last executing test programs: 50.447952638s ago: executing program 3 (id=117): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2560000000000000001"}, {0x0, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x7, 0x10, '\x00'/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x6000000) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x85, 0x66d, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0xd5) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 47.994875728s ago: executing program 3 (id=127): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2d, 0x2}) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 47.091812472s ago: executing program 3 (id=135): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000580)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0xc, 0x86, 0x7c}, 0x2c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0xfecf) ioctl$TCFLSH(r0, 0x80045439, 0x1) 46.92295346s ago: executing program 3 (id=136): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xd, 0x214080) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="878551f2e201edd6e7d0236016a97877e79c91990ecc5d5ef35d2661c9d01b3f89327eb470236b5503715723137fde047c22fa5a992cdc4e2521b22dba1cfb5f5efeae77a8be7ebb22c672bc4f29bae1336afdd2da7be4bf4614fb398c41f19cf0e9d197b6b9aba92b940c91b0d57a227339850e2c7a860ecedde8a9f488d51964591137980ba1ddf3084be3876f2dc4940aebcf4572627e7b0470ee8d59d58a28497796d90232d32c7b2213a907dff47fe4d20c851bdd98f529bb7583d98638c90775871b1115b30a49c1a0deba67c08acff2116050e30e0ce7dbaa04d7cd10951d79054bbc5387b5e6", 0xea}, {&(0x7f0000000240)="c23598f6ed3ca7e373b135cb13eb816704c277fc01b526ac9cf84346c225389217b045b72957", 0x26}], 0x2, 0x6) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000540)) landlock_create_ruleset(&(0x7f0000000580)={0x80, 0x3}, 0x18, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000005c0)={{0x3, 0xffffffff, 0x80000001, 0x5b, 0x1, 0xc}, 0x109, [0x800, 0x8001, 0xf7, 0x7, 0x178f, 0x1, 0x6459b93e, 0x3, 0xe, 0x6, 0xffffffff, 0x5, 0x4, 0x4, 0x7ff, 0xd30f, 0xffffffc0, 0x1, 0x3, 0x9, 0x3, 0x3, 0x2, 0x400, 0xc4e, 0xba, 0x7, 0xfffffff7, 0x7, 0x4, 0x280000, 0x0, 0x3, 0x5, 0x5, 0x1, 0xcf, 0x6, 0x3, 0x9, 0x2, 0xfffff001, 0x7, 0x8, 0x2, 0x4, 0x0, 0xfffffffe, 0x1, 0x186cb67, 0xcf, 0x2, 0x3, 0x0, 0x0, 0x3, 0x5, 0x1, 0x1, 0x9, 0x4, 0x0, 0xfff, 0x7, 0x6, 0xa, 0xfffffffc, 0x80000, 0xc, 0x3, 0xf404, 0x4, 0x8, 0x3, 0x5, 0x1, 0x0, 0x5, 0x80000001, 0xe, 0x9, 0x480000, 0x79, 0xf665, 0x4, 0x4, 0xefa, 0x8, 0x6, 0x7fffffff, 0x43, 0x0, 0x1, 0xfffffffc, 0xe, 0x2, 0x2, 0x9, 0x8, 0xfffffffd, 0x2, 0x1, 0x6, 0xfffffffb, 0x0, 0x8, 0x9, 0x6, 0x8d, 0x6, 0x8, 0x2, 0x6, 0x1, 0x3, 0x8001, 0xe, 0x3, 0x401, 0x1000000, 0x5, 0x4, 0x3, 0xe, 0xe4, 0x3, 0x280000, 0xd957, 0x9, 0x80000000, 0x6, 0x5c, 0x3, 0x3, 0x7ed, 0x8, 0x200, 0x5, 0x8, 0x6, 0xbb, 0xf, 0x1, 0x0, 0x80000000, 0x7f, 0x200, 0xfa7, 0x81, 0x9, 0x7f, 0x23c, 0x1000, 0x7, 0x1, 0x7fff, 0x1, 0x0, 0x8, 0x80000001, 0x9, 0x5, 0x1, 0x0, 0x6, 0x1, 0x7, 0x3, 0x7, 0xaa7, 0x8000, 0x364dddec, 0x6, 0x3, 0x4, 0xfffffffe, 0x1, 0xc, 0x7, 0x7, 0x3, 0x10001, 0x18b, 0x7, 0x8, 0x8, 0x200, 0xfffffffb, 0x9, 0x1, 0x4, 0x1ff, 0xfe000000, 0x400, 0x5, 0x2c8, 0x0, 0x6, 0xfffffba3, 0x2f, 0x2, 0x8, 0xaaa, 0x0, 0x2, 0x3, 0xfffffff9, 0xffffffff, 0x9, 0x0, 0xf, 0x10, 0x8, 0x5, 0x5, 0x7, 0x0, 0xc, 0x3, 0x10001, 0x9, 0x80000001, 0x4, 0x80, 0x0, 0x101, 0x904, 0x8, 0x4, 0x0, 0x7, 0x7, 0x30f, 0x100, 0xffffffff, 0x3d2, 0xd56f, 0x0, 0x674fc607, 0x0, 0x4e4c, 0x3, 0x100, 0xfffffffc, 0x7, 0x3, 0x0, 0x1, 0xe6e7, 0xfffffffd, 0x3, 0xcb00, 0x1, 0x9, 0x107a, 0x81, 0x3, 0x7, 0x8, 0xfffffe01, 0x0, 0x755b, 0x7, 0xfffffff8, 0x36, 0xb0b, 0xfffffff1, 0x2, 0x400, 0x4, 0xffffff72, 0x0, 0xd525, 0xa9f, 0xfffffff6, 0x7d74fbae, 0xa, 0x3, 0x2, 0x9, 0x4, 0x4, 0x8, 0x3, 0x2, 0xfffffff4, 0xe, 0x5, 0xdf41, 0xe, 0x6, 0xee, 0x4, 0x4, 0x10000, 0x2, 0x338, 0x400, 0x8, 0xc9, 0x93, 0xa, 0x7fff, 0xffff526c, 0x7f, 0x0, 0x3fc, 0x7, 0x1, 0x4, 0x4, 0xab43, 0x81, 0x8, 0xf, 0x3977, 0x100, 0x6, 0x0, 0x7, 0x8, 0x25, 0x0, 0x3, 0x39, 0xfffffffd, 0x5, 0x0, 0x2, 0x175, 0x6, 0xea0a, 0x6, 0x401, 0xe92b, 0x401, 0x800, 0x3f71, 0x80, 0xfff, 0x4fd, 0x0, 0x5, 0xffffffff, 0x80000001, 0xc71e, 0xe97d, 0x0, 0x9, 0x5, 0x1, 0x6, 0x3, 0x1, 0x2, 0x0, 0x6, 0x0, 0xc, 0xccb7, 0xe, 0xfffffff7, 0x6bf3, 0x7, 0x514, 0x10, 0xffffff72, 0x8145, 0x9, 0xfffffff9, 0x3, 0x3, 0x1febf42a, 0xffffffff, 0x1, 0x8, 0x0, 0xe, 0xc, 0x9, 0x40, 0x7, 0x0, 0x3ff, 0x8, 0x7fffffff, 0x6, 0x7, 0x302, 0x8000, 0x8d7, 0x2cf2, 0xb, 0x8, 0x1, 0xfff, 0x6, 0xd44, 0x4, 0x9, 0x0, 0x3, 0x9, 0x6, 0x4b, 0x1, 0xf8a, 0x3, 0xb58, 0xdc, 0x6, 0xa, 0x8, 0x10000, 0xc2200, 0x1, 0xfffffffb, 0x89e, 0x6, 0x3, 0xbc72, 0x0, 0x0, 0x6, 0x1, 0x10000, 0x5, 0x800, 0x7, 0x3, 0x0, 0x0, 0x200, 0x5, 0x108, 0x1, 0x6, 0xe00, 0x2005, 0x7, 0x7, 0x7, 0x26, 0x6, 0x0, 0x1, 0xce52, 0x2a7, 0x80000001, 0x17, 0x2, 0x2, 0x7, 0x4, 0xa0a, 0x7, 0x81, 0x0, 0x3ff, 0x5, 0x8001, 0x7, 0x9, 0x0, 0x5, 0xc, 0x0, 0x4, 0x4, 0xb8, 0x4, 0x80, 0x7ff, 0x5, 0x5, 0x2, 0x401, 0x3, 0x0, 0x7, 0x2, 0x800, 0x8, 0x4, 0x5030, 0x8, 0xc, 0x8, 0x8001, 0x8, 0x66a, 0xa0b, 0x2, 0x8, 0x4, 0x2, 0x400000, 0x3, 0x6, 0x7, 0x74, 0xbc, 0x1000, 0x5, 0x6, 0x3a, 0x8, 0x6, 0x0, 0x8, 0x1, 0xffff, 0x9, 0x8, 0x8001, 0xffff8000, 0x6, 0x35bb, 0x8, 0x8, 0xbe1, 0x5, 0x7fff, 0x5, 0x6, 0x1, 0x9, 0x7, 0x0, 0x3, 0xa, 0xbe36, 0x6, 0xff, 0x1000, 0x0, 0x2, 0x6, 0x9, 0x8, 0x9, 0x5, 0xff, 0x7fff, 0x5, 0x8, 0xbb8, 0x9, 0x3ff, 0x4, 0x1000, 0x1, 0xffffffd5, 0x0, 0x0, 0xffff, 0x800, 0x7, 0x1fe, 0x80000001, 0x5c, 0x6, 0x6, 0x52, 0x3ff, 0xe, 0xa, 0x1, 0x3, 0x2, 0x8, 0x7fffffff, 0x0, 0xff, 0x7, 0x4, 0x80000000, 0x3ff, 0x8, 0x3, 0xff, 0x5, 0x4, 0xffff4fa4, 0x0, 0x5, 0x81, 0x7, 0xbc4b, 0x0, 0x3, 0x7, 0x6, 0x9, 0x6, 0x2, 0x6, 0x2, 0x8, 0x2, 0x4, 0x4, 0x1, 0x9, 0x9, 0x1, 0x7, 0x0, 0x1ff, 0x9, 0x9, 0x8, 0x5, 0xffffff27, 0x0, 0xfffffeff, 0x8, 0x2, 0xfffffffb, 0xe2c, 0x6, 0x8, 0x7, 0x4fcf, 0x2, 0x5, 0x10, 0x9, 0x3, 0xb44, 0x7fffffff, 0x1000, 0x200, 0x1, 0x9, 0x9, 0x6, 0xfff, 0x7, 0x5, 0x3, 0x7fff, 0x8, 0x3, 0x8529, 0x161, 0xfffffffd, 0x1, 0x3, 0x6, 0xc, 0xf4f, 0x7755, 0x3, 0x5842, 0x400, 0xc79b, 0xfffffffc, 0xe, 0x6a, 0x2, 0x9, 0x100, 0x80000000, 0x1ac000, 0x6, 0x3, 0x7, 0xae9, 0x9, 0x9, 0x0, 0x8, 0x2, 0x0, 0xcb, 0x2, 0x10000, 0x7, 0xf5b, 0x5, 0x1, 0xfe0000, 0x9, 0x10001, 0x100, 0x80000001, 0x4, 0x7, 0x7fffffff, 0x3, 0x0, 0x81, 0x6, 0xc, 0x0, 0x9, 0x963a, 0x1, 0x7, 0x4, 0x6, 0x4, 0xfffffffc, 0x4, 0x1625, 0x6, 0x4, 0x9, 0x796, 0x6, 0x9, 0x3d5dfe5e, 0x888b, 0x7fff, 0x6, 0x9, 0x10000, 0xf, 0x9, 0x1ff, 0x4, 0x5, 0x80, 0x0, 0x0, 0x7, 0x7, 0x14e8, 0xfffffff9, 0xffffffbe, 0x9, 0x8, 0x3, 0x200, 0xfffffffb, 0xa, 0x200, 0x6, 0xa, 0x8, 0x7, 0x7, 0x2, 0x7d0, 0x5, 0x2, 0xdd92, 0x60000000, 0x0, 0x2, 0x3, 0x8, 0x5, 0x10, 0xffffff26, 0xffff, 0xe, 0x7f, 0x3, 0x5706, 0x1, 0x4, 0x7fffffff, 0x5, 0x400, 0x9, 0x4, 0x5, 0xc, 0x45a, 0xe9, 0x80000001, 0x4, 0x9, 0x8001, 0x4, 0x0, 0x1, 0x0, 0x20, 0x987, 0x5, 0x7fffffff, 0x5, 0x2, 0x7, 0x1, 0x0, 0x6, 0x6, 0x5, 0x0, 0x2, 0x2fd048e5, 0xfff, 0x6, 0x5b55, 0x3, 0x5, 0x3, 0x7, 0x7, 0x1, 0x2, 0x1, 0x1, 0x4, 0xa, 0x6368, 0x3, 0x2, 0x101, 0x9ec, 0x5, 0x67d, 0x0, 0x8, 0x9, 0x6, 0x7, 0x3, 0x6b, 0x1, 0x6, 0xfffffffd, 0x10, 0x0, 0x8, 0x3, 0xd2, 0x4, 0xffffffff, 0x4, 0x0, 0xffff0001, 0xf48, 0x0, 0x7, 0xc0, 0x4, 0x7, 0x1, 0xfff, 0x0, 0x1867, 0xf3, 0xfffffff9, 0x5, 0x9, 0x40000000, 0x7, 0x9, 0xed148000, 0x1, 0x16599dda, 0x8, 0xffff, 0x10001, 0x1, 0x2, 0x1, 0x80000001, 0x7, 0x7fffffff, 0x10, 0x401, 0x0, 0x1, 0x56, 0x64, 0x2, 0x5, 0x6, 0xe, 0x6, 0x67a, 0x8, 0x0, 0x28964b14, 0x7, 0xe0, 0x8, 0x1, 0xe00000, 0x4, 0x5a, 0x8c4ab13a, 0x1, 0x3, 0x8, 0x4, 0x0, 0x1, 0x4, 0x4, 0x4, 0x0, 0x6, 0x1, 0x3, 0x4, 0xff, 0x0, 0xe1d, 0x9fa4, 0xfffffff8, 0x1, 0x800, 0x3606, 0x8000000, 0x8, 0x3, 0x10, 0x8001, 0x0, 0x0, 0x4, 0x8, 0xc01d, 0x800, 0x3ff, 0x7, 0x10, 0x1, 0x8, 0xff, 0x7fff, 0xff, 0x3, 0xfffffff8, 0x827, 0x7, 0x8001, 0x0, 0x9, 0x1, 0x10001, 0x7, 0x5, 0x1, 0x2, 0x0, 0x1, 0x80, 0x5, 0x3, 0x8, 0x1, 0x5, 0x80000000, 0xd4, 0x2, 0xd4ba0000, 0x9f0, 0x2, 0x4, 0x2e20, 0x2, 0x506, 0x8, 0x8, 0x5, 0x3, 0x7ff, 0xffff0001, 0x5, 0x80000000, 0xffffff79, 0x80, 0x5, 0x5, 0x7, 0x96e, 0x8, 0xa8a2, 0x6, 0x800, 0x5, 0x8, 0x4, 0x9, 0x0, 0x40, 0x2, 0x2, 0x8, 0x81, 0xfffffff5, 0x4d32, 0x5, 0x5, 0x3, 0x0, 0x7fff, 0x8, 0x9, 0xc47a, 0x200, 0xad, 0xaf11, 0xff, 0x2, 0x62076b2c, 0x2, 0x0, 0xef, 0xffffffff, 0x80000000, 0x7, 0x80000001, 0x2, 0x7, 0x2, 0xc446, 0x7, 0xf, 0x3, 0xfffffff3, 0x3, 0xf3ba, 0x4, 0x401, 0x1]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r2, &(0x7f0000001600)="3c78034a4173bc3cf262", 0xa) socket$kcm(0x29, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x1c4, 0x7}, 0x18) name_to_handle_at(r3, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)=@FILEID_INO32_GEN={0x8, 0x1, {0x5, 0x7}}, &(0x7f0000001740), 0x1400) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000001780)=0x4) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x3ff) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000017c0)={{0xa, 0x4e21, 0x1, @empty, 0x3}, {0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, {[0x1, 0x81, 0xc0dc, 0x5473, 0xcce, 0x7fffffff, 0x19, 0x1]}}, 0x5c) fadvise64(r3, 0x9, 0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000018c0), 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) sendto$inet6(r4, &(0x7f0000001940)="b83d04d2930d989a6a2394c4322d06f762b7fac0b55e735882bea593f4ba99bfa9a1f900b5b701d4a87331ecee3e0820a22a9272ce46fb63ba7668712a39fbab9209021bf99bcd341d3e95e0e871d161520412256c123102c1b96b08524aad18270f7061d8e2988062a24c5b9c0ab6a06f1cc0d8f21492940f", 0x79, 0x10, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001a00)={0x6, 0xe2, {}, {0xee01}, 0x1ff, 0x8e3}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001a80)={{0x1d, @loopback, 0x4e24, 0x3, 'nq\x00', 0x0, 0xb137, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x10005, 0x1000, 0x1, 0x5}}, 0x44) listxattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)=""/12, 0xc) 46.861766793s ago: executing program 3 (id=137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) semget$private(0x0, 0x4000, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYBLOB="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"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000000000)='./control\x00', 0x0) unshare(0x8000000) 46.535046068s ago: executing program 3 (id=138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8f46877"}]}}, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x2c, 0x20044851, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 31.444083673s ago: executing program 32 (id=138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8f46877"}]}}, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x2c, 0x20044851, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.367184051s ago: executing program 1 (id=238): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x7fff, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) dup(r2) setreuid(0xee01, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x800, &(0x7f0000000340)={[{@index_off}], [{@uid_lt}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'gretap0\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.841635369s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f00000000c0)) 11.625784781s ago: executing program 2 (id=253): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2d, 0x2}) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000033c0)=0xffffffff) 10.621612742s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b", 0x91, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) mount$bind(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340), 0x420, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r8}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {0x0, r8, 0x2}}, 0x18) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.749440552s ago: executing program 2 (id=259): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) times(&(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x79f7}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc808) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0x22, 0x2, 0x2) r4 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, {0x0, r11}}) socket$packet(0x11, 0x3, 0x300) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r12, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "e4574f9d3c5e7270660f5f1a296ebd2c3bbadb735eeb8cf5", "20487988bca1150e96992f4fcc6c008ca257143847b6da45ad42d5cce94cda59"}}}}}}}, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r13, 0x0, &(0x7f0000000080)="d7390da51f40788a017c9f11ee7b73648a0fb6cf71e479e4ef457a631c5ad4ad04308bd07144cbf4f13747a6bd24af1599271544fa8aecbcdbb48c77d406563f133a9954f4d7381a381e04b5d3e32e2d039aa502a373579ffffb4a828ff58b0fe9a0ee7449a6f33e7bec", 0x6a, 0x4000000, 0x1, {0x0, r11}}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xa3}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.411624144s ago: executing program 0 (id=262): r0 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000000)="c1", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x7, 0xfe, 0xfc, 0x5, 0x0, 0x45, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x0, 0x46}, 0xe) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) bind$inet6(r4, 0x0, 0xfffffffffffffe1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000500)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x208000, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)) 8.525286838s ago: executing program 2 (id=263): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x0, 0x6f, 0xda, 0xd}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef2", 0x27}, {&(0x7f0000000280)="051a00000e80006558f2878ff55eee1afd89a7763d83d3", 0x17}], 0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4) r4 = socket(0x8000000010, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000000c0)={&(0x7f00000003c0)="7cd0d6e5710d23f94cce13da637a90cf4b9b2e58a88176e7eec7baea134e923216964df663046eec81da7182b5b0229fb35ac6239a98edeb1120f6a9a8c31ddb3ba58063236bfaea53e438791f4f79b5391d6370540177626e467369a67813ba5692b06343b4fb3a5fe2ab1d96ee0ffeb8f9cf241dc39e419cc6776207002e85724554afd655ff25f1a0cff82956c68e117267a7ca633e8d08af394e00dfa01699a1c8576d05ee71fd7913ff1adb46c760fb2da4e1dcd5eb5011e02e8e", 0xbd}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) 8.404778819s ago: executing program 4 (id=264): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}]}}]}, 0x6c}}, 0x0) 8.163956525s ago: executing program 4 (id=265): r0 = io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0xd1a8, 0x40, 0x0, 0x32e}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x90a03, 0x84) dup3(0xffffffffffffffff, r2, 0x0) iopl(0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pwrite64(r4, &(0x7f0000000200)="81d7ec1179c854e244dfe13820a2ac88fbcac5517cce360fe3b70f390baa8633454aa7113d72b5c3f7daacc61412f8637162ce8838f4b440e4d94bafb2c4885f451a422e24c11ad29071a769c3e9633ef0fa9fb0d9f7d268901063f715ce8ead2f9ca55fcc44887ea2bb0a6db117c671ee316eafc87d333120bb27096df8a6", 0x7f, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000300)="b60afff9", 0x4, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)={'syz', 0x3}, 0xfffffffffffffffe) r7 = getpid() prlimit64(r7, 0x2, &(0x7f0000000080)={0x3ff, 0x5}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) unshare(0x6a040000) syz_open_procfs(0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) 6.06934104s ago: executing program 5 (id=268): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2d, 0x2}) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000033c0)=0xffffffff) 5.971886488s ago: executing program 0 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="f30633eea3a43cb937dfdb38c9aca506a8d4df2215d5e54b80c6eb6b4474a3b22477efb05e92af0be96035658bc68bd8512115c250c584a6081832a4867a130b6d802da67596f21638dc1e2f2ca751f06c1e857ae316c0f56750840ddaef64051c9aae120d52355f108a0dc59d16ff6ea64fb1458a74c7aad6f904edd12ee18bb1404b52cca276ee28e6956a4c62b128bc3e9e3b15d9fef80658e46bf1e283f0a26a1fb059d20210328008785c60b02ade2973f182d358c4d7db1764fa1c3a46fe1ffb6ebe", @ANYRES16=0x0, @ANYRES16, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=0x0], &(0x7f00000003c0)='GPL\x00', 0x40002, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)="a7e81d5a6093c34c58ff7a11d5c4c57310759715c6768da1ac754fdd4b3171707ad855958139d05ed72ad9083f47013edf40b63b16d022540d5a83681af57376932af8a2036a7c31c2e205527fcec573afa2211a5eb988fd8c3bbcc70e7451c69f937e309dc8a6e6332592848e1a065128235a6ddcee3f3b09ff8151a16aa2cf7c399beac0dfadd015f8f3f59e70af59", &(0x7f0000000400)="5a7a6c21746ba48090879948d26244a4860da266e3dc7bc3107991b9d7b3dfc559a94bdd8a884a4f78b7a4f9e17eb407399ab8bee067a791f77ae81e4c0a8ea488e0c8b691de9f6258be00008c3cf5a5677980aeabec03e903e13e932680e72f94c1ae550f27e11e56c005d4d84bd752f6f8de5a6f58", 0x9, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYRES16=r3, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="170000000000000007000000ff00000000000000", @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=0x0], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r1, @ANYRES8=r0, @ANYBLOB="0528b1fcf4cc2dca542ab4f0fe34e1bddb694fb02a648bcd56a88b067802d8395790833c8c795dc5044ee2a232e365108c92b5806affe648ec617228c2d099797bdb12dd5c3725ad0863c9f70f29518a6715ab6a24a828eec1d884b7e088e33103bdcb76f3135c0f5d5d154d9dff6709caed646ffa529f", @ANYRES32, @ANYRES32=r5, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16=r2, @ANYRESOCT=r7, @ANYRES64=r5, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x1b, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r11, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x9) 5.585382962s ago: executing program 4 (id=270): syz_usb_connect(0x6, 0xfffffffffffffe2c, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x80, 0xfd, 0x55, 0x8, 0x1199, 0x6820, 0x5a2b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1af, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0xa, 0xa7, 0x4a, 0x62, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x7f, 0x5, 0xd}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x8, 0x0, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfb, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x2, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x81, 0xfb, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x77, 0xc, 0x8}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x4, 0x3, 0x7}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x8, 0x1, 0x9, [@generic={0x78, 0x1, "e9acbeea76b95e7736fe3d5012a84fd825436093fdee7672f0b3b5640c1f9023750e2cc15386d6491da364ff7c56a351fbf0f7fe0a57bbd52fdc174f0d3a8f77f995f8f057d6ea5aceceec9fe911b5fe287adb0ea47eb0a95d41b94300f5db6d50c36da53df9d08d5b5ddaa02623ef74d047035e6250"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x16a}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x2, 0x0, 0x0, [@generic={0xa8, 0x23, "34d4e324d1bf5ce20637fa0fdd7e2d4a68e747844c5f67b1b1e1d3fda9cb78a1584f47e1b60017aa08cac3eb8389dafcdc1067acacc2ed2edb2548a562fbb2f3f2e09eddbb780b1fa45a4382c745b29c8e7eb1290180c056eb6dd1053ba2c90e40dfc891512f7b228d399416525df157b4859a563ab8627066d60980b402a8da50fb2bdef7096aa8ca13cf1406dbca23c0435abf72a69b7519fddee2ae3e2dcfb04470db4f6e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x9bf, 0x49, 0x27, 0x81}}]}}]}}]}}, 0x0) 5.158994982s ago: executing program 1 (id=271): openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000a80)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="330300000000040000001d0000000c0001800800030007"], 0x20}}, 0x2000000) read(0xffffffffffffffff, &(0x7f0000000140)=""/68, 0x44) 5.135720022s ago: executing program 5 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x60400, 0x0) futex(&(0x7f0000001240)=0x3, 0x5, 0xffff7ffc, 0x0, &(0x7f0000001200)=0x3, 0x85000000) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x3c89, &(0x7f0000000040)={0x0, 0x84df, 0x2028, 0x2, 0x3d1}, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@delchain={0x24, 0x65, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xfffe, 0x8}, {0x5, 0x3}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f080002", 0x1f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000180)=0x9, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4, 0x1, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x200089, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x5, 0x4492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x1200000, 0x0, 0x0, 0x800010, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x6, 0x0, 0x4, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) io_uring_enter(r4, 0x7368, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2e) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000500)={0x6, 'team0\x00', {0x5}, 0x5}) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) 4.64555369s ago: executing program 4 (id=273): timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x840) 4.634890928s ago: executing program 5 (id=274): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x20, 0x80, 0x100, 0x8575, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast2}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040012801400018006000600800a0000080016"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat(r3, &(0x7f0000000240)='./file0\x00', 0x80080, 0x92) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x18, 0x409, 0x0, 0x0, {0xa, 0x14, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 4.069191286s ago: executing program 5 (id=275): set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mbind(&(0x7f0000f14000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x0, 0x4) 3.857405436s ago: executing program 2 (id=276): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 12) 3.821216026s ago: executing program 1 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000107010200000000000000009c61000512000780"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @mcast2, 0x3}, 0x1c) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000290000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0x5}}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20) 3.805857633s ago: executing program 4 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc1", 0xa5, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x420, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r7}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {0x0, r7, 0x2}}, 0x18) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.757236344s ago: executing program 5 (id=279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000200)={'macvlan1\x00', {0x2, 0x0, @loopback}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) brk(0x20ffc004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0xc, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x2b0, 0x36, 0x400, 0x70bd25, 0x25dfdbfb, {0x10}, [@generic="f75403b1e1e0b233bad0fd58931760e9af8e55618c5f63b58a46e5fda92870678c8475bbe917e96d005ea3dbe6ac9b61a8699442c3af4e1eca1164531c73cb47cbd3c2c752f60207102b63d6bc0a78b2b8b2ae44124f20646bd019891ca18443d0b19bc118e6f86fc2453ccf28f8d6b8e64bbc5d757341be42100967696448a633dc59cb9040ae356d21cedc0116606924cbfd5487d3c41b7b5f0adf7c7aed30ac6aecbbfc39b771c893b0185321b7244160e9c71734a3071e24eef7c1", @generic="c6265341b045710e2399224feebf26566e607149e324e61ece385714eade652c8ada5e262dd075cc71b82b94e82251cd49a48a5cc59ce505b67cadf74f0e39a7d79206e8ae25b6ec6907ce9e506580b8afa3c30b54944b74de48e09ef8318fa464b4ea9b7e3aa8121040bd7b2a501e9182c5606d6f801782b72210988f171c3255a4642cbef30352f1cbcd8e64fe8afec8dd68ea106790289a9bdbe6ec38e51493c118d8e6014ad35032d16e74d8b36721601a3e8c8efbbf17c47598e64c1e689eef0f060280e92c926a7c75", @typed={0x10, 0x1f, 0x0, 0x0, @str='/dev/nullb0\x00'}, @typed={0x100, 0xad, 0x0, 0x0, @binary="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"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 2.767060557s ago: executing program 0 (id=280): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xc4, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x30, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24048000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x1, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000740)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x200040c4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r7, r6}, 0xc) 2.76035233s ago: executing program 2 (id=281): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f00000000c0)) 2.639295s ago: executing program 1 (id=282): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2d, 0x2}) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000033c0)=0xffffffff) 2.010569548s ago: executing program 5 (id=283): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00300c00000000004700000040f400bec063"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, &(0x7f0000000200)=0x9c) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) prlimit64(r5, 0xf, &(0x7f0000000000)={0x400000, 0xc78}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) 1.865133841s ago: executing program 0 (id=284): clock_settime(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x2372f) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x9}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000380)={0x1, 0x1, 0x9, 0x1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.069170228s ago: executing program 4 (id=285): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x121000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x41, 0x14}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7ffff, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000004c0)=0x1) 948.384092ms ago: executing program 0 (id=286): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x57) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003940400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x0) 781.662117ms ago: executing program 1 (id=287): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 0s ago: executing program 0 (id=288): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0xffffff97, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered blocking state [ 56.153674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.186837][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.193953][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.229579][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.276578][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 56.276594][ T30] audit: type=1400 audit(1742583477.963:111): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.318611][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.329522][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.349305][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.366429][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.373717][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.389314][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.396454][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.411137][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.443466][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.507051][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.517213][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.536619][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.543738][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.577111][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.612711][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.619811][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.638311][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.645466][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658258][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.665368][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.729470][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.744203][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.775079][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.808063][ T5816] veth0_vlan: entered promiscuous mode [ 56.817896][ T5816] veth1_vlan: entered promiscuous mode [ 56.896697][ T5816] veth0_macvtap: entered promiscuous mode [ 56.926461][ T5823] veth0_vlan: entered promiscuous mode [ 56.937596][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.959549][ T5816] veth1_macvtap: entered promiscuous mode [ 56.977152][ T5823] veth1_vlan: entered promiscuous mode [ 57.004807][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.021036][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.041152][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.051720][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.078351][ T5821] veth0_vlan: entered promiscuous mode [ 57.085010][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.096592][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.106130][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.115149][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.130584][ T5823] veth0_macvtap: entered promiscuous mode [ 57.147027][ T5823] veth1_macvtap: entered promiscuous mode [ 57.163466][ T5821] veth1_vlan: entered promiscuous mode [ 57.191072][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.201978][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.213613][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.246356][ T5824] veth0_vlan: entered promiscuous mode [ 57.258709][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.269880][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.284817][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.294587][ T5814] veth0_vlan: entered promiscuous mode [ 57.302067][ T5821] veth0_macvtap: entered promiscuous mode [ 57.311026][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.320318][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.331844][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.340545][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.358089][ T5821] veth1_macvtap: entered promiscuous mode [ 57.368233][ T5814] veth1_vlan: entered promiscuous mode [ 57.379530][ T5824] veth1_vlan: entered promiscuous mode [ 57.411594][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.422969][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.433631][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.444344][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.455720][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.467407][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.479528][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490256][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.500819][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.512840][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.527809][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.536212][ T5814] veth0_macvtap: entered promiscuous mode [ 57.544715][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.551291][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.561551][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.571338][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.580134][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.599085][ T5814] veth1_macvtap: entered promiscuous mode [ 57.616174][ T5824] veth0_macvtap: entered promiscuous mode [ 57.659540][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.662451][ T5829] Bluetooth: hci3: command tx timeout [ 57.670594][ T5138] Bluetooth: hci1: command tx timeout [ 57.675588][ T5829] Bluetooth: hci2: command tx timeout [ 57.680753][ T5819] Bluetooth: hci0: command tx timeout [ 57.680788][ T5819] Bluetooth: hci4: command tx timeout [ 57.688741][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.709839][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.720346][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.732203][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.743145][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.756167][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.768662][ T5824] veth1_macvtap: entered promiscuous mode [ 57.780966][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.792052][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.802769][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.813966][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.823961][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.834686][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.845519][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.856699][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.867976][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.880283][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.889181][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.898330][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.908543][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.928384][ T30] audit: type=1400 audit(1742583479.613:112): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.vxQbNr/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.936601][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.966501][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.970914][ T30] audit: type=1400 audit(1742583479.643:113): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.976896][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.004387][ T30] audit: type=1400 audit(1742583479.643:114): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.vxQbNr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.010050][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.035355][ T30] audit: type=1400 audit(1742583479.643:115): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.075436][ T30] audit: type=1400 audit(1742583479.653:116): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.vxQbNr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.102018][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.102037][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.102045][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.102056][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.103487][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.138468][ T30] audit: type=1400 audit(1742583479.653:117): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.vxQbNr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.152015][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.187586][ T30] audit: type=1400 audit(1742583479.653:118): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.213237][ T30] audit: type=1400 audit(1742583479.803:119): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.238845][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.241501][ T30] audit: type=1400 audit(1742583479.803:120): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=7053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.275125][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.285981][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.296021][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.306629][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.318424][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.328915][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.339107][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.349748][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.360733][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.361732][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.377190][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.390515][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.414176][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.424062][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.433266][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.442376][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.515873][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.534816][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.544801][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.581613][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.600995][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.619191][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.662088][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.672948][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.755392][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.772488][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.821266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.857024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.093021][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.121570][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.162914][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.263127][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 59.272319][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.294232][ T5894] usb 4-1: config 187 has an invalid descriptor of length 244, skipping remainder of the config [ 59.306663][ T5894] usb 4-1: config 187 has 0 interfaces, different from the descriptor's value: 1 [ 59.327465][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 59.350427][ T5894] usb 4-1: language id specifier not provided by device, defaulting to English [ 59.410681][ T5894] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=90.a3 [ 59.423494][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.431584][ T5894] usb 4-1: Product: syz [ 59.440734][ T5894] usb 4-1: Manufacturer: syz [ 59.447441][ T5894] usb 4-1: SerialNumber: syz [ 59.815420][ T5819] Bluetooth: hci0: command tx timeout [ 59.821024][ T5827] Bluetooth: hci4: command tx timeout [ 59.827808][ T5138] Bluetooth: hci1: command tx timeout [ 59.833463][ T5819] Bluetooth: hci3: command tx timeout [ 59.844268][ T5829] Bluetooth: hci2: command tx timeout [ 60.137592][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.175579][ T5925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.292732][ T26] usb 1-1: device descriptor read/64, error -71 [ 60.551985][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.577743][ T5934] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10'. [ 60.587191][ T5934] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10'. [ 60.751929][ T26] usb 1-1: device descriptor read/64, error -71 [ 60.797534][ T5894] usb 4-1: USB disconnect, device number 2 [ 60.859434][ T5938] Zero length message leads to an empty skb [ 60.863640][ T26] usb usb1-port1: attempt power cycle [ 61.217933][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 61.253591][ T26] usb 1-1: device descriptor read/8, error -71 [ 61.577204][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.586270][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 61.586597][ T30] audit: type=1400 audit(1742583483.213:172): avc: denied { mounton } for pid=5949 comm="syz.1.13" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.002656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.451018][ T5826] Bluetooth: hci2: command tx timeout [ 62.456583][ T5826] Bluetooth: hci3: command tx timeout [ 62.462662][ T5826] Bluetooth: hci1: command tx timeout [ 62.468880][ T26] usb 1-1: device descriptor read/8, error -71 [ 62.477654][ T5826] Bluetooth: hci4: command tx timeout [ 62.484183][ T5829] Bluetooth: hci0: command tx timeout [ 63.231456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.244497][ T30] audit: type=1400 audit(1742583483.213:173): avc: denied { mount } for pid=5949 comm="syz.1.13" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.271945][ T5964] netlink: 'syz.0.7': attribute type 13 has an invalid length. [ 63.355072][ T26] usb usb1-port1: unable to enumerate USB device [ 63.392196][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.393240][ T30] audit: type=1400 audit(1742583483.233:174): avc: denied { remount } for pid=5949 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.433152][ T30] audit: type=1400 audit(1742583483.243:175): avc: denied { read } for pid=5949 comm="syz.1.13" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.458217][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.474596][ T30] audit: type=1400 audit(1742583483.243:176): avc: denied { open } for pid=5949 comm="syz.1.13" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.535607][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.598628][ T30] audit: type=1400 audit(1742583483.263:177): avc: denied { ioctl } for pid=5949 comm="syz.1.13" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.640406][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.665420][ T30] audit: type=1400 audit(1742583484.953:178): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.701982][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.710416][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.722917][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.732604][ T30] audit: type=1400 audit(1742583485.033:179): avc: denied { read } for pid=5956 comm="syz.2.14" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.750674][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.776516][ T30] audit: type=1400 audit(1742583485.033:180): avc: denied { open } for pid=5956 comm="syz.2.14" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.807057][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.817650][ T30] audit: type=1400 audit(1742583485.033:181): avc: denied { ioctl } for pid=5956 comm="syz.2.14" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.822532][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5919 comm=syz.0.7 [ 63.940814][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.959637][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.047420][ T5964] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.070066][ T5964] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.085584][ T5964] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.098878][ T5964] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.632066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.664882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.731798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.767445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.869531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.901773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.975190][ T5997] ptrace attach of "./syz-executor exec"[5824] was attempted by ""[5997] [ 65.709705][ T5995] infiniband syz1: set down [ 65.714380][ T5995] infiniband syz1: added syz_tun [ 65.744137][ T5995] RDS/IB: syz1: added [ 65.748410][ T5995] smc: adding ib device syz1 with port count 1 [ 65.752534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.755697][ T5995] smc: ib device syz1 port 1 has pnetid [ 65.767606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.114981][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.289694][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.290127][ T6012] FAULT_INJECTION: forcing a failure. [ 66.290127][ T6012] name failslab, interval 1, probability 0, space 0, times 1 [ 66.319336][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.4.30 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 66.319360][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.319369][ T6012] Call Trace: [ 66.319374][ T6012] [ 66.319380][ T6012] dump_stack_lvl+0x16c/0x1f0 [ 66.319408][ T6012] should_fail_ex+0x50a/0x650 [ 66.319438][ T6012] should_failslab+0xc2/0x120 [ 66.319458][ T6012] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 66.319477][ T6012] ? sidtab_sid2str_get+0x17a/0x680 [ 66.319507][ T6012] kmemdup_noprof+0x29/0x60 [ 66.319530][ T6012] sidtab_sid2str_get+0x17a/0x680 [ 66.319558][ T6012] sidtab_entry_to_string+0x33/0x110 [ 66.319583][ T6012] security_sid_to_context_core+0x35c/0x640 [ 66.319610][ T6012] avc_audit_post_callback+0x10b/0x8c0 [ 66.319628][ T6012] ? audit_log_format+0xe9/0x130 [ 66.319649][ T6012] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.319670][ T6012] ? skb_put+0x138/0x1b0 [ 66.319690][ T6012] ? audit_log_n_string+0x253/0x540 [ 66.319720][ T6012] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.319735][ T6012] common_lsm_audit+0x33e/0x2290 [ 66.319759][ T6012] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.319775][ T6012] ? __pfx_common_lsm_audit+0x10/0x10 [ 66.319798][ T6012] ? find_held_lock+0x2d/0x110 [ 66.319819][ T6012] ? avc_denied+0x434/0x780 [ 66.319834][ T6012] ? __pfx_lock_release+0x10/0x10 [ 66.319854][ T6012] ? __pfx_avc_node_free+0x10/0x10 [ 66.319878][ T6012] ? rcu_is_watching+0x12/0xc0 [ 66.319902][ T6012] ? slow_avc_audit+0x17d/0x210 [ 66.319915][ T6012] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.319934][ T6012] slow_avc_audit+0x17d/0x210 [ 66.319951][ T6012] ? __pfx_slow_avc_audit+0x10/0x10 [ 66.319977][ T6012] ? avc_has_perm_noaudit+0x2fa/0x3a0 [ 66.319998][ T6012] avc_has_perm+0x18d/0x1c0 [ 66.320016][ T6012] ? __pfx_avc_has_perm+0x10/0x10 [ 66.320036][ T6012] ? __pfx___might_resched+0x10/0x10 [ 66.320067][ T6012] inode_has_perm+0x168/0x1d0 [ 66.320087][ T6012] selinux_mount+0x2f5/0x380 [ 66.320109][ T6012] ? __pfx_selinux_mount+0x10/0x10 [ 66.320137][ T6012] ? get_current_fs_domain+0x184/0x1f0 [ 66.320158][ T6012] security_sb_mount+0xc8/0x260 [ 66.320181][ T6012] path_mount+0x129/0x1f10 [ 66.320201][ T6012] ? kmem_cache_free+0x2e2/0x4d0 [ 66.320216][ T6012] ? __pfx_path_mount+0x10/0x10 [ 66.320238][ T6012] ? putname+0x13c/0x180 [ 66.320265][ T6012] __x64_sys_mount+0x28f/0x310 [ 66.320284][ T6012] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.320311][ T6012] do_syscall_64+0xcd/0x250 [ 66.320335][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.320358][ T6012] RIP: 0033:0x7f2a54d8d169 [ 66.320371][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.320385][ T6012] RSP: 002b:00007f2a55ba4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.320401][ T6012] RAX: ffffffffffffffda RBX: 00007f2a54fa5fa0 RCX: 00007f2a54d8d169 [ 66.320411][ T6012] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 66.320421][ T6012] RBP: 00007f2a55ba4090 R08: 00002000000002c0 R09: 0000000000000000 [ 66.320430][ T6012] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 66.320438][ T6012] R13: 0000000000000000 R14: 00007f2a54fa5fa0 R15: 00007fff881e31c8 [ 66.320461][ T6012] [ 66.320580][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.668283][ T26] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.677478][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.686831][ T26] usb 3-1: SerialNumber: syz [ 66.812897][ T6023] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.33'. [ 66.946846][ T970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.008369][ T6026] kernel profiling enabled (shift: 63) [ 67.014067][ T6026] profiling shift: 63 too large [ 67.202081][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 67.322496][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.386465][ T26] usb 3-1: 0:2 : does not exist [ 67.404439][ T970] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 67.430057][ T26] usb 3-1: USB disconnect, device number 2 [ 67.435115][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.455265][ T970] usb 5-1: config 0 descriptor?? [ 67.728918][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.898984][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 67.899044][ T30] audit: type=1400 audit(1742583489.583:207): avc: denied { write } for pid=6016 comm="syz.4.32" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.301842][ T970] logitech-djreceiver 0003:046D:C531.0001: item fetching failed at offset 1/5 [ 68.417298][ T6041] rdma_rxe: rxe_newlink: failed to add syz_tun [ 68.634046][ T970] logitech-djreceiver 0003:046D:C531.0001: logi_dj_probe: parse failed [ 68.650522][ T970] logitech-djreceiver 0003:046D:C531.0001: probe with driver logitech-djreceiver failed with error -22 [ 68.689939][ T970] usb 5-1: USB disconnect, device number 2 [ 68.952485][ T6051] Bluetooth: MGMT ver 1.23 [ 69.026374][ T30] audit: type=1400 audit(1742583490.633:208): avc: denied { setopt } for pid=6045 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.222548][ T30] audit: type=1400 audit(1742583490.633:209): avc: denied { write } for pid=6045 comm="syz.3.38" path="socket:[8914]" dev="sockfs" ino=8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.687027][ T30] audit: type=1400 audit(1742583490.643:210): avc: denied { setopt } for pid=6045 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.782595][ T30] audit: type=1400 audit(1742583490.673:211): avc: denied { read } for pid=6045 comm="syz.3.38" path="socket:[8098]" dev="sockfs" ino=8098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.806569][ T30] audit: type=1400 audit(1742583490.673:212): avc: denied { map } for pid=6045 comm="syz.3.38" path="socket:[8916]" dev="sockfs" ino=8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.838006][ T30] audit: type=1400 audit(1742583490.673:213): avc: denied { read } for pid=6045 comm="syz.3.38" path="socket:[8916]" dev="sockfs" ino=8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.865717][ T30] audit: type=1400 audit(1742583490.673:214): avc: denied { write } for pid=6045 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.885148][ T30] audit: type=1400 audit(1742583490.673:215): avc: denied { connect } for pid=6045 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.246149][ T6067] Cannot find add_set index 2 as target [ 70.262932][ T6068] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[6068] [ 70.460930][ T30] audit: type=1400 audit(1742583490.673:216): avc: denied { name_connect } for pid=6045 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.142249][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.148911][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.268067][ T6089] rdma_rxe: rxe_newlink: failed to add syz_tun [ 71.905266][ T6096] ptrace attach of "./syz-executor exec"[5814] was attempted by ""[6096] [ 72.929318][ T6108] ptrace attach of "./syz-executor exec"[5814] was attempted by ""[6108] [ 73.913244][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 73.958097][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 74.033674][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 74.033690][ T30] audit: type=1400 audit(1742583495.723:232): avc: denied { read } for pid=6119 comm="syz.2.62" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.041118][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 74.115969][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 74.185497][ T30] audit: type=1400 audit(1742583495.723:233): avc: denied { open } for pid=6119 comm="syz.2.62" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.242086][ T5819] Bluetooth: hci1: unexpected event 0x30 length: 4 > 3 [ 74.267306][ T30] audit: type=1400 audit(1742583495.953:234): avc: denied { setopt } for pid=6132 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.428374][ T6131] rdma_rxe: rxe_newlink: failed to add syz_tun [ 74.439387][ T30] audit: type=1400 audit(1742583496.003:235): avc: denied { create } for pid=6134 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.461864][ T30] audit: type=1400 audit(1742583496.013:236): avc: denied { write } for pid=6132 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.514539][ T30] audit: type=1400 audit(1742583496.013:237): avc: denied { create } for pid=6132 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.595281][ T30] audit: type=1400 audit(1742583496.013:238): avc: denied { bind } for pid=6132 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.789080][ T30] audit: type=1400 audit(1742583496.423:239): avc: denied { accept } for pid=6132 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.854753][ T30] audit: type=1400 audit(1742583496.543:240): avc: denied { create } for pid=6145 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.937623][ T6147] process 'syz.2.67' launched './file0' with NULL argv: empty string added [ 75.379985][ T30] audit: type=1400 audit(1742583496.613:241): avc: denied { write } for pid=6140 comm="syz.2.67" name="route" dev="proc" ino=4026533227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.747824][ T6150] Invalid source name [ 75.752124][ T6150] UBIFS error (pid: 6150): cannot open "./file0", error -22 [ 75.890371][ T6153] evm: overlay not supported [ 76.263933][ T46] cfg80211: failed to load regulatory.db [ 76.836946][ T6175] rdma_rxe: rxe_newlink: failed to add syz_tun [ 77.112173][ T5902] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 77.990160][ T5902] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 78.045252][ T5902] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 78.170375][ T6185] rdma_rxe: rxe_newlink: failed to add syz_tun [ 78.175689][ T5902] usb 2-1: config 0 has no interface number 0 [ 78.214043][ T5902] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.266844][ T5902] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 78.429998][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.433552][ T5902] usb 2-1: config 0 descriptor?? [ 78.646220][ T5863] usb 2-1: USB disconnect, device number 2 [ 78.837979][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 78.903168][ T6206] veth3: entered promiscuous mode [ 79.227349][ T6215] syz1: rxe_newlink: already configured on syz_tun [ 79.529718][ T6217] [U]  [ 79.532676][ T6217] [U] K{ [ 79.570403][ T6217] [U] t 1ŠFfˊ`GJgo/mC [ 79.579958][ T6217] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 79.602184][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 79.602198][ T30] audit: type=1400 audit(1742583501.273:269): avc: denied { bind } for pid=6218 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.631070][ T6217] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 79.648304][ T6217] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 79.716215][ T6217] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 79.763031][ T6217] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 79.770278][ T30] audit: type=1400 audit(1742583501.453:270): avc: denied { create } for pid=6218 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.774401][ T6217] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 79.834204][ T6217] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 79.946376][ T6227] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 79.993771][ T6217] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 80.004995][ T6217] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 80.050307][ T6227] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 80.059816][ T6217] [U] 22Ʃx?0;3u [ 80.065086][ T6217] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 80.094977][ T6233] FAULT_INJECTION: forcing a failure. [ 80.094977][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 80.096447][ T6217] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 80.127809][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.0.97 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 80.127836][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.127845][ T6233] Call Trace: [ 80.127851][ T6233] [ 80.127857][ T6233] dump_stack_lvl+0x16c/0x1f0 [ 80.127887][ T6233] should_fail_ex+0x50a/0x650 [ 80.127914][ T6233] ? fs_reclaim_acquire+0xae/0x150 [ 80.127940][ T6233] should_failslab+0xc2/0x120 [ 80.127959][ T6233] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 80.127978][ T6233] ? kasan_save_stack+0x33/0x60 [ 80.127993][ T6233] ? kasan_save_track+0x14/0x30 [ 80.128007][ T6233] ? __kasan_kmalloc+0xaa/0xb0 [ 80.128020][ T6233] ? v9fs_session_init+0xb4/0x1a80 [ 80.128044][ T6233] ? path_mount+0x14e6/0x1f10 [ 80.128063][ T6233] kstrdup+0x53/0x100 [ 80.128085][ T6233] v9fs_session_init+0xb4/0x1a80 [ 80.128118][ T6233] ? __pfx_v9fs_session_init+0x10/0x10 [ 80.128155][ T6233] v9fs_mount+0xc6/0xa30 [ 80.128181][ T6233] ? __pfx_v9fs_mount+0x10/0x10 [ 80.128208][ T6233] ? cap_capable+0xb3/0x250 [ 80.128230][ T6233] ? __pfx_v9fs_mount+0x10/0x10 [ 80.128254][ T6233] legacy_get_tree+0x109/0x220 [ 80.128273][ T6233] vfs_get_tree+0x8b/0x340 [ 80.128296][ T6233] path_mount+0x14e6/0x1f10 [ 80.128315][ T6233] ? kmem_cache_free+0x2e2/0x4d0 [ 80.128330][ T6233] ? __pfx_path_mount+0x10/0x10 [ 80.128351][ T6233] ? putname+0x13c/0x180 [ 80.128374][ T6233] __x64_sys_mount+0x28f/0x310 [ 80.128393][ T6233] ? __pfx___x64_sys_mount+0x10/0x10 [ 80.128418][ T6233] do_syscall_64+0xcd/0x250 [ 80.128443][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.128467][ T6233] RIP: 0033:0x7fc842f8d169 [ 80.128480][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.128495][ T6233] RSP: 002b:00007fc843e99038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.128512][ T6233] RAX: ffffffffffffffda RBX: 00007fc8431a5fa0 RCX: 00007fc842f8d169 [ 80.128522][ T6233] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 80.128531][ T6233] RBP: 00007fc843e99090 R08: 0000200000000580 R09: 0000000000000000 [ 80.128541][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.128550][ T6233] R13: 0000000000000000 R14: 00007fc8431a5fa0 R15: 00007fff0c7c3138 [ 80.128572][ T6233] [ 80.165316][ T6217] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 80.405971][ T6217] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 80.416453][ T6217] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 80.429701][ T30] audit: type=1400 audit(1742583502.103:273): avc: denied { bind } for pid=6237 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.431648][ T6217] [U] ec [ 80.451774][ T6217] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 80.483279][ T6217] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 80.649586][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 80.982127][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 80.991724][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 81.107305][ T30] audit: type=1400 audit(1742583502.753:274): avc: denied { write } for pid=6246 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.564385][ T30] audit: type=1400 audit(1742583502.753:275): avc: denied { connect } for pid=6246 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.584202][ T30] audit: type=1400 audit(1742583502.763:276): avc: denied { read } for pid=6246 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.803869][ T30] audit: type=1400 audit(1742583503.473:277): avc: denied { mount } for pid=6254 comm="syz.0.104" name="/" dev="autofs" ino=9642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 81.842209][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.863752][ T30] audit: type=1400 audit(1742583503.523:278): avc: denied { setopt } for pid=6256 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.024408][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.042667][ T5902] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.216287][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.328799][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 82.445895][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 82.571594][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.581256][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.590393][ T5902] usb 2-1: Product: syz [ 82.605004][ T5902] usb 2-1: Manufacturer: syz [ 82.613082][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.626466][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 82.633643][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 82.643440][ T5902] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 82.649431][ T5902] cdc_wdm 2-1:1.0: Unknown control protocol [ 82.751882][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.069882][ T6274] ptrace attach of "./syz-executor exec"[5823] was attempted by " [ 83.084889][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 83.625275][ T6277] warning: `syz.4.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.717665][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.725377][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.845015][ T10] usb usb1-port1: attempt power cycle [ 83.882071][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 83.889692][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.910865][ T5863] usb 3-1: config 187 has an invalid descriptor of length 244, skipping remainder of the config [ 83.922614][ T5863] usb 3-1: config 187 has 0 interfaces, different from the descriptor's value: 1 [ 83.933670][ T5863] usb 3-1: language id specifier not provided by device, defaulting to English [ 83.945591][ T5863] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=90.a3 [ 83.958011][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.966695][ T5863] usb 3-1: Product: syz [ 83.971346][ T5863] usb 3-1: Manufacturer: syz [ 83.978072][ T5863] usb 3-1: SerialNumber: syz [ 84.071945][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.202502][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.226723][ T6282] x_tables: duplicate underflow at hook 2 [ 84.236371][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.255517][ T46] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 84.279211][ T46] usb 4-1: config 0 has no interface number 0 [ 84.312042][ T46] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.336053][ T46] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 84.422812][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.504158][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 84.584037][ T46] usb 4-1: config 0 descriptor?? [ 84.584779][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.633967][ T46] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input6 [ 84.684241][ T5864] usb 2-1: USB disconnect, device number 3 [ 84.763137][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 84.763153][ T30] audit: type=1400 audit(1742583506.453:280): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.774221][ T10] usb usb1-port1: unable to enumerate USB device [ 84.922133][ T30] audit: type=1400 audit(1742583506.493:281): avc: denied { read } for pid=5177 comm="acpid" name="mouse1" dev="devtmpfs" ino=2762 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.151886][ T30] audit: type=1400 audit(1742583506.493:282): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2762 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.316962][ T10] usb 4-1: USB disconnect, device number 3 [ 85.372218][ T30] audit: type=1400 audit(1742583506.513:283): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2762 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.438534][ T30] audit: type=1400 audit(1742583507.123:284): avc: denied { mount } for pid=6292 comm="syz.0.115" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.593138][ T5863] usb 3-1: USB disconnect, device number 3 [ 85.838361][ T30] audit: type=1400 audit(1742583507.483:285): avc: denied { write } for pid=6292 comm="syz.0.115" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.192333][ T30] audit: type=1400 audit(1742583507.863:286): avc: denied { accept } for pid=6286 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.233227][ T30] audit: type=1400 audit(1742583507.913:287): avc: denied { shutdown } for pid=6286 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.328114][ T30] audit: type=1400 audit(1742583507.993:288): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.474332][ T30] audit: type=1400 audit(1742583508.163:289): avc: denied { getopt } for pid=6306 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.513585][ T6312] overlay: Unknown parameter 'uid<00000000000000000000' [ 86.592556][ T6312] x_tables: duplicate underflow at hook 2 [ 86.665578][ T6302] random: crng reseeded on system resumption [ 87.223352][ T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 87.285102][ T5826] block nbd0: Receive control failed (result -32) [ 87.294355][ T5819] block nbd0: Receive control failed (result -32) [ 87.308987][ T6313] block nbd0: shutting down sockets [ 87.424543][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.439409][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.453805][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 87.464308][ T6321] FAULT_INJECTION: forcing a failure. [ 87.464308][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 87.478356][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.490084][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.0.125 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 87.490105][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.490114][ T6321] Call Trace: [ 87.490118][ T6321] [ 87.490124][ T6321] dump_stack_lvl+0x16c/0x1f0 [ 87.490152][ T6321] should_fail_ex+0x50a/0x650 [ 87.490177][ T6321] ? fs_reclaim_acquire+0xae/0x150 [ 87.490200][ T6321] ? tomoyo_encode2+0x100/0x3e0 [ 87.490221][ T6321] should_failslab+0xc2/0x120 [ 87.490240][ T6321] __kmalloc_noprof+0xcb/0x510 [ 87.490256][ T6321] ? d_absolute_path+0x137/0x1b0 [ 87.490277][ T6321] ? rcu_is_watching+0x12/0xc0 [ 87.490294][ T6321] tomoyo_encode2+0x100/0x3e0 [ 87.490319][ T6321] tomoyo_encode+0x29/0x50 [ 87.490339][ T6321] tomoyo_realpath_from_path+0x19d/0x720 [ 87.490366][ T6321] tomoyo_path_number_perm+0x248/0x590 [ 87.490385][ T6321] ? tomoyo_path_number_perm+0x235/0x590 [ 87.490406][ T6321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.490446][ T6321] ? __pfx_lock_release+0x10/0x10 [ 87.490467][ T6321] ? trace_lock_acquire+0x14e/0x1f0 [ 87.490487][ T6321] ? lock_acquire+0x2f/0xb0 [ 87.490504][ T6321] ? __fget_files+0x40/0x3a0 [ 87.490531][ T6321] ? __fget_files+0x206/0x3a0 [ 87.490550][ T6321] security_file_ioctl+0x9b/0x240 [ 87.490575][ T6321] __x64_sys_ioctl+0xb7/0x200 [ 87.490599][ T6321] do_syscall_64+0xcd/0x250 [ 87.490624][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.490646][ T6321] RIP: 0033:0x7fc842f8d169 [ 87.490660][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.490674][ T6321] RSP: 002b:00007fc843e99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.490689][ T6321] RAX: ffffffffffffffda RBX: 00007fc8431a5fa0 RCX: 00007fc842f8d169 [ 87.490699][ T6321] RDX: 0000200000000240 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 87.490707][ T6321] RBP: 00007fc843e99090 R08: 0000000000000000 R09: 0000000000000000 [ 87.490715][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.490723][ T6321] R13: 0000000000000000 R14: 00007fc8431a5fa0 R15: 00007fff0c7c3138 [ 87.490743][ T6321] [ 87.490754][ T6321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.719844][ T10] usb 5-1: config 0 descriptor?? [ 87.727915][ T10] qmi_wwan 5-1:0.0: bogus CDC Union: master=0, slave=40 [ 87.735481][ T10] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 87.798298][ T6326] netlink: 112 bytes leftover after parsing attributes in process `syz.0.126'. [ 87.841974][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.864064][ T6327] fuse: Bad value for 'user_id' [ 87.868963][ T6327] fuse: Bad value for 'user_id' [ 87.944925][ T10] usb 5-1: USB disconnect, device number 3 [ 87.971841][ T5863] usb 3-1: device descriptor read/64, error -71 [ 88.211823][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.341908][ T5863] usb 3-1: device descriptor read/64, error -71 [ 88.432301][ T6333] FAULT_INJECTION: forcing a failure. [ 88.432301][ T6333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.445686][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.1.129 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 88.445701][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.445707][ T6333] Call Trace: [ 88.445710][ T6333] [ 88.445714][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 88.445733][ T6333] should_fail_ex+0x50a/0x650 [ 88.445750][ T6333] _copy_from_user+0x2e/0xd0 [ 88.445762][ T6333] drm_ioctl+0x501/0xc00 [ 88.445774][ T6333] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 88.445787][ T6333] ? __pfx_drm_ioctl+0x10/0x10 [ 88.445796][ T6333] ? __pfx_lock_release+0x10/0x10 [ 88.445815][ T6333] ? selinux_file_ioctl+0x180/0x270 [ 88.445831][ T6333] ? selinux_file_ioctl+0xb4/0x270 [ 88.445846][ T6333] ? __pfx_drm_ioctl+0x10/0x10 [ 88.445857][ T6333] __x64_sys_ioctl+0x190/0x200 [ 88.445872][ T6333] do_syscall_64+0xcd/0x250 [ 88.445887][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.445901][ T6333] RIP: 0033:0x7f5fb878d169 [ 88.445911][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.445920][ T6333] RSP: 002b:00007f5fb9509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.445930][ T6333] RAX: ffffffffffffffda RBX: 00007f5fb89a5fa0 RCX: 00007f5fb878d169 [ 88.445935][ T6333] RDX: 0000200000000540 RSI: 00000000c02864c3 RDI: 0000000000000003 [ 88.445941][ T6333] RBP: 00007f5fb9509090 R08: 0000000000000000 R09: 0000000000000000 [ 88.445946][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.445952][ T6333] R13: 0000000000000000 R14: 00007f5fb89a5fa0 R15: 00007ffe87654c48 [ 88.445963][ T6333] [ 88.617667][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.641908][ T5863] usb usb3-port1: attempt power cycle [ 88.942219][ T5915] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 88.992225][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.002303][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.025149][ T5863] usb 3-1: device descriptor read/8, error -71 [ 89.061911][ T5864] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.078107][ T970] IPVS: starting estimator thread 0... [ 89.097571][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.118016][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.131503][ T5915] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 89.147667][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.155081][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.158339][ T5915] usb 1-1: config 0 descriptor?? [ 89.173183][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 89.190466][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.202016][ T6346] IPVS: using max 35 ests per chain, 84000 per kthread [ 89.209705][ T10] usb 2-1: config 187 has an invalid descriptor of length 244, skipping remainder of the config [ 89.222239][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 89.224131][ T10] usb 2-1: config 187 has 0 interfaces, different from the descriptor's value: 1 [ 89.248130][ T5864] usb 5-1: config 162 has an invalid interface number: 253 but max is 0 [ 89.256868][ T5864] usb 5-1: config 162 has no interface number 0 [ 89.257026][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 89.266041][ T5864] usb 5-1: config 162 interface 253 has no altsetting 0 [ 89.282521][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.290322][ T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=90.a3 [ 89.292251][ T5864] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 89.306238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.316780][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.316808][ T5864] usb 5-1: Product: syz [ 89.316821][ T5864] usb 5-1: Manufacturer: syz [ 89.316834][ T5864] usb 5-1: SerialNumber: syz [ 89.340968][ T10] usb 2-1: Product: syz [ 89.345796][ T10] usb 2-1: Manufacturer: syz [ 89.350918][ T10] usb 2-1: SerialNumber: syz [ 89.357135][ T5863] usb 3-1: device descriptor read/8, error -71 [ 89.398335][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 89.406804][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.417590][ T5915] usb 1-1: USB disconnect, device number 10 [ 89.473266][ T5863] usb usb3-port1: unable to enumerate USB device [ 89.548626][ T5864] go7007 5-1:162.253: probe with driver go7007 failed with error -12 [ 89.560372][ T5864] usb 5-1: USB disconnect, device number 4 [ 90.025253][ T10] usb 2-1: USB disconnect, device number 4 [ 90.836917][ T6378] FAULT_INJECTION: forcing a failure. [ 90.836917][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 90.849885][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.2.142 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 90.849906][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.849915][ T6378] Call Trace: [ 90.849922][ T6378] [ 90.849928][ T6378] dump_stack_lvl+0x16c/0x1f0 [ 90.849956][ T6378] should_fail_ex+0x50a/0x650 [ 90.849982][ T6378] ? fs_reclaim_acquire+0xae/0x150 [ 90.850008][ T6378] should_failslab+0xc2/0x120 [ 90.850027][ T6378] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 90.850048][ T6378] ? kvasprintf_const+0x66/0x1a0 [ 90.850069][ T6378] kvasprintf+0xbd/0x160 [ 90.850086][ T6378] ? __pfx_kvasprintf+0x10/0x10 [ 90.850104][ T6378] ? rcu_is_watching+0x12/0xc0 [ 90.850122][ T6378] ? kfree+0x260/0x4d0 [ 90.850149][ T6378] kvasprintf_const+0x66/0x1a0 [ 90.850168][ T6378] kobject_set_name_vargs+0x5a/0x140 [ 90.850194][ T6378] dev_set_name+0xc8/0x100 [ 90.850219][ T6378] ? __pfx_dev_set_name+0x10/0x10 [ 90.850250][ T6378] ? hci_register_dev+0xdc/0xc60 [ 90.850277][ T6378] hci_register_dev+0x101/0xc60 [ 90.850303][ T6378] hci_uart_tty_ioctl+0x7d0/0xc10 [ 90.850329][ T6378] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 90.850350][ T6378] tty_ioctl+0x6ee/0x15d0 [ 90.850371][ T6378] ? __pfx_tty_ioctl+0x10/0x10 [ 90.850391][ T6378] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 90.850422][ T6378] ? __pfx_lock_release+0x10/0x10 [ 90.850455][ T6378] ? selinux_file_ioctl+0x180/0x270 [ 90.850479][ T6378] ? selinux_file_ioctl+0xb4/0x270 [ 90.850504][ T6378] ? __pfx_tty_ioctl+0x10/0x10 [ 90.850525][ T6378] __x64_sys_ioctl+0x190/0x200 [ 90.850549][ T6378] do_syscall_64+0xcd/0x250 [ 90.850574][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.850597][ T6378] RIP: 0033:0x7f8a5078d169 [ 90.850610][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.850625][ T6378] RSP: 002b:00007f8a5158e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.850641][ T6378] RAX: ffffffffffffffda RBX: 00007f8a509a6160 RCX: 00007f8a5078d169 [ 90.850651][ T6378] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005 [ 90.850660][ T6378] RBP: 00007f8a5158e090 R08: 0000000000000000 R09: 0000000000000000 [ 90.850669][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.850678][ T6378] R13: 0000000000000000 R14: 00007f8a509a6160 R15: 00007ffc40fbf268 [ 90.850700][ T6378] [ 90.850724][ T6378] Bluetooth: Can't register HCI device [ 91.748341][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 91.748355][ T30] audit: type=1400 audit(1742583513.433:305): avc: denied { write } for pid=6389 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.773905][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.837596][ T6395] GUP no longer grows the stack in syz.2.147 (6395): 200000004000-20000000a000 (200000002000) [ 91.848166][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.2.147 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 91.848182][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.848189][ T6395] Call Trace: [ 91.848192][ T6395] [ 91.848198][ T6395] dump_stack_lvl+0x16c/0x1f0 [ 91.848219][ T6395] gup_vma_lookup+0x1d2/0x220 [ 91.848238][ T6395] __get_user_pages+0x236/0x36f0 [ 91.848249][ T6395] ? find_held_lock+0x2d/0x110 [ 91.848264][ T6395] ? mtree_load+0x30a/0xa40 [ 91.848279][ T6395] ? __pfx_lock_release+0x10/0x10 [ 91.848293][ T6395] ? __pfx___get_user_pages+0x10/0x10 [ 91.848306][ T6395] get_user_pages_remote+0x25e/0xb30 [ 91.848321][ T6395] ? __pfx_get_user_pages_remote+0x10/0x10 [ 91.848337][ T6395] __access_remote_vm+0x235/0x7a0 [ 91.848353][ T6395] ? __pfx___access_remote_vm+0x10/0x10 [ 91.848365][ T6395] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.848378][ T6395] proc_pid_cmdline_read+0x4f5/0x900 [ 91.848394][ T6395] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 91.848408][ T6395] ? rw_verify_area+0xcf/0x680 [ 91.848423][ T6395] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 91.848436][ T6395] vfs_readv+0x6c2/0x8a0 [ 91.848449][ T6395] ? __pfx___lock_acquire+0x10/0x10 [ 91.848465][ T6395] ? __pfx_vfs_readv+0x10/0x10 [ 91.848482][ T6395] ? __fget_files+0x1fc/0x3a0 [ 91.848491][ T6395] ? __pfx_lock_release+0x10/0x10 [ 91.848515][ T6395] ? __fget_files+0x206/0x3a0 [ 91.848527][ T6395] ? do_preadv+0x1b1/0x270 [ 91.848540][ T6395] do_preadv+0x1b1/0x270 [ 91.848554][ T6395] ? __pfx_do_preadv+0x10/0x10 [ 91.848571][ T6395] do_syscall_64+0xcd/0x250 [ 91.848588][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.848604][ T6395] RIP: 0033:0x7f8a5078d169 [ 91.848614][ T6395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.848623][ T6395] RSP: 002b:00007f8a5156d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 91.848633][ T6395] RAX: ffffffffffffffda RBX: 00007f8a509a6240 RCX: 00007f8a5078d169 [ 91.848639][ T6395] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000008 [ 91.848644][ T6395] RBP: 00007f8a5080e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.848650][ T6395] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 91.848655][ T6395] R13: 0000000000000000 R14: 00007f8a509a6240 R15: 00007ffc40fbf268 [ 91.848667][ T6395] [ 92.814717][ T30] audit: type=1400 audit(1742583514.493:306): avc: denied { create } for pid=6398 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.049979][ T30] audit: type=1326 audit(1742583515.643:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb878d169 code=0x0 [ 94.120912][ T30] audit: type=1400 audit(1742583515.803:308): avc: denied { mount } for pid=6420 comm="syz.2.156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.164368][ T30] audit: type=1400 audit(1742583515.853:309): avc: denied { ioctl } for pid=6414 comm="syz.1.154" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.171992][ T5864] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 94.216229][ T30] audit: type=1400 audit(1742583515.893:310): avc: denied { ioctl } for pid=6410 comm="syz.4.152" path="socket:[10908]" dev="sockfs" ino=10908 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.302059][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.371979][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 94.396250][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.409602][ T5864] usb 1-1: config 187 has an invalid descriptor of length 244, skipping remainder of the config [ 94.424770][ T5864] usb 1-1: config 187 has 0 interfaces, different from the descriptor's value: 1 [ 94.439474][ T5864] usb 1-1: language id specifier not provided by device, defaulting to English [ 94.457552][ T5864] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=90.a3 [ 94.470241][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.479255][ T5864] usb 1-1: Product: syz [ 94.488055][ T5864] usb 1-1: Manufacturer: syz [ 94.497151][ T5864] usb 1-1: SerialNumber: syz [ 94.540365][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.560888][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.577191][ T5915] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 94.587322][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.649681][ T5915] usb 2-1: config 0 descriptor?? [ 94.809599][ T30] audit: type=1400 audit(1742583516.493:311): avc: denied { read write } for pid=6411 comm="syz.0.153" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.947037][ T30] audit: type=1400 audit(1742583516.493:312): avc: denied { open } for pid=6411 comm="syz.0.153" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.017595][ T30] audit: type=1400 audit(1742583516.703:313): avc: denied { setcheckreqprot } for pid=6426 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.036486][ T6429] capability: warning: `syz.4.158' uses deprecated v2 capabilities in a way that may be insecure [ 95.038554][ T30] audit: type=1400 audit(1742583516.703:314): avc: denied { bind } for pid=6426 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.115587][ T5915] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.131838][ T5915] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.139171][ T5915] hid-steam 0003:28DE:1142.0002: item fetching failed at offset 2/5 [ 95.172390][ T5915] hid-steam 0003:28DE:1142.0002: steam_probe:parse of hid interface failed [ 95.191835][ T5915] hid-steam 0003:28DE:1142.0002: probe with driver hid-steam failed with error -22 [ 95.313424][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.323652][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.385783][ T6432] netlink: 'syz.4.159': attribute type 4 has an invalid length. [ 95.931862][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.980082][ T5864] usb 1-1: USB disconnect, device number 11 [ 96.093246][ T5915] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 96.132153][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.152911][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.164489][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.173457][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.186477][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.198042][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.212909][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.232007][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.243684][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.253493][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.262649][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.274091][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.283167][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.292520][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.306987][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.315486][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.331961][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.343287][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.374221][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.392596][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.403957][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.412075][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.421411][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.432864][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.442254][ T5915] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 96.451883][ T5915] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 96.460304][ T5915] usb 3-1: Product: syz [ 96.465011][ T5915] usb 3-1: Manufacturer: syz [ 96.469732][ T5915] usb 3-1: SerialNumber: syz [ 96.485785][ T5915] usb 3-1: config 0 descriptor?? [ 96.503198][ T5915] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 96.760723][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 96.762386][ T46] usb 3-1: USB disconnect, device number 8 [ 96.852512][ T6448] ptrace attach of "./syz-executor exec"[5816] was attempted by " [ 97.012487][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 97.012519][ T30] audit: type=1400 audit(1742583518.703:320): avc: denied { name_bind } for pid=6426 comm="syz.2.157" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 97.201141][ T46] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 97.207883][ T970] usb 2-1: USB disconnect, device number 5 [ 97.601620][ T30] audit: type=1400 audit(1742583519.283:321): avc: denied { mount } for pid=6463 comm="syz.4.167" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.625232][ T30] audit: type=1400 audit(1742583519.283:322): avc: denied { watch_mount } for pid=6463 comm="syz.4.167" path="/47" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.915684][ T30] audit: type=1400 audit(1742583519.603:323): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.102457][ T30] audit: type=1400 audit(1742583519.763:324): avc: denied { append } for pid=6459 comm="syz.0.165" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.357589][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.526224][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 98.561888][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.589586][ T6499] input: syz0 as /devices/virtual/input/input7 [ 98.641970][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.690620][ T970] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 98.708422][ T6517] FAULT_INJECTION: forcing a failure. [ 98.708422][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 98.721846][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.739180][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.2.171 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 98.739208][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.739218][ T6517] Call Trace: [ 98.739223][ T6517] [ 98.739230][ T6517] dump_stack_lvl+0x16c/0x1f0 [ 98.739258][ T6517] should_fail_ex+0x50a/0x650 [ 98.739286][ T6517] ? fs_reclaim_acquire+0xae/0x150 [ 98.739311][ T6517] ? kernfs_fop_write_iter+0x223/0x500 [ 98.739332][ T6517] should_failslab+0xc2/0x120 [ 98.739352][ T6517] __kmalloc_noprof+0xcb/0x510 [ 98.739368][ T6517] ? rcu_is_watching+0x12/0xc0 [ 98.739392][ T6517] kernfs_fop_write_iter+0x223/0x500 [ 98.739416][ T6517] vfs_write+0x5ae/0x1150 [ 98.739441][ T6517] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 98.739462][ T6517] ? __pfx___mutex_lock+0x10/0x10 [ 98.739485][ T6517] ? __pfx_vfs_write+0x10/0x10 [ 98.739526][ T6517] ksys_write+0x12b/0x250 [ 98.739540][ T6517] ? __pfx_ksys_write+0x10/0x10 [ 98.739562][ T6517] do_syscall_64+0xcd/0x250 [ 98.739587][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.739610][ T6517] RIP: 0033:0x7f8a5078d169 [ 98.739622][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.739637][ T6517] RSP: 002b:00007f8a515d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.739653][ T6517] RAX: ffffffffffffffda RBX: 00007f8a509a5fa0 RCX: 00007f8a5078d169 [ 98.739663][ T6517] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.739679][ T6517] RBP: 00007f8a515d0090 R08: 0000000000000000 R09: 0000000000000000 [ 98.739689][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.739697][ T6517] R13: 0000000000000000 R14: 00007f8a509a5fa0 R15: 00007ffc40fbf268 [ 98.739720][ T6517] [ 98.865250][ T970] usb 2-1: Product: syz [ 98.929299][ T30] audit: type=1400 audit(1742583520.613:325): avc: denied { ioctl } for pid=6525 comm="syz.0.172" path="socket:[11075]" dev="sockfs" ino=11075 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.153823][ T30] audit: type=1400 audit(1742583520.813:326): avc: denied { ioctl } for pid=6525 comm="syz.0.172" path="socket:[11080]" dev="sockfs" ino=11080 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.342046][ T970] usb 2-1: Manufacturer: syz [ 99.342070][ T970] usb 2-1: SerialNumber: syz [ 99.343725][ T970] usb 2-1: config 0 descriptor?? [ 99.346064][ T970] hub 2-1:0.0: bad descriptor, ignoring hub [ 99.346105][ T970] hub 2-1:0.0: probe with driver hub failed with error -5 [ 99.488975][ T970] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.490276][ T12] usb 2-1: Failed to submit usb control message: -71 [ 99.490318][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 99.490332][ T12] usb 2-1: unable to get target info from device [ 99.490343][ T12] usb 2-1: could not get target info (-71) [ 99.490353][ T12] usb 2-1: could not probe fw (-71) [ 99.590969][ T6537] FAULT_INJECTION: forcing a failure. [ 99.590969][ T6537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.591027][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.2.173 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 99.591046][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.591055][ T6537] Call Trace: [ 99.591060][ T6537] [ 99.591067][ T6537] dump_stack_lvl+0x16c/0x1f0 [ 99.591096][ T6537] should_fail_ex+0x50a/0x650 [ 99.591125][ T6537] _copy_from_user+0x2e/0xd0 [ 99.591144][ T6537] copy_msghdr_from_user+0x99/0x160 [ 99.591170][ T6537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 99.591200][ T6537] ? __pfx___lock_acquire+0x10/0x10 [ 99.591227][ T6537] ___sys_recvmsg+0xdc/0x1a0 [ 99.591251][ T6537] ? __pfx____sys_recvmsg+0x10/0x10 [ 99.591275][ T6537] ? find_held_lock+0x2d/0x110 [ 99.591303][ T6537] ? __pfx___might_resched+0x10/0x10 [ 99.591329][ T6537] ? __might_fault+0xe3/0x190 [ 99.591352][ T6537] do_recvmmsg+0x2f8/0x740 [ 99.591379][ T6537] ? __pfx_do_recvmmsg+0x10/0x10 [ 99.591402][ T6537] ? __schedule+0xf4b/0x5890 [ 99.591435][ T6537] ? __fget_files+0x206/0x3a0 [ 99.591457][ T6537] __x64_sys_recvmmsg+0x239/0x290 [ 99.591474][ T6537] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 99.591506][ T6537] do_syscall_64+0xcd/0x250 [ 99.591536][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.591558][ T6537] RIP: 0033:0x7f8a5078d169 [ 99.591571][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.591586][ T6537] RSP: 002b:00007f8a5158e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 99.591601][ T6537] RAX: ffffffffffffffda RBX: 00007f8a509a6160 RCX: 00007f8a5078d169 [ 99.591611][ T6537] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000006 [ 99.591621][ T6537] RBP: 00007f8a5158e090 R08: 0000000000000000 R09: 0000000000000000 [ 99.591630][ T6537] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 99.591639][ T6537] R13: 0000000000000000 R14: 00007f8a509a6160 R15: 00007ffc40fbf268 [ 99.591659][ T6537] [ 99.605430][ T30] audit: type=1400 audit(1742583521.293:327): avc: denied { ioctl } for pid=6466 comm="syz.1.168" path="socket:[10188]" dev="sockfs" ino=10188 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.931252][ T6529] tty tty21: ldisc open failed (-12), clearing slot 20 [ 100.939258][ T6467] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 101.269759][ T46] usb 2-1: USB disconnect, device number 6 [ 101.553567][ T30] audit: type=1400 audit(1742583523.243:328): avc: denied { ioctl } for pid=6553 comm="syz.1.179" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10209 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.232753][ T30] audit: type=1400 audit(1742583523.243:329): avc: denied { ioctl } for pid=6553 comm="syz.1.179" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 102.514486][ T30] audit: type=1400 audit(1742583524.193:330): avc: denied { connect } for pid=6572 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.575107][ T30] audit: type=1400 audit(1742583524.203:331): avc: denied { mount } for pid=6572 comm="syz.4.184" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.787100][ T6575] pimreg: entered allmulticast mode [ 103.052492][ T30] audit: type=1326 audit(1742583524.743:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.4.185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a54d8d169 code=0x0 [ 103.145309][ T30] audit: type=1400 audit(1742583524.833:333): avc: denied { append } for pid=6568 comm="syz.0.183" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.352781][ T30] audit: type=1400 audit(1742583525.033:334): avc: denied { validate_trans } for pid=6576 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.012496][ T6588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.067743][ T30] audit: type=1400 audit(1742583525.743:335): avc: denied { getopt } for pid=6589 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.711795][ T30] audit: type=1400 audit(1742583526.383:336): avc: denied { create } for pid=6606 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.870070][ T6610] Cannot find set identified by id 0 to match [ 104.946428][ T30] audit: type=1400 audit(1742583526.583:337): avc: denied { view } for pid=6606 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 106.485191][ T6619] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.540185][ T30] audit: type=1400 audit(1742583528.223:338): avc: denied { setopt } for pid=6620 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.703195][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.713698][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.724583][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.892712][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.904987][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.043970][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.458696][ T5900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.493353][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 107.493367][ T30] audit: type=1400 audit(1742583529.183:341): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.621332][ T5900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.777593][ T6645] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 107.866455][ T5900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.951856][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 108.041238][ T5900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.134013][ T6625] chnl_net:caif_netlink_parms(): no params data found [ 108.147407][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.177588][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.210430][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.231809][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.233960][ T5915] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.260230][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.273244][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.282226][ T5915] usb 1-1: config 0 descriptor?? [ 108.287667][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.305972][ T6625] bridge_slave_0: entered allmulticast mode [ 108.312820][ T5915] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 108.324587][ T6625] bridge_slave_0: entered promiscuous mode [ 108.364162][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.375807][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.386043][ T6625] bridge_slave_1: entered allmulticast mode [ 108.394862][ T6625] bridge_slave_1: entered promiscuous mode [ 108.401854][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 108.421177][ T30] audit: type=1400 audit(1742583530.103:342): avc: denied { search } for pid=5486 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.501045][ T46] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 108.516358][ T5900] bridge_slave_1: left allmulticast mode [ 108.522639][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.530516][ T5900] bridge_slave_1: left promiscuous mode [ 108.536966][ T30] audit: type=1400 audit(1742583530.103:343): avc: denied { read } for pid=5486 comm="dhcpcd" name="n101" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.574847][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.595913][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.618203][ T30] audit: type=1400 audit(1742583530.103:344): avc: denied { open } for pid=5486 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.656359][ T46] usb 2-1: Product: syz [ 108.662073][ T5900] bridge_slave_0: left allmulticast mode [ 108.670956][ T30] audit: type=1400 audit(1742583530.103:345): avc: denied { getattr } for pid=5486 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.691824][ T46] usb 2-1: Manufacturer: syz [ 108.699404][ T46] usb 2-1: SerialNumber: syz [ 108.700979][ T30] audit: type=1400 audit(1742583530.343:346): avc: denied { read } for pid=6663 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.727283][ T5900] bridge_slave_0: left promiscuous mode [ 108.737219][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.763655][ T46] usb 2-1: config 0 descriptor?? [ 108.789822][ T30] audit: type=1400 audit(1742583530.343:347): avc: denied { open } for pid=6663 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.801809][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 108.821109][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 108.821702][ T30] audit: type=1400 audit(1742583530.343:348): avc: denied { getattr } for pid=6663 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.842764][ T46] usb 2-1: Detected FT-X [ 108.879140][ T26] usb 3-1: config 3 has an invalid interface number: 75 but max is 2 [ 108.890575][ T26] usb 3-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 108.911789][ T26] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 108.920718][ T26] usb 3-1: config 3 has no interface number 0 [ 108.980801][ T26] usb 3-1: config 3 interface 75 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 109.023634][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 109.037932][ T26] usb 3-1: config 3 interface 75 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 109.061108][ T26] usb 3-1: config 3 interface 75 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 109.090803][ T30] audit: type=1400 audit(1742583530.773:349): avc: denied { write } for pid=6662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.130544][ T5819] Bluetooth: hci2: command tx timeout [ 109.136806][ T26] usb 3-1: config 3 interface 75 has no altsetting 0 [ 109.171102][ T30] audit: type=1400 audit(1742583530.773:350): avc: denied { add_name } for pid=6662 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.229948][ T26] usb 3-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice=69.26 [ 109.278363][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.288525][ T26] usb 3-1: Product: ᓉ [ 109.298763][ T26] usb 3-1: Manufacturer:  [ 109.321823][ T26] usb 3-1: SerialNumber: syz [ 109.462671][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.097767][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.142157][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.182100][ T5900] bond0 (unregistering): Released all slaves [ 110.217390][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.240321][ T970] usb 2-1: USB disconnect, device number 7 [ 110.309113][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.319420][ T970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.332904][ T970] ftdi_sio 2-1:0.0: device disconnected [ 110.508643][ T6625] team0: Port device team_slave_0 added [ 110.521095][ T26] usb 3-1: USB disconnect, device number 9 [ 110.528255][ T6625] team0: Port device team_slave_1 added [ 110.627814][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.645207][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.683618][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.714057][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.728279][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.795442][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.956790][ T6685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.964658][ T6625] hsr_slave_0: entered promiscuous mode [ 110.985244][ T6625] hsr_slave_1: entered promiscuous mode [ 111.039305][ T5915] usb 1-1: USB disconnect, device number 12 [ 111.054255][ T6625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.106740][ T6625] Cannot create hsr debugfs directory [ 111.183107][ T5819] Bluetooth: hci2: command tx timeout [ 111.372417][ T5900] hsr_slave_0: left promiscuous mode [ 111.394824][ T5900] hsr_slave_1: left promiscuous mode [ 111.426950][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.452135][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.497910][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.532220][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.589632][ T5900] veth1_macvtap: left promiscuous mode [ 112.599140][ T5900] veth0_macvtap: left promiscuous mode [ 112.607654][ T5900] veth1_vlan: left promiscuous mode [ 112.613205][ T5900] veth0_vlan: left promiscuous mode [ 112.812387][ T6706] rdma_rxe: rxe_newlink: failed to add syz_tun [ 113.061921][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 113.061940][ T30] audit: type=1400 audit(1742583534.743:357): avc: denied { read } for pid=6714 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.261942][ T5819] Bluetooth: hci2: command tx timeout [ 115.313225][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.343348][ T5819] Bluetooth: hci2: command tx timeout [ 115.423144][ T30] audit: type=1400 audit(1742583537.113:358): avc: denied { listen } for pid=6729 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.536639][ T5915] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 115.571868][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.602499][ T5915] usb 3-1: config 0 has no interface number 0 [ 115.608757][ T5915] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 115.619224][ T5915] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.634439][ T5915] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 115.643546][ T30] audit: type=1400 audit(1742583537.133:359): avc: denied { create } for pid=6729 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 115.812022][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.820182][ T5915] usb 3-1: Product: syz [ 115.824757][ T5915] usb 3-1: Manufacturer: syz [ 115.907653][ T5915] usb 3-1: SerialNumber: syz [ 115.914355][ T5915] usb 3-1: config 0 descriptor?? [ 115.931695][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 115.965937][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 116.466811][ T5862] usb 3-1: USB disconnect, device number 10 [ 116.536834][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.701986][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 116.710138][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 116.751605][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 52, changing to 7 [ 116.783861][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 9272, setting to 1024 [ 116.807236][ T5915] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 116.838847][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.861818][ T5915] usb 5-1: Product: syz [ 116.867500][ T5915] usb 5-1: Manufacturer: syz [ 116.877714][ T5915] usb 5-1: SerialNumber: syz [ 116.901655][ T5915] usb 5-1: config 0 descriptor?? [ 116.920476][ T5915] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0231 [ 116.978148][ T26] IPVS: starting estimator thread 0... [ 117.152012][ T6767] IPVS: using max 33 ests per chain, 79200 per kthread [ 117.521422][ T6625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.530024][ T26] usb 5-1: USB disconnect, device number 5 [ 117.564958][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 117.584565][ T6625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.629778][ T6625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.675901][ T6625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.714448][ T5900] IPVS: stop unused estimator thread 0... [ 117.771917][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.777237][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.869242][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.913558][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.920689][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.965717][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.972877][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.989247][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 118.001641][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.019615][ T6625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.029935][ T5915] usb 3-1: config 187 has an invalid descriptor of length 244, skipping remainder of the config [ 118.052008][ T6625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.060931][ T5915] usb 3-1: config 187 has 0 interfaces, different from the descriptor's value: 1 [ 118.112713][ T5915] usb 3-1: language id specifier not provided by device, defaulting to English [ 118.414194][ T6789] syz1: rxe_newlink: already configured on syz_tun [ 118.426914][ T5915] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=90.a3 [ 118.499496][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.525144][ T5915] usb 3-1: Product: syz [ 118.529606][ T5915] usb 3-1: Manufacturer: syz [ 118.572024][ T5915] usb 3-1: SerialNumber: syz [ 118.693528][ T30] audit: type=1400 audit(1742583540.383:360): avc: denied { map } for pid=6794 comm="syz.1.233" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 118.791655][ T6625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.821016][ T30] audit: type=1400 audit(1742583540.493:361): avc: denied { read write } for pid=6803 comm="syz.0.235" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.874016][ T6808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.931235][ T30] audit: type=1400 audit(1742583540.493:362): avc: denied { open } for pid=6803 comm="syz.0.235" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 119.177309][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 119.272581][ T5862] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.441940][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 119.464618][ T5862] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.491987][ T5862] usb 1-1: config 1 interface 0 has no altsetting 0 [ 119.506900][ T5862] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 119.521189][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.530118][ T5862] usb 1-1: Product: syz [ 119.654467][ T5862] usb 1-1: Manufacturer: syz [ 119.674987][ T5862] usb 1-1: SerialNumber: syz [ 119.805636][ T6838] overlay: Unknown parameter 'uid<00000000000000000000' [ 119.821395][ T6625] veth0_vlan: entered promiscuous mode [ 119.917154][ T5862] usbhid 1-1:1.0: can't add hid device: -71 [ 119.931645][ T5862] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 119.959131][ T5862] usb 1-1: USB disconnect, device number 13 [ 120.007376][ T6625] veth1_vlan: entered promiscuous mode [ 120.101540][ T6625] veth0_macvtap: entered promiscuous mode [ 120.132659][ T6625] veth1_macvtap: entered promiscuous mode [ 120.201372][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.252800][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.275881][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.304516][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.316034][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.326863][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.357229][ T5915] usb 3-1: USB disconnect, device number 11 [ 120.366825][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.419938][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.431558][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.445195][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.456844][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.474168][ T6625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.488214][ T6625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.528137][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.569664][ T6625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.590639][ T6625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.707079][ T6864] syz1: rxe_newlink: already configured on syz_tun [ 120.970483][ T6625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.994049][ T6625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.290854][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.305485][ T30] audit: type=1400 audit(1742583542.993:363): avc: denied { setrlimit } for pid=6872 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 121.310113][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.325365][ T5902] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 121.364954][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.373389][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.389561][ T30] audit: type=1400 audit(1742583543.073:364): avc: denied { mounton } for pid=6625 comm="syz-executor" path="/root/syzkaller.t13hga/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 121.423289][ T30] audit: type=1400 audit(1742583543.113:365): avc: denied { mount } for pid=6625 comm="syz-executor" name="/" dev="gadgetfs" ino=7053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.482911][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.516068][ T5902] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 121.524484][ T5902] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 121.547874][ T5902] usb 3-1: config 4 has no interface number 0 [ 121.567493][ T5902] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.583282][ T5902] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 121.592720][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.601824][ T5902] usb 3-1: Product: syz [ 121.606354][ T5902] usb 3-1: Manufacturer: syz [ 121.611595][ T5902] usb 3-1: SerialNumber: syz [ 121.641865][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 121.703198][ T6879] netlink: 'syz.5.194': attribute type 2 has an invalid length. [ 122.035721][ T5902] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 122.074848][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 122.101015][ T5902] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 122.157417][ T5902] usb 3-1: media controller created [ 122.197220][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.324069][ T5902] DVB: Unable to find symbol dib7000p_attach() [ 122.340704][ T5902] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 122.491918][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found [ 122.522629][ T5902] Registered IR keymap rc-empty [ 122.550543][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 122.559804][ T5902] dvb-usb: could not initialize remote control. [ 122.575952][ T5902] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 122.809143][ T46] usb 3-1: USB disconnect, device number 12 [ 122.837059][ T46] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 123.091932][ T5902] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 123.342151][ T5902] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 123.362889][ T5902] usb 6-1: config 0 has no interface number 0 [ 123.397484][ T5902] usb 6-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=78.84 [ 123.431367][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.447325][ T5902] usb 6-1: Product: syz [ 123.452485][ T5902] usb 6-1: Manufacturer: syz [ 123.467083][ T5902] usb 6-1: SerialNumber: syz [ 123.484729][ T5902] usb 6-1: config 0 descriptor?? [ 123.574382][ T30] audit: type=1400 audit(1742583545.263:366): avc: denied { create } for pid=6923 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.698017][ T30] audit: type=1400 audit(1742583545.283:367): avc: denied { bind } for pid=6923 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.720995][ T30] audit: type=1400 audit(1742583545.283:368): avc: denied { name_bind } for pid=6923 comm="syz.0.250" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 123.725543][ T5862] usb 6-1: USB disconnect, device number 2 [ 123.761413][ T30] audit: type=1400 audit(1742583545.283:369): avc: denied { node_bind } for pid=6923 comm="syz.0.250" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 124.581329][ T30] audit: type=1326 audit(1742583546.263:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3b78d169 code=0x0 [ 124.655834][ T6946] FAULT_INJECTION: forcing a failure. [ 124.655834][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.684768][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.5.254 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 124.684792][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.684801][ T6946] Call Trace: [ 124.684805][ T6946] [ 124.684812][ T6946] dump_stack_lvl+0x16c/0x1f0 [ 124.684831][ T6946] should_fail_ex+0x50a/0x650 [ 124.684857][ T6946] _copy_to_user+0x32/0xd0 [ 124.684876][ T6946] simple_read_from_buffer+0xd0/0x160 [ 124.684899][ T6946] proc_fail_nth_read+0x198/0x270 [ 124.684921][ T6946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.684936][ T6946] ? rw_verify_area+0xcf/0x680 [ 124.684950][ T6946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.684964][ T6946] vfs_read+0x1df/0xbf0 [ 124.684979][ T6946] ? __fget_files+0x1fc/0x3a0 [ 124.684993][ T6946] ? __pfx___mutex_lock+0x10/0x10 [ 124.685014][ T6946] ? __pfx_vfs_read+0x10/0x10 [ 124.685042][ T6946] ? __fget_files+0x206/0x3a0 [ 124.685063][ T6946] ksys_read+0x12b/0x250 [ 124.685085][ T6946] ? __pfx_ksys_read+0x10/0x10 [ 124.685116][ T6946] do_syscall_64+0xcd/0x250 [ 124.685139][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.685160][ T6946] RIP: 0033:0x7f1e3b78bb7c [ 124.685173][ T6946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.685187][ T6946] RSP: 002b:00007f1e3c6a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.685201][ T6946] RAX: ffffffffffffffda RBX: 00007f1e3b9a6080 RCX: 00007f1e3b78bb7c [ 124.685210][ T6946] RDX: 000000000000000f RSI: 00007f1e3c6a30a0 RDI: 0000000000000004 [ 124.685216][ T6946] RBP: 00007f1e3c6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 124.685221][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.685227][ T6946] R13: 0000000000000001 R14: 00007f1e3b9a6080 R15: 00007ffc2ccc66e8 [ 124.685238][ T6946] [ 125.100043][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.110358][ T26] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 125.136148][ T26] usb 5-1: can't read configurations, error -71 [ 125.304105][ T30] audit: type=1400 audit(1742583546.993:371): avc: denied { create } for pid=6950 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.349266][ T30] audit: type=1400 audit(1742583546.993:372): avc: denied { shutdown } for pid=6950 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.574904][ T6975] rdma_rxe: rxe_newlink: failed to add syz_tun [ 126.496760][ T6984] macvlan1: entered promiscuous mode [ 126.618211][ T30] audit: type=1400 audit(1742583548.303:373): avc: denied { create } for pid=6983 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 126.668769][ T30] audit: type=1400 audit(1742583548.323:374): avc: denied { getopt } for pid=6983 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.725023][ T30] audit: type=1400 audit(1742583548.323:375): avc: denied { ioctl } for pid=6983 comm="syz.2.259" path="socket:[13225]" dev="sockfs" ino=13225 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.085689][ T7016] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 128.154129][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.167119][ T30] audit: type=1400 audit(1742583549.823:376): avc: denied { setopt } for pid=7012 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.570399][ T30] audit: type=1400 audit(1742583550.233:377): avc: denied { connect } for pid=6990 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.570439][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 129.249511][ T30] audit: type=1400 audit(1742583550.243:378): avc: denied { mounton } for pid=6990 comm="syz.0.262" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 129.418628][ T7017] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 129.561224][ T7028] netlink: 'syz.5.267': attribute type 7 has an invalid length. [ 129.590931][ T5915] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 129.611262][ T30] audit: type=1326 audit(1742583551.273:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a54d8d169 code=0x7ffc0000 [ 129.640966][ T5915] usb 3-1: config 8 has no interface number 0 [ 129.665008][ T5915] usb 3-1: config 8 interface 206 has no altsetting 0 [ 129.668883][ T7028] netlink: 140 bytes leftover after parsing attributes in process `syz.5.267'. [ 129.702876][ T5915] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 129.703370][ T7029] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 129.725671][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.725674][ T30] audit: type=1326 audit(1742583551.273:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a54d8d169 code=0x7ffc0000 [ 129.725712][ T30] audit: type=1400 audit(1742583551.393:381): avc: denied { mounton } for pid=7027 comm="syz.5.267" path="/7/bus" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 129.756900][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.811762][ T5915] usb 3-1: Product: syz [ 129.831818][ T5915] usb 3-1: Manufacturer: syz [ 129.846638][ T5915] usb 3-1: SerialNumber: syz [ 130.096717][ T30] audit: type=1400 audit(1742583551.783:382): avc: denied { write } for pid=7002 comm="syz.2.263" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.096776][ T7003] random: crng reseeded on system resumption [ 130.755113][ T7003] netlink: 'syz.2.263': attribute type 12 has an invalid length. [ 130.835831][ T5915] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 130.897680][ T5915] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 130.917864][ T5915] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 130.940074][ T5915] usb 3-1: USB disconnect, device number 13 [ 130.967933][ T5915] garmin_gps 3-1:8.206: device disconnected [ 130.980463][ T30] audit: type=1400 audit(1742583552.663:383): avc: denied { append } for pid=7042 comm="syz.5.272" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.030964][ T30] audit: type=1400 audit(1742583552.713:384): avc: denied { create } for pid=7042 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.349650][ T30] audit: type=1400 audit(1742583552.713:385): avc: denied { bind } for pid=7042 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.444601][ T30] audit: type=1400 audit(1742583553.133:386): avc: denied { create } for pid=7047 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 131.552723][ T7050] openvswitch: netlink: ct_state flags 64fb04ff unsupported [ 131.572435][ T7051] lo speed is unknown, defaulting to 1000 [ 131.579876][ T7051] lo speed is unknown, defaulting to 1000 [ 131.596676][ T7051] lo speed is unknown, defaulting to 1000 [ 131.648770][ T7051] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.776868][ T7051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.946130][ T7051] lo speed is unknown, defaulting to 1000 [ 131.969615][ T7051] lo speed is unknown, defaulting to 1000 [ 131.988286][ T7051] lo speed is unknown, defaulting to 1000 [ 132.032708][ T7051] lo speed is unknown, defaulting to 1000 [ 132.058249][ T7051] lo speed is unknown, defaulting to 1000 [ 132.086408][ T7054] mmap: syz.5.275 (7054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.323831][ T7062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.277'. [ 132.331057][ T7063] FAULT_INJECTION: forcing a failure. [ 132.331057][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 132.360381][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.2.276 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 132.360407][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.360418][ T7063] Call Trace: [ 132.360423][ T7063] [ 132.360429][ T7063] dump_stack_lvl+0x16c/0x1f0 [ 132.360457][ T7063] should_fail_ex+0x50a/0x650 [ 132.360483][ T7063] ? fs_reclaim_acquire+0xae/0x150 [ 132.360508][ T7063] ? legacy_init_fs_context+0x42/0xe0 [ 132.360530][ T7063] should_failslab+0xc2/0x120 [ 132.360548][ T7063] __kmalloc_cache_noprof+0x68/0x410 [ 132.360575][ T7063] ? lockdep_init_map_type+0x16d/0x7d0 [ 132.360603][ T7063] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 132.360619][ T7063] legacy_init_fs_context+0x42/0xe0 [ 132.360637][ T7063] alloc_fs_context+0x54a/0x9c0 [ 132.360658][ T7063] path_mount+0xb08/0x1f10 [ 132.360677][ T7063] ? kmem_cache_free+0x2e2/0x4d0 [ 132.360693][ T7063] ? __pfx_path_mount+0x10/0x10 [ 132.360714][ T7063] ? putname+0x13c/0x180 [ 132.360735][ T7063] __x64_sys_mount+0x28f/0x310 [ 132.360754][ T7063] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.360779][ T7063] do_syscall_64+0xcd/0x250 [ 132.360803][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.360825][ T7063] RIP: 0033:0x7f8a5078d169 [ 132.360838][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.360851][ T7063] RSP: 002b:00007f8a515d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.360866][ T7063] RAX: ffffffffffffffda RBX: 00007f8a509a5fa0 RCX: 00007f8a5078d169 [ 132.360877][ T7063] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 132.360887][ T7063] RBP: 00007f8a515d0090 R08: 0000200000000400 R09: 0000000000000000 [ 132.360897][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.360907][ T7063] R13: 0000000000000000 R14: 00007f8a509a5fa0 R15: 00007ffc40fbf268 [ 132.360928][ T7063] [ 132.553530][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.655145][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661598][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.678068][ T30] audit: type=1400 audit(1742583554.363:387): avc: denied { ioctl } for pid=7065 comm="syz.5.279" path="socket:[14464]" dev="sockfs" ino=14464 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.770457][ T7075] gfs2: gfs2 mount does not exist [ 133.507390][ T7064] rdma_rxe: rxe_newlink: failed to add syz_tun [ 134.549812][ T5915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.283568][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 135.292976][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.329013][ T5915] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 135.366186][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.015711][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 136.015729][ T30] audit: type=1400 audit(1742583557.703:391): avc: denied { read write } for pid=7117 comm="syz.1.287" name="usbmon6" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.058932][ T7118] FAULT_INJECTION: forcing a failure. [ 136.058932][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 136.071808][ T5915] usb 6-1: Product: syz [ 136.071829][ T5915] usb 6-1: Manufacturer: syz [ 136.071843][ T5915] usb 6-1: SerialNumber: syz [ 136.086160][ T5915] usb 6-1: config 0 descriptor?? [ 136.126564][ T7116] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.171046][ T7116] vimc vimc.0: subdev_call error Scaler [ 136.182011][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.1.287 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 136.182036][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.182049][ T7118] Call Trace: [ 136.182054][ T7118] [ 136.182061][ T7118] dump_stack_lvl+0x16c/0x1f0 [ 136.182089][ T7118] should_fail_ex+0x50a/0x650 [ 136.182112][ T7118] ? fs_reclaim_acquire+0xae/0x150 [ 136.182137][ T7118] ? copy_mount_options+0x55/0x190 [ 136.182156][ T7118] should_failslab+0xc2/0x120 [ 136.182174][ T7118] __kmalloc_cache_noprof+0x68/0x410 [ 136.182200][ T7118] ? _copy_from_user+0x59/0xd0 [ 136.182219][ T7118] copy_mount_options+0x55/0x190 [ 136.182240][ T7118] __x64_sys_mount+0x1ad/0x310 [ 136.182259][ T7118] ? __pfx___x64_sys_mount+0x10/0x10 [ 136.182283][ T7118] do_syscall_64+0xcd/0x250 [ 136.182306][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.182328][ T7118] RIP: 0033:0x7f5fb878d169 [ 136.182340][ T7118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.182355][ T7118] RSP: 002b:00007f5fb9509038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.182370][ T7118] RAX: ffffffffffffffda RBX: 00007f5fb89a5fa0 RCX: 00007f5fb878d169 [ 136.182379][ T7118] RDX: 0000200000000240 RSI: 00002000000001c0 RDI: 0000000000000000 [ 136.182388][ T7118] RBP: 00007f5fb9509090 R08: 0000200000000300 R09: 0000000000000000 [ 136.182397][ T7118] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 136.182405][ T7118] R13: 0000000000000000 R14: 00007f5fb89a5fa0 R15: 00007ffe87654c48 [ 136.182425][ T7118] [ 136.182602][ T30] audit: type=1400 audit(1742583557.703:392): avc: denied { open } for pid=7117 comm="syz.1.287" path="/dev/usbmon6" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.190195][ T7116] ------------[ cut here ]------------ [ 136.377154][ T7116] WARNING: CPU: 1 PID: 7116 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 [ 136.377202][ T7116] Modules linked in: [ 136.377215][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.4.285 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 136.377235][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.377247][ T7116] RIP: 0010:call_s_stream+0x2df/0x350 [ 136.377273][ T7116] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 e0 b2 50 8c e8 4c dc 37 fe e9 54 fe ff ff e8 42 48 05 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 51 60 68 fa e9 48 fd ff ff e8 [ 136.377291][ T7116] RSP: 0018:ffffc90003577a60 EFLAGS: 00010287 [ 136.377308][ T7116] RAX: 000000000000c54b RBX: ffff88802b184020 RCX: ffffc9000e4ab000 [ 136.377321][ T7116] RDX: 0000000000080000 RSI: ffffffff87b4aa4e RDI: 0000000000000000 [ 136.377332][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.377344][ T7116] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 136.377356][ T7116] R13: 0000000000000000 R14: ffff88802b184198 R15: ffffffff880761d0 [ 136.377368][ T7116] FS: 00007f2a55b836c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 136.377387][ T7116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.377400][ T7116] CR2: 0000559e9bf54300 CR3: 00000000285f4000 CR4: 00000000003526f0 [ 136.377412][ T7116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.377424][ T7116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.377436][ T7116] Call Trace: [ 136.377443][ T7116] [ 136.377452][ T7116] ? __warn+0xea/0x3c0 [ 136.377474][ T7116] ? call_s_stream+0x2df/0x350 [ 136.377502][ T7116] ? report_bug+0x3c0/0x580 [ 136.377535][ T7116] ? handle_bug+0x54/0xa0 [ 136.377562][ T7116] ? exc_invalid_op+0x17/0x50 [ 136.377590][ T7116] ? asm_exc_invalid_op+0x1a/0x20 [ 136.377613][ T7116] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 136.377650][ T7116] ? call_s_stream+0x2de/0x350 [ 136.377677][ T7116] ? call_s_stream+0x2df/0x350 [ 136.377705][ T7116] ? __pfx_call_s_stream+0x10/0x10 [ 136.377734][ T7116] vimc_streamer_pipeline_terminate+0x218/0x320 [ 136.377762][ T7116] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 136.377791][ T7116] vimc_streamer_s_stream+0x650/0x9a0 [ 136.377825][ T7116] vimc_capture_start_streaming+0xa1/0x130 [ 136.377853][ T7116] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 136.377882][ T7116] vb2_start_streaming+0x15f/0x5a0 [ 136.377907][ T7116] ? __bitmap_weight+0xdc/0x110 [ 136.377936][ T7116] vb2_core_streamon+0x2a7/0x450 [ 136.377965][ T7116] vb2_ioctl_streamon+0xf4/0x170 [ 136.377991][ T7116] __video_do_ioctl+0xaf0/0xf00 [ 136.378016][ T7116] ? __pfx___video_do_ioctl+0x10/0x10 [ 136.378034][ T7116] ? __might_fault+0xe3/0x190 [ 136.378066][ T7116] video_usercopy+0x4d2/0x1620 [ 136.378090][ T7116] ? __pfx___video_do_ioctl+0x10/0x10 [ 136.378111][ T7116] ? __pfx_video_usercopy+0x10/0x10 [ 136.378150][ T7116] v4l2_ioctl+0x1ba/0x250 [ 136.378169][ T7116] ? __pfx_v4l2_ioctl+0x10/0x10 [ 136.378190][ T7116] __x64_sys_ioctl+0x190/0x200 [ 136.378218][ T7116] do_syscall_64+0xcd/0x250 [ 136.378246][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.378270][ T7116] RIP: 0033:0x7f2a54d8d169 [ 136.378286][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.378302][ T7116] RSP: 002b:00007f2a55b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.378322][ T7116] RAX: ffffffffffffffda RBX: 00007f2a54fa6080 RCX: 00007f2a54d8d169 [ 136.378334][ T7116] RDX: 00002000000004c0 RSI: 0000000040045612 RDI: 0000000000000003 [ 136.378347][ T7116] RBP: 00007f2a54e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.378359][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.378371][ T7116] R13: 0000000000000001 R14: 00007f2a54fa6080 R15: 00007fff881e31c8 [ 136.378396][ T7116] [ 136.378406][ T7116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.378415][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.4.285 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 136.378434][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.378444][ T7116] Call Trace: [ 136.378450][ T7116] [ 136.378457][ T7116] dump_stack_lvl+0x3d/0x1f0 [ 136.378482][ T7116] panic+0x71d/0x800 [ 136.378501][ T7116] ? __pfx_panic+0x10/0x10 [ 136.378526][ T7116] ? show_trace_log_lvl+0x29d/0x3d0 [ 136.378562][ T7116] ? call_s_stream+0x2df/0x350 [ 136.378586][ T7116] check_panic_on_warn+0xab/0xb0 [ 136.378607][ T7116] __warn+0xf6/0x3c0 [ 136.378627][ T7116] ? call_s_stream+0x2df/0x350 [ 136.378655][ T7116] report_bug+0x3c0/0x580 [ 136.378680][ T7116] handle_bug+0x54/0xa0 [ 136.378704][ T7116] exc_invalid_op+0x17/0x50 [ 136.378729][ T7116] asm_exc_invalid_op+0x1a/0x20 [ 136.378753][ T7116] RIP: 0010:call_s_stream+0x2df/0x350 [ 136.378779][ T7116] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 e0 b2 50 8c e8 4c dc 37 fe e9 54 fe ff ff e8 42 48 05 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 51 60 68 fa e9 48 fd ff ff e8 [ 136.378796][ T7116] RSP: 0018:ffffc90003577a60 EFLAGS: 00010287 [ 136.378809][ T7116] RAX: 000000000000c54b RBX: ffff88802b184020 RCX: ffffc9000e4ab000 [ 136.378821][ T7116] RDX: 0000000000080000 RSI: ffffffff87b4aa4e RDI: 0000000000000000 [ 136.378832][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.378842][ T7116] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 136.378852][ T7116] R13: 0000000000000000 R14: ffff88802b184198 R15: ffffffff880761d0 [ 136.378864][ T7116] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 136.378899][ T7116] ? call_s_stream+0x2de/0x350 [ 136.378928][ T7116] ? __pfx_call_s_stream+0x10/0x10 [ 136.378955][ T7116] vimc_streamer_pipeline_terminate+0x218/0x320 [ 136.378982][ T7116] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 136.379010][ T7116] vimc_streamer_s_stream+0x650/0x9a0 [ 136.379042][ T7116] vimc_capture_start_streaming+0xa1/0x130 [ 136.379069][ T7116] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 136.379097][ T7116] vb2_start_streaming+0x15f/0x5a0 [ 136.379120][ T7116] ? __bitmap_weight+0xdc/0x110 [ 136.379145][ T7116] vb2_core_streamon+0x2a7/0x450 [ 136.379173][ T7116] vb2_ioctl_streamon+0xf4/0x170 [ 136.379199][ T7116] __video_do_ioctl+0xaf0/0xf00 [ 136.379223][ T7116] ? __pfx___video_do_ioctl+0x10/0x10 [ 136.379241][ T7116] ? __might_fault+0xe3/0x190 [ 136.379269][ T7116] video_usercopy+0x4d2/0x1620 [ 136.379291][ T7116] ? __pfx___video_do_ioctl+0x10/0x10 [ 136.379313][ T7116] ? __pfx_video_usercopy+0x10/0x10 [ 136.379350][ T7116] v4l2_ioctl+0x1ba/0x250 [ 136.379368][ T7116] ? __pfx_v4l2_ioctl+0x10/0x10 [ 136.379388][ T7116] __x64_sys_ioctl+0x190/0x200 [ 136.379412][ T7116] do_syscall_64+0xcd/0x250 [ 136.379439][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.379463][ T7116] RIP: 0033:0x7f2a54d8d169 [ 136.379475][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.379492][ T7116] RSP: 002b:00007f2a55b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.379509][ T7116] RAX: ffffffffffffffda RBX: 00007f2a54fa6080 RCX: 00007f2a54d8d169 [ 136.379526][ T7116] RDX: 00002000000004c0 RSI: 0000000040045612 RDI: 0000000000000003 [ 136.379536][ T7116] RBP: 00007f2a54e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.379546][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.379557][ T7116] R13: 0000000000000001 R14: 00007f2a54fa6080 R15: 00007fff881e31c8 [ 136.379580][ T7116] [ 136.379785][ T7116] Kernel Offset: disabled