last executing test programs: 11.1005738s ago: executing program 1 (id=273): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x143a81) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809a1a93c5240f45f819e01177d3d458dd4992861ac000000150000000000000000000000000000001000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2013, 0x221e, 0x80000000, 0x1}) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 9.179461322s ago: executing program 1 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x80995bbf37c22b90) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x5, 0x7, 0x7, 0x1ff}) ioperm(0x400, 0x4, 0x2) set_mempolicy(0x8006, 0x0, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(0x0, 0x102) lseek(0xffffffffffffffff, 0x0, 0x1) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="11002abd7000ffdbdd140200000108000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="508403c102b306"], 0x7) syz_usb_control_io$printer(r0, 0x0, 0x0) mbind(&(0x7f000058f000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7fff, 0x2) 7.240324017s ago: executing program 4 (id=288): chdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0xfffffffc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x2d0}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 6.386856059s ago: executing program 3 (id=292): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 6.162060471s ago: executing program 4 (id=294): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r2, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xfc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000002ec0)={{0x12, 0x1, 0x300, 0xf, 0x9b, 0xe0, 0x20, 0x13b1, 0x41, 0xb069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x8f, 0x4d, 0x1, 0xff, 0x42, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x35b}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xc, 0x3}}]}}]}}]}}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}}, 0x4480) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.971613865s ago: executing program 1 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30809490000240064000000879078ac1414bbac14140c8907efe0000000"], 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) (async) setitimer(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = getpid() prlimit64(r4, 0x7, &(0x7f00000000c0)={0x2d1a2bb3, 0x4}, &(0x7f0000000080)) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a83100000100050014000300776c616e3100000000000000000000000c0016800800100004000c80"], 0x40}}, 0x0) 5.874070277s ago: executing program 1 (id=296): socket$inet6(0x10, 0x80000, 0x244) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x5fe7, &(0x7f0000394000/0x3000)=nil, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001100)={&(0x7f0000000880)=[{0x4, 0xf5ff, 0xd5, &(0x7f0000000300)="b525bb325834dcaf04ab87efa7cb55518ef9a3770c47e3b64acb4352b6634a7a9e22fcea5a0417bfe92a2c1d52be65b6aa99355e6b865734f18866cb734c53d2aee73d5af64dbdee64d5e4c89225ad23af187aa0b753a3770fd937e03fb683bd601891c0830bfc1c502b218ba1e8b810912adc0a3f51174fe26c2d72c0a0163f01ac2f65c1d49676b6d457189fff9bd96e4afb0b24463b897bf0aef8ce95bb0910ce89acd90fed39fb5c36af503209653378c99fdfc920603ae126b58a5674aec5605758a321f6c5049d03a8a63e9f97f200000000"}, {0x4, 0x400, 0x0, 0x0}], 0x2}) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a040040ccc97ca2ce3a00088000000000000000000000000000bbff020000000000000000000000000001023c9078000005006050835902000000fc010000000000000000000000000000fc0100000000000000000000000400003a00"/127], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@link_local, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x19, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 4.316737306s ago: executing program 3 (id=305): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000e69600009500"/32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r6, 0x4b30, 0x8000000000000001) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 2.650409763s ago: executing program 3 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) (fail_nth: 3) 2.285219801s ago: executing program 3 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syslog(0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text32={0x20, &(0x7f0000000140)="260f01cb0f01cbb90f4000000f01d90f22d30fea946e623f0000d9f666baa100ed0f01dfbae80000434309c266baf80cb8fc7847823e0f01cf66bafc0c66b8ac0066ef", 0x43}], 0xaaaaaaaaaaaacd1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.278663856s ago: executing program 4 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000200000000000000aaff020000000000000000000000000001"], 0xffe) 2.235494458s ago: executing program 2 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000400)='./file0\x00', 0x0) 2.233145856s ago: executing program 0 (id=312): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x7, 0x3, 0xffffffffffffffc0, 0x8}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.149598971s ago: executing program 2 (id=313): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x3f8}, {0x0}, {0x0}], 0x3, &(0x7f0000001d00)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000000) 1.950384321s ago: executing program 0 (id=314): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) r2 = accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000008}}], 0x1, 0x24044010) 1.947549931s ago: executing program 2 (id=315): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000011c0)={0x4, 0x2000, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x7, {0x8000, 0xffe, 0x0, 0x86c}}) 1.920024662s ago: executing program 3 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 1.849322632s ago: executing program 0 (id=317): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904", @ANYRESDEC, @ANYBLOB="c314c55a6eb3567ebb7ea40fa8d03e9872d8a922c9eb5bd1d4de60ed53f56e0cd5c59219e46c726a2ae9b211ce0b4e760a8a968b24caf6cb8804edd71dae9c77e1c7077c96c9954c8a76"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020050b0d1a0000000000010902240001000040b1090400fd0203000600092105110001220300090581031000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0x127}], 0x1) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x3, {0x3, 0x35, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.78831575s ago: executing program 4 (id=318): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0x70bd2a, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 1.786138092s ago: executing program 2 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x37) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40404}, 0x100) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYBLOB="b38c784572f7c49f2900a545e3"], 0x52) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1241) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3ddd1223887131e3ccf65d321d273f32", @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,\x00']) 1.785531408s ago: executing program 3 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/138, 0x8a}], 0x1, 0xfffffffc, 0x101) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.76599664s ago: executing program 1 (id=321): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.64225271s ago: executing program 4 (id=322): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0xc2fb78896bacbd71, 0x0, 0x0, 0xfffffffffffffb43}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000180)}) clock_settime(0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2) close(r3) (fail_nth: 2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0x4394) 1.195672649s ago: executing program 4 (id=323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd67, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x101400, 0x148) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) open(0x0, 0x1491ff, 0x22) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='personality\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r8}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_rr_get_interval(0x0, 0x0) 1.180729508s ago: executing program 2 (id=324): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$loop(&(0x7f00000013c0), 0x3, 0x10b242) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(r4, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000080010000001c0001800600010002000e0008000300e00000010800060006000000c6d878face506a4be741fc2d2f85a1ca6bda44"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.132289061s ago: executing program 0 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000abc5aea6a0f6408c7d847f130a6de5f8b6aa26ae72c981aac79630a32570390eeb2b9a05d0b8a6d1584c022448269e8a52f508fc09a51c18dae1034d7a2b759008a3a823a90a745e51cdee7983c8a7df8830492ee19fee6a198c1f86efe9025c92c58bacf73db22819048f71c0ffc68b77dd31e57d6dcb435e061c0400000000000000a616073dc13c9ff1d7e88d109510e799b97f08c5b39b3aaab950f53f2cbd23fb387ed1b42243e3873b1a09fa22b0826f78598d2f6172f75a291f8edf9095225dc797923ecb158ffa2790b1cd067fc37ad5a432", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300000000000500110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score\x00') preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/165, 0xa5}], 0x1, 0x0, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semget$private(0x0, 0x3, 0x1c4) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640000000000800033800000008140000000a"], 0x74}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000002000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000002000100000000000000fb000000ff8005000500000000000a00000000000000fc00000000000000000000000000000000000000000000000100080000000000010014"], 0x80}, 0x1, 0x7}, 0x10) 440.726662ms ago: executing program 1 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000810000f8bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 215.176508ms ago: executing program 2 (id=327): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x8, 0x4}, &(0x7f00000000c0)=0xc) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000380)={0x10000, "bc810dd30713dfd4cb9c51dccc08fd78aa9a6718661cbbac90ad05117f31160a", 0x4, 0x2, 0x6, 0xff, 0x2, 0x3, 0x1}) 78.335609ms ago: executing program 0 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x20) r2 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x20) (async) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) 0s ago: executing program 0 (id=329): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2013, 0x221e, 0x80000000, 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) kernel console output (not intermixed with test programs): ontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.326513][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 60.343055][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 60.354588][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 60.418831][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 60.544568][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.552522][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.559725][ T5821] bridge_slave_0: entered allmulticast mode [ 60.566770][ T5821] bridge_slave_0: entered promiscuous mode [ 60.577140][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.584362][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.591506][ T5821] bridge_slave_1: entered allmulticast mode [ 60.598378][ T5821] bridge_slave_1: entered promiscuous mode [ 60.622814][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 60.688814][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.696250][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.703486][ T5820] bridge_slave_0: entered allmulticast mode [ 60.710103][ T5820] bridge_slave_0: entered promiscuous mode [ 60.718086][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.725208][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.732472][ T5819] bridge_slave_0: entered allmulticast mode [ 60.739077][ T5819] bridge_slave_0: entered promiscuous mode [ 60.760386][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.772643][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.779717][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.787460][ T5820] bridge_slave_1: entered allmulticast mode [ 60.795212][ T5820] bridge_slave_1: entered promiscuous mode [ 60.818625][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.825865][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.833114][ T5819] bridge_slave_1: entered allmulticast mode [ 60.839723][ T5819] bridge_slave_1: entered promiscuous mode [ 60.846406][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.853707][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.860903][ T5827] bridge_slave_0: entered allmulticast mode [ 60.867519][ T5827] bridge_slave_0: entered promiscuous mode [ 60.875628][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.903406][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.932701][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.939801][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.946980][ T5827] bridge_slave_1: entered allmulticast mode [ 60.954088][ T5827] bridge_slave_1: entered promiscuous mode [ 60.972634][ T5821] team0: Port device team_slave_0 added [ 60.979996][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.009755][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.027885][ T5821] team0: Port device team_slave_1 added [ 61.039232][ T5820] team0: Port device team_slave_0 added [ 61.048036][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.087401][ T5820] team0: Port device team_slave_1 added [ 61.111600][ T5819] team0: Port device team_slave_0 added [ 61.119030][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.131486][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.164015][ T5819] team0: Port device team_slave_1 added [ 61.170383][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.177401][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.203775][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.222614][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.229553][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.255873][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.266792][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.274167][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.281446][ T5818] bridge_slave_0: entered allmulticast mode [ 61.288089][ T5818] bridge_slave_0: entered promiscuous mode [ 61.309176][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.316349][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.342582][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.360383][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.369265][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.395509][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.412526][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.419612][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.427139][ T5818] bridge_slave_1: entered allmulticast mode [ 61.433979][ T5818] bridge_slave_1: entered promiscuous mode [ 61.453962][ T5827] team0: Port device team_slave_0 added [ 61.486033][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.493341][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.519827][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.533814][ T5827] team0: Port device team_slave_1 added [ 61.540030][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.547252][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.573433][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.600990][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.634495][ T5820] hsr_slave_0: entered promiscuous mode [ 61.640874][ T5820] hsr_slave_1: entered promiscuous mode [ 61.658449][ T5821] hsr_slave_0: entered promiscuous mode [ 61.664737][ T5821] hsr_slave_1: entered promiscuous mode [ 61.670966][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.678675][ T5821] Cannot create hsr debugfs directory [ 61.686369][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.696246][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.703401][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.729381][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.741577][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.748525][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.774440][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.824355][ T5818] team0: Port device team_slave_0 added [ 61.874867][ T5818] team0: Port device team_slave_1 added [ 61.893594][ T5833] Bluetooth: hci3: command tx timeout [ 61.897208][ T5837] Bluetooth: hci1: command tx timeout [ 61.899349][ T5833] Bluetooth: hci4: command tx timeout [ 61.917866][ T5819] hsr_slave_0: entered promiscuous mode [ 61.924396][ T5819] hsr_slave_1: entered promiscuous mode [ 61.930244][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.937813][ T5819] Cannot create hsr debugfs directory [ 61.952536][ T5827] hsr_slave_0: entered promiscuous mode [ 61.958564][ T5827] hsr_slave_1: entered promiscuous mode [ 61.965408][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.970743][ T5833] Bluetooth: hci2: command tx timeout [ 61.973013][ T5827] Cannot create hsr debugfs directory [ 61.978370][ T5837] Bluetooth: hci0: command tx timeout [ 62.057274][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.064291][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.091016][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.123771][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.130809][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.157105][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.276277][ T5818] hsr_slave_0: entered promiscuous mode [ 62.282594][ T5818] hsr_slave_1: entered promiscuous mode [ 62.288398][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.297278][ T5818] Cannot create hsr debugfs directory [ 62.415492][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.439257][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.459549][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.478288][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.535259][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.553379][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.564161][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.582568][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.612424][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.626717][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.637303][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.651144][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.744796][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.773812][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.791755][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.803542][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.838740][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.878908][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.889542][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.909568][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.921483][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.930310][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.943735][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.950983][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.964824][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.971933][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.998472][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.067633][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.084460][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.096275][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.103380][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.148850][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.155976][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.192789][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.214600][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.215256][ T30] audit: type=1400 audit(1745028737.882:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.268064][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.275218][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.295500][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.307323][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.314443][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.339363][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.346507][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.377040][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.384253][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.408187][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.477581][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.505905][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.519359][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.526455][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.555152][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.562306][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.692093][ T5820] veth0_vlan: entered promiscuous mode [ 63.716354][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.737301][ T5820] veth1_vlan: entered promiscuous mode [ 63.846610][ T5820] veth0_macvtap: entered promiscuous mode [ 63.883783][ T5820] veth1_macvtap: entered promiscuous mode [ 63.899215][ T5821] veth0_vlan: entered promiscuous mode [ 63.922847][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.958445][ T5821] veth1_vlan: entered promiscuous mode [ 63.967594][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.976032][ T5837] Bluetooth: hci1: command tx timeout [ 63.982447][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.984340][ T5833] Bluetooth: hci4: command tx timeout [ 63.989214][ T54] Bluetooth: hci3: command tx timeout [ 64.005559][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.015775][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.024827][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.034301][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.043675][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.053561][ T54] Bluetooth: hci0: command tx timeout [ 64.053570][ T5833] Bluetooth: hci2: command tx timeout [ 64.067981][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.182583][ T5821] veth0_macvtap: entered promiscuous mode [ 64.191681][ T5819] veth0_vlan: entered promiscuous mode [ 64.230335][ T5818] veth0_vlan: entered promiscuous mode [ 64.245074][ T5821] veth1_macvtap: entered promiscuous mode [ 64.268383][ T5819] veth1_vlan: entered promiscuous mode [ 64.280166][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.308462][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.326253][ T5818] veth1_vlan: entered promiscuous mode [ 64.345859][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.357987][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.369084][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.389799][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.398711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.410217][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.421118][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.432502][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.448096][ T30] audit: type=1400 audit(1745028739.112:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.3UTxrq/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.485313][ T30] audit: type=1400 audit(1745028739.112:113): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.485790][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.517404][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.526406][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.536177][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.547513][ T30] audit: type=1400 audit(1745028739.112:114): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.3UTxrq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.558579][ T5819] veth0_macvtap: entered promiscuous mode [ 64.579324][ T30] audit: type=1400 audit(1745028739.112:115): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.591048][ T5818] veth0_macvtap: entered promiscuous mode [ 64.609286][ T30] audit: type=1400 audit(1745028739.112:116): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.3UTxrq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.652560][ T30] audit: type=1400 audit(1745028739.112:117): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.3UTxrq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.662031][ T5819] veth1_macvtap: entered promiscuous mode [ 64.687041][ T30] audit: type=1400 audit(1745028739.112:118): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.687312][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.725222][ T30] audit: type=1400 audit(1745028739.142:119): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.727264][ T5818] veth1_macvtap: entered promiscuous mode [ 64.758342][ T30] audit: type=1400 audit(1745028739.152:120): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=6508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.784073][ T30] audit: type=1400 audit(1745028739.212:121): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 64.820285][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.833388][ T30] audit: type=1400 audit(1745028739.212:122): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 64.833629][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.867176][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.877855][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.889040][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.903079][ T5827] veth0_vlan: entered promiscuous mode [ 64.926910][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.943234][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969721][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.990663][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.003617][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.016390][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.033700][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.043691][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.055310][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.066945][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.081115][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.099272][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.115907][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.126469][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.136790][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.147370][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.158000][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.267547][ T5908] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 65.565675][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.577692][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.592876][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.602305][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.611552][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.620431][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.644211][ T5827] veth1_vlan: entered promiscuous mode [ 65.655480][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.665077][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.674205][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.683101][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.710957][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.719159][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.807621][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.835954][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.848150][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.888179][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.943889][ T5827] veth0_macvtap: entered promiscuous mode [ 65.944422][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.969204][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.999225][ T5912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33048 sclass=netlink_tcpdiag_socket pid=5912 comm=syz.2.6 [ 66.004660][ T5827] veth1_macvtap: entered promiscuous mode [ 66.048991][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.057246][ T54] Bluetooth: hci4: command tx timeout [ 66.058289][ T5833] Bluetooth: hci1: command tx timeout [ 66.063938][ T54] Bluetooth: hci3: command tx timeout [ 66.075720][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.090330][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.110653][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.125828][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.141634][ T54] Bluetooth: hci2: command tx timeout [ 66.141645][ T5837] Bluetooth: hci0: command tx timeout [ 66.157264][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.167311][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.181331][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.191316][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.203643][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.240893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.326971][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.568329][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.592002][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.611750][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.630726][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.653328][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.673885][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.700644][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.711997][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.723547][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.738151][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.747110][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.814121][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.831450][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.840213][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.849942][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.999517][ T5932] fuse: Bad value for 'fd' [ 67.134052][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.158811][ T5938] fuse: Unknown parameter 'use00000000000000000000' [ 67.190843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.468155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.504565][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.775690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.916250][ T5947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.926952][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.980601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 67.981132][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.031866][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.050936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.064546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.131956][ T54] Bluetooth: hci1: command tx timeout [ 68.132174][ T5837] Bluetooth: hci3: command tx timeout [ 68.137485][ T54] Bluetooth: hci4: command tx timeout [ 68.211136][ T54] Bluetooth: hci2: command tx timeout [ 68.211548][ T5837] Bluetooth: hci0: command tx timeout [ 68.216727][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 68.239732][ T5914] usb 3-1: config 0 has no interfaces? [ 68.258731][ T5914] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 68.268271][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.279023][ T5914] usb 3-1: Product: syz [ 68.284709][ T5914] usb 3-1: Manufacturer: syz [ 68.287414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.290099][ T5914] usb 3-1: SerialNumber: syz [ 68.389810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.457681][ T5914] usb 3-1: config 0 descriptor?? [ 68.700016][ T5960] FAULT_INJECTION: forcing a failure. [ 68.700016][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.728584][ T5935] process 'syz.2.9' launched './file1' with NULL argv: empty string added [ 69.177768][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.4.5 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 69.177789][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.177798][ T5960] Call Trace: [ 69.177803][ T5960] [ 69.177809][ T5960] dump_stack_lvl+0x16c/0x1f0 [ 69.177834][ T5960] should_fail_ex+0x512/0x640 [ 69.177854][ T5960] _copy_from_user+0x2e/0xd0 [ 69.177872][ T5960] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 69.177894][ T5960] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 69.177914][ T5960] ? __lock_acquire+0x5ca/0x1ba0 [ 69.177934][ T5960] do_ipv6_setsockopt+0x865/0x4420 [ 69.177957][ T5960] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 69.177976][ T5960] ? avc_has_perm_noaudit+0x117/0x3b0 [ 69.177996][ T5960] ? avc_has_perm_noaudit+0x149/0x3b0 [ 69.178013][ T5960] ? avc_has_perm+0x11a/0x1c0 [ 69.178027][ T5960] ? __pfx_avc_has_perm+0x10/0x10 [ 69.178049][ T5960] ? sock_has_perm+0x259/0x2f0 [ 69.178065][ T5960] ? __pfx_sock_has_perm+0x10/0x10 [ 69.178081][ T5960] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 69.178103][ T5960] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 69.178122][ T5960] ? proc_fail_nth_write+0x9f/0x250 [ 69.178155][ T5960] ? ipv6_setsockopt+0xcb/0x170 [ 69.178173][ T5960] ipv6_setsockopt+0xcb/0x170 [ 69.178194][ T5960] udpv6_setsockopt+0x7d/0xd0 [ 69.178209][ T5960] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 69.178231][ T5960] do_sock_setsockopt+0x221/0x470 [ 69.178252][ T5960] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 69.178284][ T5960] __sys_setsockopt+0x1a0/0x230 [ 69.178304][ T5960] __x64_sys_setsockopt+0xbd/0x160 [ 69.178319][ T5960] ? do_syscall_64+0x91/0x260 [ 69.178338][ T5960] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.178357][ T5960] do_syscall_64+0xcd/0x260 [ 69.178377][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.178392][ T5960] RIP: 0033:0x7f63fe18e169 [ 69.178404][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.178418][ T5960] RSP: 002b:00007f63ff0af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.178433][ T5960] RAX: ffffffffffffffda RBX: 00007f63fe3b6080 RCX: 00007f63fe18e169 [ 69.178443][ T5960] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 69.178451][ T5960] RBP: 00007f63ff0af090 R08: 0000000000000014 R09: 0000000000000000 [ 69.178460][ T5960] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.178469][ T5960] R13: 0000000000000000 R14: 00007f63fe3b6080 R15: 00007ffe2bf8a4f8 [ 69.178488][ T5960] [ 69.492906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.522458][ T5914] usb 3-1: USB disconnect, device number 2 [ 69.698817][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 69.698827][ T30] audit: type=1400 audit(1745028744.362:166): avc: denied { create } for pid=5969 comm="syz.3.17" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.744476][ T5968] fuse: Invalid rootmode [ 69.769009][ T30] audit: type=1400 audit(1745028744.412:167): avc: denied { allowed } for pid=5965 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.897369][ T30] audit: type=1400 audit(1745028744.412:168): avc: denied { sqpoll } for pid=5965 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.916695][ T30] audit: type=1400 audit(1745028744.462:169): avc: denied { ioctl } for pid=5969 comm="syz.3.17" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8258 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.054475][ T5978] fuse: Unknown parameter 'user_i00000000000000000000' [ 70.108055][ T5982] 9pnet_fd: Insufficient options for proto=fd [ 70.117302][ T5983] warning: `syz.0.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.950998][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.047473][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.070636][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.084088][ T5989] fuse: Unknown parameter 'user_id00000000000000000000' [ 71.151582][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.222986][ T30] audit: type=1400 audit(1745028745.882:170): avc: denied { bind } for pid=5992 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.272870][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.286672][ T5873] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 71.296482][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.327946][ T5873] usb 1-1: config 0 descriptor?? [ 71.339472][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 71.480290][ T30] audit: type=1400 audit(1745028746.142:171): avc: denied { prog_run } for pid=5999 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.515023][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.529226][ T30] audit: type=1400 audit(1745028746.182:172): avc: denied { write } for pid=5999 comm="syz.1.29" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.701042][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 71.711742][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.724610][ T30] audit: type=1400 audit(1745028746.392:173): avc: denied { map } for pid=6004 comm="syz.1.31" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.753461][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 71.756327][ T30] audit: type=1400 audit(1745028746.392:174): avc: denied { read write } for pid=6004 comm="syz.1.31" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.928207][ T30] audit: type=1400 audit(1745028746.582:175): avc: denied { ioctl } for pid=6004 comm="syz.1.31" path="socket:[7681]" dev="sockfs" ino=7681 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.928544][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 72.103077][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 72.117275][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.130402][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.153559][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.163004][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 72.169658][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.170033][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 72.393349][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 72.406430][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 72.414382][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 72.494726][ T6012] Zero length message leads to an empty skb [ 72.904433][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 72.911082][ T5874] usb 3-1: GET_CAPABILITIES returned 0 [ 72.930034][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 72.942243][ T5874] usbtmc 3-1:16.0: can't read capabilities [ 72.971189][ T5873] pwc: recv_control_msg error -32 req 02 val 2400 [ 73.022982][ T6016] 9pnet_fd: Insufficient options for proto=fd [ 73.101016][ T5873] pwc: recv_control_msg error -32 req 02 val 2600 [ 73.141641][ T5983] can0: slcan on ttyS3. [ 73.215647][ T5914] usb 3-1: USB disconnect, device number 3 [ 73.390909][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.561671][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 73.571457][ T5980] can0 (unregistered): slcan off ttyS3. [ 73.578182][ T5902] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 73.581590][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 73.601066][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 73.614973][ T5902] usb 5-1: config 0 has no interface number 0 [ 73.621889][ T5902] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 73.625671][ T5873] pwc: Registered as video103. [ 73.635244][ T5902] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 73.645114][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 73.670886][ T47] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 73.695206][ T5873] usb 1-1: USB disconnect, device number 2 [ 73.700571][ T5902] usb 5-1: config 0 interface 49 has no altsetting 0 [ 73.719843][ T5902] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 73.740213][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.790586][ T5902] usb 5-1: Product: syz [ 73.807750][ T5902] usb 5-1: Manufacturer: syz [ 73.817760][ T5902] usb 5-1: SerialNumber: syz [ 73.822984][ T47] usb 2-1: device descriptor read/64, error -71 [ 73.856610][ T5902] usb 5-1: config 0 descriptor?? [ 74.008595][ T6042] syzkaller0: entered promiscuous mode [ 74.018126][ T6042] syzkaller0: entered allmulticast mode [ 74.085652][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.094708][ T47] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 74.132359][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.175654][ T6019] [U] 1WT`8H$09\ [ 74.194521][ T6019] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 74.207179][ T6019] [U] 4XZ^Y)MC. OȞPOW [ 74.210839][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.258963][ T5902] as10x_usb: device has been detected [ 74.264562][ T47] usb 2-1: device descriptor read/64, error -71 [ 74.272453][ T5902] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 74.304846][ T5902] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 74.346679][ T5902] as10x_usb: error during firmware upload part1 [ 74.355712][ T5902] Registered device Sky IT Digital Key (green led) [ 74.358850][ T5902] usb 5-1: USB disconnect, device number 2 [ 74.381240][ T47] usb usb2-port1: attempt power cycle [ 74.390583][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 74.399178][ T5914] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.414183][ T5902] Unregistered device Sky IT Digital Key (green led) [ 74.414799][ T5914] usb 4-1: config 179 has no interface number 0 [ 74.429939][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.445194][ T5902] as10x_usb: device has been disconnected [ 74.465247][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.476859][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.480633][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.488475][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.508561][ T5914] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.521828][ T5914] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.531046][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.546482][ T6045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.644776][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 74.653232][ T5873] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.665015][ T5873] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.678417][ T5873] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.689009][ T5873] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.702927][ T5873] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.712224][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.767958][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 74.768021][ T30] audit: type=1400 audit(1745028749.432:205): avc: denied { create } for pid=6043 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.770813][ T5874] usb 4-1: USB disconnect, device number 2 [ 74.774311][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 74.807570][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 74.816405][ T47] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 74.831513][ T30] audit: type=1400 audit(1745028749.432:206): avc: denied { bind } for pid=6043 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.857659][ T47] usb 2-1: device descriptor read/8, error -71 [ 74.865133][ T30] audit: type=1400 audit(1745028749.432:207): avc: denied { accept } for pid=6043 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.904062][ T30] audit: type=1400 audit(1745028749.432:208): avc: denied { write } for pid=6043 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.959673][ T5873] usb 1-1: GET_CAPABILITIES returned 0 [ 74.979885][ T5873] usbtmc 1-1:16.0: can't read capabilities [ 75.004721][ T30] audit: type=1400 audit(1745028749.672:209): avc: denied { mounton } for pid=6068 comm="syz.4.43" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.078006][ T30] audit: type=1400 audit(1745028749.732:210): avc: denied { create } for pid=6068 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.117569][ T30] audit: type=1400 audit(1745028749.782:211): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 75.137866][ T47] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 75.172589][ T47] usb 2-1: device descriptor read/8, error -71 [ 75.218066][ T24] usb 1-1: USB disconnect, device number 3 [ 75.361899][ T47] usb usb2-port1: unable to enumerate USB device [ 76.452376][ T873] cfg80211: failed to load regulatory.db [ 76.636906][ T6083] 9pnet_fd: Insufficient options for proto=fd [ 76.710615][ T30] audit: type=1400 audit(1745028751.372:212): avc: denied { mount } for pid=6085 comm="syz.1.49" name="/" dev="autofs" ino=7792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.009656][ T6091] input: syz0 as /devices/virtual/input/input6 [ 77.078562][ T30] audit: type=1400 audit(1745028751.652:213): avc: denied { name_bind } for pid=6081 comm="syz.0.48" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.358245][ T6094] fuse: Bad value for 'rootmode' [ 77.371028][ T30] audit: type=1400 audit(1745028751.652:214): avc: denied { node_bind } for pid=6081 comm="syz.0.48" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.860660][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.032308][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 78.049759][ T5899] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 78.173271][ T5899] usb 2-1: config 0 has no interface number 0 [ 78.175635][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.259674][ T6107] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 78.622925][ T5899] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 78.661007][ T5899] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 78.678529][ T5899] usb 2-1: config 0 interface 49 has no altsetting 0 [ 78.698456][ T5899] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 78.724950][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.752700][ T5899] usb 2-1: Product: syz [ 78.762303][ T5899] usb 2-1: Manufacturer: syz [ 78.780716][ T5899] usb 2-1: SerialNumber: syz [ 78.795137][ T5899] usb 2-1: config 0 descriptor?? [ 78.847028][ T5837] Bluetooth: hci2: Unknown advertising packet type: 0x74 [ 78.847068][ T5837] Bluetooth: hci2: Malformed LE Event: 0x0d [ 79.285983][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.381492][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 79.568595][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.627823][ T6098] [U] 1WT`8H$09\ [ 79.809042][ T6098] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 79.843526][ T6098] [U] 4XZ^Y)MC. OȞPOW [ 79.846672][ T5899] as10x_usb: device has been detected [ 79.875374][ T5899] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 79.929995][ T6125] fuse: Bad value for 'rootmode' [ 79.994621][ T5899] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 80.035706][ T5899] as10x_usb: error during firmware upload part1 [ 80.060255][ T5899] Registered device Sky IT Digital Key (green led) [ 80.069925][ T5899] usb 2-1: USB disconnect, device number 6 [ 80.140431][ T5899] Unregistered device Sky IT Digital Key (green led) [ 80.193374][ T5899] as10x_usb: device has been disconnected [ 80.944377][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 80.944393][ T30] audit: type=1400 audit(1745028755.602:224): avc: denied { read write } for pid=6136 comm="syz.0.65" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.981024][ T30] audit: type=1400 audit(1745028755.602:225): avc: denied { open } for pid=6136 comm="syz.0.65" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.113654][ T30] audit: type=1400 audit(1745028755.772:226): avc: denied { ioctl } for pid=6136 comm="syz.0.65" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.759177][ T6146] input: syz0 as /devices/virtual/input/input7 [ 81.794193][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.975738][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 81.993094][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 82.015144][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.380423][ T6152] input: syz0 as /devices/virtual/input/input8 [ 82.466762][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.499525][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.527688][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.550018][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.732591][ T6157] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 83.261056][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 83.279975][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 83.317399][ T6159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.654855][ T5899] usb 2-1: USB disconnect, device number 7 [ 83.803752][ T6167] fuse: Bad value for 'rootmode' [ 83.814402][ T6168] fuse: Bad value for 'fd' [ 84.341641][ T6179] can0: slcan on ttyS3. [ 84.590873][ T6180] can0 (unregistered): slcan off ttyS3. [ 84.883664][ T30] audit: type=1400 audit(1745028759.542:227): avc: denied { create } for pid=6185 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.930790][ T5874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.944738][ T30] audit: type=1400 audit(1745028759.572:228): avc: denied { bind } for pid=6185 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.989130][ T30] audit: type=1400 audit(1745028759.572:229): avc: denied { name_bind } for pid=6185 comm="syz.2.79" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 85.057593][ T30] audit: type=1400 audit(1745028759.572:230): avc: denied { node_bind } for pid=6185 comm="syz.2.79" saddr=::ffff:172.20.20.47 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 85.102682][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 85.119669][ T5874] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 85.133075][ T5874] usb 2-1: config 0 has no interface number 0 [ 85.160713][ T30] audit: type=1400 audit(1745028759.582:231): avc: denied { read } for pid=6185 comm="syz.2.79" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.186994][ T5874] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 85.210640][ T5874] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 85.240657][ T30] audit: type=1400 audit(1745028759.582:232): avc: denied { open } for pid=6185 comm="syz.2.79" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.265214][ T5874] usb 2-1: config 0 interface 49 has no altsetting 0 [ 85.282762][ T5874] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 85.339218][ T30] audit: type=1400 audit(1745028759.592:233): avc: denied { ioctl } for pid=6185 comm="syz.2.79" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.345431][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.364365][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.391684][ T5874] usb 2-1: Product: syz [ 85.395999][ T5874] usb 2-1: Manufacturer: syz [ 85.419221][ T5874] usb 2-1: SerialNumber: syz [ 85.945575][ T5874] usb 2-1: config 0 descriptor?? [ 86.200317][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.214833][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.715018][ T5874] as10x_usb: device has been detected [ 86.729525][ T5874] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 86.778727][ T5874] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 86.805068][ T5874] as10x_usb: error during firmware upload part1 [ 86.859725][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.865063][ T5874] Registered device Sky IT Digital Key (green led) [ 86.880943][ T5874] usb 2-1: USB disconnect, device number 8 [ 86.944300][ T5874] Unregistered device Sky IT Digital Key (green led) [ 86.953283][ T5874] as10x_usb: device has been disconnected [ 87.000570][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 87.000584][ T30] audit: type=1400 audit(1745028761.592:237): avc: denied { setopt } for pid=6199 comm="syz.4.83" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.072862][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 87.093455][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.113963][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.126516][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.137963][ T5902] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.151591][ T5902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.167657][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.241390][ T873] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.249543][ T6204] fuse: Bad value for 'fd' [ 87.293702][ T6206] fuse: Unknown parameter 'use00000000000000000000' [ 87.341384][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.353172][ T6208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.384053][ T5902] usb 1-1: usb_control_msg returned -32 [ 87.389725][ T5902] usbtmc 1-1:16.0: can't read capabilities [ 87.401449][ T5902] usb 1-1: USB disconnect, device number 4 [ 87.404232][ T873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.418271][ T873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.428061][ T873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.438726][ T873] usb 5-1: config 0 descriptor?? [ 87.491142][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 87.499520][ T47] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.507798][ T47] usb 3-1: config 0 has no interface number 0 [ 87.515046][ T47] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.525967][ T47] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 87.539035][ T47] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.551363][ T47] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.564483][ T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.574559][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.586270][ T47] usb 3-1: config 0 descriptor?? [ 87.595216][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.600167][ T47] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.853035][ T873] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 87.873282][ T873] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input9 [ 88.067650][ T5874] usb 3-1: USB disconnect, device number 4 [ 88.097798][ T5874] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 88.140120][ T873] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 88.169473][ T30] audit: type=1400 audit(1745028762.832:238): avc: denied { sys_module } for pid=6219 comm="syz.0.91" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 88.229587][ T6222] loop7: detected capacity change from 0 to 2 [ 88.271084][ T30] audit: type=1400 audit(1745028762.892:239): avc: denied { read write } for pid=6219 comm="syz.0.91" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.295741][ T6222] Dev loop7: unable to read RDB block 2 [ 88.307341][ T6222] loop7: unable to read partition table [ 88.328516][ T6222] loop7: partition table beyond EOD, truncated [ 88.346582][ T6222] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 88.346582][ T6222] ) failed (rc=-5) [ 88.361540][ T30] audit: type=1400 audit(1745028762.892:240): avc: denied { open } for pid=6219 comm="syz.0.91" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.387371][ T30] audit: type=1400 audit(1745028762.892:241): avc: denied { append } for pid=6219 comm="syz.0.91" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.417646][ T30] audit: type=1400 audit(1745028762.982:242): avc: denied { mount } for pid=6223 comm="syz.1.92" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.549102][ T30] audit: type=1400 audit(1745028763.112:243): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.584660][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.604076][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.620605][ T30] audit: type=1400 audit(1745028763.272:244): avc: denied { read } for pid=6230 comm="syz.1.94" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.669972][ T5837] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 88.692375][ T30] audit: type=1400 audit(1745028763.272:245): avc: denied { open } for pid=6230 comm="syz.1.94" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.947636][ T30] audit: type=1400 audit(1745028763.412:246): avc: denied { write } for pid=6230 comm="syz.1.94" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.461527][ T6242] fuse: Unknown parameter '0x0000000000000003' [ 90.135007][ T5874] usb 5-1: USB disconnect, device number 3 [ 90.476409][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.985392][ T6265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.581434][ T6286] FAULT_INJECTION: forcing a failure. [ 91.581434][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 91.597521][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz.4.111 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 91.597546][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.597555][ T6286] Call Trace: [ 91.597561][ T6286] [ 91.597568][ T6286] dump_stack_lvl+0x16c/0x1f0 [ 91.597595][ T6286] should_fail_ex+0x512/0x640 [ 91.597611][ T6286] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 91.597637][ T6286] should_failslab+0xc2/0x120 [ 91.597654][ T6286] __kmalloc_cache_noprof+0x6a/0x3e0 [ 91.597677][ T6286] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 91.597701][ T6286] ? genl_start+0x1e8/0x980 [ 91.597726][ T6286] genl_start+0x1e8/0x980 [ 91.597754][ T6286] __netlink_dump_start+0x60b/0x990 [ 91.597785][ T6286] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 91.597810][ T6286] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 91.597835][ T6286] ? genl_op_from_small+0x25/0x440 [ 91.597861][ T6286] ? __pfx_genl_get_cmd+0x10/0x10 [ 91.597881][ T6286] ? __pfx_genl_start+0x10/0x10 [ 91.597902][ T6286] ? __pfx_genl_dumpit+0x10/0x10 [ 91.597924][ T6286] ? __pfx_genl_done+0x10/0x10 [ 91.597950][ T6286] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 91.597966][ T6286] ? kmalloc_reserve+0x18b/0x2c0 [ 91.597989][ T6286] ? __radix_tree_lookup+0x21f/0x2c0 [ 91.598015][ T6286] genl_rcv_msg+0x46e/0x800 [ 91.598043][ T6286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.598069][ T6286] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 91.598096][ T6286] ? __lock_acquire+0xaa4/0x1ba0 [ 91.598118][ T6286] netlink_rcv_skb+0x16a/0x440 [ 91.598140][ T6286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.598165][ T6286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.598200][ T6286] ? __pfx_down_read+0x10/0x10 [ 91.598226][ T6286] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.598252][ T6286] genl_rcv+0x28/0x40 [ 91.598274][ T6286] netlink_unicast+0x53a/0x7f0 [ 91.598300][ T6286] ? __pfx_netlink_unicast+0x10/0x10 [ 91.598330][ T6286] netlink_sendmsg+0x8d1/0xdd0 [ 91.598357][ T6286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.598389][ T6286] ____sys_sendmsg+0xa95/0xc70 [ 91.598415][ T6286] ? copy_msghdr_from_user+0x10a/0x160 [ 91.598435][ T6286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.598471][ T6286] ___sys_sendmsg+0x134/0x1d0 [ 91.598493][ T6286] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.598544][ T6286] __sys_sendmsg+0x16d/0x220 [ 91.598565][ T6286] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.598592][ T6286] ? rcu_is_watching+0x12/0xc0 [ 91.598620][ T6286] do_syscall_64+0xcd/0x260 [ 91.598645][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.598661][ T6286] RIP: 0033:0x7f63fe18e169 [ 91.598676][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.598691][ T6286] RSP: 002b:00007f63ff0d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.598708][ T6286] RAX: ffffffffffffffda RBX: 00007f63fe3b5fa0 RCX: 00007f63fe18e169 [ 91.598718][ T6286] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 91.598728][ T6286] RBP: 00007f63ff0d0090 R08: 0000000000000000 R09: 0000000000000000 [ 91.598737][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.598747][ T6286] R13: 0000000000000000 R14: 00007f63fe3b5fa0 R15: 00007ffe2bf8a4f8 [ 91.598774][ T6286] [ 91.921003][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.019272][ T6290] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 92.046133][ T6290] ip6erspan0: entered promiscuous mode [ 92.478892][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 92.478926][ T30] audit: type=1400 audit(1745028767.142:251): avc: denied { create } for pid=6298 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.576345][ T30] audit: type=1400 audit(1745028767.182:252): avc: denied { shutdown } for pid=6281 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.579145][ T6283] infiniband syz!: set active [ 92.617255][ T6283] infiniband syz!: added team_slave_0 [ 92.629127][ T6283] syz!: rxe_create_cq: returned err = -12 [ 92.654453][ T30] audit: type=1400 audit(1745028767.182:253): avc: denied { getopt } for pid=6281 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.655679][ T6283] infiniband syz!: Couldn't create ib_mad CQ [ 92.707670][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.741675][ T6283] infiniband syz!: Couldn't open port 1 [ 92.750245][ T30] audit: type=1400 audit(1745028767.202:254): avc: denied { sys_admin } for pid=6298 comm="syz.0.113" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.774043][ T30] audit: type=1400 audit(1745028767.212:255): avc: denied { ioctl } for pid=6289 comm="syz.4.112" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.862489][ T6283] RDS/IB: syz!: added [ 92.896928][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 92.906477][ T6283] smc: adding ib device syz! with port count 1 [ 92.916812][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.940405][ T6283] smc: ib device syz! port 1 has pnetid [ 92.948349][ T5914] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.979632][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.014110][ T30] audit: type=1400 audit(1745028767.682:256): avc: denied { setopt } for pid=6305 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.025866][ T5914] usb 5-1: config 0 descriptor?? [ 93.445983][ T6310] 9pnet_fd: Insufficient options for proto=fd [ 93.484816][ T5914] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 93.624330][ T6312] No source specified [ 93.628444][ T30] audit: type=1400 audit(1745028768.282:257): avc: denied { execute } for pid=6311 comm="syz.2.117" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.662285][ T6312] ======================================================= [ 93.662285][ T6312] WARNING: The mand mount option has been deprecated and [ 93.662285][ T6312] and is ignored by this kernel. Remove the mand [ 93.662285][ T6312] option from the mount to silence this warning. [ 93.662285][ T6312] ======================================================= [ 93.718468][ T30] audit: type=1400 audit(1745028768.282:258): avc: denied { execute_no_trans } for pid=6311 comm="syz.2.117" path="/24/file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.770658][ T30] audit: type=1400 audit(1745028768.332:259): avc: denied { remount } for pid=6311 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.889492][ T6290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.899863][ T30] audit: type=1400 audit(1745028768.562:260): avc: denied { create } for pid=6313 comm="syz.1.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.946427][ T5914] usb 5-1: USB disconnect, device number 4 [ 94.696613][ T6334] input: syz0 as /devices/virtual/input/input10 [ 95.076490][ T6339] SELinux: ebitmap start bit (1819307264) is beyond the end of the bitmap (1472) [ 95.088269][ T6339] SELinux: failed to load policy [ 96.139551][ T6350] veth0_to_team: entered promiscuous mode [ 96.146726][ T6350] veth0_to_team: entered allmulticast mode [ 96.485551][ T6360] netlink: 'syz.2.131': attribute type 3 has an invalid length. [ 96.503927][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 97.730715][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.897535][ T12] Bluetooth: Error in BCSP hdr checksum [ 98.142545][ T12] Bluetooth: Error in BCSP hdr checksum [ 98.148013][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 98.163431][ T5874] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.183079][ T5874] usb 4-1: config 179 has no interface number 0 [ 98.200275][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.215037][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.226523][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 98.226534][ T30] audit: type=1400 audit(1745028772.892:274): avc: denied { create } for pid=6375 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.257913][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.269773][ T5874] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 98.283576][ T30] audit: type=1400 audit(1745028772.892:275): avc: denied { listen } for pid=6375 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.312418][ T5874] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.327605][ T30] audit: type=1400 audit(1745028772.892:276): avc: denied { accept } for pid=6375 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.349892][ T5874] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.360631][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.372756][ T6372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.679338][ T5902] usb 4-1: USB disconnect, device number 3 [ 98.679426][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 98.693863][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.175621][ T6390] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.217547][ T30] audit: type=1400 audit(1745028773.882:277): avc: denied { create } for pid=6389 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.301509][ T6391] kvm: pic: non byte write [ 99.359699][ T6394] fuse: Unknown parameter '0xffffffffffffffff' [ 99.490682][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 99.497038][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.608470][ T6405] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 99.643964][ T6405] netlink: 'syz.1.146': attribute type 6 has an invalid length. [ 100.914948][ T6414] can0: slcan on ttyS3. [ 101.297541][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 101.342374][ T6414] can0 (unregistered): slcan off ttyS3. [ 101.697790][ T6428] fuse: Unknown parameter '0x0000000000000003' [ 102.082522][ T6423] nvme_fabrics: missing parameter 'transport=%s' [ 102.089547][ T6423] nvme_fabrics: missing parameter 'nqn=%s' [ 102.243146][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 102.374272][ T6441] FAULT_INJECTION: forcing a failure. [ 102.374272][ T6441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.388316][ T6441] CPU: 0 UID: 0 PID: 6441 Comm: syz.4.157 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 102.388338][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.388348][ T6441] Call Trace: [ 102.388354][ T6441] [ 102.388360][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 102.388388][ T6441] should_fail_ex+0x512/0x640 [ 102.388408][ T6441] _copy_to_user+0x32/0xd0 [ 102.388429][ T6441] simple_read_from_buffer+0xcb/0x170 [ 102.388455][ T6441] proc_fail_nth_read+0x197/0x270 [ 102.388480][ T6441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.388506][ T6441] ? rw_verify_area+0xcf/0x680 [ 102.388528][ T6441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.388553][ T6441] vfs_read+0x1de/0xc70 [ 102.388580][ T6441] ? __pfx___mutex_lock+0x10/0x10 [ 102.388603][ T6441] ? __pfx_vfs_read+0x10/0x10 [ 102.388633][ T6441] ? __fget_files+0x20e/0x3c0 [ 102.388656][ T6441] ksys_read+0x12a/0x240 [ 102.388670][ T6441] ? __pfx_ksys_read+0x10/0x10 [ 102.388692][ T6441] do_syscall_64+0xcd/0x260 [ 102.388716][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.388729][ T6441] RIP: 0033:0x7f63fe18cb7c [ 102.388743][ T6441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.388757][ T6441] RSP: 002b:00007f63ff0d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.388773][ T6441] RAX: ffffffffffffffda RBX: 00007f63fe3b5fa0 RCX: 00007f63fe18cb7c [ 102.388783][ T6441] RDX: 000000000000000f RSI: 00007f63ff0d00a0 RDI: 0000000000000004 [ 102.388792][ T6441] RBP: 00007f63ff0d0090 R08: 0000000000000000 R09: 0000000000000000 [ 102.388801][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.388810][ T6441] R13: 0000000000000000 R14: 00007f63fe3b5fa0 R15: 00007ffe2bf8a4f8 [ 102.388832][ T6441] [ 102.490601][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.587090][ T6435] syz.1.155 (6435) used greatest stack depth: 20680 bytes left [ 102.963385][ T6452] can0: slcan on ttyS3. [ 103.097229][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.149790][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 103.161257][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.237971][ T47] usb 3-1: config 0 descriptor?? [ 103.271446][ T6452] can0 (unregistered): slcan off ttyS3. [ 103.370786][ T5874] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 103.504366][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 103.510399][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.532007][ T47] usb 3-1: USB disconnect, device number 5 [ 103.604669][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.616143][ T30] audit: type=1400 audit(1745028778.272:278): avc: denied { create } for pid=6455 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.636490][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 103.637602][ T30] audit: type=1400 audit(1745028778.282:279): avc: denied { bind } for pid=6455 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.647345][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.647383][ T5874] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 103.647402][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.653908][ T5874] usb 5-1: config 0 descriptor?? [ 103.677553][ T30] audit: type=1400 audit(1745028778.282:280): avc: denied { write } for pid=6455 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.685179][ T6450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.689048][ T30] audit: type=1400 audit(1745028778.282:281): avc: denied { read } for pid=6455 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.957411][ T6469] fuse: Unknown parameter '0xffffffffffffffff' [ 104.081810][ T6475] FAULT_INJECTION: forcing a failure. [ 104.081810][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 104.097897][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.2.168 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 104.097922][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.097930][ T6475] Call Trace: [ 104.097935][ T6475] [ 104.097941][ T6475] dump_stack_lvl+0x16c/0x1f0 [ 104.097974][ T6475] should_fail_ex+0x512/0x640 [ 104.097994][ T6475] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 104.098013][ T6475] should_failslab+0xc2/0x120 [ 104.098030][ T6475] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 104.098046][ T6475] ? __alloc_skb+0x2b2/0x380 [ 104.098067][ T6475] __alloc_skb+0x2b2/0x380 [ 104.098083][ T6475] ? __pfx___alloc_skb+0x10/0x10 [ 104.098101][ T6475] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 104.098128][ T6475] netlink_alloc_large_skb+0x69/0x130 [ 104.098150][ T6475] netlink_sendmsg+0x6a1/0xdd0 [ 104.098174][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.098202][ T6475] ____sys_sendmsg+0xa95/0xc70 [ 104.098226][ T6475] ? copy_msghdr_from_user+0x10a/0x160 [ 104.098246][ T6475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.098279][ T6475] ___sys_sendmsg+0x134/0x1d0 [ 104.098308][ T6475] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.098359][ T6475] __sys_sendmsg+0x16d/0x220 [ 104.098378][ T6475] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.098405][ T6475] ? rcu_is_watching+0x12/0xc0 [ 104.098432][ T6475] do_syscall_64+0xcd/0x260 [ 104.098455][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.098472][ T6475] RIP: 0033:0x7fc15238e169 [ 104.098485][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.098500][ T6475] RSP: 002b:00007fc1531ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.098516][ T6475] RAX: ffffffffffffffda RBX: 00007fc1525b5fa0 RCX: 00007fc15238e169 [ 104.098526][ T6475] RDX: 0000000020048004 RSI: 0000200000000200 RDI: 0000000000000003 [ 104.098535][ T6475] RBP: 00007fc1531ee090 R08: 0000000000000000 R09: 0000000000000000 [ 104.098544][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.098553][ T6475] R13: 0000000000000000 R14: 00007fc1525b5fa0 R15: 00007ffe721dae48 [ 104.098574][ T6475] [ 104.350494][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 104.356652][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.401474][ T5874] usb 5-1: USB disconnect, device number 5 [ 104.426625][ T6481] fuse: Unknown parameter 'fd0x0000000000000003' [ 104.520702][ T30] audit: type=1400 audit(1745028779.182:282): avc: denied { create } for pid=6482 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.757407][ T6488] netlink: ct family unspecified [ 104.762630][ T6488] openvswitch: netlink: Actions may not be safe on all matching packets [ 104.794755][ T30] audit: type=1400 audit(1745028779.412:283): avc: denied { ioctl } for pid=6482 comm="syz.2.171" path="socket:[9498]" dev="sockfs" ino=9498 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.950771][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 105.145334][ T30] audit: type=1400 audit(1745028779.812:284): avc: denied { getopt } for pid=6490 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.167834][ T6496] syz.0.173 uses obsolete (PF_INET,SOCK_PACKET) [ 105.319985][ T47] usb 2-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 105.580908][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.727206][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 105.884317][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.931304][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.991745][ T47] usb 2-1: config 0 descriptor?? [ 106.100740][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 106.140659][ T30] audit: type=1400 audit(1745028780.782:285): avc: denied { read } for pid=6513 comm="syz.0.177" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.209658][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.331870][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.410136][ T30] audit: type=1400 audit(1745028781.022:286): avc: denied { listen } for pid=6518 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.431791][ T30] audit: type=1400 audit(1745028781.072:287): avc: denied { accept } for pid=6518 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.452428][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.465127][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.483557][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.492754][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.743357][ T5874] usb 5-1: GET_CAPABILITIES returned 0 [ 106.750235][ T5874] usbtmc 5-1:16.0: can't read capabilities [ 106.944758][ T47] usb 5-1: USB disconnect, device number 6 [ 107.298007][ T6563] Failed to get privilege flags for destination (handle=0x2:0x0) [ 107.692803][ T47] usb 2-1: USB disconnect, device number 9 [ 107.895281][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.065769][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.379298][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.421479][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 108.462900][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.523719][ T24] usb 5-1: config 0 descriptor?? [ 108.994965][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 108.995002][ T30] audit: type=1400 audit(1745028783.662:291): avc: denied { bind } for pid=6613 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.043455][ T30] audit: type=1400 audit(1745028783.692:292): avc: denied { name_bind } for pid=6613 comm="syz.2.191" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 109.043496][ T30] audit: type=1400 audit(1745028783.692:293): avc: denied { node_bind } for pid=6613 comm="syz.2.191" saddr=2001::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 109.106507][ T30] audit: type=1400 audit(1745028783.772:294): avc: denied { setopt } for pid=6617 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.195847][ T24] kye 0003:0458:0138.0003: item fetching failed at offset 0/1 [ 109.196407][ T24] kye 0003:0458:0138.0003: parse failed [ 109.196460][ T24] kye 0003:0458:0138.0003: probe with driver kye failed with error -22 [ 109.285925][ T30] audit: type=1400 audit(1745028783.952:295): avc: denied { ioctl } for pid=6629 comm="syz.1.195" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.379441][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.546457][ T5874] usb 5-1: USB disconnect, device number 7 [ 109.978606][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.569190][ T6647] mmap: syz.1.201 (6647) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.720858][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.096896][ T5927] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 111.423800][ T5927] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 111.462221][ T5927] usb 4-1: config 220 has no interface number 2 [ 111.479016][ T5927] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 111.513647][ T5927] usb 4-1: config 220 interface 0 has no altsetting 0 [ 111.534122][ T5927] usb 4-1: config 220 interface 76 has no altsetting 0 [ 111.546288][ T5927] usb 4-1: config 220 interface 1 has no altsetting 0 [ 111.584988][ T5927] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 111.596224][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.616903][ T5927] usb 4-1: Product: syz [ 111.662154][ T5927] usb 4-1: Manufacturer: syz [ 111.680282][ T5927] usb 4-1: SerialNumber: syz [ 111.959884][ T6659] FAULT_INJECTION: forcing a failure. [ 111.959884][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.973147][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz.2.204 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 111.973166][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.973172][ T6659] Call Trace: [ 111.973176][ T6659] [ 111.973180][ T6659] dump_stack_lvl+0x16c/0x1f0 [ 111.973197][ T6659] should_fail_ex+0x512/0x640 [ 111.973210][ T6659] _copy_to_user+0x32/0xd0 [ 111.973224][ T6659] pagemap_read+0x52c/0x890 [ 111.973244][ T6659] ? __pfx_pagemap_read+0x10/0x10 [ 111.973263][ T6659] ? rw_verify_area+0xcf/0x680 [ 111.973283][ T6659] ? __pfx_pagemap_read+0x10/0x10 [ 111.973299][ T6659] vfs_read+0x1de/0xc70 [ 111.973319][ T6659] ? __pfx_vfs_read+0x10/0x10 [ 111.973333][ T6659] ? find_held_lock+0x2b/0x80 [ 111.973346][ T6659] ? __fget_files+0x204/0x3c0 [ 111.973357][ T6659] ? __fget_files+0x20e/0x3c0 [ 111.973366][ T6659] ? __fget_files+0x120/0x3c0 [ 111.973383][ T6659] __x64_sys_pread64+0x1f4/0x250 [ 111.973399][ T6659] ? __pfx___x64_sys_pread64+0x10/0x10 [ 111.973412][ T6659] ? madvise_unlock+0xf6/0x190 [ 111.973435][ T6659] do_syscall_64+0xcd/0x260 [ 111.973454][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.973464][ T6659] RIP: 0033:0x7fc15238e169 [ 111.973473][ T6659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.973483][ T6659] RSP: 002b:00007fc1531cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 111.973493][ T6659] RAX: ffffffffffffffda RBX: 00007fc1525b6080 RCX: 00007fc15238e169 [ 111.973499][ T6659] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000006 [ 111.973505][ T6659] RBP: 00007fc1531cd090 R08: 0000000000000000 R09: 0000000000000000 [ 111.973510][ T6659] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.973518][ T6659] R13: 0000000000000000 R14: 00007fc1525b6080 R15: 00007ffe721dae48 [ 111.973538][ T6659] [ 112.174981][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 112.175009][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 112.222755][ T30] audit: type=1400 audit(1745028786.892:296): avc: denied { connect } for pid=6664 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.224239][ T6665] FAULT_INJECTION: forcing a failure. [ 112.224239][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.256158][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.1.206 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 112.256180][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.256189][ T6665] Call Trace: [ 112.256194][ T6665] [ 112.256199][ T6665] dump_stack_lvl+0x16c/0x1f0 [ 112.256224][ T6665] should_fail_ex+0x512/0x640 [ 112.256244][ T6665] _copy_from_user+0x2e/0xd0 [ 112.256262][ T6665] copy_msghdr_from_user+0x98/0x160 [ 112.256282][ T6665] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.256304][ T6665] ? __pfx__kstrtoull+0x10/0x10 [ 112.256329][ T6665] ___sys_sendmsg+0xfe/0x1d0 [ 112.256349][ T6665] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.256377][ T6665] ? find_held_lock+0x2b/0x80 [ 112.256411][ T6665] __sys_sendmmsg+0x200/0x420 [ 112.256433][ T6665] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.256459][ T6665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.256491][ T6665] ? fput+0x70/0xf0 [ 112.256508][ T6665] ? ksys_write+0x1b9/0x240 [ 112.256521][ T6665] ? __pfx_ksys_write+0x10/0x10 [ 112.256533][ T6665] ? rcu_is_watching+0x12/0xc0 [ 112.256556][ T6665] __x64_sys_sendmmsg+0x9c/0x100 [ 112.256574][ T6665] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.256594][ T6665] do_syscall_64+0xcd/0x260 [ 112.256617][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.256632][ T6665] RIP: 0033:0x7fd86518e169 [ 112.256650][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.256664][ T6665] RSP: 002b:00007fd862ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.256678][ T6665] RAX: ffffffffffffffda RBX: 00007fd8653b5fa0 RCX: 00007fd86518e169 [ 112.256688][ T6665] RDX: 0000000000000001 RSI: 0000200000006b00 RDI: 0000000000000004 [ 112.256697][ T6665] RBP: 00007fd862ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.256705][ T6665] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.256714][ T6665] R13: 0000000000000000 R14: 00007fd8653b5fa0 R15: 00007ffc32d22698 [ 112.256734][ T6665] [ 112.501481][ T6644] ERROR: device name not specified. [ 112.549963][ T5927] usb 4-1: selecting invalid altsetting 0 [ 112.556772][ T5927] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 112.680102][ T6671] FAULT_INJECTION: forcing a failure. [ 112.680102][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.681761][ T5927] usb 4-1: No valid video chain found. [ 112.693727][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.2.208 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 112.693747][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.693755][ T6671] Call Trace: [ 112.693760][ T6671] [ 112.693765][ T6671] dump_stack_lvl+0x16c/0x1f0 [ 112.693788][ T6671] should_fail_ex+0x512/0x640 [ 112.693807][ T6671] _copy_from_user+0x2e/0xd0 [ 112.693824][ T6671] move_addr_to_kernel+0x65/0x170 [ 112.693840][ T6671] __copy_msghdr+0x386/0x470 [ 112.693857][ T6671] copy_msghdr_from_user+0xc1/0x160 [ 112.693874][ T6671] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.693894][ T6671] ? __pfx__kstrtoull+0x10/0x10 [ 112.693918][ T6671] ___sys_sendmsg+0xfe/0x1d0 [ 112.693936][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.693962][ T6671] ? find_held_lock+0x2b/0x80 [ 112.693993][ T6671] __sys_sendmmsg+0x200/0x420 [ 112.694013][ T6671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.694036][ T6671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.694065][ T6671] ? fput+0x70/0xf0 [ 112.694081][ T6671] ? ksys_write+0x1b9/0x240 [ 112.694093][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 112.694104][ T6671] ? rcu_is_watching+0x12/0xc0 [ 112.694125][ T6671] __x64_sys_sendmmsg+0x9c/0x100 [ 112.694141][ T6671] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.694160][ T6671] do_syscall_64+0xcd/0x260 [ 112.694180][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.694194][ T6671] RIP: 0033:0x7fc15238e169 [ 112.694205][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.694218][ T6671] RSP: 002b:00007fc1531ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.694232][ T6671] RAX: ffffffffffffffda RBX: 00007fc1525b5fa0 RCX: 00007fc15238e169 [ 112.694242][ T6671] RDX: 0000000000000001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 112.694250][ T6671] RBP: 00007fc1531ee090 R08: 0000000000000000 R09: 0000000000000000 [ 112.694258][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.694266][ T6671] R13: 0000000000000000 R14: 00007fc1525b5fa0 R15: 00007ffe721dae48 [ 112.694285][ T6671] [ 112.744601][ T6673] capability: warning: `syz.2.209' uses deprecated v2 capabilities in a way that may be insecure [ 112.760435][ T30] audit: type=1400 audit(1745028787.412:297): avc: denied { create } for pid=6672 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.821546][ T6674] netlink: ct family unspecified [ 112.864082][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.945719][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.963554][ T6674] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.056041][ T30] audit: type=1400 audit(1745028787.412:298): avc: denied { getattr } for pid=6672 comm="syz.2.209" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.064053][ T5927] usb 4-1: selecting invalid altsetting 0 [ 113.084155][ T5927] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 113.104142][ T5927] usb 4-1: USB disconnect, device number 4 [ 113.248281][ T30] audit: type=1400 audit(1745028787.912:299): avc: denied { create } for pid=6675 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.333585][ T30] audit: type=1400 audit(1745028787.912:300): avc: denied { bind } for pid=6675 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.328672][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 114.328688][ T30] audit: type=1400 audit(1745028788.992:305): avc: denied { block_suspend } for pid=6689 comm="syz.2.215" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.960427][ T6704] fuse: Bad value for 'rootmode' [ 115.387564][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 115.484331][ T30] audit: type=1400 audit(1745028790.052:306): avc: denied { setopt } for pid=6711 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.620841][ T6722] netlink: ct family unspecified [ 115.625870][ T6722] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.123763][ T30] audit: type=1400 audit(1745028790.792:307): avc: denied { create } for pid=6723 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.390673][ T5927] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 116.541884][ T30] audit: type=1400 audit(1745028791.202:308): avc: denied { mounton } for pid=6738 comm="syz.1.232" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.546542][ T6742] syz.1.232: attempt to access beyond end of device [ 116.546542][ T6742] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 116.546634][ T6742] befs: (nbd1): unable to read superblock [ 116.715894][ T5927] usb 3-1: config 129 has an invalid interface number: 112 but max is 0 [ 116.715948][ T5927] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 116.715989][ T5927] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 116.716031][ T5927] usb 3-1: config 129 has no interface number 0 [ 116.716130][ T5927] usb 3-1: config 129 interface 112 has no altsetting 0 [ 116.716228][ T5927] usb 3-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=62.bd [ 116.716271][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.322752][ T5927] usb 3-1: USB disconnect, device number 6 [ 117.828862][ T6756] x_tables: ip_tables: udp match: only valid for protocol 17 [ 118.140214][ T6760] fuse: Unknown parameter '0x0000000000000003' [ 118.288152][ T30] audit: type=1400 audit(1745028792.952:309): avc: denied { read } for pid=6764 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.369136][ T30] audit: type=1400 audit(1745028793.032:310): avc: denied { create } for pid=6769 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.396251][ T873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.456060][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.581242][ T873] usb 5-1: device descriptor read/64, error -71 [ 118.760621][ T5874] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 118.880635][ T873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.943520][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.955491][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 118.969210][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 118.984916][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.994757][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.019859][ T5874] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 119.029450][ T873] usb 5-1: device descriptor read/64, error -71 [ 119.037798][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.046357][ T5874] usb 2-1: Product: syz [ 119.050745][ T5874] usb 2-1: Manufacturer: syz [ 119.055382][ T5874] usb 2-1: SerialNumber: syz [ 119.065581][ T5874] usb 2-1: config 0 descriptor?? [ 119.067203][ T6784] overlayfs: failed to clone upperpath [ 119.083316][ T5874] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 119.141746][ T873] usb usb5-port1: attempt power cycle [ 119.285795][ T30] audit: type=1400 audit(1745028793.952:311): avc: denied { write } for pid=6763 comm="syz.1.240" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.310201][ T5927] usb 2-1: USB disconnect, device number 10 [ 119.507808][ T6788] netlink: 380 bytes leftover after parsing attributes in process `syz.3.248'. [ 119.522845][ T873] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.544460][ T30] audit: type=1400 audit(1745028794.212:312): avc: denied { name_bind } for pid=6790 comm="syz.2.249" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.574823][ T873] usb 5-1: device descriptor read/8, error -71 [ 119.607704][ T30] audit: type=1326 audit(1745028794.272:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc15238e169 code=0x0 [ 119.659026][ T6795] xt_CT: No such helper "pptp" [ 119.820581][ T873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.841347][ T873] usb 5-1: device descriptor read/8, error -71 [ 119.865427][ T6799] No source specified [ 119.870400][ T6799] FAULT_INJECTION: forcing a failure. [ 119.870400][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.884711][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.1.252 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 119.884726][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.884732][ T6799] Call Trace: [ 119.884736][ T6799] [ 119.884740][ T6799] dump_stack_lvl+0x16c/0x1f0 [ 119.884757][ T6799] should_fail_ex+0x512/0x640 [ 119.884770][ T6799] strncpy_from_user+0x3b/0x2e0 [ 119.884781][ T6799] getname_flags.part.0+0x8f/0x550 [ 119.884797][ T6799] getname_flags+0x93/0xf0 [ 119.884812][ T6799] user_path_at+0x24/0x60 [ 119.884821][ T6799] __x64_sys_mount+0x1fc/0x310 [ 119.884834][ T6799] ? __pfx___x64_sys_mount+0x10/0x10 [ 119.884849][ T6799] do_syscall_64+0xcd/0x260 [ 119.884864][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.884874][ T6799] RIP: 0033:0x7fd86518e169 [ 119.884882][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.884896][ T6799] RSP: 002b:00007fd862ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.884906][ T6799] RAX: ffffffffffffffda RBX: 00007fd8653b5fa0 RCX: 00007fd86518e169 [ 119.884912][ T6799] RDX: 0000200000000040 RSI: 0000200000000380 RDI: 0000000000000000 [ 119.884918][ T6799] RBP: 00007fd862ff6090 R08: 0000200000000400 R09: 0000000000000000 [ 119.884923][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.884929][ T6799] R13: 0000000000000000 R14: 00007fd8653b5fa0 R15: 00007ffc32d22698 [ 119.884940][ T6799] [ 120.046904][ T873] usb usb5-port1: unable to enumerate USB device [ 120.056080][ T5927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.105554][ T30] audit: type=1400 audit(1745028794.762:314): avc: denied { bind } for pid=6800 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.126208][ T30] audit: type=1400 audit(1745028794.762:315): avc: denied { name_bind } for pid=6800 comm="syz.0.253" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 120.150130][ T30] audit: type=1400 audit(1745028794.762:316): avc: denied { node_bind } for pid=6800 comm="syz.0.253" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 120.179412][ T6804] IPVS: length: 78 != 8 [ 120.185553][ T30] audit: type=1400 audit(1745028794.842:317): avc: denied { getopt } for pid=6802 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.204826][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.261890][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.272867][ T5927] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.293959][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.303381][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.320569][ T5927] usb 3-1: Product: syz [ 120.324844][ T5927] usb 3-1: Manufacturer: syz [ 120.329437][ T5927] usb 3-1: SerialNumber: syz [ 120.419531][ T30] audit: type=1400 audit(1745028795.072:318): avc: denied { mount } for pid=6806 comm="syz.3.255" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.441274][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.639123][ T6797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.847880][ T6817] input: syz0 as /devices/virtual/input/input12 [ 121.345553][ T30] audit: type=1400 audit(1745028796.012:319): avc: denied { accept } for pid=6824 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.504574][ T6797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.755521][ T5927] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 121.766962][ T5927] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 121.790216][ T5927] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 122.115277][ T5927] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 122.132415][ T5927] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 122.144416][ T5927] wwan wwan0: port wwan0mbim0 attached [ 122.158216][ T5927] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 122.344968][ T30] audit: type=1400 audit(1745028797.012:320): avc: denied { setopt } for pid=6836 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.569702][ T30] audit: type=1400 audit(1745028797.012:321): avc: denied { ioctl } for pid=6836 comm="syz.3.263" path="socket:[11157]" dev="sockfs" ino=11157 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.590638][ T873] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.762330][ T873] usb 5-1: device descriptor read/64, error -71 [ 122.980039][ T6874] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 123.020591][ T873] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.672469][ T5490] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 123.692123][ T873] usb 5-1: device descriptor read/64, error -71 [ 123.840419][ T873] usb usb5-port1: attempt power cycle [ 123.915068][ T6890] loop7: detected capacity change from 0 to 7 [ 123.935116][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.944414][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.950739][ T6892] overlayfs: overlapping lowerdir path [ 123.954155][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.966802][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.989200][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.998368][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.009474][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.018645][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.028598][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.037777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.050824][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.059984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.069639][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.078828][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.094103][ T6890] ldm_validate_partition_table(): Disk read failed. [ 124.114524][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.123698][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.133416][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.142578][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.151836][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.161019][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.176662][ T6890] Dev loop7: unable to read RDB block 0 [ 124.182870][ T6890] loop7: unable to read partition table [ 124.188670][ T6890] loop7: partition table beyond EOD, truncated [ 124.196452][ T6890] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 124.230670][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.270661][ T873] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.291092][ T873] usb 5-1: device descriptor read/8, error -71 [ 124.380620][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 124.387259][ T5874] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.401698][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.413276][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.423334][ T5874] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.436457][ T5874] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.445532][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.560571][ T873] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 124.580951][ T873] usb 5-1: device descriptor read/8, error -71 [ 124.665247][ T5874] usb 2-1: GET_CAPABILITIES returned 0 [ 124.670900][ T5874] usbtmc 2-1:16.0: can't read capabilities [ 124.690863][ T873] usb usb5-port1: unable to enumerate USB device [ 124.700040][ T5874] usb 3-1: USB disconnect, device number 7 [ 124.713558][ T5874] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 124.834086][ T5874] wwan wwan0: port wwan0mbim0 disconnected [ 124.932602][ T5927] usb 2-1: USB disconnect, device number 11 [ 125.276510][ T6932] netlink: ct family unspecified [ 125.281598][ T6932] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.104175][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.840200][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 126.864333][ T6949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.906170][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.015435][ T47] usb 2-1: config 0 descriptor?? [ 127.036163][ T47] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 127.469586][ T873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.680552][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.762036][ T873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.774828][ T873] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 127.989430][ T873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.031279][ T6935] fuse: Bad value for 'fd' [ 128.084088][ T873] usb 3-1: config 0 descriptor?? [ 128.327647][ T47] gspca_stv06xx: I2C: Read error writing address: -71 [ 128.374485][ T47] usb 2-1: USB disconnect, device number 12 [ 128.455372][ T6991] 9pnet: Could not find request transport: fd0x0000000000000003 [ 128.480250][ T873] usbhid 3-1:0.0: can't add hid device: -71 [ 128.486865][ T873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.517164][ T873] usb 3-1: USB disconnect, device number 8 [ 128.572565][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 128.572579][ T30] audit: type=1400 audit(1745028803.148:327): avc: denied { create } for pid=7003 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.609322][ T30] audit: type=1400 audit(1745028803.195:328): avc: denied { write } for pid=7003 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.631164][ T30] audit: type=1400 audit(1745028803.195:329): avc: denied { ioctl } for pid=7003 comm="syz.0.293" path="socket:[11363]" dev="sockfs" ino=11363 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.810547][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.951862][ T7028] syz.1.295 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.971005][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 128.985279][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.008902][ T12] Bluetooth: Error in BCSP hdr checksum [ 129.018059][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.040115][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.055239][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.056574][ T5899] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 129.070527][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.085150][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.151079][ T30] audit: type=1400 audit(1745028803.691:330): avc: denied { write } for pid=7038 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.281095][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 129.286739][ T56] Bluetooth: Error in BCSP hdr checksum [ 129.293596][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.323868][ T5899] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 129.332058][ T5899] usb 5-1: config 0 has no interface number 0 [ 129.344025][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 129.367403][ T5899] usb 5-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 129.372177][ T24] usbtmc 4-1:16.0: can't read capabilities [ 129.406160][ T5899] usb 5-1: config 0 interface 143 has no altsetting 0 [ 129.440633][ T5899] usb 5-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 129.464246][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.498072][ T5899] usb 5-1: Product: syz [ 129.509308][ T5899] usb 5-1: Manufacturer: syz [ 129.514433][ T5899] usb 5-1: SerialNumber: syz [ 129.571038][ T56] Bluetooth: Error in BCSP hdr checksum [ 129.581758][ T24] usb 4-1: USB disconnect, device number 5 [ 129.615271][ T5899] r8152-cfgselector 5-1: Unknown version 0x0000 [ 129.630005][ T5899] r8152-cfgselector 5-1: config 0 descriptor?? [ 129.640524][ T5899] r8152 5-1:0.143: Expected endpoints are not found [ 129.654270][ T30] audit: type=1400 audit(1745028804.159:331): avc: denied { write } for pid=7056 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.722166][ T30] audit: type=1400 audit(1745028804.233:332): avc: denied { setopt } for pid=7058 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.853586][ T56] Bluetooth: Error in BCSP hdr checksum [ 129.938785][ T5899] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 130.933204][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.966330][ T7074] input: syz0 as /devices/virtual/input/input13 [ 132.199351][ T7082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.257494][ T7084] FAULT_INJECTION: forcing a failure. [ 132.257494][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 132.273932][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.3.308 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 132.273960][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.273970][ T7084] Call Trace: [ 132.273976][ T7084] [ 132.273982][ T7084] dump_stack_lvl+0x16c/0x1f0 [ 132.274008][ T7084] should_fail_ex+0x512/0x640 [ 132.274026][ T7084] ? fs_reclaim_acquire+0xae/0x150 [ 132.274050][ T7084] ? tomoyo_encode2+0x100/0x3e0 [ 132.274072][ T7084] should_failslab+0xc2/0x120 [ 132.274090][ T7084] __kmalloc_noprof+0xd2/0x510 [ 132.274113][ T7084] tomoyo_encode2+0x100/0x3e0 [ 132.274139][ T7084] tomoyo_unix_entry+0x341/0x650 [ 132.274162][ T7084] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 132.274182][ T7084] ? __lock_acquire+0x5ca/0x1ba0 [ 132.274207][ T7084] ? __lock_acquire+0xaa4/0x1ba0 [ 132.274227][ T7084] tomoyo_socket_sendmsg_permission+0x352/0x3c0 [ 132.274252][ T7084] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 132.274275][ T7084] ? __might_fault+0xe3/0x190 [ 132.274291][ T7084] ? iovec_from_user+0xbb/0x140 [ 132.274313][ T7084] ? __import_iovec+0x1c8/0x660 [ 132.274338][ T7084] security_socket_sendmsg+0x211/0x240 [ 132.274360][ T7084] ____sys_sendmsg+0x2f2/0xc70 [ 132.274386][ T7084] ? copy_msghdr_from_user+0x10a/0x160 [ 132.274406][ T7084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.274435][ T7084] ? __pfx__kstrtoull+0x10/0x10 [ 132.274464][ T7084] ___sys_sendmsg+0x134/0x1d0 [ 132.274485][ T7084] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.274518][ T7084] ? find_held_lock+0x2b/0x80 [ 132.274560][ T7084] __sys_sendmmsg+0x200/0x420 [ 132.274583][ T7084] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.274612][ T7084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.274645][ T7084] ? fput+0x70/0xf0 [ 132.274664][ T7084] ? ksys_write+0x1b9/0x240 [ 132.274678][ T7084] ? __pfx_ksys_write+0x10/0x10 [ 132.274691][ T7084] ? rcu_is_watching+0x12/0xc0 [ 132.274715][ T7084] __x64_sys_sendmmsg+0x9c/0x100 [ 132.274734][ T7084] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.274755][ T7084] do_syscall_64+0xcd/0x260 [ 132.274778][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.274794][ T7084] RIP: 0033:0x7f77fcb8e169 [ 132.274808][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.274824][ T7084] RSP: 002b:00007f77fda4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.274840][ T7084] RAX: ffffffffffffffda RBX: 00007f77fcdb5fa0 RCX: 00007f77fcb8e169 [ 132.274851][ T7084] RDX: 0000000000000001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 132.274861][ T7084] RBP: 00007f77fda4c090 R08: 0000000000000000 R09: 0000000000000000 [ 132.274870][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.274880][ T7084] R13: 0000000000000000 R14: 00007f77fcdb5fa0 R15: 00007ffee55366d8 [ 132.274903][ T7084] [ 132.552632][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.695393][ T7092] 9pnet_fd: Insufficient options for proto=fd [ 132.739985][ T30] audit: type=1400 audit(1745028807.049:333): avc: denied { ioctl } for pid=7093 comm="syz.0.312" path="socket:[11452]" dev="sockfs" ino=11452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.794237][ T30] audit: type=1400 audit(1745028807.105:334): avc: denied { write } for pid=7095 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.818753][ T54] Bluetooth: hci4: link tx timeout [ 132.824117][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824686][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.830404][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986976][ T30] audit: type=1400 audit(1745028807.273:335): avc: denied { accept } for pid=7098 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 133.305734][ T7116] block nbd2: Unsupported socket: shutdown callout must be supported. [ 133.328243][ T7116] 9pnet_fd: Insufficient options for proto=fd [ 133.407122][ T7118] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.322'. [ 133.429562][ T7117] FAULT_INJECTION: forcing a failure. [ 133.429562][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.439571][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.450779][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.4.322 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 133.450801][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.450811][ T7117] Call Trace: [ 133.450816][ T7117] [ 133.450823][ T7117] dump_stack_lvl+0x16c/0x1f0 [ 133.450851][ T7117] should_fail_ex+0x512/0x640 [ 133.450873][ T7117] _copy_to_user+0x32/0xd0 [ 133.450895][ T7117] simple_read_from_buffer+0xcb/0x170 [ 133.450923][ T7117] proc_fail_nth_read+0x197/0x270 [ 133.450950][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.450978][ T7117] ? rw_verify_area+0xcf/0x680 [ 133.451000][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.451026][ T7117] vfs_read+0x1de/0xc70 [ 133.451054][ T7117] ? __pfx___mutex_lock+0x10/0x10 [ 133.451078][ T7117] ? __pfx_vfs_read+0x10/0x10 [ 133.451110][ T7117] ? __fget_files+0x20e/0x3c0 [ 133.451134][ T7117] ksys_read+0x12a/0x240 [ 133.451149][ T7117] ? __pfx_ksys_read+0x10/0x10 [ 133.451162][ T7117] ? rcu_is_watching+0x12/0xc0 [ 133.451190][ T7117] do_syscall_64+0xcd/0x260 [ 133.451215][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.451232][ T7117] RIP: 0033:0x7f63fe18cb7c [ 133.451246][ T7117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.451262][ T7117] RSP: 002b:00007f63ff0af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.451278][ T7117] RAX: ffffffffffffffda RBX: 00007f63fe3b6080 RCX: 00007f63fe18cb7c [ 133.451289][ T7117] RDX: 000000000000000f RSI: 00007f63ff0af0a0 RDI: 0000000000000008 [ 133.451299][ T7117] RBP: 00007f63ff0af090 R08: 0000000000000000 R09: 0000000000000000 [ 133.451309][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.451318][ T7117] R13: 0000000000000000 R14: 00007f63fe3b6080 R15: 00007ffe2bf8a4f8 [ 133.451341][ T7117] [ 133.710674][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 133.764683][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.325'. [ 133.788693][ T30] audit: type=1400 audit(1745028808.031:336): avc: denied { mount } for pid=7120 comm="syz.4.323" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.839665][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 133.859267][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.886080][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.905364][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.918894][ T7126] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 134.445912][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.454823][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.591346][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.672430][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.691640][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.702754][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.710428][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.730925][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.826082][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.858416][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.889193][ T7138] ------------[ cut here ]------------ [ 134.889249][ T7138] WARNING: CPU: 1 PID: 7138 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.889287][ T7138] Modules linked in: [ 134.889326][ T7138] CPU: 1 UID: 0 PID: 7138 Comm: syz.1.326 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 134.889351][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.889365][ T7138] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.889391][ T7138] Code: c4 fb e8 0c c7 b2 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 aa fb c4 fb 90 <0f> 0b 90 eb b5 e8 2f 74 2a fc e9 dc fe ff ff e8 b5 74 2a fc e9 14 [ 134.889411][ T7138] RSP: 0018:ffffc9001b547318 EFLAGS: 00010283 [ 134.889429][ T7138] RAX: 00000000000024d5 RBX: ffff888143798028 RCX: ffffc9000e86f000 [ 134.889443][ T7138] RDX: 0000000000080000 RSI: ffffffff85f641c6 RDI: 0000000000000006 [ 134.889457][ T7138] RBP: 0000001f4962495b R08: 0000000000000006 R09: 0000001f4962495b [ 134.889470][ T7138] R10: 0000001f4962495b R11: 0000000000000000 R12: ffffc9001b547480 [ 134.889484][ T7138] R13: 0000001f4962495b R14: 0000000000004e20 R15: ffffffff85f64060 [ 134.889497][ T7138] FS: 00007fd862fb46c0(0000) GS:ffff888124ab0000(0000) knlGS:0000000000000000 [ 134.889514][ T7138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.889527][ T7138] CR2: 0000001b2f809ff8 CR3: 0000000029216000 CR4: 00000000003526f0 [ 134.889539][ T7138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.889550][ T7138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.889561][ T7138] Call Trace: [ 134.889569][ T7138] [ 134.889580][ T7138] drm_crtc_get_last_vbltimestamp+0x102/0x1b0 [ 134.889604][ T7138] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 134.889624][ T7138] ? __lock_acquire+0xaa4/0x1ba0 [ 134.889652][ T7138] drm_crtc_next_vblank_start+0x182/0x300 [ 134.889677][ T7138] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 134.889710][ T7138] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 134.889736][ T7138] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.889768][ T7138] ? read_tsc+0x9/0x20 [ 134.889794][ T7138] ? ktime_get+0x1a7/0x310 [ 134.889825][ T7138] commit_tail+0x83/0x400 [ 134.889857][ T7138] drm_atomic_helper_commit+0x2fd/0x380 [ 134.889885][ T7138] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 134.889914][ T7138] drm_atomic_commit+0x231/0x300 [ 134.889934][ T7138] ? __pfx_drm_atomic_commit+0x10/0x10 [ 134.889952][ T7138] ? __pfx___drm_printfn_info+0x10/0x10 [ 134.889978][ T7138] ? drm_client_rotation+0x4d9/0x6a0 [ 134.890011][ T7138] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 134.890046][ T7138] ? trace_contention_end+0xdd/0x130 [ 134.890065][ T7138] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 134.890093][ T7138] ? __mutex_lock+0x1ca/0xb90 [ 134.890146][ T7138] drm_client_modeset_commit_locked+0x14d/0x580 [ 134.890180][ T7138] drm_client_modeset_commit+0x4f/0x80 [ 134.890209][ T7138] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 134.890240][ T7138] drm_fb_helper_set_par+0xd8/0x120 [ 134.890263][ T7138] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 134.890288][ T7138] fb_set_var+0x838/0x11f0 [ 134.890320][ T7138] ? __pfx_fb_set_var+0x10/0x10 [ 134.890366][ T7138] ? __pfx___schedule+0x10/0x10 [ 134.890392][ T7138] ? __pfx___might_resched+0x10/0x10 [ 134.890427][ T7138] ? irqentry_exit+0x3b/0x90 [ 134.890466][ T7138] ? is_console_locked+0x9/0x20 [ 134.890491][ T7138] ? fbcon_info_from_console+0x65/0x1a0 [ 134.890514][ T7138] ? fbcon_modechange_possible+0x337/0x450 [ 134.890546][ T7138] do_fb_ioctl+0x745/0x7e0 [ 134.890567][ T7138] ? __pfx_do_fb_ioctl+0x10/0x10 [ 134.890586][ T7138] ? do_vfs_ioctl+0xe6/0x1990 [ 134.890616][ T7138] ? do_vfs_ioctl+0x512/0x1990 [ 134.890678][ T7138] ? selinux_file_ioctl+0x180/0x270 [ 134.890710][ T7138] fb_ioctl+0xe5/0x150 [ 134.890728][ T7138] ? __pfx_fb_ioctl+0x10/0x10 [ 134.890755][ T7138] __x64_sys_ioctl+0x190/0x200 [ 134.890784][ T7138] do_syscall_64+0xcd/0x260 [ 134.890812][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.890833][ T7138] RIP: 0033:0x7fd86518e169 [ 134.890850][ T7138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.890868][ T7138] RSP: 002b:00007fd862fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.890889][ T7138] RAX: ffffffffffffffda RBX: 00007fd8653b6160 RCX: 00007fd86518e169 [ 134.890901][ T7138] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000008 [ 134.890914][ T7138] RBP: 00007fd865210a68 R08: 0000000000000000 R09: 0000000000000000 [ 134.890925][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.890937][ T7138] R13: 0000000000000000 R14: 00007fd8653b6160 R15: 00007ffc32d22698 [ 134.890965][ T7138] [ 134.890975][ T7138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.890986][ T7138] CPU: 1 UID: 0 PID: 7138 Comm: syz.1.326 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 134.891007][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.891018][ T7138] Call Trace: [ 134.891025][ T7138] [ 134.891031][ T7138] dump_stack_lvl+0x3d/0x1f0 [ 134.891057][ T7138] panic+0x71c/0x800 [ 134.891076][ T7138] ? __pfx_panic+0x10/0x10 [ 134.891095][ T7138] ? show_trace_log_lvl+0x29b/0x3e0 [ 134.891128][ T7138] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.891152][ T7138] check_panic_on_warn+0xab/0xb0 [ 134.891171][ T7138] __warn+0xf6/0x3c0 [ 134.891188][ T7138] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.891213][ T7138] report_bug+0x3c3/0x580 [ 134.891235][ T7138] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.891260][ T7138] handle_bug+0x184/0x210 [ 134.891287][ T7138] exc_invalid_op+0x17/0x50 [ 134.891315][ T7138] asm_exc_invalid_op+0x1a/0x20 [ 134.891331][ T7138] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 134.891355][ T7138] Code: c4 fb e8 0c c7 b2 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 aa fb c4 fb 90 <0f> 0b 90 eb b5 e8 2f 74 2a fc e9 dc fe ff ff e8 b5 74 2a fc e9 14 [ 134.891371][ T7138] RSP: 0018:ffffc9001b547318 EFLAGS: 00010283 [ 134.891386][ T7138] RAX: 00000000000024d5 RBX: ffff888143798028 RCX: ffffc9000e86f000 [ 134.891398][ T7138] RDX: 0000000000080000 RSI: ffffffff85f641c6 RDI: 0000000000000006 [ 134.891409][ T7138] RBP: 0000001f4962495b R08: 0000000000000006 R09: 0000001f4962495b [ 134.891420][ T7138] R10: 0000001f4962495b R11: 0000000000000000 R12: ffffc9001b547480 [ 134.891432][ T7138] R13: 0000001f4962495b R14: 0000000000004e20 R15: ffffffff85f64060 [ 134.891443][ T7138] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 134.891474][ T7138] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 134.891500][ T7138] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 134.891526][ T7138] drm_crtc_get_last_vbltimestamp+0x102/0x1b0 [ 134.891547][ T7138] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 134.891566][ T7138] ? __lock_acquire+0xaa4/0x1ba0 [ 134.891591][ T7138] drm_crtc_next_vblank_start+0x182/0x300 [ 134.891615][ T7138] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 134.891646][ T7138] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 134.891672][ T7138] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.891695][ T7138] ? read_tsc+0x9/0x20 [ 134.891719][ T7138] ? ktime_get+0x1a7/0x310 [ 134.891753][ T7138] commit_tail+0x83/0x400 [ 134.891784][ T7138] drm_atomic_helper_commit+0x2fd/0x380 [ 134.891810][ T7138] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 134.891836][ T7138] drm_atomic_commit+0x231/0x300 [ 134.891856][ T7138] ? __pfx_drm_atomic_commit+0x10/0x10 [ 134.891875][ T7138] ? __pfx___drm_printfn_info+0x10/0x10 [ 134.891902][ T7138] ? drm_client_rotation+0x4d9/0x6a0 [ 134.891934][ T7138] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 134.891971][ T7138] ? trace_contention_end+0xdd/0x130 [ 134.891989][ T7138] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 134.892016][ T7138] ? __mutex_lock+0x1ca/0xb90 [ 134.892068][ T7138] drm_client_modeset_commit_locked+0x14d/0x580 [ 134.892100][ T7138] drm_client_modeset_commit+0x4f/0x80 [ 134.892129][ T7138] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 134.892157][ T7138] drm_fb_helper_set_par+0xd8/0x120 [ 134.892179][ T7138] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 134.892203][ T7138] fb_set_var+0x838/0x11f0 [ 134.892232][ T7138] ? __pfx_fb_set_var+0x10/0x10 [ 134.892277][ T7138] ? __pfx___schedule+0x10/0x10 [ 134.892302][ T7138] ? __pfx___might_resched+0x10/0x10 [ 134.892336][ T7138] ? irqentry_exit+0x3b/0x90 [ 134.892374][ T7138] ? is_console_locked+0x9/0x20 [ 134.892398][ T7138] ? fbcon_info_from_console+0x65/0x1a0 [ 134.892422][ T7138] ? fbcon_modechange_possible+0x337/0x450 [ 134.892452][ T7138] do_fb_ioctl+0x745/0x7e0 [ 134.892473][ T7138] ? __pfx_do_fb_ioctl+0x10/0x10 [ 134.892492][ T7138] ? do_vfs_ioctl+0xe6/0x1990 [ 134.892517][ T7138] ? do_vfs_ioctl+0x512/0x1990 [ 134.892576][ T7138] ? selinux_file_ioctl+0x180/0x270 [ 134.892607][ T7138] fb_ioctl+0xe5/0x150 [ 134.892624][ T7138] ? __pfx_fb_ioctl+0x10/0x10 [ 134.892644][ T7138] __x64_sys_ioctl+0x190/0x200 [ 134.892671][ T7138] do_syscall_64+0xcd/0x260 [ 134.892697][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.892715][ T7138] RIP: 0033:0x7fd86518e169 [ 134.892733][ T7138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.892754][ T7138] RSP: 002b:00007fd862fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.892772][ T7138] RAX: ffffffffffffffda RBX: 00007fd8653b6160 RCX: 00007fd86518e169 [ 134.892783][ T7138] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000008 [ 134.892795][ T7138] RBP: 00007fd865210a68 R08: 0000000000000000 R09: 0000000000000000 [ 134.892807][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.892819][ T7138] R13: 0000000000000000 R14: 00007fd8653b6160 R15: 00007ffc32d22698 [ 134.892846][ T7138] [ 134.892960][ T7138] Kernel Offset: disabled