffffda RBX: 00007f9a6b1b5fa0 RCX: 00007f9a6af8e969 [ 1597.495600][T20038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 1597.495607][T20038] RBP: 00007f9a6bdce090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.495616][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.495624][T20038] R13: 0000000000000000 R14: 00007f9a6b1b5fa0 R15: 00007fffcd868758 [ 1597.495640][T20038] [ 1597.695290][T12512] Bluetooth: Can't get state to change to load ram patch err [ 1597.703102][T12512] Bluetooth: Loading patch file failed [ 1597.708751][T12512] ath3k 6-1:0.0: probe with driver ath3k failed with error -121 [ 1597.842489][ T30] audit: type=1400 audit(1747630511.535:1088): avc: denied { setopt } for pid=20039 comm="syz.1.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1597.852858][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1597.889953][ T5865] usb 5-1: USB disconnect, device number 81 [ 1597.931062][ T30] audit: type=1400 audit(1747630511.535:1089): avc: denied { getopt } for pid=20039 comm="syz.1.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1597.984629][ T30] audit: type=1400 audit(1747630511.545:1090): avc: denied { getopt } for pid=20039 comm="syz.1.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1599.062217][T20046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1599.125997][T20046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1599.176908][ T1205] usb 3-1: USB disconnect, device number 53 [ 1599.511358][T12256] usb 6-1: USB disconnect, device number 8 [ 1599.724054][ T1205] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1599.916830][ T1205] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 1599.944016][ T1205] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1599.954598][ T1205] usb 3-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 1599.962989][ T1205] usb 3-1: Product: syz [ 1599.967259][ T1205] usb 3-1: Manufacturer: syz [ 1599.977979][ T1205] usb 3-1: SerialNumber: syz [ 1600.005655][ T1205] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1600.012015][ T1205] r8152-cfgselector 3-1: config 0 descriptor?? [ 1600.132752][T12256] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1600.306621][T12256] usb 6-1: Using ep0 maxpacket: 16 [ 1600.318010][T20079] FAULT_INJECTION: forcing a failure. [ 1600.318010][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.360927][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.0.3365 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1600.360953][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1600.360965][T20079] Call Trace: [ 1600.360972][T20079] [ 1600.360980][T20079] dump_stack_lvl+0x16c/0x1f0 [ 1600.361013][T20079] should_fail_ex+0x512/0x640 [ 1600.361045][T20079] ? __kmalloc_noprof+0xbf/0x510 [ 1600.361067][T20079] ? sock_kmalloc+0x111/0x170 [ 1600.361090][T20079] should_failslab+0xc2/0x120 [ 1600.361113][T20079] __kmalloc_noprof+0xd2/0x510 [ 1600.361132][T20079] ? __pfx_unpin_user_page+0x10/0x10 [ 1600.361164][T20079] sock_kmalloc+0x111/0x170 [ 1600.361191][T20079] hash_alloc_result+0xd7/0x150 [ 1600.361221][T20079] hash_sendmsg+0x6df/0xfb0 [ 1600.361262][T20079] ____sys_sendmsg+0xa95/0xc70 [ 1600.361291][T20079] ? copy_msghdr_from_user+0x10a/0x160 [ 1600.361312][T20079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1600.361344][T20079] ? __pfx__kstrtoull+0x10/0x10 [ 1600.361374][T20079] ___sys_sendmsg+0x134/0x1d0 [ 1600.361398][T20079] ? __pfx____sys_sendmsg+0x10/0x10 [ 1600.361435][T20079] ? find_held_lock+0x2b/0x80 [ 1600.361482][T20079] __sys_sendmmsg+0x200/0x420 [ 1600.361508][T20079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1600.361543][T20079] ? bpf_trace_run2+0x265/0x590 [ 1600.361585][T20079] ? __might_fault+0x13b/0x190 [ 1600.361606][T20079] ? find_held_lock+0x2b/0x80 [ 1600.361630][T20079] ? syscall_trace_enter+0x1cb/0x260 [ 1600.361657][T20079] __x64_sys_sendmmsg+0x9c/0x100 [ 1600.361680][T20079] do_syscall_64+0xcd/0x260 [ 1600.361710][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.361730][T20079] RIP: 0033:0x7f8c8478e969 [ 1600.361747][T20079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.361767][T20079] RSP: 002b:00007f8c85518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1600.361786][T20079] RAX: ffffffffffffffda RBX: 00007f8c849b5fa0 RCX: 00007f8c8478e969 [ 1600.361800][T20079] RDX: 04000000000001ee RSI: 0000200000005400 RDI: 0000000000000004 [ 1600.361813][T20079] RBP: 00007f8c85518090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.361826][T20079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.361838][T20079] R13: 0000000000000000 R14: 00007f8c849b5fa0 R15: 00007ffee53ebc48 [ 1600.361867][T20079] [ 1600.362186][T12256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.607923][T12256] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1600.617107][T12256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.630803][T12256] usb 6-1: config 0 descriptor?? [ 1600.645100][T12256] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1600.656005][T12256] usb 6-1: No valid video chain found. [ 1600.745893][ T30] audit: type=1400 audit(1747630514.239:1091): avc: denied { read write } for pid=20087 comm="syz.4.3367" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1600.786872][ T30] audit: type=1400 audit(1747630514.239:1092): avc: denied { open } for pid=20087 comm="syz.4.3367" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1601.551417][ T30] audit: type=1400 audit(1747630514.529:1093): avc: denied { mounton } for pid=20087 comm="syz.4.3367" path="/204/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1601.579612][T12512] usb 6-1: USB disconnect, device number 9 [ 1601.775334][T20095] vivid-002: disconnect [ 1601.855783][ T1205] r8152-cfgselector 3-1: USB disconnect, device number 54 [ 1602.058421][T20080] vivid-002: reconnect [ 1602.147098][T20102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1602.183059][T12512] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1602.209534][T20102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1602.343857][ T1205] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1602.354305][T12512] usb 1-1: Using ep0 maxpacket: 16 [ 1602.361565][T12512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1602.374769][T12512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1602.395453][T12512] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1602.426995][T12512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.451566][T12512] usb 1-1: config 0 descriptor?? [ 1602.457231][T20097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1602.493980][T12512] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 1602.501239][T12512] usb 1-1: No valid video chain found. [ 1602.514438][ T1205] usb 5-1: Using ep0 maxpacket: 16 [ 1602.536169][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1602.550877][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1602.579391][ T1205] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1602.598877][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.621598][ T1205] usb 5-1: config 0 descriptor?? [ 1602.633596][T20099] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1602.646846][ T1205] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1602.660784][ T1205] usb 5-1: No valid video chain found. [ 1604.004363][ T5865] usb 1-1: USB disconnect, device number 44 [ 1604.695463][ T30] audit: type=1400 audit(1747630517.868:1094): avc: denied { getopt } for pid=20136 comm="syz.2.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1604.746960][ T1205] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1604.974208][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 1604.993271][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1605.068608][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1605.105288][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1605.128075][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.168126][ T1205] usb 6-1: config 0 descriptor?? [ 1605.189430][T20138] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1605.223191][ T1205] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1605.238968][ T1205] usb 6-1: No valid video chain found. [ 1605.324565][ T1205] usb 5-1: USB disconnect, device number 82 [ 1605.486360][ T5864] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1606.745828][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.402942][T20165] netlink: 'syz.2.3377': attribute type 10 has an invalid length. [ 1607.416144][T20165] team0: Device veth1_macvtap failed to register rx_handler [ 1607.797826][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.804143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.330812][ T5864] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1608.340098][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.357311][ T5864] usb 2-1: config 0 descriptor?? [ 1608.567058][ T5864] usb 2-1: can't set config #0, error -71 [ 1608.585058][ T5864] usb 2-1: USB disconnect, device number 50 [ 1609.025024][T20174] delete_channel: no stack [ 1609.250798][T20175] vivid-003: disconnect [ 1609.479001][T20171] delete_channel: no stack [ 1609.484352][T20170] vivid-003: reconnect [ 1609.695160][ T5874] usb 6-1: USB disconnect, device number 10 [ 1609.714051][T20179] Can't find a SQUASHFS superblock on nullb0 [ 1609.984520][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.874521][ T5865] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1611.056654][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 1611.066506][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1611.077975][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1611.092714][ T5865] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1611.122085][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.136385][T20189] FAULT_INJECTION: forcing a failure. [ 1611.136385][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.150207][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.1.3386 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1611.150238][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1611.150247][T20189] Call Trace: [ 1611.150252][T20189] [ 1611.150257][T20189] dump_stack_lvl+0x16c/0x1f0 [ 1611.150279][T20189] should_fail_ex+0x512/0x640 [ 1611.150297][T20189] should_failslab+0xc2/0x120 [ 1611.150311][T20189] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1611.150323][T20189] ? __alloc_skb+0x2b2/0x380 [ 1611.150339][T20189] __alloc_skb+0x2b2/0x380 [ 1611.150350][T20189] ? __pfx___alloc_skb+0x10/0x10 [ 1611.150362][T20189] ? pointer+0xdd0/0xe70 [ 1611.150378][T20189] ? cred_has_capability.isra.0+0x193/0x2f0 [ 1611.150398][T20189] send_monitor_note+0xe8/0x4e0 [ 1611.150418][T20189] ? __pfx_send_monitor_note+0x10/0x10 [ 1611.150438][T20189] ? cap_capable+0xb3/0x250 [ 1611.150457][T20189] hci_sock_bind+0xd53/0x14c0 [ 1611.150471][T20189] ? __pfx_hci_sock_bind+0x10/0x10 [ 1611.150487][T20189] __sys_bind+0x211/0x260 [ 1611.150505][T20189] ? __pfx___sys_bind+0x10/0x10 [ 1611.150529][T20189] ? syscall_trace_enter+0x1cb/0x260 [ 1611.150545][T20189] __x64_sys_bind+0x72/0xb0 [ 1611.150562][T20189] do_syscall_64+0xcd/0x260 [ 1611.150579][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.150591][T20189] RIP: 0033:0x7f9a6af8e969 [ 1611.150602][T20189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.150613][T20189] RSP: 002b:00007f9a6bdad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1611.150624][T20189] RAX: ffffffffffffffda RBX: 00007f9a6b1b6080 RCX: 00007f9a6af8e969 [ 1611.150634][T20189] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000005 [ 1611.150641][T20189] RBP: 00007f9a6bdad090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.150648][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.150655][T20189] R13: 0000000000000000 R14: 00007f9a6b1b6080 R15: 00007fffcd868758 [ 1611.150671][T20189] [ 1611.237294][ T5865] usb 1-1: config 0 descriptor?? [ 1611.326074][T20203] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1611.609147][T20184] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1612.217853][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1612.244501][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.370680][ T5865] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 1612.378157][ T5865] usb 1-1: No valid video chain found. [ 1612.421776][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.456554][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 1612.464584][ T5864] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1612.476294][ T5864] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 1612.487535][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.506710][ T5864] usb 6-1: config 0 descriptor?? [ 1612.524536][T20209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1612.616274][T20210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1612.675719][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.004254][ T1205] usb 1-1: USB disconnect, device number 45 [ 1613.035662][T20202] bridge_slave_0: left allmulticast mode [ 1613.041518][T20202] bridge_slave_0: left promiscuous mode [ 1613.050819][T20202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.117973][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1613.711582][T20202] bridge_slave_1: left allmulticast mode [ 1613.717261][T20202] bridge_slave_1: left promiscuous mode [ 1613.740807][T20202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.754987][T20202] bond0: (slave bond_slave_0): Releasing backup interface [ 1613.876373][T20202] bond0: (slave bond_slave_1): Releasing backup interface [ 1614.408196][T20202] team0: Port device team_slave_0 removed [ 1614.473925][T20202] team0: Port device team_slave_1 removed [ 1614.488557][T20202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.495967][T20202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.581514][T20202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.595859][T20202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.735519][T20202] bond1: left allmulticast mode [ 1614.754079][T20202] bond1: left promiscuous mode [ 1614.772566][T20202] bridge0: port 3(bond1) entered disabled state [ 1614.871198][T12256] usb 6-1: USB disconnect, device number 11 [ 1615.119278][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1615.129960][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1615.143252][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1615.153132][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1615.160472][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1615.285172][ T30] audit: type=1400 audit(1747630527.830:1095): avc: denied { mount } for pid=20222 comm="syz.4.3397" name="/" dev="hugetlbfs" ino=55229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1615.664457][T20225] lo speed is unknown, defaulting to 1000 [ 1615.853326][T20235] delete_channel: no stack [ 1615.920114][ T30] audit: type=1400 audit(1747630528.438:1096): avc: denied { unmount } for pid=16721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1616.171545][T20226] delete_channel: no stack [ 1616.265085][ T83] bridge_slave_1: left allmulticast mode [ 1616.270754][ T83] bridge_slave_1: left promiscuous mode [ 1616.356667][T20244] input: syz1 as /devices/virtual/input/input110 [ 1616.366531][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.533540][ T1205] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1616.611715][ T83] bridge_slave_0: left allmulticast mode [ 1616.659829][ T83] bridge_slave_0: left promiscuous mode [ 1616.705879][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.822330][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 1616.823668][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1617.410989][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.411919][ T5830] Bluetooth: hci2: command tx timeout [ 1617.425613][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1617.435661][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.449485][ T1205] usb 6-1: config 0 descriptor?? [ 1617.466661][ T1205] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1617.492282][ T1205] usb 6-1: No valid video chain found. [ 1617.732977][ T5917] usb 6-1: USB disconnect, device number 12 [ 1617.755833][T20260] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1617.871755][T20250] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1617.954516][T20264] program syz.0.3401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.022886][ T83] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1618.696935][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1618.857145][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.893129][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1618.898662][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.931141][ T83] bond0 (unregistering): Released all slaves [ 1618.981999][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1619.006736][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1619.032639][ T5917] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1619.051894][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.081719][ T5917] usb 2-1: config 0 descriptor?? [ 1619.100189][T20269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1619.142438][ T83] bond1 (unregistering): Released all slaves [ 1619.163432][ T5917] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 1619.170636][ T5917] usb 2-1: No valid video chain found. [ 1619.272849][ T83] bond2 (unregistering): Released all slaves [ 1619.872074][T19614] Bluetooth: hci2: command tx timeout [ 1619.968342][ T5917] usb 2-1: USB disconnect, device number 51 [ 1619.975945][ T83] bond3 (unregistering): Released all slaves [ 1620.109083][ T83] bond4 (unregistering): Released all slaves [ 1620.197163][ T83] bond5 (unregistering): Released all slaves [ 1620.280762][ T83] bond6 (unregistering): (slave wlan0): Releasing active interface [ 1620.293049][ T83] bond6 (unregistering): Released all slaves [ 1620.377291][ T83] bond7 (unregistering): Released all slaves [ 1620.832084][T20225] chnl_net:caif_netlink_parms(): no params data found [ 1621.369867][T20290] FAULT_INJECTION: forcing a failure. [ 1621.369867][T20290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.382964][T20290] CPU: 0 UID: 0 PID: 20290 Comm: syz.5.3408 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1621.382979][T20290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.382986][T20290] Call Trace: [ 1621.382991][T20290] [ 1621.382996][T20290] dump_stack_lvl+0x16c/0x1f0 [ 1621.383017][T20290] should_fail_ex+0x512/0x640 [ 1621.383036][T20290] strncpy_from_user+0x3b/0x2e0 [ 1621.383053][T20290] getname_flags.part.0+0x8f/0x550 [ 1621.383070][T20290] getname_flags+0x93/0xf0 [ 1621.383087][T20290] do_sys_openat2+0xb8/0x1d0 [ 1621.383103][T20290] ? __pfx_do_sys_openat2+0x10/0x10 [ 1621.383128][T20290] ? __fget_files+0x20e/0x3c0 [ 1621.383145][T20290] __x64_sys_openat+0x174/0x210 [ 1621.383162][T20290] ? __pfx___x64_sys_openat+0x10/0x10 [ 1621.383184][T20290] ? ksys_write+0x1b9/0x240 [ 1621.383211][T20290] ? rcu_is_watching+0x12/0xc0 [ 1621.383232][T20290] do_syscall_64+0xcd/0x260 [ 1621.383251][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.383263][T20290] RIP: 0033:0x7f0586b8e969 [ 1621.383273][T20290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.383284][T20290] RSP: 002b:00007f0587981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1621.383296][T20290] RAX: ffffffffffffffda RBX: 00007f0586db5fa0 RCX: 00007f0586b8e969 [ 1621.383304][T20290] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1621.383311][T20290] RBP: 00007f0587981090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.383319][T20290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.383331][T20290] R13: 0000000000000000 R14: 00007f0586db5fa0 R15: 00007fff5ffa4788 [ 1621.383358][T20290] [ 1621.841210][ T30] audit: type=1400 audit(1747630533.985:1097): avc: denied { write } for pid=20291 comm="syz.4.3409" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1622.025218][T20305] input: syz1 as /devices/virtual/input/input111 [ 1622.097422][T19614] Bluetooth: hci2: command tx timeout [ 1624.302130][T19614] Bluetooth: hci2: command tx timeout [ 1625.357651][T20325] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 1627.880790][T20325] team0: Device veth1_macvtap failed to register rx_handler [ 1627.950601][T20225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.963252][T20225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.992064][T20225] bridge_slave_0: entered allmulticast mode [ 1628.017742][T20225] bridge_slave_0: entered promiscuous mode [ 1628.760022][ T30] audit: type=1326 audit(1747630540.455:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8478e969 code=0x7fc00000 [ 1628.797022][T20225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.813030][T20225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.822048][T20225] bridge_slave_1: entered allmulticast mode [ 1628.834282][T20225] bridge_slave_1: entered promiscuous mode [ 1628.950788][T20225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.982315][T20225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.017240][ T1205] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1629.093241][ T83] hsr_slave_0: left promiscuous mode [ 1629.099980][ T83] hsr_slave_1: left promiscuous mode [ 1629.100742][T20374] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1629.110288][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.122931][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.145483][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.156466][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.208614][ T83] veth0_macvtap: left promiscuous mode [ 1629.217629][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 1629.223938][ T83] veth1_vlan: left promiscuous mode [ 1629.229562][ T83] veth0_vlan: left promiscuous mode [ 1629.237553][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1629.249834][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1629.263997][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1629.265349][T20378] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3419'. [ 1629.285919][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.305769][ T1205] usb 6-1: config 0 descriptor?? [ 1629.311614][T20363] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1629.318955][T14136] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1629.332921][ T1205] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1629.359082][ T1205] usb 6-1: No valid video chain found. [ 1629.486997][T14136] usb 2-1: Using ep0 maxpacket: 16 [ 1629.495834][T14136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.516113][T14136] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1629.527310][T14136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.550058][T14136] usb 2-1: config 0 descriptor?? [ 1629.569553][ T5864] usb 6-1: USB disconnect, device number 13 [ 1629.781048][ T83] team0 (unregistering): Port device team_slave_1 removed [ 1629.818293][ T83] team0 (unregistering): Port device team_slave_0 removed [ 1630.289822][T20225] team0: Port device team_slave_0 added [ 1630.303403][T20225] team0: Port device team_slave_1 added [ 1630.452269][T14136] usbhid 2-1:0.0: can't add hid device: -71 [ 1630.923075][T14136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1630.939033][T14136] usb 2-1: USB disconnect, device number 52 [ 1630.992983][T20225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.001611][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.028342][T20225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.048072][T20225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.057789][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.085623][T20225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.177620][T20225] hsr_slave_0: entered promiscuous mode [ 1631.184156][T20225] hsr_slave_1: entered promiscuous mode [ 1631.190740][T20225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1631.198865][T20225] Cannot create hsr debugfs directory [ 1631.301883][T20393] netlink: 'syz.4.3423': attribute type 1 has an invalid length. [ 1631.406753][T20399] input: syz1 as /devices/virtual/input/input112 [ 1631.571404][ T5865] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1631.993157][T20393] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1632.725946][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 1632.765861][ T5865] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1632.794303][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.843664][T14136] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1633.013136][ T5865] usb 1-1: Product: syz [ 1633.139781][ T5865] usb 1-1: Manufacturer: syz [ 1633.219988][ T5865] usb 1-1: SerialNumber: syz [ 1633.261674][ T5865] usb 1-1: config 0 descriptor?? [ 1633.296863][ T5865] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1633.333873][ T83] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.446510][T14136] usb 2-1: Using ep0 maxpacket: 16 [ 1633.499844][ T83] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.535342][T14136] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1633.549427][T14136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.559540][T14136] usb 2-1: config 0 has no interface number 0 [ 1633.684748][T20394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.716101][T14136] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1633.747570][T14136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.762078][T14136] usb 2-1: Product: syz [ 1633.768329][T20394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.776259][T14136] usb 2-1: Manufacturer: syz [ 1633.783320][T14136] usb 2-1: SerialNumber: syz [ 1633.857983][ T83] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.858748][T14136] usb 2-1: config 0 descriptor?? [ 1633.886768][ T5865] gspca_sonixj: reg_w1 err -110 [ 1633.895063][ T30] audit: type=1400 audit(1747630545.263:1099): avc: denied { shutdown } for pid=20424 comm="syz.4.3427" lport=48801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1633.943699][ T5865] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1634.273763][ T83] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.381992][T14136] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1634.391826][T14136] usb 2-1: No valid video chain found. [ 1634.680097][T20402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.756791][T20439] siw: device registration error -23 [ 1635.210737][T20402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.306137][T20447] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1635.354260][T20402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.371858][T20402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.395040][ T30] audit: type=1400 audit(1747630546.657:1100): avc: denied { read } for pid=20401 comm="syz.1.3424" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1635.437619][ T30] audit: type=1400 audit(1747630546.704:1101): avc: denied { open } for pid=20401 comm="syz.1.3424" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1635.487858][T14136] usb 2-1: USB disconnect, device number 53 [ 1635.792032][T20455] overlayfs: missing 'lowerdir' [ 1635.980629][ T5862] SELinux: failure in sel_netif_sid_slow(), invalid network interface (101) [ 1636.831968][ T5862] SELinux: failure in sel_netif_sid_slow(), invalid network interface (97) [ 1636.997055][T14136] usb 1-1: USB disconnect, device number 46 [ 1637.135033][T20468] random: crng reseeded on system resumption [ 1638.287565][ T83] bond0 (unregistering): Released all slaves [ 1638.411299][ T83] bond1 (unregistering): Released all slaves [ 1638.909844][ T83] bond2 (unregistering): Released all slaves [ 1639.268920][ T83] bond3 (unregistering): Released all slaves [ 1639.508982][ T83] bond4 (unregistering): Released all slaves [ 1639.993371][ T83] bond5 (unregistering): Released all slaves [ 1640.026303][T20474] netlink: 'syz.1.3433': attribute type 10 has an invalid length. [ 1641.074645][ T83] bond6 (unregistering): Released all slaves [ 1641.174933][T20478] input: syz1 as /devices/virtual/input/input113 [ 1641.998261][ T83] bond7 (unregistering): Released all slaves [ 1642.142727][ T83] bond8 (unregistering): Released all slaves [ 1642.249347][ T83] bond9 (unregistering): Released all slaves [ 1642.581213][ T83] bond10 (unregistering): Released all slaves [ 1642.895810][ T83] bond11 (unregistering): Released all slaves [ 1643.463663][ T83] bond12 (unregistering): Released all slaves [ 1643.595360][ T83] bond13 (unregistering): Released all slaves [ 1644.377027][ T83] bond14 (unregistering): Released all slaves [ 1644.462742][ T83] bond15 (unregistering): Released all slaves [ 1644.568157][ T83] bond16 (unregistering): Released all slaves [ 1644.652861][ T83] bond17 (unregistering): Released all slaves [ 1644.737270][ T83] bond18 (unregistering): Released all slaves [ 1644.820648][ T83] bond19 (unregistering): Released all slaves [ 1644.914270][ T83] bond20 (unregistering): Released all slaves [ 1644.998446][ T83] bond21 (unregistering): Released all slaves [ 1645.079395][ T83] bond22 (unregistering): Released all slaves [ 1645.166169][ T83] bond23 (unregistering): Released all slaves [ 1645.252968][ T83] bond24 (unregistering): (slave wlan0): Releasing active interface [ 1645.264033][ T83] bond24 (unregistering): Released all slaves [ 1645.360078][ T83] bond25 (unregistering): Released all slaves [ 1645.445133][ T83] bond26 (unregistering): Released all slaves [ 1645.589899][T20474] team0: Device veth1_macvtap failed to register rx_handler [ 1647.491863][T20521] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3442'. [ 1648.936322][T20548] siw: device registration error -23 [ 1649.394191][T20225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1649.421439][T20225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1650.330257][T20225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1650.357048][T20225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1650.364056][T20541] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1650.370233][T20541] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1650.592694][ T30] audit: type=1400 audit(1747630560.866:1102): avc: denied { connect } for pid=20533 comm="syz.1.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1650.614243][ T30] audit: type=1400 audit(1747630560.866:1103): avc: denied { read } for pid=20533 comm="syz.1.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1650.634749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1650.726308][T20541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1650.763909][T20541] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1650.802903][T20225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.821710][T20225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.509737][T20541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1651.513388][T19028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.522800][T19028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.532218][T20541] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1651.563990][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.571068][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.704967][ T83] hsr_slave_0: left promiscuous mode [ 1651.711551][ T83] hsr_slave_1: left promiscuous mode [ 1651.764192][ T83] veth0_macvtap: left promiscuous mode [ 1651.782392][ T83] veth1_vlan: left promiscuous mode [ 1651.794374][ T83] veth0_vlan: left promiscuous mode [ 1651.836684][T20583] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1652.047696][ T5862] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1652.217084][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 1652.224401][ T5862] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 1652.232736][ T5862] usb 6-1: config 0 has no interface number 0 [ 1652.244781][ T5862] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1652.254228][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.266187][ T5862] usb 6-1: Product: syz [ 1652.281632][ T5862] usb 6-1: Manufacturer: syz [ 1652.291696][ T5862] usb 6-1: SerialNumber: syz [ 1652.318751][ T5862] usb 6-1: config 0 descriptor?? [ 1653.438180][ T5862] peak_usb 6-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1653.583346][ T5865] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1653.667095][ T5862] peak_usb 6-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 1653.691960][ T5862] peak_usb 6-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1654.413287][ T5862] peak_usb 6-1:0.56: probe with driver peak_usb failed with error -71 [ 1654.451424][ T5862] usb 6-1: USB disconnect, device number 14 [ 1654.667855][T20605] delete_channel: no stack [ 1654.953477][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.016458][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1655.036146][T20599] delete_channel: no stack [ 1655.057423][ T83] IPVS: stop unused estimator thread 0... [ 1655.058409][T20225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.067160][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.112468][ T5865] usb 2-1: config 0 descriptor?? [ 1655.250694][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 1655.323343][T20225] veth0_vlan: entered promiscuous mode [ 1655.434807][T20620] vivid-003: disconnect [ 1655.562787][ T30] audit: type=1400 audit(1747630565.524:1104): avc: denied { mount } for pid=20618 comm="syz.5.3457" name="/" dev="autofs" ino=57481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1655.593315][T20225] veth1_vlan: entered promiscuous mode [ 1655.888984][T20225] veth0_macvtap: entered promiscuous mode [ 1655.918405][T20225] veth1_macvtap: entered promiscuous mode [ 1656.004271][T20225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.089954][T20225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.112433][T20225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.121774][T20225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.134503][T20225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.143523][T20225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.151454][ T5865] pwc: send_video_command error -71 [ 1656.157504][ T5865] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1656.185253][ T5865] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1656.202391][ T5865] usb 2-1: USB disconnect, device number 54 [ 1656.209473][T20616] vivid-003: reconnect [ 1656.351863][ T30] audit: type=1400 audit(1747630566.263:1105): avc: denied { unmount } for pid=19612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1656.377965][T12416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.404695][T12416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.419037][ T5874] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1656.480276][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3459'. [ 1656.494389][ T9230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.510026][ T30] audit: type=1400 audit(1747630566.413:1106): avc: denied { connect } for pid=20639 comm="syz.5.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1656.533981][ T9230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.605615][T20644] netlink: 'syz.5.3459': attribute type 10 has an invalid length. [ 1656.737206][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 1656.759023][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1656.897446][T12512] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1656.963217][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1656.972476][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.980471][ T5874] usb 1-1: Product: syz [ 1657.005113][ T5874] usb 1-1: Manufacturer: syz [ 1657.009702][ T5874] usb 1-1: SerialNumber: syz [ 1657.033702][ T5874] usb 1-1: config 0 descriptor?? [ 1657.680532][ T5874] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1657.704108][ T5874] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1657.750422][T12256] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1657.837821][T20660] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1657.945165][T12256] usb 3-1: Using ep0 maxpacket: 16 [ 1657.980465][T12256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1658.000503][T12512] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1658.008084][T12512] usb 2-1: can't read configurations, error -71 [ 1658.031684][T12256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1658.049610][T12256] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1658.060199][T12256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.092626][T12256] usb 3-1: config 0 descriptor?? [ 1658.098833][T20650] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1658.113274][T12256] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 1658.122977][T12256] usb 3-1: No valid video chain found. [ 1658.159331][T20670] FAULT_INJECTION: forcing a failure. [ 1658.159331][T20670] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.172286][ T1205] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1658.181589][T20670] CPU: 0 UID: 0 PID: 20670 Comm: syz.4.3465 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1658.181619][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1658.181631][T20670] Call Trace: [ 1658.181638][T20670] [ 1658.181647][T20670] dump_stack_lvl+0x16c/0x1f0 [ 1658.181679][T20670] should_fail_ex+0x512/0x640 [ 1658.181705][T20670] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1658.181738][T20670] should_failslab+0xc2/0x120 [ 1658.181761][T20670] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1658.181790][T20670] ? __lock_acquire+0x5ca/0x1ba0 [ 1658.181817][T20670] ? __get_vm_area_node+0x101/0x330 [ 1658.181851][T20670] __get_vm_area_node+0x101/0x330 [ 1658.181881][T20670] __vmalloc_node_range_noprof+0x277/0x1540 [ 1658.181910][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.181930][T20670] ? find_held_lock+0x2b/0x80 [ 1658.181961][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.181989][T20670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1658.182025][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.182046][T20670] __vmalloc_noprof+0x6d/0x90 [ 1658.182073][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.182093][T20670] bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.182112][T20670] ? security_capable+0x7e/0x260 [ 1658.182139][T20670] bpf_prog_alloc+0x3b/0x230 [ 1658.182156][T20670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1658.182179][T20670] bpf_prog_load+0x1a04/0x2490 [ 1658.182210][T20670] ? __pfx_bpf_prog_load+0x10/0x10 [ 1658.182231][T20670] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1658.182274][T20670] ? selinux_bpf+0xde/0x130 [ 1658.182294][T20670] ? bpf_lsm_bpf+0x9/0x10 [ 1658.182323][T20670] __sys_bpf+0x433c/0x4d80 [ 1658.182351][T20670] ? __pfx___sys_bpf+0x10/0x10 [ 1658.182376][T20670] ? ksys_write+0x190/0x240 [ 1658.182408][T20670] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1658.182453][T20670] ? fput+0x70/0xf0 [ 1658.182475][T20670] ? ksys_write+0x1b9/0x240 [ 1658.182502][T20670] ? __pfx_ksys_write+0x10/0x10 [ 1658.182527][T20670] ? rcu_is_watching+0x12/0xc0 [ 1658.182556][T20670] __x64_sys_bpf+0x78/0xc0 [ 1658.182595][T20670] ? lockdep_hardirqs_on+0x7c/0x110 [ 1658.182621][T20670] do_syscall_64+0xcd/0x260 [ 1658.182650][T20670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.182671][T20670] RIP: 0033:0x7f4a1498e969 [ 1658.182688][T20670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.182707][T20670] RSP: 002b:00007f4a1576a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1658.182726][T20670] RAX: ffffffffffffffda RBX: 00007f4a14bb5fa0 RCX: 00007f4a1498e969 [ 1658.182739][T20670] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1658.182751][T20670] RBP: 00007f4a1576a090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.182763][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.182775][T20670] R13: 0000000000000000 R14: 00007f4a14bb5fa0 R15: 00007fff64b4a1e8 [ 1658.182803][T20670] [ 1658.183508][T20670] syz.4.3465: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1658.577007][T20670] CPU: 0 UID: 0 PID: 20670 Comm: syz.4.3465 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1658.577034][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1658.577045][T20670] Call Trace: [ 1658.577053][T20670] [ 1658.577061][T20670] dump_stack_lvl+0x16c/0x1f0 [ 1658.577093][T20670] warn_alloc+0x248/0x3a0 [ 1658.577116][T20670] ? __pfx_warn_alloc+0x10/0x10 [ 1658.577137][T20670] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1658.577171][T20670] ? __kasan_kmalloc+0x8a/0xb0 [ 1658.577200][T20670] ? __get_vm_area_node+0x208/0x330 [ 1658.577232][T20670] __vmalloc_node_range_noprof+0xd31/0x1540 [ 1658.577259][T20670] ? find_held_lock+0x2b/0x80 [ 1658.577291][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.577319][T20670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1658.577355][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.577376][T20670] __vmalloc_noprof+0x6d/0x90 [ 1658.577402][T20670] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.577423][T20670] bpf_prog_alloc_no_stats+0x54/0x630 [ 1658.577442][T20670] ? security_capable+0x7e/0x260 [ 1658.577469][T20670] bpf_prog_alloc+0x3b/0x230 [ 1658.577487][T20670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1658.577510][T20670] bpf_prog_load+0x1a04/0x2490 [ 1658.577540][T20670] ? __pfx_bpf_prog_load+0x10/0x10 [ 1658.577561][T20670] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1658.577610][T20670] ? selinux_bpf+0xde/0x130 [ 1658.577630][T20670] ? bpf_lsm_bpf+0x9/0x10 [ 1658.577661][T20670] __sys_bpf+0x433c/0x4d80 [ 1658.577688][T20670] ? __pfx___sys_bpf+0x10/0x10 [ 1658.577719][T20670] ? ksys_write+0x190/0x240 [ 1658.577752][T20670] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1658.577797][T20670] ? fput+0x70/0xf0 [ 1658.577818][T20670] ? ksys_write+0x1b9/0x240 [ 1658.577845][T20670] ? __pfx_ksys_write+0x10/0x10 [ 1658.577870][T20670] ? rcu_is_watching+0x12/0xc0 [ 1658.577898][T20670] __x64_sys_bpf+0x78/0xc0 [ 1658.577922][T20670] ? lockdep_hardirqs_on+0x7c/0x110 [ 1658.577948][T20670] do_syscall_64+0xcd/0x260 [ 1658.577977][T20670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.577998][T20670] RIP: 0033:0x7f4a1498e969 [ 1658.578015][T20670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.578033][T20670] RSP: 002b:00007f4a1576a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1658.578052][T20670] RAX: ffffffffffffffda RBX: 00007f4a14bb5fa0 RCX: 00007f4a1498e969 [ 1658.578066][T20670] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1658.578078][T20670] RBP: 00007f4a1576a090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.578090][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.578102][T20670] R13: 0000000000000000 R14: 00007f4a14bb5fa0 R15: 00007fff64b4a1e8 [ 1658.578129][T20670] [ 1658.578256][T20670] Mem-Info: [ 1658.881033][ T5874] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1658.897246][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 1658.973769][T20670] active_anon:7787 inactive_anon:0 isolated_anon:0 [ 1658.973769][T20670] active_file:14983 inactive_file:41241 isolated_file:0 [ 1658.973769][T20670] unevictable:768 dirty:670 writeback:0 [ 1658.973769][T20670] slab_reclaimable:12169 slab_unreclaimable:108444 [ 1658.973769][T20670] mapped:32818 shmem:1374 pagetables:1023 [ 1658.973769][T20670] sec_pagetables:0 bounce:0 [ 1658.973769][T20670] kernel_misc_reclaimable:0 [ 1658.973769][T20670] free:1309632 free_pcp:501 free_cma:0 [ 1659.032989][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1659.081900][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1659.144957][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1659.181808][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.228415][T20670] Node 0 active_anon:31248kB inactive_anon:0kB active_file:59932kB inactive_file:164764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131272kB dirty:2676kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13212kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1659.311774][ T1205] usb 6-1: config 0 descriptor?? [ 1659.417441][T20662] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1659.428461][T20670] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1659.629892][ T1205] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1659.637208][T20670] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1659.671811][ T1205] usb 6-1: No valid video chain found. [ 1659.691733][T20670] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 1659.701216][T20670] Node 0 DMA32 free:1307896kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:33396kB inactive_anon:0kB active_file:59932kB inactive_file:162948kB unevictable:1536kB writepending:2676kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:3748kB local_pcp:1040kB free_cma:0kB [ 1659.835750][ T5874] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1659.901625][T20670] lowmem_reserve[]: 0 0 1 1 1 [ 1659.911406][T20670] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 1659.913632][ T5874] em28xx 1-1:0.0: board has no eeprom [ 1659.979183][T20670] lowmem_reserve[]: 0 0 0 0 0 [ 1659.987190][T20670] Node 1 Normal free:3912200kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.051979][ T5874] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1660.199241][T20670] lowmem_reserve[]: 0 0 0 0 0 [ 1660.274729][T20670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1660.395740][T20670] Node 0 DMA32: 74*4kB (UME) 699*8kB (UME) 545*16kB (UM) 864*32kB (UME) 438*64kB (UME) 107*128kB (UME) 73*256kB (UME) 55*512kB (UME) 41*1024kB (UME) 18*2048kB (UM) 276*4096kB (UM) = 1340176kB [ 1660.558671][T20670] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1660.643661][T20670] Node 1 Normal: 210*4kB (UME) 62*8kB (UME) 45*16kB (UME) 202*32kB (UME) 109*64kB (UME) 25*128kB (UME) 13*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 948*4096kB (M) = 3912200kB [ 1660.660522][ T5874] em28xx 1-1:0.0: dvb set to bulk mode. [ 1660.673084][ T5917] em28xx 1-1:0.0: Binding DVB extension [ 1660.719387][T12256] usb 3-1: USB disconnect, device number 55 [ 1660.738642][ T5874] usb 1-1: USB disconnect, device number 47 [ 1660.745942][T20670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.756390][T20670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1660.767070][T20670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.776977][T20670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1660.788007][ T5874] em28xx 1-1:0.0: Disconnecting em28xx [ 1660.793679][T20670] 57599 total pagecache pages [ 1660.798452][T20670] 0 pages in swap cache [ 1660.802856][T20670] Free swap = 124996kB [ 1660.807101][T20670] Total swap = 124996kB [ 1660.812916][T20670] 2097051 pages RAM [ 1660.816811][T20670] 0 pages HighMem/MovableOnly [ 1660.821679][T20670] 428971 pages reserved [ 1660.827051][T20670] 0 pages cma reserved [ 1660.848474][ T5917] em28xx 1-1:0.0: Registering input extension [ 1660.881469][ T5874] em28xx 1-1:0.0: Closing input extension [ 1661.018533][ T5874] em28xx 1-1:0.0: Freeing device [ 1661.181397][T20694] FAULT_INJECTION: forcing a failure. [ 1661.181397][T20694] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.196933][T20694] CPU: 1 UID: 0 PID: 20694 Comm: syz.4.3468 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1661.196959][T20694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1661.196971][T20694] Call Trace: [ 1661.196979][T20694] [ 1661.196987][T20694] dump_stack_lvl+0x16c/0x1f0 [ 1661.197019][T20694] should_fail_ex+0x512/0x640 [ 1661.197045][T20694] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1661.197079][T20694] should_failslab+0xc2/0x120 [ 1661.197101][T20694] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1661.197131][T20694] ? __get_vm_area_node+0x101/0x330 [ 1661.197163][T20694] __get_vm_area_node+0x101/0x330 [ 1661.197188][T20694] ? lockdep_hardirqs_on+0x7c/0x110 [ 1661.197218][T20694] __vmalloc_node_range_noprof+0x277/0x1540 [ 1661.197246][T20694] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1661.197274][T20694] ? __rcu_read_unlock+0x2b4/0x580 [ 1661.197304][T20694] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1661.197332][T20694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1661.197371][T20694] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1661.197397][T20694] __vmalloc_noprof+0x6d/0x90 [ 1661.197424][T20694] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1661.197446][T20694] bpf_prog_alloc_no_stats+0x54/0x630 [ 1661.197465][T20694] ? security_capable+0x7e/0x260 [ 1661.197492][T20694] bpf_prog_alloc+0x3b/0x230 [ 1661.197510][T20694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1661.197534][T20694] bpf_prog_load+0x160e/0x2490 [ 1661.197571][T20694] ? __pfx_bpf_prog_load+0x10/0x10 [ 1661.197592][T20694] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1661.197637][T20694] ? selinux_bpf+0xde/0x130 [ 1661.197658][T20694] ? bpf_lsm_bpf+0x9/0x10 [ 1661.197689][T20694] __sys_bpf+0x433c/0x4d80 [ 1661.197718][T20694] ? __pfx___sys_bpf+0x10/0x10 [ 1661.197743][T20694] ? ksys_write+0x190/0x240 [ 1661.197776][T20694] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1661.197823][T20694] ? fput+0x70/0xf0 [ 1661.197845][T20694] ? ksys_write+0x1b9/0x240 [ 1661.197874][T20694] ? __pfx_ksys_write+0x10/0x10 [ 1661.197908][T20694] __x64_sys_bpf+0x78/0xc0 [ 1661.197932][T20694] ? lockdep_hardirqs_on+0x7c/0x110 [ 1661.197958][T20694] do_syscall_64+0xcd/0x260 [ 1661.197988][T20694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.198009][T20694] RIP: 0033:0x7f4a1498e969 [ 1661.198026][T20694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1661.198045][T20694] RSP: 002b:00007f4a15749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1661.198064][T20694] RAX: ffffffffffffffda RBX: 00007f4a14bb6080 RCX: 00007f4a1498e969 [ 1661.198078][T20694] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1661.198091][T20694] RBP: 00007f4a15749090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.198103][T20694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.198115][T20694] R13: 0000000000000000 R14: 00007f4a14bb6080 R15: 00007fff64b4a1e8 [ 1661.198144][T20694] [ 1662.301521][ T5917] usb 6-1: USB disconnect, device number 15 [ 1662.930352][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1662.941968][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1662.955234][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1662.963449][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1662.971058][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1663.058137][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.262022][T20707] lo speed is unknown, defaulting to 1000 [ 1664.390104][T20725] random: crng reseeded on system resumption [ 1665.706558][ T5830] Bluetooth: hci0: command tx timeout [ 1666.088028][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.802558][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.974322][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.224048][T20759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1667.322262][T20707] chnl_net:caif_netlink_parms(): no params data found [ 1667.491358][T20771] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1667.540368][T20707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.555669][T20707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.566091][T20707] bridge_slave_0: entered allmulticast mode [ 1667.580109][T20707] bridge_slave_0: entered promiscuous mode [ 1667.622319][T20707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.630060][T20707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.641373][T20707] bridge_slave_1: entered allmulticast mode [ 1667.649169][T20707] bridge_slave_1: entered promiscuous mode [ 1667.662919][T12256] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1667.742628][T20707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.766213][T20774] FAULT_INJECTION: forcing a failure. [ 1667.766213][T20774] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.779659][T20774] CPU: 0 UID: 0 PID: 20774 Comm: syz.5.3481 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1667.779686][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1667.779698][T20774] Call Trace: [ 1667.779704][T20774] [ 1667.779713][T20774] dump_stack_lvl+0x16c/0x1f0 [ 1667.779745][T20774] should_fail_ex+0x512/0x640 [ 1667.779770][T20774] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1667.779795][T20774] should_failslab+0xc2/0x120 [ 1667.779816][T20774] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1667.779837][T20774] ? __alloc_skb+0x2b2/0x380 [ 1667.779864][T20774] __alloc_skb+0x2b2/0x380 [ 1667.779883][T20774] ? __pfx___alloc_skb+0x10/0x10 [ 1667.779906][T20774] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1667.779937][T20774] netlink_alloc_large_skb+0x69/0x130 [ 1667.779969][T20774] netlink_sendmsg+0x6a1/0xdd0 [ 1667.779998][T20774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.780035][T20774] ____sys_sendmsg+0xa95/0xc70 [ 1667.780062][T20774] ? copy_msghdr_from_user+0x10a/0x160 [ 1667.780084][T20774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1667.780125][T20774] ___sys_sendmsg+0x134/0x1d0 [ 1667.780153][T20774] ? __pfx____sys_sendmsg+0x10/0x10 [ 1667.780213][T20774] __sys_sendmsg+0x16d/0x220 [ 1667.780236][T20774] ? __pfx___sys_sendmsg+0x10/0x10 [ 1667.780268][T20774] ? rcu_is_watching+0x12/0xc0 [ 1667.780300][T20774] do_syscall_64+0xcd/0x260 [ 1667.780332][T20774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.780352][T20774] RIP: 0033:0x7f0586b8e969 [ 1667.780368][T20774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1667.780388][T20774] RSP: 002b:00007f0587981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1667.780407][T20774] RAX: ffffffffffffffda RBX: 00007f0586db5fa0 RCX: 00007f0586b8e969 [ 1667.780420][T20774] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1667.780431][T20774] RBP: 00007f0587981090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.780443][T20774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.780455][T20774] R13: 0000000000000000 R14: 00007f0586db5fa0 R15: 00007fff5ffa4788 [ 1667.780483][T20774] [ 1668.008275][ T5830] Bluetooth: hci0: command tx timeout [ 1668.038293][T12256] usb 5-1: Using ep0 maxpacket: 16 [ 1668.044989][T12256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1668.056193][T12256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1668.067357][T12256] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1668.076445][T12256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.090776][T12256] usb 5-1: config 0 descriptor?? [ 1668.107059][T20766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1668.172698][T12256] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1668.181074][T12256] usb 5-1: No valid video chain found. [ 1668.247816][T20779] netlink: 'syz.5.3483': attribute type 1 has an invalid length. [ 1668.514108][T20786] netlink: 'syz.1.3484': attribute type 1 has an invalid length. [ 1668.946457][ T5917] SELinux: failure in sel_netif_sid_slow(), invalid network interface (103) [ 1669.218552][ T13] bond0 (unregistering): Released all slaves [ 1669.305319][ T13] bond1 (unregistering): Released all slaves [ 1669.391494][ T13] bond2 (unregistering): Released all slaves [ 1669.484582][ T13] bond3 (unregistering): Released all slaves [ 1669.570199][ T13] bond4 (unregistering): Released all slaves [ 1669.657374][ T13] bond5 (unregistering): Released all slaves [ 1669.744930][ T13] bond6 (unregistering): Released all slaves [ 1669.833150][ T13] bond7 (unregistering): Released all slaves [ 1669.920105][ T13] bond8 (unregistering): Released all slaves [ 1670.007892][ T13] bond9 (unregistering): Released all slaves [ 1670.094275][ T13] bond10 (unregistering): Released all slaves [ 1670.179973][ T13] bond11 (unregistering): Released all slaves [ 1670.229622][ T5830] Bluetooth: hci0: command tx timeout [ 1670.271717][ T13] bond12 (unregistering): Released all slaves [ 1670.358123][ T13] bond13 (unregistering): Released all slaves [ 1670.444055][ T13] bond14 (unregistering): Released all slaves [ 1670.528104][ T13] bond15 (unregistering): Released all slaves [ 1670.625745][ T13] bond16 (unregistering): Released all slaves [ 1670.644611][ T5874] usb 5-1: USB disconnect, device number 83 [ 1670.821040][ T13] bond17 (unregistering): Released all slaves [ 1671.239734][ T13] bond18 (unregistering): Released all slaves [ 1671.655258][ T13] bond19 (unregistering): Released all slaves [ 1671.671314][T20797] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1671.760658][ T13] bond20 (unregistering): Released all slaves [ 1671.762190][T20799] program syz.4.3487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.854253][ T13] bond21 (unregistering): Released all slaves [ 1671.943730][ T13] bond22 (unregistering): Released all slaves [ 1672.030664][ T13] bond23 (unregistering): Released all slaves [ 1672.117118][ T13] bond24 (unregistering): Released all slaves [ 1672.201116][ T13] bond25 (unregistering): (slave wlan0): Releasing active interface [ 1672.209812][ T13] bond25 (unregistering): Released all slaves [ 1672.225268][T20707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.236208][T20779] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1672.246407][T20786] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 1672.278180][T20788] bond20: (slave wlan0): Releasing active interface [ 1672.452818][ T5830] Bluetooth: hci0: command tx timeout [ 1672.501359][T20707] team0: Port device team_slave_0 added [ 1672.514737][T20806] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 1672.526774][T20707] team0: Port device team_slave_1 added [ 1672.657748][T20806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1672.853782][ T5917] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1673.108083][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1673.153045][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.210917][ T5917] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1673.221319][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.238393][ T5917] usb 6-1: config 0 descriptor?? [ 1673.271293][T20810] vlan2: entered allmulticast mode [ 1673.279009][ T5917] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1673.289474][T20810] veth1: entered allmulticast mode [ 1673.296402][ T5917] usb 6-1: No valid video chain found. [ 1673.336788][T20707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.481095][T20707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.496618][ T5874] usb 6-1: USB disconnect, device number 16 [ 1673.521835][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.528169][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.564589][T20707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.582367][ T30] audit: type=1400 audit(1747630582.380:1107): avc: denied { getopt } for pid=20812 comm="syz.4.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1673.621869][T20707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.649834][T20707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.714299][T20707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.445467][T20707] hsr_slave_0: entered promiscuous mode [ 1674.468567][T20707] hsr_slave_1: entered promiscuous mode [ 1674.497229][T20707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1674.526246][T20707] Cannot create hsr debugfs directory [ 1674.635359][ T30] audit: type=1400 audit(1747630583.371:1108): avc: denied { bind } for pid=20838 comm="syz.5.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1674.662540][ T30] audit: type=1400 audit(1747630583.390:1109): avc: denied { connect } for pid=20838 comm="syz.5.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1674.687490][ T30] audit: type=1400 audit(1747630583.390:1110): avc: denied { name_connect } for pid=20838 comm="syz.5.3494" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1674.742513][ T30] audit: type=1400 audit(1747630583.390:1111): avc: denied { getopt } for pid=20838 comm="syz.5.3494" lport=55181 faddr=::ffff:10.1.1.0 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1674.815470][T20846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1674.928212][ T30] audit: type=1400 audit(1747630583.643:1112): avc: denied { create } for pid=20845 comm="syz.2.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1675.218007][ T30] audit: type=1400 audit(1747630583.886:1113): avc: denied { ioctl } for pid=20845 comm="syz.2.3495" path="socket:[57999]" dev="sockfs" ino=57999 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1675.243474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.701400][T20852] netlink: 'syz.5.3497': attribute type 1 has an invalid length. [ 1676.090024][T20859] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 1676.185417][T20852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1676.430072][T20847] ubi: mtd0 is already attached to ubi31 [ 1676.454581][T20847] fuse: Unknown parameter 'Lӌ3T %̈s{ba(G׭' [ 1676.991502][T20853] bond2: (slave geneve2): making interface the new active one [ 1677.031672][T20853] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1677.100137][T20861] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1677.173245][T20879] vlan3: entered promiscuous mode [ 1677.179151][T20879] bridge0: entered promiscuous mode [ 1677.184501][T20879] vlan3: entered allmulticast mode [ 1677.189753][T20879] bridge0: entered allmulticast mode [ 1677.268176][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3501'. [ 1677.297224][T20867] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1677.485982][ T13] hsr_slave_0: left promiscuous mode [ 1677.503492][ T13] hsr_slave_1: left promiscuous mode [ 1677.535192][ T13] veth1_macvtap: left promiscuous mode [ 1677.555531][ T13] veth0_macvtap: left promiscuous mode [ 1677.563351][ T13] veth1_vlan: left promiscuous mode [ 1679.022099][ T13] pimreg (unregistering): left allmulticast mode [ 1680.375156][T20922] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 1681.263587][T20926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1682.121127][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1683.162437][ T5874] lo speed is unknown, defaulting to 1000 [ 1683.174758][ T5874] infiniband syz0: ib_query_port failed (-19) [ 1683.220244][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3505'. [ 1683.287197][T20922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1683.300272][T20927] bond6: (slave wlan0): Releasing active interface [ 1683.362865][T20927] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 1683.656298][T12256] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1684.666010][T12256] usb 6-1: Using ep0 maxpacket: 16 [ 1684.968881][T12256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1684.980419][T12256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1684.991984][T12256] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1685.001254][T12256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.012468][T12256] usb 6-1: config 0 descriptor?? [ 1685.018382][T20941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1685.058493][T12256] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1685.065386][T12256] usb 6-1: No valid video chain found. [ 1686.226691][T20978] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 1686.252765][T20978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1686.303322][T20979] FAULT_INJECTION: forcing a failure. [ 1686.303322][T20979] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.316120][T20979] CPU: 0 UID: 0 PID: 20979 Comm: syz.4.3521 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1686.316141][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1686.316148][T20979] Call Trace: [ 1686.316153][T20979] [ 1686.316158][T20979] dump_stack_lvl+0x16c/0x1f0 [ 1686.316179][T20979] should_fail_ex+0x512/0x640 [ 1686.316195][T20979] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1686.316209][T20979] should_failslab+0xc2/0x120 [ 1686.316223][T20979] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1686.316234][T20979] ? __alloc_skb+0x2b2/0x380 [ 1686.316249][T20979] __alloc_skb+0x2b2/0x380 [ 1686.316261][T20979] ? __pfx___alloc_skb+0x10/0x10 [ 1686.316274][T20979] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1686.316293][T20979] netlink_alloc_large_skb+0x69/0x130 [ 1686.316308][T20979] netlink_sendmsg+0x6a1/0xdd0 [ 1686.316325][T20979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1686.316345][T20979] ____sys_sendmsg+0xa95/0xc70 [ 1686.316362][T20979] ? copy_msghdr_from_user+0x10a/0x160 [ 1686.316375][T20979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1686.316398][T20979] ___sys_sendmsg+0x134/0x1d0 [ 1686.316411][T20979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1686.316443][T20979] __sys_sendmsg+0x16d/0x220 [ 1686.316456][T20979] ? __pfx___sys_sendmsg+0x10/0x10 [ 1686.316478][T20979] ? rcu_is_watching+0x12/0xc0 [ 1686.316497][T20979] do_syscall_64+0xcd/0x260 [ 1686.316515][T20979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.316527][T20979] RIP: 0033:0x7f4a1498e969 [ 1686.316537][T20979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.316549][T20979] RSP: 002b:00007f4a1576a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.316560][T20979] RAX: ffffffffffffffda RBX: 00007f4a14bb5fa0 RCX: 00007f4a1498e969 [ 1686.316568][T20979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1686.316575][T20979] RBP: 00007f4a1576a090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.316582][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.316589][T20979] R13: 0000000000000000 R14: 00007f4a14bb5fa0 R15: 00007fff64b4a1e8 [ 1686.316604][T20979] [ 1686.577516][T20707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1686.598597][T20707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1686.609480][T20707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1686.747202][T20987] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 1687.124406][ T5865] usb 6-1: USB disconnect, device number 17 [ 1687.134064][T20987] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1687.158114][T20990] input: syz1 as /devices/virtual/input/input115 [ 1687.174438][T20707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1687.318085][T20996] bond9: (slave wlan0): Releasing active interface [ 1687.503477][T20996] bond10: (slave wlan0): Enslaving as an active interface with a down link [ 1688.061172][T12512] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1688.089820][T20707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.121964][T20707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.135179][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.142370][T20310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.177227][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.184404][T20310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.242070][T12512] usb 6-1: no configurations [ 1688.247004][T12512] usb 6-1: can't read configurations, error -22 [ 1688.867344][T12512] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1688.891093][T21014] vlan3: entered promiscuous mode [ 1688.897749][T21014] bridge0: entered promiscuous mode [ 1688.903209][T21014] vlan3: entered allmulticast mode [ 1688.910753][T21014] bridge0: entered allmulticast mode [ 1689.038850][T12512] usb 6-1: no configurations [ 1689.043648][T12512] usb 6-1: can't read configurations, error -22 [ 1689.083108][T12512] usb usb6-port1: attempt power cycle [ 1689.118507][T20707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.200728][T20707] veth0_vlan: entered promiscuous mode [ 1689.213035][T20707] veth1_vlan: entered promiscuous mode [ 1689.269930][T20707] veth0_macvtap: entered promiscuous mode [ 1689.286628][T20707] veth1_macvtap: entered promiscuous mode [ 1689.329307][T20707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.361469][T20707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.379473][T20707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.389042][T20707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.397795][T20707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.406565][T20707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.484658][T12512] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1689.516547][T12512] usb 6-1: no configurations [ 1689.531247][T12512] usb 6-1: can't read configurations, error -22 [ 1689.563523][ T9230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.593849][ T9230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.679893][T21042] FAULT_INJECTION: forcing a failure. [ 1689.679893][T21042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1689.693504][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.2.3531 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1689.693530][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1689.693542][T21042] Call Trace: [ 1689.693549][T21042] [ 1689.693563][T21042] dump_stack_lvl+0x16c/0x1f0 [ 1689.693597][T21042] should_fail_ex+0x512/0x640 [ 1689.693628][T21042] should_fail_alloc_page+0xe7/0x130 [ 1689.693653][T21042] prepare_alloc_pages+0x3c2/0x610 [ 1689.693680][T21042] ? trace_sched_exit_tp+0xde/0x130 [ 1689.693712][T21042] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1689.693736][T21042] ? mark_held_locks+0x49/0x80 [ 1689.693768][T21042] ? finish_task_switch.isra.0+0x221/0xc10 [ 1689.693800][T21042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1689.693825][T21042] ? __lock_acquire+0xaa4/0x1ba0 [ 1689.693865][T21042] ? __lock_acquire+0xaa4/0x1ba0 [ 1689.693894][T21042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1689.693918][T21042] ? policy_nodemask+0xea/0x4e0 [ 1689.693943][T21042] alloc_pages_mpol+0x1fb/0x550 [ 1689.693967][T21042] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1689.693998][T21042] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1689.694025][T21042] vma_alloc_folio_noprof+0xed/0x1e0 [ 1689.694050][T21042] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1689.694073][T21042] ? find_held_lock+0x2b/0x80 [ 1689.694097][T21042] ? do_wp_page+0x229f/0x5930 [ 1689.694127][T21042] do_wp_page+0x1282/0x5930 [ 1689.694162][T21042] ? __pfx_do_wp_page+0x10/0x10 [ 1689.694191][T21042] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1689.694211][T21042] ? ___pte_offset_map+0x1bc/0x540 [ 1689.694243][T21042] __handle_mm_fault+0x1ada/0x2a40 [ 1689.694283][T21042] ? __pfx___handle_mm_fault+0x10/0x10 [ 1689.694331][T21042] ? find_vma+0xbf/0x140 [ 1689.694354][T21042] ? __pfx_find_vma+0x10/0x10 [ 1689.694381][T21042] handle_mm_fault+0x3fe/0xad0 [ 1689.694416][T21042] do_user_addr_fault+0x7a6/0x1370 [ 1689.694443][T21042] ? rcu_is_watching+0x12/0xc0 [ 1689.694469][T21042] exc_page_fault+0x5c/0xc0 [ 1689.694497][T21042] asm_exc_page_fault+0x26/0x30 [ 1689.694517][T21042] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1689.694540][T21042] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 09 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1689.694563][T21042] RSP: 0018:ffffc90003d9f8c0 EFLAGS: 00050202 [ 1689.694580][T21042] RAX: 0000000000000001 RBX: 0000000000000ec0 RCX: 0000000000000ec0 [ 1689.694593][T21042] RDX: 0000000000000000 RSI: ffff88805e184000 RDI: 0000200000004000 [ 1689.694606][T21042] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100bc309d7 [ 1689.694619][T21042] R10: ffff88805e184ebf R11: 0000000000000000 R12: 0000200000004000 [ 1689.694632][T21042] R13: ffffc90003d9fd80 R14: 0000200000004ec0 R15: ffff88805e184000 [ 1689.694663][T21042] _copy_to_iter+0x391/0x15a0 [ 1689.694700][T21042] ? __pfx__copy_to_iter+0x10/0x10 [ 1689.694732][T21042] ? preempt_schedule_thunk+0x16/0x30 [ 1689.694754][T21042] ? preempt_schedule_common+0x44/0xc0 [ 1689.694786][T21042] copy_page_to_iter+0xf1/0x180 [ 1689.694818][T21042] sk_msg_recvmsg+0x363/0xf70 [ 1689.694852][T21042] unix_bpf_recvmsg+0x309/0x1040 [ 1689.694883][T21042] ? __pfx_unix_bpf_recvmsg+0x10/0x10 [ 1689.694908][T21042] ? sock_has_perm+0x259/0x2f0 [ 1689.694933][T21042] ? __pfx_sock_has_perm+0x10/0x10 [ 1689.694962][T21042] unix_stream_recvmsg+0x12d/0x1c0 [ 1689.694990][T21042] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1689.695020][T21042] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1689.695058][T21042] sock_recvmsg+0x1f9/0x250 [ 1689.695087][T21042] __sys_recvfrom+0x203/0x310 [ 1689.695110][T21042] ? __pfx___sys_recvfrom+0x10/0x10 [ 1689.695160][T21042] ? ksys_write+0x1b9/0x240 [ 1689.695188][T21042] ? __pfx_ksys_write+0x10/0x10 [ 1689.695221][T21042] __x64_sys_recvfrom+0xe0/0x1c0 [ 1689.695241][T21042] ? do_syscall_64+0x91/0x260 [ 1689.695267][T21042] ? lockdep_hardirqs_on+0x7c/0x110 [ 1689.695293][T21042] do_syscall_64+0xcd/0x260 [ 1689.695323][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.695342][T21042] RIP: 0033:0x7ff86198e969 [ 1689.695359][T21042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.695377][T21042] RSP: 002b:00007ff862888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1689.695396][T21042] RAX: ffffffffffffffda RBX: 00007ff861bb6080 RCX: 00007ff86198e969 [ 1689.695410][T21042] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000005 [ 1689.695423][T21042] RBP: 00007ff862888090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.695435][T21042] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 1689.695447][T21042] R13: 0000000000000000 R14: 00007ff861bb6080 R15: 00007ffda47d2de8 [ 1689.695477][T21042] [ 1690.394834][T12512] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1690.458774][T12512] usb 6-1: no configurations [ 1690.463466][T12512] usb 6-1: can't read configurations, error -22 [ 1690.470052][T12512] usb usb6-port1: unable to enumerate USB device [ 1690.604813][ T9230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.666846][ T9230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.701139][ T30] audit: type=1400 audit(1747630598.394:1114): avc: denied { read } for pid=21046 comm="syz.2.3532" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1690.770551][ T30] audit: type=1400 audit(1747630598.394:1115): avc: denied { open } for pid=21046 comm="syz.2.3532" path="/22/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1690.840116][ T30] audit: type=1400 audit(1747630598.394:1116): avc: denied { ioctl } for pid=21046 comm="syz.2.3532" path="/22/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1690.864901][T20652] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1691.032642][T20652] usb 5-1: Using ep0 maxpacket: 16 [ 1691.089979][T20652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1691.101142][ T5917] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1691.190620][ T5865] IPVS: starting estimator thread 0... [ 1691.261021][ T5917] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1691.273201][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.281641][ T5917] usb 6-1: Product: syz [ 1691.286008][ T5917] usb 6-1: Manufacturer: syz [ 1691.290759][T21071] IPVS: using max 34 ests per chain, 81600 per kthread [ 1691.299230][ T5917] usb 6-1: SerialNumber: syz [ 1691.545914][ T5917] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1691.759380][ T5874] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1691.934753][T20652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1691.946171][T20652] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1691.955468][T20652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.965888][T20652] usb 5-1: config 0 descriptor?? [ 1691.971554][T21049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1692.026512][T20652] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1692.033505][T20652] usb 5-1: No valid video chain found. [ 1692.455922][T21085] vivid-004: disconnect [ 1692.585476][T21053] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1692.592024][T21053] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1692.737979][T21088] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 1692.744522][T21088] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1692.798001][T21090] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 1692.804625][T21090] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1692.829358][T21053] vhci_hcd vhci_hcd.0: Device attached [ 1692.907851][T21088] vhci_hcd vhci_hcd.0: Device attached [ 1692.934184][T21090] vhci_hcd vhci_hcd.0: Device attached [ 1692.986913][T21093] vhci_hcd: connection closed [ 1692.990078][ T83] vhci_hcd: stop threads [ 1692.999959][T21086] vhci_hcd: connection closed [ 1693.001844][T21089] vhci_hcd: connection closed [ 1693.010357][T20652] usb 6-1: USB disconnect, device number 22 [ 1693.022278][ T1205] vhci_hcd: vhci_device speed not set [ 1693.058958][ T83] vhci_hcd: release socket [ 1693.063876][ T83] vhci_hcd: disconnect device [ 1693.069468][ T5874] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1693.079748][ T83] vhci_hcd: stop threads [ 1693.084354][ T5874] ath9k_htc: Failed to initialize the device [ 1693.090381][ T83] vhci_hcd: release socket [ 1693.095056][ T83] vhci_hcd: disconnect device [ 1693.101904][ T83] vhci_hcd: stop threads [ 1693.106221][ T83] vhci_hcd: release socket [ 1693.111169][ T83] vhci_hcd: disconnect device [ 1693.117414][ T1205] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1693.128616][T20652] usb 6-1: ath9k_htc: USB layer deinitialized [ 1693.140903][T21097] macvtap1: entered allmulticast mode [ 1693.146269][T21097] veth0_macvtap: entered allmulticast mode [ 1693.173143][ T1205] usb 43-1: enqueue for inactive port 0 [ 1693.180960][ T30] audit: type=1326 audit(1747630600.695:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.260996][T21082] vivid-004: reconnect [ 1693.269441][ T30] audit: type=1326 audit(1747630600.695:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.357675][ T1205] vhci_hcd: vhci_device speed not set [ 1693.370909][ T30] audit: type=1326 audit(1747630600.695:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.396127][ T30] audit: type=1326 audit(1747630600.695:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.435019][ T30] audit: type=1326 audit(1747630600.695:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.462274][ T30] audit: type=1326 audit(1747630600.695:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.644059][T21107] vlan2: entered promiscuous mode [ 1693.659310][ T30] audit: type=1326 audit(1747630600.695:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f858e969 code=0x7ffc0000 [ 1693.716026][T21107] bridge0: entered promiscuous mode [ 1693.723430][T21107] vlan2: entered allmulticast mode [ 1693.752748][T21107] bridge0: entered allmulticast mode [ 1694.242223][T12256] usb 5-1: USB disconnect, device number 84 [ 1694.442564][T21119] FAULT_INJECTION: forcing a failure. [ 1694.442564][T21119] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.455322][T21119] CPU: 1 UID: 0 PID: 21119 Comm: syz.5.3541 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1694.455347][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1694.455359][T21119] Call Trace: [ 1694.455367][T21119] [ 1694.455374][T21119] dump_stack_lvl+0x16c/0x1f0 [ 1694.455408][T21119] should_fail_ex+0x512/0x640 [ 1694.455434][T21119] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1694.455458][T21119] should_failslab+0xc2/0x120 [ 1694.455480][T21119] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1694.455500][T21119] ? __alloc_skb+0x2b2/0x380 [ 1694.455527][T21119] __alloc_skb+0x2b2/0x380 [ 1694.455548][T21119] ? __pfx___alloc_skb+0x10/0x10 [ 1694.455572][T21119] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1694.455603][T21119] netlink_alloc_large_skb+0x69/0x130 [ 1694.455630][T21119] netlink_sendmsg+0x6a1/0xdd0 [ 1694.455660][T21119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1694.455696][T21119] ____sys_sendmsg+0xa95/0xc70 [ 1694.455724][T21119] ? copy_msghdr_from_user+0x10a/0x160 [ 1694.455746][T21119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1694.455780][T21119] ? __lock_acquire+0xaa4/0x1ba0 [ 1694.455813][T21119] ___sys_sendmsg+0x134/0x1d0 [ 1694.455837][T21119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1694.455903][T21119] __sys_sendmsg+0x16d/0x220 [ 1694.455926][T21119] ? __pfx___sys_sendmsg+0x10/0x10 [ 1694.455947][T21119] ? sched_clock_cpu+0x6c/0x530 [ 1694.455993][T21119] do_syscall_64+0xcd/0x260 [ 1694.456024][T21119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.456045][T21119] RIP: 0033:0x7f0586b8e969 [ 1694.456061][T21119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.456080][T21119] RSP: 002b:00007f0587960038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.456099][T21119] RAX: ffffffffffffffda RBX: 00007f0586db6080 RCX: 00007f0586b8e969 [ 1694.456113][T21119] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 1694.456125][T21119] RBP: 00007f0587960090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.456138][T21119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.456150][T21119] R13: 0000000000000000 R14: 00007f0586db6080 R15: 00007fff5ffa4788 [ 1694.456177][T21119] [ 1695.104400][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 1695.563586][T21127] trusted_key: encrypted_key: insufficient parameters specified [ 1697.039703][T21151] random: crng reseeded on system resumption [ 1698.017339][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1698.017361][ T30] audit: type=1400 audit(1747630605.157:1137): avc: denied { mount } for pid=21153 comm="syz.0.3549" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1698.469091][T21164] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1698.469117][T21165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1698.510739][T21164] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1700.688956][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 1700.889515][ T30] audit: type=1400 audit(1747630605.681:1138): avc: denied { firmware_load } for pid=21158 comm="syz.4.3551" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1700.996674][T19614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1701.007615][T19614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1701.015174][T19614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1701.023654][T19614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1701.031032][T19614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1701.455903][T12256] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1702.616584][T21182] vlan2: entered promiscuous mode [ 1702.652884][T21182] bridge0: entered promiscuous mode [ 1702.676317][T12256] usb 5-1: Using ep0 maxpacket: 16 [ 1702.690806][T21182] vlan2: entered allmulticast mode [ 1702.728676][T21182] bridge0: entered allmulticast mode [ 1703.241279][T19614] Bluetooth: hci1: command tx timeout [ 1703.434425][ T30] audit: type=1400 audit(1747630610.273:1139): avc: denied { unmount } for pid=20707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1703.651308][T12256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1703.672505][T12256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1703.690571][T12256] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1703.699696][T12256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.710330][T12256] usb 5-1: config 0 descriptor?? [ 1703.716057][T21175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1703.834091][T12256] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1703.863908][T12256] usb 5-1: No valid video chain found. [ 1703.975668][T21195] input: syz1 as /devices/virtual/input/input116 [ 1705.214243][ T5865] usb 5-1: USB disconnect, device number 85 [ 1705.475945][T19614] Bluetooth: hci1: command tx timeout [ 1705.580826][ T30] audit: type=1400 audit(1747630612.294:1140): avc: denied { ioctl } for pid=21205 comm="syz.4.3559" path="socket:[60347]" dev="sockfs" ino=60347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1707.290011][T21199] tipc: Enabling of bearer rejected, failed to enable media [ 1707.510274][ T30] audit: type=1400 audit(1747630614.109:1141): avc: denied { ioctl } for pid=21228 comm="syz.5.3563" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1707.650601][T19607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.689232][T19614] Bluetooth: hci1: command tx timeout [ 1707.736109][T21171] chnl_net:caif_netlink_parms(): no params data found [ 1708.034703][T19607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.209366][T19607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.323195][T19607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.495102][T21171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.511846][T21171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.542112][T21171] bridge_slave_0: entered allmulticast mode [ 1708.560576][T21171] bridge_slave_0: entered promiscuous mode [ 1708.595899][T21171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.622357][T21171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.630430][T21171] bridge_slave_1: entered allmulticast mode [ 1708.647860][ T30] audit: type=1400 audit(1747630615.175:1142): avc: denied { mount } for pid=21264 comm="syz.0.3567" name="/" dev="ramfs" ino=60942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1708.676947][T21171] bridge_slave_1: entered promiscuous mode [ 1708.994201][T20652] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1709.190397][T21171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.213815][T21171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.304113][T20652] usb 3-1: Using ep0 maxpacket: 16 [ 1709.317053][T20652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1709.333739][T20652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1709.360948][T20652] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1709.386008][T20652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.399516][T19614] Bluetooth: hci0: command tx timeout [ 1709.582360][T20652] usb 3-1: config 0 descriptor?? [ 1709.588641][T21266] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1709.923013][T19614] Bluetooth: hci1: command tx timeout [ 1710.206921][T20652] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 1710.214180][T20652] usb 3-1: No valid video chain found. [ 1710.408547][T21171] team0: Port device team_slave_0 added [ 1710.440308][T21171] team0: Port device team_slave_1 added [ 1710.494559][T21287] FAULT_INJECTION: forcing a failure. [ 1710.494559][T21287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.507730][T21287] CPU: 0 UID: 0 PID: 21287 Comm: syz.0.3567 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1710.507756][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1710.507769][T21287] Call Trace: [ 1710.507776][T21287] [ 1710.507785][T21287] dump_stack_lvl+0x16c/0x1f0 [ 1710.507818][T21287] should_fail_ex+0x512/0x640 [ 1710.507850][T21287] strncpy_from_user+0x3b/0x2e0 [ 1710.507879][T21287] getname_flags.part.0+0x8f/0x550 [ 1710.507913][T21287] __x64_sys_rmdir+0xb0/0x110 [ 1710.507935][T21287] do_syscall_64+0xcd/0x260 [ 1710.507965][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.507986][T21287] RIP: 0033:0x7fb7f858e969 [ 1710.508003][T21287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.508022][T21287] RSP: 002b:00007fb7f9420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1710.508042][T21287] RAX: ffffffffffffffda RBX: 00007fb7f87b6160 RCX: 00007fb7f858e969 [ 1710.508056][T21287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1710.508069][T21287] RBP: 00007fb7f9420090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.508082][T21287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.508094][T21287] R13: 0000000000000000 R14: 00007fb7f87b6160 R15: 00007fffd3d392f8 [ 1710.508124][T21287] [ 1710.744458][T21171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.774707][T21171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.814281][ T5874] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1710.827216][T21171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.071622][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 1711.161430][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1711.204630][T21299] netlink: 'syz.5.3572': attribute type 10 has an invalid length. [ 1711.244882][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1711.339344][ T5874] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1711.416461][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.537016][ T5874] usb 5-1: config 0 descriptor?? [ 1711.651029][T21286] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1711.806933][ T5874] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1711.874974][ T5874] usb 5-1: No valid video chain found. [ 1712.085090][ T5917] usb 3-1: USB disconnect, device number 56 [ 1712.672715][T21311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1713.413583][T21313] FAULT_INJECTION: forcing a failure. [ 1713.413583][T21313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.427372][T21313] CPU: 0 UID: 0 PID: 21313 Comm: syz.0.3576 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1713.427397][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1713.427407][T21313] Call Trace: [ 1713.427414][T21313] [ 1713.427423][T21313] dump_stack_lvl+0x16c/0x1f0 [ 1713.427454][T21313] should_fail_ex+0x512/0x640 [ 1713.427484][T21313] _copy_from_user+0x2e/0xd0 [ 1713.427505][T21313] memdup_user+0x6b/0xe0 [ 1713.427520][T21313] strndup_user+0x78/0xe0 [ 1713.427533][T21313] __x64_sys_mount+0x180/0x310 [ 1713.427547][T21313] ? __pfx___x64_sys_mount+0x10/0x10 [ 1713.427564][T21313] do_syscall_64+0xcd/0x260 [ 1713.427582][T21313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.427594][T21313] RIP: 0033:0x7fb7f858e969 [ 1713.427604][T21313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.427616][T21313] RSP: 002b:00007fb7f9462038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1713.427626][T21313] RAX: ffffffffffffffda RBX: 00007fb7f87b5fa0 RCX: 00007fb7f858e969 [ 1713.427640][T21313] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000100 [ 1713.427647][T21313] RBP: 00007fb7f9462090 R08: 0000200000000300 R09: 0000000000000000 [ 1713.427654][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.427661][T21313] R13: 0000000000000001 R14: 00007fb7f87b5fa0 R15: 00007fffd3d392f8 [ 1713.427676][T21313] [ 1713.614942][ T5874] usb 5-1: USB disconnect, device number 86 [ 1713.997506][T21318] hfs: can't find a HFS filesystem on dev nullb0 [ 1714.154934][T19607] bond0 (unregistering): Released all slaves [ 1714.257866][T21324] input: syz1 as /devices/virtual/input/input117 [ 1714.642451][T19607] bond1 (unregistering): Released all slaves [ 1715.106986][T19607] bond2 (unregistering): Released all slaves [ 1715.333563][T19607] bond3 (unregistering): Released all slaves [ 1715.574363][T19607] bond4 (unregistering): Released all slaves [ 1715.905235][T19607] bond5 (unregistering): Released all slaves [ 1716.015829][T19607] bond6 (unregistering): Released all slaves [ 1716.113609][T19607] bond7 (unregistering): Released all slaves [ 1716.244949][T19607] bond8 (unregistering): Released all slaves [ 1716.354924][T21333] Can't find a SQUASHFS superblock on nullb0 [ 1716.727082][T19607] bond9 (unregistering): Released all slaves [ 1716.810159][T19607] bond10 (unregistering): Released all slaves [ 1716.897474][T19607] bond11 (unregistering): Released all slaves [ 1717.065992][T19607] bond12 (unregistering): Released all slaves [ 1717.152347][T19607] bond13 (unregistering): Released all slaves [ 1717.237089][T19607] bond14 (unregistering): Released all slaves [ 1717.293435][ T5874] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1717.326149][T19607] bond15 (unregistering): Released all slaves [ 1717.410583][T19607] bond16 (unregistering): Released all slaves [ 1717.485984][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.496135][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1717.505249][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.516264][ T5874] usb 1-1: config 0 descriptor?? [ 1717.517109][T19607] bond17 (unregistering): Released all slaves [ 1717.530325][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1717.617604][T19607] bond18 (unregistering): Released all slaves [ 1717.702418][T19607] bond19 (unregistering): Released all slaves [ 1717.756201][ T5874] pwc: send_video_command error -71 [ 1717.764966][ T5874] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1717.772597][ T5874] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1717.783936][ T5874] usb 1-1: USB disconnect, device number 48 [ 1717.817450][T19607] bond20 (unregistering): Released all slaves [ 1717.829091][T21171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.837450][T21171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.863440][T21171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.883562][T21299] team0: Device veth1_macvtap failed to register rx_handler [ 1717.984040][T21310] ================================================================== [ 1717.992098][T21310] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 1717.999547][T21310] Read of size 8 at addr ffffffff9af9f5f0 by task syz.2.3575/21310 [ 1718.007441][T21310] [ 1718.009765][T21310] CPU: 1 UID: 0 PID: 21310 Comm: syz.2.3575 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1718.009793][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1718.009807][T21310] Call Trace: [ 1718.009816][T21310] [ 1718.009826][T21310] dump_stack_lvl+0x116/0x1f0 [ 1718.009860][T21310] print_report+0xc3/0x670 [ 1718.009882][T21310] ? __virt_addr_valid+0x5e/0x590 [ 1718.009909][T21310] ? __phys_addr+0xc6/0x150 [ 1718.009938][T21310] ? fib6_ifdown+0x7f5/0x8f0 [ 1718.009961][T21310] kasan_report+0xe0/0x110 [ 1718.009982][T21310] ? fib6_ifdown+0x7f5/0x8f0 [ 1718.010008][T21310] fib6_ifdown+0x7f5/0x8f0 [ 1718.010035][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.010059][T21310] fib6_clean_node+0x2a7/0x5b0 [ 1718.010084][T21310] ? __pfx_fib6_clean_node+0x10/0x10 [ 1718.010115][T21310] fib6_walk_continue+0x452/0x8d0 [ 1718.010149][T21310] fib6_walk+0x182/0x370 [ 1718.010168][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.010190][T21310] fib6_clean_tree+0xd4/0x110 [ 1718.010210][T21310] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1718.010233][T21310] ? __pfx_fib6_clean_node+0x10/0x10 [ 1718.010256][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.010282][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.010309][T21310] __fib6_clean_all+0x107/0x2d0 [ 1718.010334][T21310] rt6_disable_ip+0x2ec/0x990 [ 1718.010365][T21310] ? __mutex_trylock_common+0xe9/0x250 [ 1718.010399][T21310] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1718.010430][T21310] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1718.010460][T21310] ? rcu_is_watching+0x12/0xc0 [ 1718.010486][T21310] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1718.010512][T21310] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1718.010544][T21310] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1718.010568][T21310] ? tls_dev_event+0xfd/0x10b0 [ 1718.010595][T21310] addrconf_notify+0x220/0x19e0 [ 1718.010623][T21310] ? ip6mr_device_event+0x1bc/0x230 [ 1718.010652][T21310] notifier_call_chain+0xbc/0x410 [ 1718.010680][T21310] ? __pfx_addrconf_notify+0x10/0x10 [ 1718.010709][T21310] call_netdevice_notifiers_info+0xbe/0x140 [ 1718.010739][T21310] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 1718.010771][T21310] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1718.010796][T21310] ? __pfx___mod_timer+0x10/0x10 [ 1718.010824][T21310] ? do_raw_spin_unlock+0x172/0x230 [ 1718.010846][T21310] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1718.010873][T21310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1718.010901][T21310] ? clear_pending_if_disabled+0xa8/0x210 [ 1718.010935][T21310] unregister_netdevice_queue+0x305/0x3f0 [ 1718.010961][T21310] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1718.010987][T21310] ? linkwatch_schedule_work+0x181/0x1c0 [ 1718.011015][T21310] ? linkwatch_fire_event+0x6f/0x270 [ 1718.011044][T21310] __tun_detach+0x1249/0x1540 [ 1718.011078][T21310] ? __pfx_tun_chr_close+0x10/0x10 [ 1718.011106][T21310] tun_chr_close+0xc2/0x230 [ 1718.011135][T21310] __fput+0x3ff/0xb70 [ 1718.011161][T21310] task_work_run+0x150/0x240 [ 1718.011183][T21310] ? __pfx_task_work_run+0x10/0x10 [ 1718.011209][T21310] get_signal+0x1d1/0x26d0 [ 1718.011239][T21310] ? __pfx_get_signal+0x10/0x10 [ 1718.011268][T21310] arch_do_signal_or_restart+0x8f/0x7d0 [ 1718.011301][T21310] ? task_work_add+0x1d5/0x360 [ 1718.011324][T21310] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1718.011358][T21310] ? __fput_deferred+0x118/0x370 [ 1718.011385][T21310] syscall_exit_to_user_mode+0x150/0x2a0 [ 1718.011414][T21310] do_syscall_64+0xda/0x260 [ 1718.011442][T21310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.011463][T21310] RIP: 0033:0x7ff86198e969 [ 1718.011480][T21310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.011502][T21310] RSP: 002b:00007ff862867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.011522][T21310] RAX: 0000000000000000 RBX: 00007ff861bb6160 RCX: 00007ff86198e969 [ 1718.011537][T21310] RDX: 0000200000000340 RSI: 00000000400454ca RDI: 0000000000000008 [ 1718.011553][T21310] RBP: 00007ff861a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1718.011567][T21310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.011581][T21310] R13: 0000000000000000 R14: 00007ff861bb6160 R15: 00007ffda47d2de8 [ 1718.011604][T21310] [ 1718.011612][T21310] [ 1718.420855][T21310] The buggy address belongs to the variable: [ 1718.426811][T21310] __key.0+0x30/0x40 [ 1718.430696][T21310] [ 1718.433000][T21310] The buggy address belongs to the physical page: [ 1718.439398][T21310] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 1718.448141][T21310] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1718.456028][T21310] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 1718.464596][T21310] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1718.473159][T21310] page dumped because: kasan: bad access detected [ 1718.479553][T21310] page_owner info is not present (never set?) [ 1718.485594][T21310] [ 1718.487897][T21310] Memory state around the buggy address: [ 1718.493505][T21310] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1718.501550][T21310] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1718.509593][T21310] >ffffffff9af9f580: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 1718.517642][T21310] ^ [ 1718.525344][T21310] ffffffff9af9f600: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 1718.533394][T21310] ffffffff9af9f680: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 [ 1718.541437][T21310] ================================================================== [ 1718.549572][T21310] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1718.556765][T21310] CPU: 1 UID: 0 PID: 21310 Comm: syz.2.3575 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1718.567091][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1718.577148][T21310] Call Trace: [ 1718.580424][T21310] [ 1718.583353][T21310] dump_stack_lvl+0x3d/0x1f0 [ 1718.587962][T21310] panic+0x71c/0x800 [ 1718.591864][T21310] ? __pfx_panic+0x10/0x10 [ 1718.596268][T21310] ? mark_held_locks+0x49/0x80 [ 1718.601016][T21310] ? fib6_ifdown+0x7f5/0x8f0 [ 1718.605594][T21310] ? fib6_ifdown+0x7f5/0x8f0 [ 1718.610183][T21310] check_panic_on_warn+0xab/0xb0 [ 1718.615122][T21310] end_report+0x107/0x170 [ 1718.619454][T21310] kasan_report+0xee/0x110 [ 1718.623873][T21310] ? fib6_ifdown+0x7f5/0x8f0 [ 1718.628463][T21310] fib6_ifdown+0x7f5/0x8f0 [ 1718.632874][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.637809][T21310] fib6_clean_node+0x2a7/0x5b0 [ 1718.642565][T21310] ? __pfx_fib6_clean_node+0x10/0x10 [ 1718.647842][T21310] fib6_walk_continue+0x452/0x8d0 [ 1718.652864][T21310] fib6_walk+0x182/0x370 [ 1718.657096][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.662027][T21310] fib6_clean_tree+0xd4/0x110 [ 1718.666694][T21310] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1718.671969][T21310] ? __pfx_fib6_clean_node+0x10/0x10 [ 1718.677242][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.682178][T21310] ? __pfx_fib6_ifdown+0x10/0x10 [ 1718.687102][T21310] __fib6_clean_all+0x107/0x2d0 [ 1718.691943][T21310] rt6_disable_ip+0x2ec/0x990 [ 1718.696614][T21310] ? __mutex_trylock_common+0xe9/0x250 [ 1718.702072][T21310] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1718.707964][T21310] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1718.713158][T21310] ? rcu_is_watching+0x12/0xc0 [ 1718.717914][T21310] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1718.723368][T21310] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1718.728999][T21310] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1718.734886][T21310] ? tls_dev_event+0xfd/0x10b0 [ 1718.739644][T21310] addrconf_notify+0x220/0x19e0 [ 1718.744490][T21310] ? ip6mr_device_event+0x1bc/0x230 [ 1718.749684][T21310] notifier_call_chain+0xbc/0x410 [ 1718.754703][T21310] ? __pfx_addrconf_notify+0x10/0x10 [ 1718.759983][T21310] call_netdevice_notifiers_info+0xbe/0x140 [ 1718.765873][T21310] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 1718.772197][T21310] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1718.778953][T21310] ? __pfx___mod_timer+0x10/0x10 [ 1718.783887][T21310] ? do_raw_spin_unlock+0x172/0x230 [ 1718.789073][T21310] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1718.794873][T21310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1718.800327][T21310] ? clear_pending_if_disabled+0xa8/0x210 [ 1718.806049][T21310] unregister_netdevice_queue+0x305/0x3f0 [ 1718.811759][T21310] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1718.817988][T21310] ? linkwatch_schedule_work+0x181/0x1c0 [ 1718.823618][T21310] ? linkwatch_fire_event+0x6f/0x270 [ 1718.828898][T21310] __tun_detach+0x1249/0x1540 [ 1718.833576][T21310] ? __pfx_tun_chr_close+0x10/0x10 [ 1718.838680][T21310] tun_chr_close+0xc2/0x230 [ 1718.843180][T21310] __fput+0x3ff/0xb70 [ 1718.847155][T21310] task_work_run+0x150/0x240 [ 1718.851732][T21310] ? __pfx_task_work_run+0x10/0x10 [ 1718.856832][T21310] get_signal+0x1d1/0x26d0 [ 1718.861258][T21310] ? __pfx_get_signal+0x10/0x10 [ 1718.866105][T21310] arch_do_signal_or_restart+0x8f/0x7d0 [ 1718.871648][T21310] ? task_work_add+0x1d5/0x360 [ 1718.876400][T21310] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1718.882552][T21310] ? __fput_deferred+0x118/0x370 [ 1718.887487][T21310] syscall_exit_to_user_mode+0x150/0x2a0 [ 1718.893117][T21310] do_syscall_64+0xda/0x260 [ 1718.897615][T21310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.903501][T21310] RIP: 0033:0x7ff86198e969 [ 1718.907904][T21310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.927502][T21310] RSP: 002b:00007ff862867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.935907][T21310] RAX: 0000000000000000 RBX: 00007ff861bb6160 RCX: 00007ff86198e969 [ 1718.943868][T21310] RDX: 0000200000000340 RSI: 00000000400454ca RDI: 0000000000000008 [ 1718.951826][T21310] RBP: 00007ff861a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1718.959784][T21310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.967741][T21310] R13: 0000000000000000 R14: 00007ff861bb6160 R15: 00007ffda47d2de8 [ 1718.975705][T21310] [ 1718.978929][T21310] Kernel Offset: disabled [ 1718.983235][T21310] Rebooting in 86400 seconds..