last executing test programs: 31.557485125s ago: executing program 4 (id=3447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0xa1, &(0x7f0000000580)=""/161, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x20303159}}) getsockopt$sock_timeval(r3, 0x1, 0x811e0a9b3bcbcc4b, &(0x7f0000000180), 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0xfffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000854bf92caf00000018010000646c012500000000200000007b1af8ff00000000bfa100"/54], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0xfe09) 29.20015267s ago: executing program 4 (id=3454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00w'], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x9, 0x10}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, [@map_fd={0x18, 0x6, 0x1, 0x0, r2}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="d6ec951e8fc5f2c28687f0be8abb9e8629d49ef4c2a1e3a6082a99d4c7e390bdf2613d964636bc81a2f5d9b329372c71ad8f2aa5a65293af7f17b144c152c1512505a92b3f45c36710c6ce824fbe5c073271678010b8548cf3b4e114a6600e010c7955a581626e70f8472c", 0x6b}, {&(0x7f0000000140)="f172e598070e357848184bd15ad0af2189dd4824addb3682bfcdc6d83639f896c010950d6dc77351ec4344094fe138c95afafe65a2e366f46048913bb612ca934dd501e01119799a2ca2acf7d56274704139adf6d653d2e686d918dbff1544bd2cf5a9fc74ce7e2fdd0a9748626407aede860d369611b16458ce1f9d488c3720a58753507d60d4455d5934281d796718", 0x90}, {&(0x7f0000000280)="00b0ec5210de335173133681a4e944ac0d214d689c9b89625ae4f25e42ae88cbd1722f1e100fc7bd815cef9e2355d2c85acbd270a187a9d23652552cec993b748c1a9fb741d09c063bd2907a67f94aa69e2644379468218d7b587b26810f86930c0b860dafac7d0989d5fe1b8fd99803ceaeac65fd75c1789c289e3ca4fb144855ad8798e3c5e4a4485acbc36d4c58288e26abdf4229f2745828c68a3464a3f2ec78ebf3079e5cacbc5d34676d52e09bb410ca4dbf747fbbf8029d4d04901dbc1f1bc480aeb61d86365dd7cd3c9d8b47c258dfef7768c17a67352b22e70111db45a5e0280b771fc57b3b1f46d940", 0xee}, {&(0x7f0000000500)="da8be727eddd450f399bcbf0624304b3bcfc2b97bfe72a4ad84042541bc8eb91a111bcf79c01297aaa8d58afcf568f8a8e89ca622af993d3791f43cd263fb5394b3fa44c049acf605400047f5ee95a2f6460f0e1cda837a3303770ac59aebe777c6ce6fa6780a8b9021c5f57d2d0363bbcb50a2a56eea97e39e336c408385b3200ce27f156b5a8a35d9de1ac4dcbfa4164f5e2227f18b6515051d56915a8a472fb54da2b9344fc558c1c1d85be725dd2", 0xb0}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="ba6bb61547b0f26b4a91ff12063b493d905cc504011f9ff83fd91cb49e92d600d11f87e791362a2c62c53f6a642c1e4b38addd28d2a98407a572d84db4614088761eec19cf53d9be226d3467cfb7939f4da4046b12131a67a857db60723964c0c153a1cfb0ca845552d779c38b510104641e930f464344829e61fdeccd94733441401e04c41f28dd38ed27738ed2f31275381a32112f0bacae483b05d3dcd009e2f3219705b9c6a0c8bd38382f7836f7bc8d20fbbef7431c568f4a6271cf9058cde5020fceaf0f25c937b23a7c5d8b457b50922d2f49a7f9ca", 0xd9}], 0x6, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc5}}], 0x18}, 0x0) 28.497817373s ago: executing program 4 (id=3457): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000015000100fdffffff00000000021800009bf6da8830e7b647ab53b67b85fef45d34e89f4e1d9fc21917171f16cd9b4d0bda915c8f93142651837b9d37bfacf0bbc99b56f06c96771f52c1b19356311e", @ANYRES32=r2, @ANYBLOB="08000100ffffffff"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="3c9416a1579f09db96d42a9646cf93a993a2a99cb5a1bcee18027b1067050b3c6e6c8b5edd076f1a53839829f1c1c257607b7eeb74fa70a04393160939f34b869e59ce0ddc0ca3c3e905437b5c7a10296e468010b757759fd435d85f91bf1e506d09760dd3880d4cf4f2", @ANYRES64=0x0], 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="02000000020000000000000000e401ff6c7103bbf35c89ebd17483e4fb0f7fc0618c360234660289061e36b59c808a2f87751af221738cb2554cf0e348e239daada80e43672f39069ec9a5ae1572017191c82fcac7e8394939f7a1355d88c9191a80ae107698ea8ea33751c2b80d17440161cd1d8527a9a06b080a04eebf60ed009aa1e6b401bf13d2e84953a145d09dd20c38bc0ddaa9b38b6ebe469bbf3ed9f76923648e2c1a21b9d437f6cb2357c449551214edba17eabf890ee9bc54dd9d30c107fec3fb6655215290d9ac88cf9a6255bed0380cad36265941e8d44345972a1d3c470834bdab78e1a262639f1b422b328e16f09a9cd793d820f6770d98bdccd26cac2f8eaae6e6b83b9d6bee52e21cfb8005401726a02ac27fb6dddd0fe8eca9a29072d844b0f1f8d6b211bceec542d1d1f68edb838a13c526b60b2d61685f00533978a4e9007fe036a7f893a85355c9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socket$inet6(0xa, 0x2, 0x4000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000204f0405b6000000000001090224000100080000090400000103000200092100000001220b00090581030004000000"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220d00000093098727348a48e99b0900000000000000c50a7390e5048253229713a0c37d31db572aa5", @ANYRESHEX, @ANYRESDEC=r4], 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 26.415996837s ago: executing program 4 (id=3468): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 24.326873923s ago: executing program 4 (id=3475): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f0000000340)="130092efc5343874efef2767", 0xc}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) (fail_nth: 2) 6.122526858s ago: executing program 3 (id=3518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cgroup.freeze\x00', 0x275a, 0x0) sendfile(r2, r4, 0x0, 0xffffffff002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.970209113s ago: executing program 2 (id=3521): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESDEC=0x0], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0418010040000200280012800a000100767863616e00000018000280140001000000000047e20c3775"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 5.877472692s ago: executing program 1 (id=3522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82840, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x69de07874f7f0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100052406"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xa, 0xcae5, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x37, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r2, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 4.99356922s ago: executing program 3 (id=3523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000280)=0x7863) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24004050) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xeae}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2b7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0xfea, &(0x7f0000001e00)=""/4074, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x1000000, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r7, &(0x7f0000000100)=""/107, 0x6b) write$nci(r7, &(0x7f0000000100)=ANY=[], 0x4) write$nci(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="610507050200821000000000000000208d06ba97ac9b3b75bde66a6f00efa51cad12c11c4c5f2482e31a311f9fbaa375"], 0x30) chdir(0x0) 4.433724007s ago: executing program 2 (id=3527): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000580)=""/144) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x1ae) setitimer(0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0xea60}}, 0x0) io_uring_setup(0x3063, &(0x7f00000003c0)={0x0, 0x639b, 0x4000, 0x1, 0xf, 0x0, r0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x20000000ec071, 0xffffffffffffffff, 0x0) lseek(r3, 0x100, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.063361674s ago: executing program 3 (id=3528): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x7, @loopback, 0xa, 0xfffffffb}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x4}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x3, 0x7, {{0x31, 0x4, 0x1, 0x4, 0xc4, 0x65, 0x0, 0xf1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0xf, 0x2b, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xe0, [@multicast2]}, @cipso={0x86, 0x5a, 0x3, [{0x5, 0x9, "af7116884e7548"}, {0x0, 0x11, "a4bd34d3eab8aca3d90ecdd03596c1"}, {0x6, 0x12, "ee5e1d7c448e0c9f7e5518816dd3b774"}, {0x6, 0x12, "232ea6bb8801e42849908f8a1aacf408"}, {0x1, 0x5, "45ac8b"}, {0x5, 0x4, "ccd3"}, {0x6, 0x4, "b457"}, {0x7, 0x4, '9-'}, {0x7, 0x5, "ac0a3e"}]}, @lsrr={0x83, 0xf, 0xfc, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@private=0xa010101, 0x3}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x2, [{@multicast2, 0xff}, {@private=0xa010100, 0x9}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0xa32a1a8, 0x16a000, 0x3, 0x20000, 0x1, 0x84c, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) mkdir(0x0, 0x184) open(0x0, 0x573382, 0x113) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3.987928865s ago: executing program 1 (id=3529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c496dbaa3e8b16a7b01ba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x6, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0xc9, 0x0, 0x4, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1002024, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) 3.906224342s ago: executing program 3 (id=3530): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b7050000000000007910a800001a00007d0a0000000000009500000000000000685b5ab356abfe7c51a8f431ccae04df6950d6ed70529a6bd0dbd9934d27eecd1b968d02cbf58c21b6953acbd50500000044f891f0503514b1babb39ca7a8e5ec80b14f4b21dd64f862b3dda22a2d65a81048f150d5953fd449021b0"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.834969542s ago: executing program 1 (id=3532): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.778834249s ago: executing program 0 (id=3533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r2, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r7, r1, 0x0, 0x20000023893) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000400009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.993678927s ago: executing program 1 (id=3534): socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7c, 0x13, &(0x7f0000000080)="d63093573512ef0792923a2eba061703cfa6adf92a7b437307758fda3e2ca35fefab4ce47bfde99597c1b693f54ab2f5ec0b7fd2bc7122eb1d8b157ffdb8bc857ece6f89808c824cf911307975e64982da4b8c514470a22eb2f570afdb452575b5f75b597ab5060b717ee3ea2c6cbd178612686bec30da70ad407fa2", &(0x7f0000000100)=""/19, 0xfffffff7, 0x0, 0x12, 0xa9, &(0x7f0000000140)="6aa83d1eaab310f264eb57fc9ba0dd465c1d", &(0x7f0000000180)="6c221043497defebb392f542537316176626f7c128240a32220c158bbf1c4ad89888ad1123a2d70b58c6612bbc96f167a0130c1cb78d08e14892d9bd3601b7dd60f234959eaf7c45f3f05efcf7cf947ece352bb4892f7e1bf64783126bbededf879c697f893709a6a67ad708e75cebd9a7398c1c999042fd7c555fa2cc17bf869893597e1cb7fcb505309e2b74814254f07718afa21de53c8528b56c397070b3878d811e9f52fd9903", 0x4, 0x0, 0x5}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 2.9097242s ago: executing program 3 (id=3535): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0fc2df57d0d4b996f25e7eb1576921521a8db77f046db83bb22041872a8da071fcaf00c68433bb33"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="04"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 2.85614174s ago: executing program 3 (id=3536): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() (fail_nth: 2) 2.808300772s ago: executing program 0 (id=3537): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000001000005008a0003"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000) 2.725401108s ago: executing program 2 (id=3538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="42000000000000000000000000000000000000f30004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000b0e61000000ab7168fe04d1a5847c326f00000000800018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x4bf7, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x20008085) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000080)={'macvlan1\x00', 0x2000}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) ioctl$TCXONC(r11, 0x540a, 0x2) 2.661757676s ago: executing program 0 (id=3539): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) r1 = syz_io_uring_complete(0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'veth1_macvtap\x00'}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="4447247810f17a969d76624f5381275f7df46f8cf17f0e485a95c26391afec453ff0737258397100dc6eb424daf2bb61e2df5dbbb8fc880e9da165fa34f10ddc7a2bb62f1358ca193f18318093f375bfdafc970800fe9f3e", 0x58}, {&(0x7f0000000180)="da862a1893d8ecd221e3ffd291c33905d746c4984a808413aad7c33a568af3f4ca67f4a566a4b921a2656726c8ca03e87f5147fbcbc9b80644a73af92b038174b83bf3eeabd20fae86bf8d0c131b86a2dfb92b08ab277c28322eb4bf3b24b4dbf73fe91c4da3db00da0ff925afbb2240be42a46ac2937c60fdaa7596c060a4cbab", 0x81}, {&(0x7f0000000240)="616f55c490fe4256dec209388f3e915f32d3521a7a702d875523181c31e7b82438cc84e273518d54e71fc5a9fe5a367b9418a01e1e7b8e431758f43f958520731b8d36c7ff8c405d5a51dc3418e648d3c46906c2e75e8abe55a03990229f44d21c1d9e1de7df5c984c1b5e059141f34841544209f3e17eabaad4273560dbcaa2e1768acad08e621ae65083b9ce5c26e389f0320eca1b77d103e6897b308c8d5959a077be693e66231422b53861e707a15fc8e3f2170530fb7b5633c7a163769f7ed809fea511ff66", 0xc8}], 0x3, 0x473, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2000, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x104000000008) listen(0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(0x0) r4 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x31) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000027c0)={0x24cc, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x24b9, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64=0x8}, @nested={0x23cc, 0x95, 0x0, 0x1, [@nested={0xe9, 0x47, 0x0, 0x1, [@generic="6e053c56927947827f8ce1aca5a87314323dde5596af268cb0b9dba77e6e1a205df958817062b7bb4cf434907b758fbd588f81207e419dba4a59095a8aef28203da7b46bc6d1d42664a5def1e32611251130beda3c7308b07b5754470ae6d751ad59ebbdc342a15e86fafe87a35cb6f1285b10ce6dcada6254048c5ecfbc7944603cde496539c0a853b2a5f7454b8f29027cb5684c3cfaeca02a3708769733bb89d8420b7d9dff410b6467bfaf13ce7b1fc99b02304724d757a3d5b5bd28dfd269ff14987638d56b30b6dde7a3cf83e6a9418295fbb59f79e027f9fa4736d14eb82849ec8f"]}, @nested={0x11a5, 0xf7, 0x0, 0x1, [@typed={0x29, 0x103, 0x0, 0x0, @binary="9a32c26d9c88df9a8e0cc7849c4b17f814d16c6d27cf91f4cda6cd29e3a18818505eefc0cf"}, @generic="f5b6a85739b8afd61c3aa6d201645bc490b1fb5b89cd6060706410cd8ff470ec2c8663cef754dceed449adc3ddfd581c2ac4372a0fcb7eeb47a525c4a890bc7e75b1df5c571449b6f2816ab140413fbd6e631fae4a3bac0621c10cf8f009df7242b04ff261d6b1781f", @nested={0x4, 0x77}, @generic="56a44d2e228d8a6a0bec10eb9a5670db526c187acd933b945ce3562d4cee625b2c25107e6426c114ae24c82b7bb14e28efc994dfdb45338acd001a5b9aee7256bebe0d6a28ccd12234eb00f2654297c80ae898ed5d813c75ecd4d7746c701f0b11a1e197352132797b1bab24b28e254e0b2a96b090fe4621688d260ea3fa11428d589b67c0cfe5dfe1c097c6241f04a2fc09a7d504f75e5709c2b37fdbcf22cb022153ea148f2af9e7a730b6789759d50ff035eff21e5c729769aa90de46a03320b9b8b200348fd163ad43c30bbb70265f5bd762a3fe266ba401629938fe93b7d013df6409c2b1a174", @generic="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", @typed={0x8, 0x12c, 0x0, 0x0, @uid=0xee01}, @generic="f3b22491858f928a5122621e8302deebf03f1835913219"]}, @nested={0x102f, 0xeb, 0x0, 0x1, [@generic="7a5bf62a673c1de73f68e37d6ab91ae894879fee64c039af815096375d090e9ec32f8b9a63cbe8", @generic="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", @nested={0x4, 0xe6}]}, @nested={0x103, 0x116, 0x0, 0x1, [@generic="e5a6bc09", @nested={0x4, 0x71}, @nested={0x4, 0x77}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0xfffffff8}, @generic="24c6d274eb3184e39f5c216e7b6adf61bcbc3e8923a39cc30cc0642c47bf563378c7dd3db16a52dfbbe81c2e5b36af6bb7b0cd3986621c4712905b4d829fb9715d5a21f8f994d13055c5422bb44694c155f63955938f60dacb2b446d1d9fadba613e39f662ca94548e69c3b8e32558820c40459ecd572cfd6ac6ddea7241beffe84356a038780ff4b0ca03765aa0af97de5bd0783598cd5d6e5cad8d286722dfba4e24d796727f834b8d09c8522f64e16f7c1fbce1384b1f3213bfedf5d2dbb6b702b37b4201095d231a712f3e05e134127adfab577ea3", @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@private1}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x24cc}], 0x1}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xb00c3, 0x110, 0x4}, 0x18) mkdirat(r6, &(0x7f0000000440)='./file0\x00', 0x1d3) 2.093971179s ago: executing program 0 (id=3540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1.781735173s ago: executing program 2 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) (fail_nth: 2) 1.780688036s ago: executing program 0 (id=3542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1.341815609s ago: executing program 2 (id=3543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100000000050001000c0000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (fail_nth: 2) 785.230535ms ago: executing program 4 (id=3475): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f0000000340)="130092efc5343874efef2767", 0xc}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) (fail_nth: 2) 747.635846ms ago: executing program 2 (id=3544): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008040, 0x0, 0x0) 640.636273ms ago: executing program 1 (id=3545): fchown(0xffffffffffffffff, 0x0, 0xee01) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x11d140, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0xff78, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd2d, 0x100000, {{}, {}, {0x14, 0x19, {0x21f1, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0xeb, 0x6, 0x194e7c}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x14040854) socket$inet6(0xa, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000340)={0x6000, 0x1, 0x1}, 0x18, 0x1) landlock_restrict_self(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = memfd_create(&(0x7f0000000580)='/s2A\xfa\xdc\xa6\xa7\x0e\xf5igb\x93\xe3\xb5\xb9UG\xbb&\xb2:\x92\xe2\xc2\xfd\xb1\x02\x17\x05i\xc8X\xc3\xf4J\x9e\xa2d\x8e/X\xf4\x00&\xd7\xc0\xe9\xfa\xc1\xe0\x85\x84\xd0*\"z%\x8aN\xf52\xb2+\x92\xcfo\x7f\x1cE\\\xa1\x1a\xff\x00\xddq\x17\xdd\x80', 0x5) fallocate(r5, 0x0, 0x0, 0x200401) fcntl$addseals(r5, 0x409, 0x4) fallocate(r3, 0x28, 0x3, 0x10001) r6 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) mremap(&(0x7f0000107000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000578000/0x2000)=nil) shmdt(r6) fallocate(r5, 0x0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ff7f00000000000000000000950000000000000061b5133146eec4923fe487e7a956d3e1ed9214e2e50efb01cfdc61eb96e864931fb4ff53be8961e1afca7b4b7978f90b6279159f36c7daad2210c9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) 441.769084ms ago: executing program 1 (id=3546): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 0s ago: executing program 0 (id=3547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) fcntl$setpipe(r2, 0x8, 0x80000000) sendto$inet(r1, &(0x7f0000000000)="ea", 0x1, 0x80, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x700, 0xffffffffffffffff}]}, 0x108) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) read(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r8, &(0x7f0000000780)}, 0x20) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00002af000/0x3000)=nil, 0x3000, 0x1000001, 0x80012, r9, 0x80000000) r10 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0400080000000000500011", @ANYRESDEC=r1, @ANYRES32=r10, @ANYRES8=r10], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) kernel console output (not intermixed with test programs): -p udp [ 1047.957983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.084002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.369490][ T30] audit: type=1400 audit(1749429385.198:813): avc: denied { read } for pid=17340 comm="syz.4.3323" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1049.440261][ T30] audit: type=1400 audit(1749429385.198:814): avc: denied { open } for pid=17340 comm="syz.4.3323" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1049.464003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.562424][T17343] lo speed is unknown, defaulting to 1000 [ 1049.577853][T17343] lo speed is unknown, defaulting to 1000 [ 1049.590248][T17343] lo speed is unknown, defaulting to 1000 [ 1050.011963][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1050.207695][ T30] audit: type=1400 audit(1749429385.208:815): avc: denied { ioctl } for pid=17340 comm="syz.4.3323" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1050.272364][T17343] infiniband syz0: set active [ 1050.277269][T17343] infiniband syz0: added lo [ 1050.283306][T17343] syz0: rxe_create_cq: returned err = -12 [ 1050.289287][T17343] infiniband syz0: Couldn't create ib_mad CQ [ 1050.295637][T17343] infiniband syz0: Couldn't open port 1 [ 1050.313154][ T5944] lo speed is unknown, defaulting to 1000 [ 1050.343673][T17343] RDS/IB: syz0: added [ 1050.348313][T17343] smc: adding ib device syz0 with port count 1 [ 1050.354822][T17343] smc: ib device syz0 port 1 has pnetid [ 1050.362850][T17343] lo speed is unknown, defaulting to 1000 [ 1050.412000][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1050.456796][T17343] lo speed is unknown, defaulting to 1000 [ 1050.548473][T17343] lo speed is unknown, defaulting to 1000 [ 1050.635412][T17343] lo speed is unknown, defaulting to 1000 [ 1050.724301][T17343] lo speed is unknown, defaulting to 1000 [ 1050.854834][T11067] lo speed is unknown, defaulting to 1000 [ 1050.902314][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1050.932897][ T5895] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1050.944683][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1050.953014][ T5895] usb 5-1: Product: syz [ 1050.962005][ T5895] usb 5-1: Manufacturer: syz [ 1050.970486][ T5895] usb 5-1: SerialNumber: syz [ 1050.977502][ T5895] usb 5-1: config 0 descriptor?? [ 1050.983368][T17341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1051.023646][ T5895] hub 5-1:0.0: bad descriptor, ignoring hub [ 1051.038813][ T5895] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1051.194035][T17351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3325'. [ 1051.218695][T17354] random: crng reseeded on system resumption [ 1051.236367][ T30] audit: type=1400 audit(1749429387.138:816): avc: denied { append } for pid=17352 comm="syz.1.3327" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1051.262309][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.270867][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.301749][ T30] audit: type=1400 audit(1749429387.138:817): avc: denied { open } for pid=17352 comm="syz.1.3327" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1051.468941][T17341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3323'. [ 1051.479560][ T30] audit: type=1400 audit(1749429387.158:818): avc: denied { setopt } for pid=17352 comm="syz.1.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1051.552396][ T30] audit: type=1400 audit(1749429387.158:819): avc: denied { write } for pid=17352 comm="syz.1.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1051.596692][ T30] audit: type=1400 audit(1749429387.158:820): avc: denied { ioctl } for pid=17352 comm="syz.1.3327" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1051.642586][ T5895] usb 5-1: USB disconnect, device number 20 [ 1051.701126][ T30] audit: type=1400 audit(1749429387.388:821): avc: denied { create } for pid=17357 comm="syz.1.3328" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1051.762563][ T30] audit: type=1400 audit(1749429387.398:822): avc: denied { mounton } for pid=17357 comm="syz.1.3328" path="/30/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1052.107799][T17364] FAULT_INJECTION: forcing a failure. [ 1052.107799][T17364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.895222][T17368] infiniband syz!: set active [ 1052.900028][T17368] infiniband syz!: added team_slave_0 [ 1052.959076][T17368] RDS/IB: syz!: added [ 1052.963438][T17368] smc: adding ib device syz! with port count 1 [ 1052.970826][T17368] smc: ib device syz! port 1 has pnetid [ 1053.440148][T17364] CPU: 0 UID: 0 PID: 17364 Comm: syz.0.3331 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1053.440177][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.440187][T17364] Call Trace: [ 1053.440193][T17364] [ 1053.440200][T17364] dump_stack_lvl+0x16c/0x1f0 [ 1053.440232][T17364] should_fail_ex+0x512/0x640 [ 1053.440261][T17364] _copy_from_iter+0x29f/0x16f0 [ 1053.440292][T17364] ? __pfx__copy_from_iter+0x10/0x10 [ 1053.440317][T17364] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1053.440348][T17364] copy_page_from_iter+0xde/0x180 [ 1053.440373][T17364] tun_build_skb.constprop.0+0x2e8/0x14f0 [ 1053.440407][T17364] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1053.440443][T17364] ? __pfx__kstrtoull+0x10/0x10 [ 1053.440464][T17364] tun_get_user+0x165f/0x3b80 [ 1053.440496][T17364] ? __pfx_tun_get_user+0x10/0x10 [ 1053.440519][T17364] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1053.440550][T17364] ? find_held_lock+0x2b/0x80 [ 1053.440571][T17364] ? tun_get+0x191/0x370 [ 1053.440600][T17364] tun_chr_write_iter+0xdc/0x210 [ 1053.440628][T17364] vfs_write+0x6c7/0x1150 [ 1053.440650][T17364] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1053.440678][T17364] ? __pfx_vfs_write+0x10/0x10 [ 1053.440697][T17364] ? find_held_lock+0x2b/0x80 [ 1053.440731][T17364] ksys_write+0x12a/0x250 [ 1053.440752][T17364] ? __pfx_ksys_write+0x10/0x10 [ 1053.440780][T17364] do_syscall_64+0xcd/0x4c0 [ 1053.440808][T17364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.440824][T17364] RIP: 0033:0x7f630958d3df [ 1053.440838][T17364] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1053.440855][T17364] RSP: 002b:00007f630a4a0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1053.440871][T17364] RAX: ffffffffffffffda RBX: 00007f63097b5fa0 RCX: 00007f630958d3df [ 1053.440883][T17364] RDX: 0000000000000045 RSI: 0000200000000a40 RDI: 00000000000000c8 [ 1053.440893][T17364] RBP: 00007f630a4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.440903][T17364] R10: 0000000000000045 R11: 0000000000000293 R12: 0000000000000001 [ 1053.440913][T17364] R13: 0000000000000001 R14: 00007f63097b5fa0 R15: 00007ffe992d3078 [ 1053.440936][T17364] [ 1053.825686][T17376] loop9: detected capacity change from 0 to 7 [ 1053.960922][T17381] FAULT_INJECTION: forcing a failure. [ 1053.960922][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.047352][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.4.3334 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1054.047378][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.047385][T17381] Call Trace: [ 1054.047389][T17381] [ 1054.047393][T17381] dump_stack_lvl+0x16c/0x1f0 [ 1054.047414][T17381] should_fail_ex+0x512/0x640 [ 1054.047429][T17381] ? __kmalloc_noprof+0xbf/0x510 [ 1054.047445][T17381] ? bpf_test_init.isra.0+0x9e/0x140 [ 1054.047461][T17381] should_failslab+0xc2/0x120 [ 1054.047478][T17381] __kmalloc_noprof+0xd2/0x510 [ 1054.047494][T17381] bpf_test_init.isra.0+0x9e/0x140 [ 1054.047513][T17381] bpf_prog_test_run_skb+0x245/0x2280 [ 1054.047525][T17381] ? __fget_files+0x204/0x3c0 [ 1054.047542][T17381] ? __fget_files+0x20e/0x3c0 [ 1054.047555][T17381] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1054.047568][T17381] ? fput+0x70/0xf0 [ 1054.047579][T17381] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1054.047590][T17381] __sys_bpf+0x1485/0x4d80 [ 1054.047607][T17381] ? __pfx___sys_bpf+0x10/0x10 [ 1054.047622][T17381] ? ksys_write+0x190/0x250 [ 1054.047638][T17381] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1054.047664][T17381] ? fput+0x70/0xf0 [ 1054.047673][T17381] ? ksys_write+0x1ac/0x250 [ 1054.047686][T17381] ? __pfx_ksys_write+0x10/0x10 [ 1054.047701][T17381] __x64_sys_bpf+0x78/0xc0 [ 1054.047716][T17381] ? lockdep_hardirqs_on+0x7c/0x110 [ 1054.047732][T17381] do_syscall_64+0xcd/0x4c0 [ 1054.047750][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.047760][T17381] RIP: 0033:0x7f10b758e929 [ 1054.047769][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.047780][T17381] RSP: 002b:00007f10b8413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1054.047791][T17381] RAX: ffffffffffffffda RBX: 00007f10b77b5fa0 RCX: 00007f10b758e929 [ 1054.047798][T17381] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1054.047804][T17381] RBP: 00007f10b8413090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.047810][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.047816][T17381] R13: 0000000000000000 R14: 00007f10b77b5fa0 R15: 00007ffd31af2778 [ 1054.047830][T17381] [ 1054.300124][T17372] mmap: syz.2.3326 (17372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1054.485377][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1054.485395][ T30] audit: type=1400 audit(1749429390.408:833): avc: denied { bind } for pid=17387 comm="syz.0.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1054.520696][T17389] netlink: 'syz.0.3336': attribute type 39 has an invalid length. [ 1054.594073][ T30] audit: type=1400 audit(1749429390.438:834): avc: denied { setopt } for pid=17387 comm="syz.0.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1054.660811][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.667430][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.737710][T17398] FAULT_INJECTION: forcing a failure. [ 1054.737710][T17398] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.750636][T17398] CPU: 0 UID: 0 PID: 17398 Comm: syz.3.3339 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1054.750662][T17398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.750672][T17398] Call Trace: [ 1054.750678][T17398] [ 1054.750685][T17398] dump_stack_lvl+0x16c/0x1f0 [ 1054.750717][T17398] should_fail_ex+0x512/0x640 [ 1054.750741][T17398] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1054.750766][T17398] should_failslab+0xc2/0x120 [ 1054.750791][T17398] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1054.750813][T17398] ? fcntl_getlk+0x84/0x8d0 [ 1054.750837][T17398] fcntl_getlk+0x84/0x8d0 [ 1054.750856][T17398] ? find_held_lock+0x2b/0x80 [ 1054.750877][T17398] ? __might_fault+0xe3/0x190 [ 1054.750899][T17398] ? __pfx_fcntl_getlk+0x10/0x10 [ 1054.750940][T17398] do_fcntl+0x13d/0x15a0 [ 1054.750958][T17398] ? __pfx_do_fcntl+0x10/0x10 [ 1054.750980][T17398] ? selinux_file_fcntl+0x93/0x170 [ 1054.751003][T17398] __x64_sys_fcntl+0x163/0x200 [ 1054.751022][T17398] do_syscall_64+0xcd/0x4c0 [ 1054.751050][T17398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.751068][T17398] RIP: 0033:0x7f5e5418e929 [ 1054.751082][T17398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.751100][T17398] RSP: 002b:00007f5e5508b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1054.751116][T17398] RAX: ffffffffffffffda RBX: 00007f5e543b5fa0 RCX: 00007f5e5418e929 [ 1054.751128][T17398] RDX: 00002000000001c0 RSI: 0000000000000005 RDI: 0000000000000003 [ 1054.751144][T17398] RBP: 00007f5e5508b090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.751154][T17398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.751164][T17398] R13: 0000000000000000 R14: 00007f5e543b5fa0 R15: 00007ffee13e4e68 [ 1054.751188][T17398] [ 1055.100091][T17401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1055.116076][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3341'. [ 1055.139191][T17409] FAULT_INJECTION: forcing a failure. [ 1055.139191][T17409] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.152136][T17409] CPU: 0 UID: 0 PID: 17409 Comm: syz.1.3342 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1055.152165][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1055.152177][T17409] Call Trace: [ 1055.152184][T17409] [ 1055.152191][T17409] dump_stack_lvl+0x16c/0x1f0 [ 1055.152226][T17409] should_fail_ex+0x512/0x640 [ 1055.152253][T17409] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1055.152281][T17409] should_failslab+0xc2/0x120 [ 1055.152309][T17409] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1055.152334][T17409] ? __alloc_skb+0x2b2/0x380 [ 1055.152366][T17409] __alloc_skb+0x2b2/0x380 [ 1055.152392][T17409] ? __pfx___alloc_skb+0x10/0x10 [ 1055.152420][T17409] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1055.152448][T17409] netlink_alloc_large_skb+0x69/0x130 [ 1055.152471][T17409] netlink_sendmsg+0x6a1/0xdd0 [ 1055.152496][T17409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.152528][T17409] ____sys_sendmsg+0xa98/0xc70 [ 1055.152551][T17409] ? copy_msghdr_from_user+0x10a/0x160 [ 1055.152584][T17409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.152621][T17409] ___sys_sendmsg+0x134/0x1d0 [ 1055.152652][T17409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.152677][T17409] ? __lock_acquire+0x622/0x1c90 [ 1055.152747][T17409] __sys_sendmsg+0x16d/0x220 [ 1055.152778][T17409] ? __pfx___sys_sendmsg+0x10/0x10 [ 1055.152827][T17409] do_syscall_64+0xcd/0x4c0 [ 1055.152859][T17409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.152880][T17409] RIP: 0033:0x7f547398e929 [ 1055.152896][T17409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.152914][T17409] RSP: 002b:00007f547470f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.152933][T17409] RAX: ffffffffffffffda RBX: 00007f5473bb5fa0 RCX: 00007f547398e929 [ 1055.152946][T17409] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 1055.152957][T17409] RBP: 00007f547470f090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.152968][T17409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.152980][T17409] R13: 0000000000000000 R14: 00007f5473bb5fa0 R15: 00007ffd81aae238 [ 1055.153012][T17409] [ 1055.448093][T17413] FAULT_INJECTION: forcing a failure. [ 1055.448093][T17413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.483457][T17413] CPU: 0 UID: 0 PID: 17413 Comm: syz.1.3344 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1055.483488][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1055.483499][T17413] Call Trace: [ 1055.483506][T17413] [ 1055.483514][T17413] dump_stack_lvl+0x16c/0x1f0 [ 1055.483546][T17413] should_fail_ex+0x512/0x640 [ 1055.483574][T17413] strncpy_from_user+0x3b/0x2e0 [ 1055.483600][T17413] getname_flags.part.0+0x8f/0x550 [ 1055.483623][T17413] getname_flags+0x93/0xf0 [ 1055.483645][T17413] do_sys_openat2+0xb8/0x1d0 [ 1055.483662][T17413] ? __pfx_do_sys_openat2+0x10/0x10 [ 1055.483680][T17413] ? rcu_is_watching+0x12/0xc0 [ 1055.483701][T17413] ? irqentry_exit+0x3b/0x90 [ 1055.483732][T17413] __x64_sys_creat+0xcc/0x120 [ 1055.483750][T17413] ? __pfx___x64_sys_creat+0x10/0x10 [ 1055.483772][T17413] ? rcu_is_watching+0x12/0xc0 [ 1055.483792][T17413] ? do_syscall_64+0x91/0x4c0 [ 1055.483819][T17413] do_syscall_64+0xcd/0x4c0 [ 1055.483847][T17413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.483865][T17413] RIP: 0033:0x7f547398e929 [ 1055.483881][T17413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.483898][T17413] RSP: 002b:00007f547470f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1055.483917][T17413] RAX: ffffffffffffffda RBX: 00007f5473bb5fa0 RCX: 00007f547398e929 [ 1055.483929][T17413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 1055.483940][T17413] RBP: 00007f547470f090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.483950][T17413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.483960][T17413] R13: 0000000000000000 R14: 00007f5473bb5fa0 R15: 00007ffd81aae238 [ 1055.483984][T17413] [ 1055.684154][ T30] audit: type=1400 audit(1749429391.598:835): avc: denied { unmount } for pid=17410 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1055.873800][ T30] audit: type=1400 audit(1749429391.788:836): avc: denied { connect } for pid=17411 comm="syz.0.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1055.966918][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1056.253504][ T30] audit: type=1400 audit(1749429392.168:837): avc: denied { execute } for pid=17417 comm="syz.1.3346" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1056.457257][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.472973][T17425] can0: slcan on ptm0. [ 1056.479493][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.497811][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.517239][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.529907][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.541533][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.558719][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.567630][T17422] can0 (unregistered): slcan off ptm0. [ 1056.580826][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.602020][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.609582][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.622207][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.629675][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.663851][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.671300][ T30] audit: type=1400 audit(1749429392.588:838): avc: denied { write } for pid=17426 comm="syz.4.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1056.711983][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.719453][T11067] hid-generic 00A0:0008:0005.0007: unknown main item tag 0x0 [ 1056.735393][T15270] Bluetooth: hci4: command 0x0406 tx timeout [ 1056.755628][T11067] hid-generic 00A0:0008:0005.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1056.914249][T17435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.965772][T17442] FAULT_INJECTION: forcing a failure. [ 1057.965772][T17442] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.978535][T17442] CPU: 1 UID: 0 PID: 17442 Comm: syz.1.3353 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1057.978560][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1057.978571][T17442] Call Trace: [ 1057.978580][T17442] [ 1057.978588][T17442] dump_stack_lvl+0x16c/0x1f0 [ 1057.978621][T17442] should_fail_ex+0x512/0x640 [ 1057.978645][T17442] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1057.978672][T17442] should_failslab+0xc2/0x120 [ 1057.978698][T17442] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1057.978720][T17442] ? io_submit_one+0x122/0x1df0 [ 1057.978743][T17442] ? io_submit_one+0x111/0x1df0 [ 1057.978767][T17442] io_submit_one+0x122/0x1df0 [ 1057.978794][T17442] ? __lock_acquire+0xb8a/0x1c90 [ 1057.978825][T17442] ? __pfx_io_submit_one+0x10/0x10 [ 1057.978855][T17442] ? __might_fault+0xe3/0x190 [ 1057.978877][T17442] ? __might_fault+0x13b/0x190 [ 1057.978904][T17442] ? __x64_sys_io_submit+0x1a9/0x350 [ 1057.978926][T17442] __x64_sys_io_submit+0x1a9/0x350 [ 1057.978952][T17442] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1057.978974][T17442] ? fput+0x70/0xf0 [ 1057.979001][T17442] do_syscall_64+0xcd/0x4c0 [ 1057.979028][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.979046][T17442] RIP: 0033:0x7f547398e929 [ 1057.979061][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.979077][T17442] RSP: 002b:00007f54717d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1057.979095][T17442] RAX: ffffffffffffffda RBX: 00007f5473bb6160 RCX: 00007f547398e929 [ 1057.979107][T17442] RDX: 0000200000000a00 RSI: 0000000000000001 RDI: 00007f54717aa000 [ 1057.979117][T17442] RBP: 00007f54717d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.979128][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.979137][T17442] R13: 0000000000000000 R14: 00007f5473bb6160 R15: 00007ffd81aae238 [ 1057.979161][T17442] [ 1058.126142][ T5141] Bluetooth: hci0: command 0x0405 tx timeout [ 1058.380176][T17446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1058.386887][T17446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1058.395518][T17446] vhci_hcd vhci_hcd.0: Device attached [ 1059.387952][ T5930] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1059.551185][T17448] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1059.650522][ T6230] vhci_hcd: stop threads [ 1059.691643][ T6230] vhci_hcd: release socket [ 1059.777823][ T6230] vhci_hcd: disconnect device [ 1060.057168][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.064804][ T30] audit: type=1400 audit(1749429395.968:839): avc: denied { bind } for pid=17450 comm="syz.3.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1060.102042][T17457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3357'. [ 1060.122737][T17455] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1060.162023][ T30] audit: type=1400 audit(1749429395.968:840): avc: denied { connect } for pid=17450 comm="syz.3.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1060.181936][ T30] audit: type=1400 audit(1749429395.968:841): avc: denied { ioctl } for pid=17450 comm="syz.3.3356" path="socket:[47355]" dev="sockfs" ino=47355 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1061.276237][T17481] FAULT_INJECTION: forcing a failure. [ 1061.276237][T17481] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.289754][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.1.3364 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1061.289780][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.289792][T17481] Call Trace: [ 1061.289799][T17481] [ 1061.289806][T17481] dump_stack_lvl+0x16c/0x1f0 [ 1061.289841][T17481] should_fail_ex+0x512/0x640 [ 1061.289867][T17481] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1061.289896][T17481] should_failslab+0xc2/0x120 [ 1061.289923][T17481] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1061.289946][T17481] ? __io_alloc_req_refill+0x27d/0x500 [ 1061.289966][T17481] ? getname_flags.part.0+0x4c/0x550 [ 1061.289990][T17481] getname_flags.part.0+0x4c/0x550 [ 1061.290012][T17481] getname_flags+0x93/0xf0 [ 1061.290036][T17481] __io_openat_prep+0x16d/0x420 [ 1061.290075][T17481] io_submit_sqes+0x832/0x2580 [ 1061.290117][T17481] __do_sys_io_uring_enter+0xd6a/0x1630 [ 1061.290146][T17481] ? __fget_files+0x20e/0x3c0 [ 1061.290171][T17481] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1061.290198][T17481] ? fput+0x70/0xf0 [ 1061.290219][T17481] ? ksys_write+0x1ac/0x250 [ 1061.290251][T17481] ? __pfx_ksys_write+0x10/0x10 [ 1061.290285][T17481] do_syscall_64+0xcd/0x4c0 [ 1061.290327][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.290348][T17481] RIP: 0033:0x7f547398e929 [ 1061.290455][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.290473][T17481] RSP: 002b:00007f54717f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1061.290491][T17481] RAX: ffffffffffffffda RBX: 00007f5473bb6080 RCX: 00007f547398e929 [ 1061.290501][T17481] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000008 [ 1061.290512][T17481] RBP: 00007f54717f6090 R08: 0000000000000000 R09: 00000000fffffdcf [ 1061.290522][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.290531][T17481] R13: 0000000000000000 R14: 00007f5473bb6080 R15: 00007ffd81aae238 [ 1061.290559][T17481] [ 1061.362075][T11067] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1061.841700][T17486] FAULT_INJECTION: forcing a failure. [ 1061.841700][T17486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.855332][T17486] CPU: 0 UID: 0 PID: 17486 Comm: syz.2.3367 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1061.855356][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.855366][T17486] Call Trace: [ 1061.855371][T17486] [ 1061.855378][T17486] dump_stack_lvl+0x16c/0x1f0 [ 1061.855409][T17486] should_fail_ex+0x512/0x640 [ 1061.855436][T17486] _copy_from_user+0x2e/0xd0 [ 1061.855460][T17486] kstrtouint_from_user+0xd6/0x1d0 [ 1061.855479][T17486] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1061.855498][T17486] ? __lock_acquire+0xb8a/0x1c90 [ 1061.855535][T17486] proc_fail_nth_write+0x83/0x250 [ 1061.855558][T17486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1061.855585][T17486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1061.855604][T17486] vfs_write+0x2a0/0x1150 [ 1061.855629][T17486] ? __pfx___mutex_lock+0x10/0x10 [ 1061.855654][T17486] ? __pfx_vfs_write+0x10/0x10 [ 1061.855681][T17486] ? __fget_files+0x20e/0x3c0 [ 1061.855709][T17486] ksys_write+0x12a/0x250 [ 1061.855729][T17486] ? __pfx_ksys_write+0x10/0x10 [ 1061.855756][T17486] do_syscall_64+0xcd/0x4c0 [ 1061.855784][T17486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.855802][T17486] RIP: 0033:0x7f71c478d3df [ 1061.855816][T17486] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1061.855833][T17486] RSP: 002b:00007f71c5580030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1061.855850][T17486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f71c478d3df [ 1061.855861][T17486] RDX: 0000000000000001 RSI: 00007f71c55800a0 RDI: 0000000000000006 [ 1061.855870][T17486] RBP: 00007f71c5580090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.855881][T17486] R10: 0000000000000008 R11: 0000000000000293 R12: 0000000000000001 [ 1061.855891][T17486] R13: 0000000000000001 R14: 00007f71c49b6160 R15: 00007ffc73d6caf8 [ 1061.855915][T17486] [ 1062.695983][T11067] usb 1-1: Using ep0 maxpacket: 16 [ 1062.823820][T11067] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1063.270694][ T30] audit: type=1400 audit(1749429399.138:842): avc: denied { name_connect } for pid=17501 comm="syz.2.3371" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1063.777939][T11067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1063.791220][T11067] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1063.804477][ T30] audit: type=1400 audit(1749429399.728:843): avc: denied { setopt } for pid=17501 comm="syz.2.3371" lport=51962 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1063.847023][T11067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.881912][T11067] usb 1-1: Product: syz [ 1063.896375][T11067] usb 1-1: Manufacturer: syz [ 1063.916010][T11067] usb 1-1: SerialNumber: syz [ 1063.922331][ T5944] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1063.956866][T11067] usb 1-1: config 0 descriptor?? [ 1063.973669][T11067] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1063.986090][T11067] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1064.099907][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.143535][ T5944] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 1064.168829][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.190990][ T5944] usb 4-1: config 0 descriptor?? [ 1064.225220][T11067] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1064.240536][T11067] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1064.249120][ T5939] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1064.361724][ T30] audit: type=1400 audit(1749429400.278:844): avc: denied { mount } for pid=17514 comm="syz.0.3375" name="/" dev="autofs" ino=46802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1064.455187][T11067] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1064.464492][T11067] em28xx 1-1:0.0: No AC97 audio processor [ 1064.490899][T11067] usb 1-1: USB disconnect, device number 6 [ 1064.509981][T11067] em28xx 1-1:0.0: Disconnecting em28xx [ 1064.533715][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1064.547281][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1064.567195][T11067] em28xx 1-1:0.0: Freeing device [ 1064.631966][ T5930] vhci_hcd: vhci_device speed not set [ 1064.976247][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1065.284997][ T5944] corsair-psu 0003:1B1C:1C07.0008: unknown main item tag 0x3 [ 1065.296119][ T5939] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1065.307469][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.334832][ T5944] corsair-psu 0003:1B1C:1C07.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.3-1/input0 [ 1065.351174][ T5939] usb 5-1: Product: syz [ 1065.362068][ T5939] usb 5-1: Manufacturer: syz [ 1065.366736][ T5939] usb 5-1: SerialNumber: syz [ 1065.488710][ T5939] usb 5-1: config 0 descriptor?? [ 1065.493917][ T5944] corsair-psu 0003:1B1C:1C07.0008: unable to initialize device (-38) [ 1065.505333][T17507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1065.512708][T17507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1065.560218][ T5944] corsair-psu 0003:1B1C:1C07.0008: probe with driver corsair-psu failed with error -38 [ 1065.752072][ T30] audit: type=1400 audit(1749429401.668:845): avc: denied { unmount } for pid=15269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1065.802619][T17507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1065.811422][ T5944] usb 4-1: USB disconnect, device number 9 [ 1065.817890][T17507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1067.792113][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1068.671969][ T5939] Error reading MAC address [ 1068.678818][ T5939] usb 5-1: USB disconnect, device number 21 [ 1068.785374][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.808123][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.830272][ T5930] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1068.852102][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.865719][ T30] audit: type=1400 audit(1749429404.788:846): avc: denied { ioctl } for pid=17546 comm="syz.4.3382" path="socket:[47000]" dev="sockfs" ino=47000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1068.900116][ T5930] usb 4-1: config 0 descriptor?? [ 1069.031988][T16142] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1069.154341][T17550] FAULT_INJECTION: forcing a failure. [ 1069.154341][T17550] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.171458][T17550] CPU: 1 UID: 0 PID: 17550 Comm: syz.2.3383 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1069.171485][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1069.171495][T17550] Call Trace: [ 1069.171501][T17550] [ 1069.171509][T17550] dump_stack_lvl+0x16c/0x1f0 [ 1069.171540][T17550] should_fail_ex+0x512/0x640 [ 1069.171564][T17550] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1069.171593][T17550] should_failslab+0xc2/0x120 [ 1069.171618][T17550] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1069.171640][T17550] ? __alloc_skb+0x2b2/0x380 [ 1069.171669][T17550] __alloc_skb+0x2b2/0x380 [ 1069.171692][T17550] ? __pfx___alloc_skb+0x10/0x10 [ 1069.171717][T17550] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1069.171737][T17550] netlink_alloc_large_skb+0x69/0x130 [ 1069.171755][T17550] netlink_sendmsg+0x6a1/0xdd0 [ 1069.171776][T17550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.171802][T17550] ____sys_sendmsg+0xa98/0xc70 [ 1069.171820][T17550] ? copy_msghdr_from_user+0x10a/0x160 [ 1069.171841][T17550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.171869][T17550] ___sys_sendmsg+0x134/0x1d0 [ 1069.171892][T17550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.171913][T17550] ? __lock_acquire+0x622/0x1c90 [ 1069.171968][T17550] __sys_sendmsg+0x16d/0x220 [ 1069.171994][T17550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1069.172034][T17550] ? __pfx_handle_softirqs+0x10/0x10 [ 1069.172060][T17550] do_syscall_64+0xcd/0x4c0 [ 1069.172090][T17550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.172107][T17550] RIP: 0033:0x7f71c478e929 [ 1069.172122][T17550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.172138][T17550] RSP: 002b:00007f71c55c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.172155][T17550] RAX: ffffffffffffffda RBX: 00007f71c49b5fa0 RCX: 00007f71c478e929 [ 1069.172166][T17550] RDX: 00000000000400c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1069.172176][T17550] RBP: 00007f71c55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.172185][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.172195][T17550] R13: 0000000000000000 R14: 00007f71c49b5fa0 R15: 00007ffc73d6caf8 [ 1069.172221][T17550] [ 1069.183783][T16142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1069.249769][ T30] audit: type=1400 audit(1749429405.158:847): avc: denied { append } for pid=17553 comm="syz.2.3385" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1069.254169][T16142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.269703][ T5939] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1070.724388][T16142] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1070.733857][T16142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.737118][ T30] audit: type=1400 audit(1749429405.398:848): avc: denied { connect } for pid=17551 comm="syz.1.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1070.782182][ T30] audit: type=1400 audit(1749429405.408:849): avc: denied { ioctl } for pid=17551 comm="syz.1.3384" path="socket:[47010]" dev="sockfs" ino=47010 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1070.838598][T16142] usb 1-1: config 0 descriptor?? [ 1070.858175][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 1070.864385][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1070.879002][ T5930] usb 4-1: USB disconnect, device number 10 [ 1071.101462][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1071.108595][ T5939] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1071.116978][ T5939] usb 5-1: config 179 has no interface number 0 [ 1071.130205][ T5939] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1071.143039][ T5939] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1071.162065][ T5939] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1071.175257][ T5939] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1071.185676][ T5939] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1071.200513][ T5939] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1071.765310][ T5939] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1071.765336][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.780946][T17547] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1071.804936][ T5939] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 1071.884237][ T5939] usb 5-1: USB disconnect, device number 22 [ 1071.890232][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1071.966697][ T5939] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1072.014611][T17571] FAULT_INJECTION: forcing a failure. [ 1072.014611][T17571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.028639][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.4.3389 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1072.028663][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.028673][T17571] Call Trace: [ 1072.028679][T17571] [ 1072.028686][T17571] dump_stack_lvl+0x16c/0x1f0 [ 1072.028717][T17571] should_fail_ex+0x512/0x640 [ 1072.028749][T17571] _copy_from_user+0x2e/0xd0 [ 1072.028774][T17571] memdup_user+0x6b/0xe0 [ 1072.028798][T17571] strndup_user+0x78/0xe0 [ 1072.028821][T17571] __x64_sys_mount+0x137/0x310 [ 1072.028848][T17571] ? __pfx___x64_sys_mount+0x10/0x10 [ 1072.028882][T17571] do_syscall_64+0xcd/0x4c0 [ 1072.028910][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.028929][T17571] RIP: 0033:0x7f10b758e929 [ 1072.028943][T17571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.028959][T17571] RSP: 002b:00007f10b8413038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1072.028976][T17571] RAX: ffffffffffffffda RBX: 00007f10b77b5fa0 RCX: 00007f10b758e929 [ 1072.028988][T17571] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000000 [ 1072.028999][T17571] RBP: 00007f10b8413090 R08: 0000200000000a40 R09: 0000000000000000 [ 1072.029008][T17571] R10: 0000000001000810 R11: 0000000000000246 R12: 0000000000000001 [ 1072.029019][T17571] R13: 0000000000000000 R14: 00007f10b77b5fa0 R15: 00007ffd31af2778 [ 1072.029042][T17571] [ 1072.345373][T16142] usbhid 1-1:0.0: can't add hid device: -71 [ 1072.362018][T16142] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1072.847149][T13773] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1072.905143][T16142] usb 1-1: USB disconnect, device number 7 [ 1072.957214][T17582] FAULT_INJECTION: forcing a failure. [ 1072.957214][T17582] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.970244][T17582] CPU: 1 UID: 0 PID: 17582 Comm: syz.4.3393 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1072.970273][T17582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.970283][T17582] Call Trace: [ 1072.970289][T17582] [ 1072.970296][T17582] dump_stack_lvl+0x16c/0x1f0 [ 1072.970325][T17582] should_fail_ex+0x512/0x640 [ 1072.970352][T17582] should_failslab+0xc2/0x120 [ 1072.970375][T17582] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1072.970396][T17582] ? sctp_get_port_local+0x51e/0x1610 [ 1072.970416][T17582] sctp_get_port_local+0x51e/0x1610 [ 1072.970439][T17582] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1072.970453][T17582] ? sctp_bind_addr_match+0x193/0x300 [ 1072.970479][T17582] ? sctp_bind_addr_match+0x19d/0x300 [ 1072.970506][T17582] sctp_do_bind+0x223/0x700 [ 1072.970531][T17582] sctp_connect_new_asoc+0x5fd/0x790 [ 1072.970555][T17582] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1072.970582][T17582] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1072.970612][T17582] sctp_sendmsg+0x15f9/0x1ee0 [ 1072.970631][T17582] ? avc_has_perm+0x11a/0x1c0 [ 1072.970655][T17582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1072.970681][T17582] ? __pfx_sock_has_perm+0x10/0x10 [ 1072.970703][T17582] ? __might_fault+0xe3/0x190 [ 1072.970730][T17582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1072.970751][T17582] inet_sendmsg+0x11c/0x140 [ 1072.970775][T17582] __sys_sendto+0x43c/0x520 [ 1072.970799][T17582] ? __pfx___sys_sendto+0x10/0x10 [ 1072.970840][T17582] ? ksys_write+0x1ac/0x250 [ 1072.970859][T17582] ? __pfx_ksys_write+0x10/0x10 [ 1072.970883][T17582] __x64_sys_sendto+0xe0/0x1c0 [ 1072.970904][T17582] ? do_syscall_64+0x91/0x4c0 [ 1072.970929][T17582] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.970954][T17582] do_syscall_64+0xcd/0x4c0 [ 1072.970981][T17582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.970998][T17582] RIP: 0033:0x7f10b758e929 [ 1072.971012][T17582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.971028][T17582] RSP: 002b:00007f10b8413038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1072.971046][T17582] RAX: ffffffffffffffda RBX: 00007f10b77b5fa0 RCX: 00007f10b758e929 [ 1072.971056][T17582] RDX: 0000000000034000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1072.971066][T17582] RBP: 00007f10b8413090 R08: 0000200000000280 R09: 0000000000000010 [ 1072.971076][T17582] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000001 [ 1072.971086][T17582] R13: 0000000000000000 R14: 00007f10b77b5fa0 R15: 00007ffd31af2778 [ 1072.971110][T17582] [ 1073.234763][T13773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1073.243540][T13773] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1073.254345][T13773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.451260][T13773] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.472501][T17588] capability: warning: `syz.3.3395' uses deprecated v2 capabilities in a way that may be insecure [ 1073.489584][T13773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.528600][T13773] usb 2-1: Product: syz [ 1073.728231][T13773] usb 2-1: Manufacturer: syz [ 1073.768761][T13773] usb 2-1: SerialNumber: syz [ 1075.010118][T17597] FAULT_INJECTION: forcing a failure. [ 1075.010118][T17597] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.047439][T13773] usb 2-1: 0:2 : does not exist [ 1075.067868][T17597] CPU: 0 UID: 0 PID: 17597 Comm: syz.0.3398 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1075.067897][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.067907][T17597] Call Trace: [ 1075.067914][T17597] [ 1075.067921][T17597] dump_stack_lvl+0x16c/0x1f0 [ 1075.067955][T17597] should_fail_ex+0x512/0x640 [ 1075.067979][T17597] ? fs_reclaim_acquire+0xae/0x150 [ 1075.067999][T17597] ? tomoyo_encode2+0x100/0x3e0 [ 1075.068022][T17597] should_failslab+0xc2/0x120 [ 1075.068048][T17597] __kmalloc_noprof+0xd2/0x510 [ 1075.068071][T17597] ? d_absolute_path+0x136/0x1a0 [ 1075.068093][T17597] tomoyo_encode2+0x100/0x3e0 [ 1075.068122][T17597] tomoyo_encode+0x29/0x50 [ 1075.068146][T17597] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1075.068175][T17597] tomoyo_path_number_perm+0x245/0x580 [ 1075.068194][T17597] ? tomoyo_path_number_perm+0x237/0x580 [ 1075.068217][T17597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1075.068246][T17597] ? find_held_lock+0x2b/0x80 [ 1075.068292][T17597] ? find_held_lock+0x2b/0x80 [ 1075.068313][T17597] ? hook_file_ioctl_common+0x145/0x410 [ 1075.068337][T17597] ? __fget_files+0x20e/0x3c0 [ 1075.068366][T17597] security_file_ioctl+0x9b/0x240 [ 1075.068393][T17597] __x64_sys_ioctl+0xb7/0x210 [ 1075.068415][T17597] do_syscall_64+0xcd/0x4c0 [ 1075.068442][T17597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.068459][T17597] RIP: 0033:0x7f630958e929 [ 1075.068474][T17597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.068490][T17597] RSP: 002b:00007f630a4a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.068509][T17597] RAX: ffffffffffffffda RBX: 00007f63097b5fa0 RCX: 00007f630958e929 [ 1075.068520][T17597] RDX: 0000200000000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1075.068532][T17597] RBP: 00007f630a4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.068542][T17597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.068553][T17597] R13: 0000000000000000 R14: 00007f63097b5fa0 R15: 00007ffe992d3078 [ 1075.068578][T17597] [ 1075.068596][T17597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1075.208619][ T30] audit: type=1400 audit(1749429411.118:850): avc: denied { link } for pid=17601 comm="syz.4.3401" name="#d" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1075.312912][T16142] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1075.323960][T13773] usb 2-1: USB disconnect, device number 11 [ 1075.440491][ T30] audit: type=1400 audit(1749429411.118:851): avc: denied { rename } for pid=17601 comm="syz.4.3401" name="#e" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1076.090584][T16142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.122663][T16142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.142375][T16142] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1076.157418][ T30] audit: type=1326 audit(1749429412.078:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.161709][T16142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.211573][T16142] usb 4-1: config 0 descriptor?? [ 1076.328692][ T30] audit: type=1326 audit(1749429412.078:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.356473][ T30] audit: type=1326 audit(1749429412.078:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.381232][ T30] audit: type=1326 audit(1749429412.078:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.404781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.413785][ T30] audit: type=1326 audit(1749429412.078:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.437339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.471177][ T30] audit: type=1326 audit(1749429412.078:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1076.495899][ T30] audit: type=1326 audit(1749429412.078:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1077.619293][T16142] usbhid 4-1:0.0: can't add hid device: -71 [ 1077.750089][T16142] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1077.764511][T16142] usb 4-1: USB disconnect, device number 11 [ 1077.775355][ T30] audit: type=1326 audit(1749429412.078:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1077.799217][ T30] audit: type=1326 audit(1749429412.078:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1077.827310][ T30] audit: type=1326 audit(1749429412.078:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b758e929 code=0x7ffc0000 [ 1078.190128][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1078.200934][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1078.427362][T17643] Driver unsupported XDP return value 0 on prog (id 443) dev N/A, expect packet loss! [ 1078.622023][T16142] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1078.731966][ T5939] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1078.773353][T16142] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1078.791186][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.894885][ T5944] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1078.902155][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.926231][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1078.942030][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.072043][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 1079.481937][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.495921][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1079.528542][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.560877][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.613215][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1079.623926][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.626684][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.646664][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1079.656378][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1079.667553][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.677412][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1079.688144][ T5939] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1079.698837][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.700668][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.708966][ T5944] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1079.729004][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1079.737853][ T5944] usb 4-1: Product: syz [ 1079.752230][ T5939] hub 3-1:1.0: bad descriptor, ignoring hub [ 1079.788477][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1079.917140][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.977101][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.022139][T13773] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1080.164056][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.449295][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.468181][T13773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.511068][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.531374][T13773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.608067][T13773] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1080.625306][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.677041][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.693408][T13773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.739089][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.755208][T13773] usb 1-1: config 0 descriptor?? [ 1080.760868][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.919639][T16142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.980778][T16142] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.988508][ T5939] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1081.018339][ T5939] cdc_wdm 3-1:1.0: skipping garbage [ 1081.023770][ T5944] usb 4-1: Manufacturer: syz [ 1081.031164][ T5939] cdc_wdm 3-1:1.0: skipping garbage [ 1081.036741][ T5944] usb 4-1: SerialNumber: syz [ 1081.087367][ T5944] usb 4-1: config 0 descriptor?? [ 1081.094668][T17649] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1081.104920][ T5939] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1081.111013][ T5939] cdc_wdm 3-1:1.0: Unknown control protocol [ 1081.253884][ T5944] hub 4-1:0.0: bad descriptor, ignoring hub [ 1081.599977][ T5944] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1081.704840][ T945] usb 3-1: USB disconnect, device number 23 [ 1082.070181][T16142] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1082.080675][T16142] usb 5-1: string descriptor 0 read error: -71 [ 1082.087554][T16142] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1082.097141][T16142] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1082.121192][T13773] usbhid 1-1:0.0: can't add hid device: -71 [ 1082.127341][T13773] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1082.136354][T16142] usb 5-1: config 0 descriptor?? [ 1082.148521][T13773] usb 1-1: USB disconnect, device number 8 [ 1082.155246][T16142] usb 5-1: can't set config #0, error -71 [ 1082.167580][T16142] usb 5-1: USB disconnect, device number 23 [ 1082.183858][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1082.183875][ T30] audit: type=1400 audit(1749429418.108:925): avc: denied { read } for pid=17667 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1082.188146][T17666] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 1082.233490][ T30] audit: type=1400 audit(1749429418.158:926): avc: denied { bind } for pid=17667 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1082.235109][T17666] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 1082.283426][ T30] audit: type=1400 audit(1749429418.158:927): avc: denied { node_bind } for pid=17667 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1082.303561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.365681][ T30] audit: type=1400 audit(1749429418.288:928): avc: denied { ioctl } for pid=17672 comm="syz.1.3423" path="socket:[47966]" dev="sockfs" ino=47966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1082.391068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.479216][T17676] FAULT_INJECTION: forcing a failure. [ 1082.479216][T17676] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.496740][T17676] CPU: 0 UID: 0 PID: 17676 Comm: syz.3.3416 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1082.496768][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1082.496779][T17676] Call Trace: [ 1082.496785][T17676] [ 1082.496793][T17676] dump_stack_lvl+0x16c/0x1f0 [ 1082.496829][T17676] should_fail_ex+0x512/0x640 [ 1082.496855][T17676] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1082.496880][T17676] should_failslab+0xc2/0x120 [ 1082.496907][T17676] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1082.496929][T17676] ? kobject_uevent_env+0x265/0x1870 [ 1082.496959][T17676] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1082.496979][T17676] kobject_uevent_env+0x265/0x1870 [ 1082.496999][T17676] ? __pfx_dev_uevent_name+0x10/0x10 [ 1082.497026][T17676] ? gadget_unbind_driver+0x370/0x4e0 [ 1082.497045][T17676] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1082.497071][T17676] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1082.497091][T17676] device_remove+0xc8/0x170 [ 1082.497116][T17676] device_release_driver_internal+0x44b/0x620 [ 1082.497150][T17676] driver_detach+0xd8/0x1b0 [ 1082.497177][T17676] ? __pfx_raw_release+0x10/0x10 [ 1082.497195][T17676] bus_remove_driver+0x13b/0x2c0 [ 1082.497219][T17676] driver_unregister+0x76/0xb0 [ 1082.497246][T17676] usb_gadget_unregister_driver+0x49/0x70 [ 1082.497265][T17676] raw_release+0x1ae/0x2b0 [ 1082.497285][T17676] __fput+0x3ff/0xb70 [ 1082.497310][T17676] fput_close_sync+0x118/0x260 [ 1082.497328][T17676] ? __pfx_fput_close_sync+0x10/0x10 [ 1082.497344][T17676] ? dnotify_flush+0x79/0x4c0 [ 1082.497378][T17676] __x64_sys_close+0x8b/0x120 [ 1082.497397][T17676] do_syscall_64+0xcd/0x4c0 [ 1082.497427][T17676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.497446][T17676] RIP: 0033:0x7f5e5418d58a [ 1082.497462][T17676] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 1082.497479][T17676] RSP: 002b:00007f5e55069ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1082.497498][T17676] RAX: ffffffffffffffda RBX: 00007f5e543b6080 RCX: 00007f5e5418d58a [ 1082.497510][T17676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1082.497519][T17676] RBP: 00007f5e5506a090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.497530][T17676] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000001 [ 1082.497540][T17676] R13: 0000000000000001 R14: 00007f5e543b6080 R15: 00007ffee13e4e68 [ 1082.497564][T17676] [ 1082.751636][T13773] usb 4-1: USB disconnect, device number 12 [ 1082.758378][T16142] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1082.846496][ T30] audit: type=1400 audit(1749429418.768:929): avc: denied { accept } for pid=17672 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1082.872044][ T5895] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1082.931928][T16142] usb 5-1: Using ep0 maxpacket: 32 [ 1082.938467][T16142] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1082.947562][T16142] usb 5-1: config 0 has no interface number 0 [ 1082.953866][T16142] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.965550][T16142] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1082.975574][T16142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.995694][T16142] usb 5-1: Product: syz [ 1082.999935][T16142] usb 5-1: Manufacturer: syz [ 1083.004817][T16142] usb 5-1: SerialNumber: syz [ 1083.011758][T16142] usb 5-1: config 0 descriptor?? [ 1083.020074][T16142] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1083.030098][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 1083.035369][T16142] em28xx 5-1:0.132: Video interface 132 found: [ 1083.038569][T17679] FAULT_INJECTION: forcing a failure. [ 1083.038569][T17679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.046619][ T5895] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1083.064718][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.067345][T17679] CPU: 1 UID: 0 PID: 17679 Comm: syz.0.3425 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1083.067369][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1083.067378][T17679] Call Trace: [ 1083.067384][T17679] [ 1083.067390][T17679] dump_stack_lvl+0x16c/0x1f0 [ 1083.067418][T17679] should_fail_ex+0x512/0x640 [ 1083.067442][T17679] _copy_to_iter+0x463/0x16f0 [ 1083.067469][T17679] ? seq_show+0x59c/0x8e0 [ 1083.067488][T17679] ? __pfx__copy_to_iter+0x10/0x10 [ 1083.067510][T17679] ? single_next+0xd/0x40 [ 1083.067525][T17679] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 1083.067551][T17679] seq_read_iter+0x719/0x12c0 [ 1083.067580][T17679] seq_read+0x39e/0x4e0 [ 1083.067598][T17679] ? __pfx_seq_read+0x10/0x10 [ 1083.067617][T17679] ? get_pid_task+0xfc/0x250 [ 1083.067643][T17679] ? avc_policy_seqno+0x9/0x20 [ 1083.067664][T17679] ? rw_verify_area+0xcf/0x680 [ 1083.067681][T17679] ? __pfx_seq_read+0x10/0x10 [ 1083.067700][T17679] vfs_read+0x1e1/0xc60 [ 1083.067723][T17679] ? __pfx_vfs_read+0x10/0x10 [ 1083.067739][T17679] ? find_held_lock+0x2b/0x80 [ 1083.067758][T17679] ? __fget_files+0x204/0x3c0 [ 1083.067781][T17679] ? __fget_files+0x20e/0x3c0 [ 1083.067799][T17679] ? __fget_files+0x1c0/0x3c0 [ 1083.067824][T17679] __x64_sys_pread64+0x1eb/0x250 [ 1083.067845][T17679] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1083.067871][T17679] do_syscall_64+0xcd/0x4c0 [ 1083.067896][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.067911][T17679] RIP: 0033:0x7f630958e929 [ 1083.067925][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.067940][T17679] RSP: 002b:00007f630a4a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1083.067955][T17679] RAX: ffffffffffffffda RBX: 00007f63097b5fa0 RCX: 00007f630958e929 [ 1083.067965][T17679] RDX: 0000000000000137 RSI: 0000200000000080 RDI: 0000000000000005 [ 1083.067975][T17679] RBP: 00007f630a4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.067984][T17679] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1083.067993][T17679] R13: 0000000000000000 R14: 00007f63097b5fa0 R15: 00007ffe992d3078 [ 1083.068013][T17679] [ 1083.343136][ T5895] usb 3-1: Product: syz [ 1083.347346][ T5895] usb 3-1: Manufacturer: syz [ 1083.354545][ T5895] usb 3-1: SerialNumber: syz [ 1083.436356][ T5895] usb 3-1: config 0 descriptor?? [ 1083.449946][ T5895] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1083.459734][ T5895] usb 3-1: setting power ON [ 1083.582761][T16142] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1083.615053][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 1083.645238][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1083.667596][T17675] dvb-usb: bulk message failed: -22 (3/0) [ 1083.675607][T17675] dvb-usb: bulk message failed: -22 (4/0) [ 1083.681662][ T5895] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1083.694749][ T5895] usb 3-1: media controller created [ 1083.703848][T17675] cxusb: i2c read failed [ 1083.728894][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1083.756642][ T5895] usb 3-1: selecting invalid altsetting 6 [ 1083.767833][ T5895] usb 3-1: digital interface selection failed (-22) [ 1083.774840][ T5895] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1083.798872][T17670] lo: entered promiscuous mode [ 1083.812932][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3422'. [ 1083.836977][ T5895] usb 3-1: setting power OFF [ 1083.842510][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 1083.850088][T17670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.865643][ T5895] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1083.875046][ T5895] (NULL device *): no alternate interface [ 1084.481544][T17694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17694 comm=syz.0.3429 [ 1084.530828][ T5895] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1084.545678][ T5895] usb 3-1: USB disconnect, device number 24 [ 1084.722258][T16142] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1086.013119][T16142] em28xx 5-1:0.132: board has no eeprom [ 1086.072088][T16142] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1086.082833][T16142] em28xx 5-1:0.132: analog set to bulk mode. [ 1086.088986][T13773] em28xx 5-1:0.132: Registering V4L2 extension [ 1086.136177][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1086.149115][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1086.164731][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1086.181205][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1086.812256][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1086.821293][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1086.842237][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1086.856144][ T5895] usb 5-1: USB disconnect, device number 24 [ 1086.910668][ T5895] em28xx 5-1:0.132: Disconnecting em28xx [ 1086.916697][T13773] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1086.930777][T17711] FAULT_INJECTION: forcing a failure. [ 1086.930777][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.948888][ T30] audit: type=1400 audit(1749429422.848:930): avc: denied { read write } for pid=17710 comm="syz.0.3433" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1086.988695][T17711] CPU: 0 UID: 0 PID: 17711 Comm: syz.3.3432 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1086.988720][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1086.988729][T17711] Call Trace: [ 1086.988735][T17711] [ 1086.988741][T17711] dump_stack_lvl+0x16c/0x1f0 [ 1086.988770][T17711] should_fail_ex+0x512/0x640 [ 1086.988792][T17711] ? fs_reclaim_acquire+0xae/0x150 [ 1086.988811][T17711] ? tomoyo_encode2+0x100/0x3e0 [ 1086.988832][T17711] should_failslab+0xc2/0x120 [ 1086.988855][T17711] __kmalloc_noprof+0xd2/0x510 [ 1086.988876][T17711] ? d_absolute_path+0x136/0x1a0 [ 1086.988905][T17711] tomoyo_encode2+0x100/0x3e0 [ 1086.988933][T17711] tomoyo_encode+0x29/0x50 [ 1086.988955][T17711] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1086.988987][T17711] tomoyo_path_number_perm+0x245/0x580 [ 1086.989006][T17711] ? tomoyo_path_number_perm+0x237/0x580 [ 1086.989028][T17711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1086.989052][T17711] ? find_held_lock+0x2b/0x80 [ 1086.989091][T17711] ? find_held_lock+0x2b/0x80 [ 1086.989108][T17711] ? hook_file_ioctl_common+0x145/0x410 [ 1086.989130][T17711] ? __fget_files+0x20e/0x3c0 [ 1086.989156][T17711] security_file_ioctl+0x9b/0x240 [ 1086.989181][T17711] __x64_sys_ioctl+0xb7/0x210 [ 1086.989203][T17711] do_syscall_64+0xcd/0x4c0 [ 1086.989230][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.989247][T17711] RIP: 0033:0x7f5e5418e929 [ 1086.989260][T17711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.989277][T17711] RSP: 002b:00007f5e5508b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.989294][T17711] RAX: ffffffffffffffda RBX: 00007f5e543b5fa0 RCX: 00007f5e5418e929 [ 1086.989305][T17711] RDX: 0000200000000040 RSI: 0000000000005452 RDI: 0000000000000003 [ 1086.989316][T17711] RBP: 00007f5e5508b090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.989326][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.989336][T17711] R13: 0000000000000000 R14: 00007f5e543b5fa0 R15: 00007ffee13e4e68 [ 1086.989360][T17711] [ 1086.989377][T17711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1087.212454][T17717] FAULT_INJECTION: forcing a failure. [ 1087.212454][T17717] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.252023][ T30] audit: type=1400 audit(1749429422.848:931): avc: denied { open } for pid=17710 comm="syz.0.3433" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1087.561983][T17717] CPU: 0 UID: 0 PID: 17717 Comm: syz.2.3434 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1087.562010][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1087.562020][T17717] Call Trace: [ 1087.562025][T17717] [ 1087.562031][T17717] dump_stack_lvl+0x16c/0x1f0 [ 1087.562060][T17717] should_fail_ex+0x512/0x640 [ 1087.562082][T17717] ? fs_reclaim_acquire+0xae/0x150 [ 1087.562099][T17717] ? tomoyo_encode2+0x100/0x3e0 [ 1087.562119][T17717] should_failslab+0xc2/0x120 [ 1087.562140][T17717] __kmalloc_noprof+0xd2/0x510 [ 1087.562166][T17717] ? d_absolute_path+0x136/0x1a0 [ 1087.562186][T17717] tomoyo_encode2+0x100/0x3e0 [ 1087.562209][T17717] tomoyo_encode+0x29/0x50 [ 1087.562229][T17717] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1087.562256][T17717] tomoyo_path_number_perm+0x245/0x580 [ 1087.562274][T17717] ? tomoyo_path_number_perm+0x237/0x580 [ 1087.562293][T17717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1087.562313][T17717] ? find_held_lock+0x2b/0x80 [ 1087.562353][T17717] ? find_held_lock+0x2b/0x80 [ 1087.562371][T17717] ? hook_file_ioctl_common+0x145/0x410 [ 1087.562391][T17717] ? __fget_files+0x20e/0x3c0 [ 1087.562417][T17717] security_file_ioctl+0x9b/0x240 [ 1087.562442][T17717] __x64_sys_ioctl+0xb7/0x210 [ 1087.562462][T17717] do_syscall_64+0xcd/0x4c0 [ 1087.562490][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.562508][T17717] RIP: 0033:0x7f71c478e929 [ 1087.562523][T17717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.562539][T17717] RSP: 002b:00007f71c55c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.562556][T17717] RAX: ffffffffffffffda RBX: 00007f71c49b5fa0 RCX: 00007f71c478e929 [ 1087.562566][T17717] RDX: 0000000000000000 RSI: 0000000000005523 RDI: 0000000000000003 [ 1087.562581][T17717] RBP: 00007f71c55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.562590][T17717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.562600][T17717] R13: 0000000000000000 R14: 00007f71c49b5fa0 R15: 00007ffc73d6caf8 [ 1087.562626][T17717] [ 1087.562644][T17717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1087.780288][T13773] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1087.792189][T13773] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1087.799349][T13773] em28xx 5-1:0.132: No AC97 audio processor [ 1087.831751][T13773] usb 5-1: Decoder not found [ 1087.840009][T13773] em28xx 5-1:0.132: failed to create media graph [ 1087.856594][T13773] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1088.062514][T13773] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1088.168726][ T5895] em28xx 5-1:0.132: Closing input extension [ 1088.215465][ T5895] em28xx 5-1:0.132: Freeing device [ 1090.412167][T17746] mkiss: ax0: crc mode is auto. [ 1090.683377][T17751] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1092.930001][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1093.576318][T17772] FAULT_INJECTION: forcing a failure. [ 1093.576318][T17772] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.589228][ T5939] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1093.592030][T17772] CPU: 0 UID: 0 PID: 17772 Comm: syz.2.3450 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1093.592053][T17772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1093.592062][T17772] Call Trace: [ 1093.592067][T17772] [ 1093.592074][T17772] dump_stack_lvl+0x16c/0x1f0 [ 1093.592102][T17772] should_fail_ex+0x512/0x640 [ 1093.592123][T17772] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1093.592145][T17772] should_failslab+0xc2/0x120 [ 1093.592167][T17772] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1093.592187][T17772] ? __alloc_skb+0x2b2/0x380 [ 1093.592213][T17772] __alloc_skb+0x2b2/0x380 [ 1093.592233][T17772] ? __pfx___alloc_skb+0x10/0x10 [ 1093.592256][T17772] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1093.592278][T17772] netlink_alloc_large_skb+0x69/0x130 [ 1093.592296][T17772] netlink_sendmsg+0x6a1/0xdd0 [ 1093.592316][T17772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1093.592342][T17772] ____sys_sendmsg+0xa98/0xc70 [ 1093.592359][T17772] ? copy_msghdr_from_user+0x10a/0x160 [ 1093.592381][T17772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1093.592408][T17772] ___sys_sendmsg+0x134/0x1d0 [ 1093.592431][T17772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1093.592451][T17772] ? __lock_acquire+0x622/0x1c90 [ 1093.592501][T17772] __sys_sendmsg+0x16d/0x220 [ 1093.592524][T17772] ? __pfx___sys_sendmsg+0x10/0x10 [ 1093.592559][T17772] do_syscall_64+0xcd/0x4c0 [ 1093.592589][T17772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.592604][T17772] RIP: 0033:0x7f71c478e929 [ 1093.592618][T17772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.592633][T17772] RSP: 002b:00007f71c55c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.592649][T17772] RAX: ffffffffffffffda RBX: 00007f71c49b5fa0 RCX: 00007f71c478e929 [ 1093.592660][T17772] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000005 [ 1093.592669][T17772] RBP: 00007f71c55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.592679][T17772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.592688][T17772] R13: 0000000000000000 R14: 00007f71c49b5fa0 R15: 00007ffc73d6caf8 [ 1093.592709][T17772] [ 1093.781897][T13773] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1093.943777][ T5939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1093.962028][ T5939] usb 4-1: config 0 has no interface number 0 [ 1093.982145][ T5939] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1094.025216][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.058026][T13773] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1094.068250][ T5939] usb 4-1: config 0 descriptor?? [ 1094.081970][T13773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.089949][ T5939] usb 4-1: selecting invalid altsetting 1 [ 1094.095766][T13773] usb 1-1: Product: syz [ 1094.095787][T13773] usb 1-1: Manufacturer: syz [ 1094.095801][T13773] usb 1-1: SerialNumber: syz [ 1094.102512][T13773] usb 1-1: config 0 descriptor?? [ 1094.162352][T13773] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 1094.343652][T17761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.352324][T17761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.681289][ T5939] dvb_ttusb_budget: ttusb_init_controller: error [ 1094.691415][ T5939] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1094.921356][ T30] audit: type=1400 audit(1749429430.828:932): avc: denied { write } for pid=17786 comm="syz.4.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1094.940912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.194777][ T5939] DVB: Unable to find symbol cx22700_attach() [ 1095.196849][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 1095.846799][T13773] (null): failure setting delay to 10us [ 1095.852679][ T30] audit: type=1400 audit(1749429431.468:933): avc: denied { name_bind } for pid=17790 comm="syz.2.3456" src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1095.951594][T13773] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1096.004206][T17801] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1096.159957][T13773] usb 1-1: USB disconnect, device number 9 [ 1096.201988][ T30] audit: type=1400 audit(1749429432.118:934): avc: denied { write } for pid=17807 comm="syz.0.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1096.331286][ T30] audit: type=1400 audit(1749429432.248:935): avc: denied { bind } for pid=17812 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1096.362406][ T5939] DVB: Unable to find symbol tda10046_attach() [ 1096.368801][ T5939] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1096.389622][ T5939] usb 4-1: USB disconnect, device number 13 [ 1096.444406][ T30] audit: type=1400 audit(1749429432.278:936): avc: denied { listen } for pid=17812 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1096.454281][T17817] FAULT_INJECTION: forcing a failure. [ 1096.454281][T17817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.477958][T17817] CPU: 1 UID: 0 PID: 17817 Comm: syz.0.3463 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1096.477983][T17817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1096.477994][T17817] Call Trace: [ 1096.478000][T17817] [ 1096.478006][T17817] dump_stack_lvl+0x16c/0x1f0 [ 1096.478037][T17817] should_fail_ex+0x512/0x640 [ 1096.478066][T17817] strncpy_from_user+0x3b/0x2e0 [ 1096.478091][T17817] getname_flags.part.0+0x8f/0x550 [ 1096.478112][T17817] getname_flags+0x93/0xf0 [ 1096.478134][T17817] __x64_sys_renameat2+0xc7/0x130 [ 1096.478163][T17817] do_syscall_64+0xcd/0x4c0 [ 1096.478191][T17817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.478209][T17817] RIP: 0033:0x7f630958e929 [ 1096.478222][T17817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.478242][T17817] RSP: 002b:00007f630a4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1096.478258][T17817] RAX: ffffffffffffffda RBX: 00007f63097b5fa0 RCX: 00007f630958e929 [ 1096.478270][T17817] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1096.478280][T17817] RBP: 00007f630a4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.478289][T17817] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1096.478299][T17817] R13: 0000000000000000 R14: 00007f63097b5fa0 R15: 00007ffe992d3078 [ 1096.478325][T17817] [ 1096.624211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.678784][ T30] audit: type=1400 audit(1749429432.598:937): avc: denied { listen } for pid=17820 comm="syz.1.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1096.701696][T17821] FAULT_INJECTION: forcing a failure. [ 1096.701696][T17821] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.715348][T17821] CPU: 1 UID: 0 PID: 17821 Comm: syz.1.3464 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1096.715372][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1096.715383][T17821] Call Trace: [ 1096.715389][T17821] [ 1096.715397][T17821] dump_stack_lvl+0x16c/0x1f0 [ 1096.715427][T17821] should_fail_ex+0x512/0x640 [ 1096.715451][T17821] ? fs_reclaim_acquire+0xae/0x150 [ 1096.715470][T17821] ? tomoyo_encode2+0x100/0x3e0 [ 1096.715492][T17821] should_failslab+0xc2/0x120 [ 1096.715521][T17821] __kmalloc_noprof+0xd2/0x510 [ 1096.715553][T17821] tomoyo_encode2+0x100/0x3e0 [ 1096.715582][T17821] tomoyo_encode+0x29/0x50 [ 1096.715605][T17821] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1096.715631][T17821] ? tomoyo_profile+0x47/0x60 [ 1096.715660][T17821] tomoyo_path_number_perm+0x245/0x580 [ 1096.715681][T17821] ? tomoyo_path_number_perm+0x237/0x580 [ 1096.715704][T17821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1096.715726][T17821] ? find_held_lock+0x2b/0x80 [ 1096.715770][T17821] ? find_held_lock+0x2b/0x80 [ 1096.715789][T17821] ? hook_file_ioctl_common+0x145/0x410 [ 1096.715812][T17821] ? __fget_files+0x20e/0x3c0 [ 1096.715839][T17821] security_file_ioctl+0x9b/0x240 [ 1096.715865][T17821] __x64_sys_ioctl+0xb7/0x210 [ 1096.715888][T17821] do_syscall_64+0xcd/0x4c0 [ 1096.715917][T17821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.715934][T17821] RIP: 0033:0x7f547398e929 [ 1096.715949][T17821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.715966][T17821] RSP: 002b:00007f547470f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.715983][T17821] RAX: ffffffffffffffda RBX: 00007f5473bb5fa0 RCX: 00007f547398e929 [ 1096.715994][T17821] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 1096.716004][T17821] RBP: 00007f547470f090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.716014][T17821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.716024][T17821] R13: 0000000000000000 R14: 00007f5473bb5fa0 R15: 00007ffd81aae238 [ 1096.716049][T17821] [ 1096.716259][T17821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1097.932196][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1098.596369][T17838] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1099.119997][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.169153][T17849] binder: 17848:17849 ioctl c0046209 0 returned -22 [ 1099.204004][ T30] audit: type=1400 audit(1749429435.128:938): avc: denied { name_bind } for pid=17848 comm="syz.3.3474" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1099.225862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.347927][ T9146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.498460][ T9146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.637995][ T9146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.652902][T17857] sctp: [Deprecated]: syz.3.3476 (pid 17857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.652902][T17857] Use struct sctp_sack_info instead [ 1099.686403][ T30] audit: type=1400 audit(1749429435.608:939): avc: denied { create } for pid=17856 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1099.706594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.769099][ T30] audit: type=1800 audit(1749429435.668:940): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3476" name="dmabuf" dev="dmabuf" ino=2 res=0 errno=0 [ 1099.789950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.818351][ T9146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.029500][ T5939] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1100.306037][ T9146] bridge_slave_1: left allmulticast mode [ 1100.315244][ T9146] bridge_slave_1: left promiscuous mode [ 1100.333252][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.356431][ T9146] bridge_slave_0: left allmulticast mode [ 1100.367530][ T9146] bridge_slave_0: left promiscuous mode [ 1100.383582][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.431921][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 1100.470751][ T5939] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1100.854983][ T5939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1100.873686][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1100.874712][ T5939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1100.897003][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1100.906495][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1100.915682][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1100.923445][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1100.985521][ T5939] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.116172][ T5939] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1101.126571][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.624202][ T5939] usb 3-1: GET_CAPABILITIES returned 0 [ 1101.629756][ T5939] usbtmc 3-1:16.0: can't read capabilities [ 1102.175612][ T9146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.201271][ T9146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.218779][ T9146] bond0 (unregistering): Released all slaves [ 1102.315795][T17871] lo speed is unknown, defaulting to 1000 [ 1102.813527][ T5868] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1102.962168][ T5141] Bluetooth: hci4: command tx timeout [ 1102.983902][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1102.999980][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.041105][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.072658][ T5868] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1103.098232][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.120141][ T5868] usb 1-1: config 0 descriptor?? [ 1103.388378][ T9146] hsr_slave_0: left promiscuous mode [ 1103.401498][ T9146] hsr_slave_1: left promiscuous mode [ 1103.407761][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.415571][ T9146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.424221][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.432436][ T9146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.455615][ T9146] veth1_macvtap: left promiscuous mode [ 1103.461287][ T9146] veth0_macvtap: left promiscuous mode [ 1103.467107][ T9146] veth1_vlan: left promiscuous mode [ 1103.472893][ T9146] veth0_vlan: left promiscuous mode [ 1103.547558][ T5868] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 1103.571572][ T5868] ft260 0003:0403:6030.0009: failed to parse HID [ 1103.589749][ T5868] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 1103.715636][ T5930] usb 3-1: USB disconnect, device number 25 [ 1103.871495][T17896] No such timeout policy "syz0" [ 1104.026132][ T30] audit: type=1400 audit(1749429439.948:941): avc: denied { accept } for pid=17885 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1104.880024][ T9146] team0 (unregistering): Port device team_slave_1 removed [ 1104.917364][ T9146] team0 (unregistering): Port device team_slave_0 removed [ 1104.926951][ T30] audit: type=1400 audit(1749429440.848:942): avc: denied { ioctl } for pid=17902 comm="syz.1.3487" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1104.959823][ T6221] smc: removing ib device syz! [ 1105.042079][ T5141] Bluetooth: hci4: command tx timeout [ 1105.128492][ T30] audit: type=1400 audit(1749429441.048:943): avc: denied { bind } for pid=17910 comm="syz.1.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1105.184606][T17912] binder: 17910:17912 ioctl c0306201 200000000340 returned -11 [ 1105.622620][T17900] @: renamed from vlan0 (while UP) [ 1106.742246][T17871] chnl_net:caif_netlink_parms(): no params data found [ 1107.017026][ T5868] usb 1-1: USB disconnect, device number 10 [ 1107.075895][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1107.181930][ T5141] Bluetooth: hci4: command tx timeout [ 1107.812606][T17937] lo speed is unknown, defaulting to 1000 [ 1109.202902][ T5141] Bluetooth: hci4: command tx timeout [ 1109.880704][ T30] audit: type=1400 audit(1749429445.798:944): avc: denied { write } for pid=17941 comm="syz.2.3498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1110.185054][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.195764][T17871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.203060][T17871] bridge_slave_0: entered allmulticast mode [ 1110.210468][T17871] bridge_slave_0: entered promiscuous mode [ 1110.231923][T16142] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1110.245872][T17871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.256453][T17871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.265627][T17871] bridge_slave_1: entered allmulticast mode [ 1110.273077][T17871] bridge_slave_1: entered promiscuous mode [ 1110.389160][T16142] usb 3-1: Using ep0 maxpacket: 8 [ 1110.664719][T17966] FAULT_INJECTION: forcing a failure. [ 1110.664719][T17966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.678358][T17966] CPU: 1 UID: 0 PID: 17966 Comm: syz.1.3500 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1110.678383][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.678393][T17966] Call Trace: [ 1110.678399][T17966] [ 1110.678406][T17966] dump_stack_lvl+0x16c/0x1f0 [ 1110.678438][T17966] should_fail_ex+0x512/0x640 [ 1110.678466][T17966] _copy_from_user+0x2e/0xd0 [ 1110.678492][T17966] copy_msghdr_from_user+0x98/0x160 [ 1110.678519][T17966] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1110.678548][T17966] ? __lock_acquire+0xb8a/0x1c90 [ 1110.678584][T17966] ___sys_sendmsg+0xfe/0x1d0 [ 1110.678610][T17966] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.678667][T17966] __sys_sendmsg+0x16d/0x220 [ 1110.678693][T17966] ? __pfx___sys_sendmsg+0x10/0x10 [ 1110.678726][T17966] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 1110.678768][T17966] do_syscall_64+0xcd/0x4c0 [ 1110.678796][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.678813][T17966] RIP: 0033:0x7f547398e929 [ 1110.678828][T17966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.678844][T17966] RSP: 002b:00007f54717d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.678861][T17966] RAX: ffffffffffffffda RBX: 00007f5473bb6160 RCX: 00007f547398e929 [ 1110.678873][T17966] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 1110.678884][T17966] RBP: 00007f54717d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.678894][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.678905][T17966] R13: 0000000000000000 R14: 00007f5473bb6160 R15: 00007ffd81aae238 [ 1110.678929][T17966] [ 1110.850586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1111.105920][T17871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.637514][T16142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1113.119128][T16142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1113.142863][T16142] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1113.161908][T16142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.170023][T16142] usb 3-1: Product: syz [ 1113.177153][T17871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.191978][T16142] usb 3-1: Manufacturer: syz [ 1113.196882][T16142] usb 3-1: SerialNumber: syz [ 1113.200144][T17943] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1113.217537][T16142] usb 3-1: config 0 descriptor?? [ 1113.232585][ T5944] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1113.463917][T17871] team0: Port device team_slave_0 added [ 1113.483962][T17871] team0: Port device team_slave_1 added [ 1113.559316][T17871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.562799][T17941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.566507][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.604532][T17871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.625255][T17871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.649322][ T5939] usb 3-1: USB disconnect, device number 26 [ 1113.696894][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.831969][ T5944] usb 1-1: device descriptor read/64, error -71 [ 1113.998778][T17871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.045424][T17871] hsr_slave_0: entered promiscuous mode [ 1114.051640][T17871] hsr_slave_1: entered promiscuous mode [ 1114.059244][T17871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.066975][T17871] Cannot create hsr debugfs directory [ 1114.251925][ T5944] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1114.489747][ T5944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.502724][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.583032][ T5944] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1114.626795][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1114.637194][ T5944] usb 1-1: SerialNumber: syz [ 1114.761928][ T30] audit: type=1400 audit(1749429450.648:945): avc: denied { map } for pid=17994 comm="syz.1.3510" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1115.224551][T17871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1115.240074][ T30] audit: type=1400 audit(1749429450.658:946): avc: denied { execute } for pid=17994 comm="syz.1.3510" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1115.326761][T17871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1115.918372][T17871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1115.958298][T17871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1116.056109][T17871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.087708][T17871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.088985][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.101454][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.115348][T18013] fuse: root generation should be zero [ 1116.120823][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.128170][ T5067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.145075][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.152312][ T5067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.160641][ T30] audit: type=1400 audit(1749429452.078:947): avc: denied { ioctl } for pid=18018 comm="syz.3.3514" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1117.364806][ T5944] usb 1-1: 0:2 : does not exist [ 1117.369760][ T5944] usb 1-1: unit 5: unexpected type 0x0b [ 1117.452368][ T5944] usb 1-1: USB disconnect, device number 12 [ 1117.598462][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.002219][T16141] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1118.092125][T17871] veth0_vlan: entered promiscuous mode [ 1118.108954][T17871] veth1_vlan: entered promiscuous mode [ 1118.132048][T16142] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1118.144086][T17871] veth0_macvtap: entered promiscuous mode [ 1118.155410][T17871] veth1_macvtap: entered promiscuous mode [ 1118.163052][T16141] usb 3-1: not running at top speed; connect to a high speed hub [ 1118.175138][T16141] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1118.178977][T17871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.186452][T16141] usb 3-1: config 95 has no interface number 0 [ 1118.209275][T16141] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1118.213169][T17871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.226010][T16141] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1118.231353][T17871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.235542][T16141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.249868][T17871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.264659][T17871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.269612][T16141] usb 3-1: Product: syz [ 1118.273597][T17871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.286353][T16141] usb 3-1: Manufacturer: syz [ 1118.286375][T16141] usb 3-1: SerialNumber: syz [ 1118.293513][T16142] usb 2-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 1118.312707][T16142] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1118.352617][T16142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.364690][T16142] usb 2-1: Product: syz [ 1118.368907][T16142] usb 2-1: Manufacturer: syz [ 1118.402553][T16142] usb 2-1: SerialNumber: syz [ 1118.411207][T16142] usb 2-1: config 0 descriptor?? [ 1118.417812][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.434578][T16142] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1118.451250][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.539290][ T5067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.556937][ T5067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.739722][ T945] usb 2-1: USB disconnect, device number 12 [ 1118.755981][T16141] usb 3-1: USB disconnect, device number 27 [ 1118.924034][ T30] audit: type=1400 audit(1749429454.848:948): avc: denied { getopt } for pid=18065 comm="syz.0.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1118.976050][T18067] loop2: detected capacity change from 0 to 7 [ 1118.987142][T18067] Dev loop2: unable to read RDB block 7 [ 1118.992932][T18067] loop2: unable to read partition table [ 1118.998654][T18067] loop2: partition table beyond EOD, truncated [ 1119.004822][T18067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1119.630250][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1119.684676][ T30] audit: type=1400 audit(1749429455.578:949): avc: denied { remount } for pid=18078 comm="syz.1.3529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1119.732203][ T30] audit: type=1400 audit(1749429455.588:950): avc: denied { read write } for pid=18080 comm="syz.3.3530" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1119.763185][ T30] audit: type=1400 audit(1749429455.598:951): avc: denied { open } for pid=18080 comm="syz.3.3530" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1120.704134][T18071] syz.2.3527 (18071): drop_caches: 2 [ 1120.948025][ T30] audit: type=1400 audit(1749429456.848:952): avc: denied { read write } for pid=18102 comm="syz.0.3539" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1120.973042][ T30] audit: type=1400 audit(1749429456.848:953): avc: denied { open } for pid=18102 comm="syz.0.3539" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1121.002553][T18105] FAULT_INJECTION: forcing a failure. [ 1121.002553][T18105] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.030800][T18105] CPU: 1 UID: 0 PID: 18105 Comm: syz.3.3536 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1121.030826][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1121.030834][T18105] Call Trace: [ 1121.030840][T18105] [ 1121.030845][T18105] dump_stack_lvl+0x16c/0x1f0 [ 1121.030865][T18105] should_fail_ex+0x512/0x640 [ 1121.030881][T18105] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1121.030898][T18105] should_failslab+0xc2/0x120 [ 1121.030914][T18105] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1121.030928][T18105] ? mas_alloc_nodes+0x18b/0x8b0 [ 1121.030947][T18105] mas_alloc_nodes+0x18b/0x8b0 [ 1121.030965][T18105] mas_node_count_gfp+0x105/0x130 [ 1121.030981][T18105] mas_preallocate+0x77b/0xda0 [ 1121.030995][T18105] ? __pfx_mas_preallocate+0x10/0x10 [ 1121.031010][T18105] ? __asan_memset+0x23/0x50 [ 1121.031022][T18105] ? init_multi_vma_prep+0x30a/0x650 [ 1121.031037][T18105] commit_merge+0x2a8/0x1030 [ 1121.031052][T18105] ? __pfx_commit_merge+0x10/0x10 [ 1121.031070][T18105] ? dup_anon_vma.constprop.0+0x74/0x320 [ 1121.031085][T18105] vma_modify+0x959/0x20a0 [ 1121.031102][T18105] ? __pfx_vma_modify+0x10/0x10 [ 1121.031124][T18105] vma_modify_flags+0x212/0x2d0 [ 1121.031144][T18105] ? __pfx_vma_modify_flags+0x10/0x10 [ 1121.031182][T18105] mlock_fixup+0x27c/0xe50 [ 1121.031208][T18105] apply_mlockall_flags+0x2d4/0x470 [ 1121.031230][T18105] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1121.031251][T18105] ? __pfx___might_resched+0x10/0x10 [ 1121.031279][T18105] ? __pfx_down_write_killable+0x10/0x10 [ 1121.031297][T18105] ? __pfx_ksys_write+0x10/0x10 [ 1121.031317][T18105] ? xfd_validate_state+0x61/0x180 [ 1121.031340][T18105] __do_sys_munlockall+0xc5/0x280 [ 1121.031355][T18105] do_syscall_64+0xcd/0x4c0 [ 1121.031373][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.031384][T18105] RIP: 0033:0x7f5e5418e929 [ 1121.031394][T18105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.031404][T18105] RSP: 002b:00007f5e5506a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 1121.031415][T18105] RAX: ffffffffffffffda RBX: 00007f5e543b6080 RCX: 00007f5e5418e929 [ 1121.031422][T18105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1121.031428][T18105] RBP: 00007f5e5506a090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.031434][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.031440][T18105] R13: 0000000000000001 R14: 00007f5e543b6080 R15: 00007ffee13e4e68 [ 1121.031454][T18105] [ 1121.031733][T18105] vmg ffffc90003317c80 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 1121.054125][T18104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1121.069255][T18105] vmg ffffc90003317c80 state: mm ffff88803179d600 pgoff 200000130 [ 1121.069255][T18105] vmi ffffc90003317e38 [200000130000,200000800000) [ 1121.069255][T18105] prev ffff888056d4cdc0 middle ffff888056d4cdc0 next 0000000000000000 target 0000000000000000 [ 1121.069255][T18105] start 200000130000 end 200000800000 flags 28100077 [ 1121.069255][T18105] file 0000000000000000 anon_vma ffff888077637000 policy 0000000000000000 [ 1121.069255][T18105] uffd_ctx 0000000000000000 [ 1121.069255][T18105] anon_name 0000000000000000 [ 1121.069255][T18105] state 0 [ 1121.069255][T18105] just_expand 0 [ 1121.069255][T18105] __adjust_middle_start 0 __adjust_next_start 0 [ 1121.069255][T18105] __remove_middle 0 __remove_next 0 [ 1121.371064][ T30] audit: type=1400 audit(1749429457.288:954): avc: denied { ioctl } for pid=18096 comm="syz.2.3538" path="socket:[50488]" dev="sockfs" ino=50488 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1121.414429][T18105] vmg ffffc90003317c80 mm: [ 1121.434622][T18105] mm ffff88803179d600 task_size 140737488351232 [ 1121.434622][T18105] mmap_base 140043130322944 mmap_legacy_base 47589664845824 [ 1121.434622][T18105] pgd ffff88805233a000 mm_users 3 mm_count 2 pgtables_bytes 135168 map_count 38 [ 1121.434622][T18105] hiwater_rss 1e30 hiwater_vm 5fae total_vm 5fce locked_vm 6d0 [ 1121.434622][T18105] pinned_vm 0 data_vm 23da exec_vm 1a4 stack_vm 21 [ 1121.434622][T18105] start_code 7f5e54049000 end_code 7f5e541eadb9 start_data 7f5e54390000 end_data 7f5e54390000 [ 1121.434622][T18105] start_brk 55558732a000 brk 55558735e000 start_stack 7ffee13e56d0 [ 1121.434622][T18105] arg_start 7ffee13e6f6d arg_end 7ffee13e6f81 env_start 7ffee13e6f81 env_end 7ffee13e6fe9 [ 1121.434622][T18105] binfmt ffffffff8e813680 flags 800207fd [ 1121.434622][T18105] ioctx_table 0000000000000000 [ 1121.434622][T18105] owner ffff88807c862440 exe_file ffff888025f2ba40 [ 1121.434622][T18105] notifier_subscriptions 0000000000000000 [ 1121.434622][T18105] numa_next_scan 4295049273 numa_scan_offset 0 numa_scan_seq 0 [ 1121.434622][T18105] tlb_flush_pending 0 [ 1121.434622][T18105] def_flags: 0x0() [ 1121.534926][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.543980][ T30] audit: type=1400 audit(1749429457.358:955): avc: denied { read } for pid=18096 comm="syz.2.3538" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1121.567912][T18109] Bluetooth: MGMT ver 1.23 [ 1121.580244][T18107] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1121.611107][ T30] audit: type=1400 audit(1749429457.358:956): avc: denied { open } for pid=18096 comm="syz.2.3538" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1121.719176][T18105] vmg ffffc90003317c80 prev: [ 1121.745343][T18113] FAULT_INJECTION: forcing a failure. [ 1121.745343][T18113] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.772003][T18113] CPU: 0 UID: 0 PID: 18113 Comm: syz.2.3541 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1121.772031][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1121.772042][T18113] Call Trace: [ 1121.772048][T18113] [ 1121.772055][T18113] dump_stack_lvl+0x16c/0x1f0 [ 1121.772087][T18113] should_fail_ex+0x512/0x640 [ 1121.772111][T18113] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1121.772139][T18113] should_failslab+0xc2/0x120 [ 1121.772164][T18113] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1121.772188][T18113] ? __alloc_skb+0x2b2/0x380 [ 1121.772217][T18113] __alloc_skb+0x2b2/0x380 [ 1121.772241][T18113] ? __pfx___alloc_skb+0x10/0x10 [ 1121.772268][T18113] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1121.772293][T18113] netlink_alloc_large_skb+0x69/0x130 [ 1121.772314][T18113] netlink_sendmsg+0x6a1/0xdd0 [ 1121.772338][T18113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1121.772367][T18113] ____sys_sendmsg+0xa98/0xc70 [ 1121.772387][T18113] ? copy_msghdr_from_user+0x10a/0x160 [ 1121.772413][T18113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1121.772445][T18113] ___sys_sendmsg+0x134/0x1d0 [ 1121.772472][T18113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.772495][T18113] ? __lock_acquire+0x622/0x1c90 [ 1121.772553][T18113] __sys_sendmsg+0x16d/0x220 [ 1121.772580][T18113] ? __pfx___sys_sendmsg+0x10/0x10 [ 1121.772633][T18113] do_syscall_64+0xcd/0x4c0 [ 1121.772661][T18113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.772678][T18113] RIP: 0033:0x7f71c478e929 [ 1121.772692][T18113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.772709][T18113] RSP: 002b:00007f71c55c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.772727][T18113] RAX: ffffffffffffffda RBX: 00007f71c49b5fa0 RCX: 00007f71c478e929 [ 1121.772738][T18113] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1121.772748][T18113] RBP: 00007f71c55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.772762][T18113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.772773][T18113] R13: 0000000000000000 R14: 00007f71c49b5fa0 R15: 00007ffc73d6caf8 [ 1121.772799][T18113] [ 1121.996412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.002585][T18105] vma ffff888056d4cdc0 start 0000200000130000 end 0000200000800000 mm ffff88803179d600 [ 1122.002585][T18105] prot 25 anon_vma ffff888077637000 vm_ops 0000000000000000 [ 1122.002585][T18105] pgoff 200000130 file 0000000000000000 private_data 0000000000000000 [ 1122.002585][T18105] refcnt 1 [ 1122.002585][T18105] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 1122.054597][T18105] vmg ffffc90003317c80 middle: [ 1122.059439][T18105] vma ffff888056d4cdc0 start 0000200000130000 end 0000200000800000 mm ffff88803179d600 [ 1122.059439][T18105] prot 25 anon_vma ffff888077637000 vm_ops 0000000000000000 [ 1122.059439][T18105] pgoff 200000130 file 0000000000000000 private_data 0000000000000000 [ 1122.059439][T18105] refcnt 1 [ 1122.059439][T18105] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 1122.064403][ T30] audit: type=1400 audit(1749429457.518:957): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1122.097388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.119980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.132410][ T30] audit: type=1400 audit(1749429457.518:958): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.154054][ T30] audit: type=1400 audit(1749429457.518:959): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.175809][ T30] audit: type=1400 audit(1749429457.518:960): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.196876][ T30] audit: type=1400 audit(1749429457.518:961): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1122.217466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.235084][T18105] vmg ffffc90003317c80 next: (NULL) [ 1122.246502][T18105] vmg ffffc90003317c80 vmi: [ 1122.247203][T18119] FAULT_INJECTION: forcing a failure. [ 1122.247203][T18119] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.251047][T18105] MAS: tree=ffff88803179d640 enode=ffff8880776d9c0c [ 1122.271888][T18105] (ma_active) [ 1122.278692][T18105] Store Type: [ 1122.288814][T18105] node_store [ 1122.296264][T18119] CPU: 0 UID: 0 PID: 18119 Comm: syz.2.3543 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1122.296288][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.296310][T18119] Call Trace: [ 1122.296315][T18119] [ 1122.296321][T18119] dump_stack_lvl+0x16c/0x1f0 [ 1122.296352][T18119] should_fail_ex+0x512/0x640 [ 1122.296377][T18119] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1122.296403][T18119] should_failslab+0xc2/0x120 [ 1122.296429][T18119] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1122.296452][T18119] ? __alloc_skb+0x2b2/0x380 [ 1122.296482][T18119] __alloc_skb+0x2b2/0x380 [ 1122.296506][T18119] ? __pfx___alloc_skb+0x10/0x10 [ 1122.296533][T18119] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1122.296558][T18119] netlink_alloc_large_skb+0x69/0x130 [ 1122.296580][T18119] netlink_sendmsg+0x6a1/0xdd0 [ 1122.296604][T18119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.296633][T18119] ____sys_sendmsg+0xa98/0xc70 [ 1122.296654][T18119] ? copy_msghdr_from_user+0x10a/0x160 [ 1122.296679][T18119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.296710][T18119] ___sys_sendmsg+0x134/0x1d0 [ 1122.296737][T18119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.296761][T18119] ? __lock_acquire+0x622/0x1c90 [ 1122.296820][T18119] __sys_sendmsg+0x16d/0x220 [ 1122.296847][T18119] ? __pfx___sys_sendmsg+0x10/0x10 [ 1122.296890][T18119] do_syscall_64+0xcd/0x4c0 [ 1122.296918][T18119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.296942][T18119] RIP: 0033:0x7f71c478e929 [ 1122.296957][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.296974][T18119] RSP: 002b:00007f71c55c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.296992][T18119] RAX: ffffffffffffffda RBX: 00007f71c49b5fa0 RCX: 00007f71c478e929 [ 1122.297003][T18119] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 1122.297014][T18119] RBP: 00007f71c55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.297024][T18119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.297034][T18119] R13: 0000000000000000 R14: 00007f71c49b5fa0 R15: 00007ffc73d6caf8 [ 1122.297059][T18119] [ 1122.372661][T18105] [7/15] index=200000130000 last=2000007fffff [ 1122.375566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.528429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.534497][ C0] hrtimer: interrupt took 232677540 ns [ 1122.556269][T18105] min=0 max=55558734bfff alloc=0000000000000000, depth=0, flags=0 [ 1122.634521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.742535][T18105] maple_tree(ffff88803179d640) flags 30B, height 2 root ffff888076ff2e1e [ 1122.751044][T18105] 0-ffffffffffffffff: node ffff888076ff2e00 depth 0 type 3 parent ffff88803179d641 contents: 355586329000 2a08cac99000 15c000 ffff80011ec19000 0 0 0 0 0 0 | 03 03| ffff8880776d9c0c 55558734BFFF ffff888029ba620c 7F5E53FFFFFF ffff8880776d8e0c 7F5E5504AFFF ffff888076ea720c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1122.788202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.795006][T18105] 0-55558734bfff: node ffff8880776d9c00 depth 1 type 1 parent ffff888076ff2e06 contents: 0000000000000000 110C22FFFF ffff88807779f500 110E22FFFF 0000000000000000 1B30B1FFFF ffff88807779f280 1B30B5FFFF 0000000000000000 1FFFFFFFEFFF ffff88807779f3c0 1FFFFFFFFFFF ffff88805b5f88c0 20000012FFFF ffff888056d4cdc0 2000007FFFFF ffff88806e86e140 20000092FFFF ffff88805b5f8a00 200000A92FFF ffff888056d4cb40 200000A95FFF 0000000000000000 200000A96FFF ffff88805b5f8780 200000FFFFFF ffff88807779fc80 200001000FFF 0000000000000000 555587329FFF ffff88807779fdc0 [ 1122.845552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1122.854223][T18105] 0-110c22ffff: 0000000000000000 [ 1122.859638][T18105] 110c230000-110e22ffff: ffff88807779f500 [ 1122.865810][T18105] 110e230000-1b30b1ffff: 0000000000000000 [ 1122.871983][T18105] 1b30b20000-1b30b5ffff: ffff88807779f280 [ 1122.878114][T18105] 1b30b60000-1fffffffefff: 0000000000000000 [ 1122.884423][T18105] 1ffffffff000-1fffffffffff: ffff88807779f3c0 [ 1122.890907][T18105] 200000000000-20000012ffff: ffff88805b5f88c0 [ 1122.919387][T18105] 200000130000-2000007fffff: ffff888056d4cdc0 [ 1122.926726][T18105] 200000800000-20000092ffff: ffff88806e86e140 [ 1122.941485][T18105] 200000930000-200000a92fff: ffff88805b5f8a00 [ 1122.955649][T18105] 200000a93000-200000a95fff: ffff888056d4cb40 [ 1122.981953][T18105] 200000a96000-200000a96fff: 0000000000000000 [ 1122.992906][ T6230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.994464][T18105] 200000a97000-200000ffffff: ffff88805b5f8780 [ 1123.064402][T18105] 200001000000-200001000fff: ffff88807779fc80 [ 1123.070907][T18105] 200001001000-555587329fff: 0000000000000000 [ 1123.081982][T18105] 55558732a000-55558734bfff: ffff88807779fdc0 [ 1123.090487][T18105] 55558734c000-7f5e53ffffff: node ffff888029ba6200 depth 1 type 1 parent ffff888076ff2e0e contents: ffff88807779fa00 55558735DFFF 0000000000000000 7F5E51FF6FFF ffff88807779f8c0 7F5E51FF7FFF ffff88802630c000 7F5E527F7FFF ffff88802630cdc0 7F5E527F8FFF ffff88802630ca00 7F5E52FF8FFF ffff888077243a00 7F5E52FFAFFF ffff888077243c80 7F5E533FAFFF ffff88807744ec80 7F5E533FCFFF ffff88802f9c8640 7F5E537FCFFF ffff888077903140 7F5E537FEFFF ffff888077903780 7F5E53BFEFFF ffff8880779033c0 7F5E53BFFFFF ffff888077903dc0 7F5E53FFFFFF 0000000000000000 0 000000000000000d [ 1123.151940][T16142] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1123.165817][T18105] 55558734c000-55558735dfff: ffff88807779fa00 [ 1123.184565][T18105] 55558735e000-7f5e51ff6fff: 0000000000000000 [ 1123.191034][T18105] 7f5e51ff7000-7f5e51ff7fff: ffff88807779f8c0 [ 1123.224516][T18105] 7f5e51ff8000-7f5e527f7fff: ffff88802630c000 [ 1123.231009][T18105] 7f5e527f8000-7f5e527f8fff: ffff88802630cdc0 [ 1123.237835][T18105] 7f5e527f9000-7f5e52ff8fff: ffff88802630ca00 [ 1123.247148][T18105] 7f5e52ff9000-7f5e52ffafff: ffff888077243a00 [ 1123.255511][T18105] 7f5e52ffb000-7f5e533fafff: ffff888077243c80 [ 1123.264882][T18105] 7f5e533fb000-7f5e533fcfff: ffff88807744ec80 [ 1123.271331][T18105] 7f5e533fd000-7f5e537fcfff: ffff88802f9c8640 [ 1123.280292][T18105] 7f5e537fd000-7f5e537fefff: ffff888077903140 [ 1123.295075][T18105] 7f5e537ff000-7f5e53bfefff: ffff888077903780 [ 1123.303709][T18105] 7f5e53bff000-7f5e53bfffff: ffff8880779033c0 [ 1123.305008][T15270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.310149][T18105] 7f5e53c00000-7f5e53ffffff: ffff888077903dc0 [ 1123.310173][T18105] 7f5e54000000-7f5e5504afff: [ 1123.320595][T15270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.328862][T18105] node ffff8880776d8e00 depth 1 type 1 parent ffff888076ff2e16 contents: ffff888077903640 7F5E54048FFF ffff888077a943c0 7F5E541EAFFF ffff888031430a00 7F5E54298FFF ffff888031430640 7F5E5437DFFF ffff88807ce0ec80 7F5E54386FFF 0000000000000000 7F5E5438FFFF ffff88807ce0e8c0 7F5E54EEDFFF 0000000000000000 7F5E55049FFF ffff8880408d6780 7F5E5504AFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1123.338156][T16142] usb 3-1: Using ep0 maxpacket: 16 [ 1123.379364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.390748][T16141] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1123.398524][T15270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.408190][T15270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.412643][T18105] 7f5e54000000-7f5e54048fff: ffff888077903640 [ 1123.426731][T15270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1123.427220][T18105] 7f5e54049000-7f5e541eafff: [ 1123.433874][T16142] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1123.449305][T16142] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1123.454675][T18105] ffff888077a943c0 [ 1123.459437][T16142] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.473499][T18105] 7f5e541eb000-7f5e54298fff: [ 1123.477332][T16142] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1123.482328][T18105] ffff888031430a00 [ 1123.504021][T18105] 7f5e54299000-7f5e5437dfff: ffff888031430640 [ 1123.518354][T18105] 7f5e5437e000-7f5e54386fff: ffff88807ce0ec80 [ 1123.526574][T18105] 7f5e54387000-7f5e5438ffff: 0000000000000000 [ 1123.534132][T16142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1123.544098][T16142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.552196][T16142] usb 3-1: Product: syz [ 1123.556429][T16142] usb 3-1: Manufacturer: syz [ 1123.561041][T16142] usb 3-1: SerialNumber: syz [ 1123.567654][T16141] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1123.572550][T18105] 7f5e54390000-7f5e54eedfff: ffff88807ce0e8c0 [ 1123.580459][T16141] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.590048][T18127] lo speed is unknown, defaulting to 1000 [ 1123.596569][T16141] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.610683][T16141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.618983][T18105] 7f5e54eee000-7f5e55049fff: 0000000000000000 [ 1123.628730][T18105] 7f5e5504a000-7f5e5504afff: ffff8880408d6780 [ 1123.635339][T18105] 7f5e5504b000-ffffffffffffffff: node ffff888076ea7200 depth 1 type 1 parent ffff888076ff2e1e contents: ffff88805b5f8280 7F5E5506AFFF ffff8880408d6dc0 7F5E5506BFFF ffff88805b5f8000 7F5E5508BFFF ffff88807ce0edc0 7F5E5508FFFF ffff88807ce0ea00 7F5E55091FFF ffff888076e98c80 7F5E55093FFF 0000000000000000 7FFEE13C5FFF ffff888076e98140 7FFEE13E6FFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1123.636022][T18126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1123.682023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.697534][T18130] netlink: 'syz.0.3547': attribute type 3 has an invalid length. [ 1123.712443][T18130] mkiss: ax0: crc mode is auto. [ 1123.722024][ T5141] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1123.724738][T18105] 7f5e5504b000-7f5e5506afff: ffff88805b5f8280 [ 1123.745694][T18105] 7f5e5506b000-7f5e5506bfff: ffff8880408d6dc0 [ 1123.752465][T18105] 7f5e5506c000-7f5e5508bfff: ffff88805b5f8000 [ 1123.754516][T16141] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1123.759008][T18105] 7f5e5508c000-7f5e5508ffff: ffff88807ce0edc0 [ 1123.784375][T18105] 7f5e55090000-7f5e55091fff: ffff88807ce0ea00 [ 1123.790948][T18105] 7f5e55092000-7f5e55093fff: ffff888076e98c80 [ 1123.800345][T18105] 7f5e55094000-7ffee13c5fff: 0000000000000000 [ 1123.809869][T16142] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1123.817311][T18105] 7ffee13c6000-7ffee13e6fff: ffff888076e98140 [ 1123.833347][T18105] 7ffee13e7000-ffffffffffffffff: 0000000000000000 [ 1123.840426][T18105] ------------[ cut here ]------------ [ 1123.846375][T18105] WARNING: CPU: 1 PID: 18105 at mm/vma.c:821 vma_modify+0xa28/0x20a0 [ 1123.854570][T18105] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1123.858725][T18105] CPU: 1 UID: 0 PID: 18105 Comm: syz.3.3536 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1123.870502][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1123.880729][T18105] RIP: 0010:vma_modify+0xa28/0x20a0 [ 1123.886022][T18105] Code: 12 00 00 4c 8b 63 28 4d 85 e4 0f 85 86 02 00 00 e9 b3 01 00 00 e8 08 01 a9 ff 48 c7 c6 a0 0f bc 8b 48 89 df e8 59 20 f2 ff 90 <0f> 0b 90 e9 51 f8 ff ff e8 eb 00 a9 ff 48 8b 54 24 20 48 b8 00 00 [ 1123.905700][T18105] RSP: 0018:ffffc90003317b60 EFLAGS: 00010293 [ 1123.911806][T18105] RAX: 0000000000000000 RBX: ffffc90003317c80 RCX: ffffffff8b761883 [ 1123.920331][T18105] RDX: ffff88802e654880 RSI: ffffffff82131bb7 RDI: 0000000000000006 [ 1123.928538][T18105] RBP: ffff888056d4cdc0 R08: 0000000000000006 R09: ffffffffffffffff [ 1123.937387][T18105] R10: ffffffffffffffff R11: 0000000000000001 R12: 0000200000130001 [ 1123.946828][T18105] R13: 0000000000000001 R14: 0000200000130000 R15: ffffc90003317ca0 [ 1123.954898][T18105] FS: 00007f5e5506a6c0(0000) GS:ffff888124854000(0000) knlGS:0000000000000000 [ 1123.965113][T18105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1123.971720][T18105] CR2: 00007f630a49efe0 CR3: 000000005233a000 CR4: 00000000003526f0 [ 1123.979779][T18105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1123.987841][T18105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1123.995870][T18105] Call Trace: [ 1123.999187][T18105] [ 1124.002508][T18105] ? __pfx_vma_modify+0x10/0x10 [ 1124.007388][T18105] vma_modify_flags+0x212/0x2d0 [ 1124.012530][T18105] ? __pfx_vma_modify_flags+0x10/0x10 [ 1124.017921][T18105] ? mtree_range_walk+0x718/0xc00 [ 1124.023016][T18105] ? mas_walk+0x6a6/0x910 [ 1124.027371][T18105] mlock_fixup+0x27c/0xe50 [ 1124.031914][T18105] apply_mlockall_flags+0x2d4/0x470 [ 1124.037937][T18105] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1124.044282][T18105] ? __pfx___might_resched+0x10/0x10 [ 1124.049618][T18105] ? __pfx_down_write_killable+0x10/0x10 [ 1124.049898][T16142] usb 3-1: USB disconnect, device number 28 [ 1124.055398][T18105] ? __pfx_ksys_write+0x10/0x10 [ 1124.055433][T18105] ? xfd_validate_state+0x61/0x180 [ 1124.055462][T18105] __do_sys_munlockall+0xc5/0x280 [ 1124.076442][T18105] do_syscall_64+0xcd/0x4c0 [ 1124.080970][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.086954][T18105] RIP: 0033:0x7f5e5418e929 [ 1124.091379][T18105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.111089][T18105] RSP: 002b:00007f5e5506a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 1124.119557][T18105] RAX: ffffffffffffffda RBX: 00007f5e543b6080 RCX: 00007f5e5418e929 [ 1124.121920][T16142] usblp0: removed [ 1124.127846][T18105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.127862][T18105] RBP: 00007f5e5506a090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.127871][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.157308][T18105] R13: 0000000000000001 R14: 00007f5e543b6080 R15: 00007ffee13e4e68 [ 1124.165788][T18105] [ 1124.168910][T18105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1124.176203][T18105] CPU: 1 UID: 0 PID: 18105 Comm: syz.3.3536 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1124.188117][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1124.198198][T18105] Call Trace: [ 1124.201473][T18105] [ 1124.204399][T18105] dump_stack_lvl+0x3d/0x1f0 [ 1124.208989][T18105] panic+0x71c/0x800 [ 1124.212892][T18105] ? __pfx_panic+0x10/0x10 [ 1124.217300][T18105] ? show_trace_log_lvl+0x29b/0x3e0 [ 1124.222496][T18105] ? check_panic_on_warn+0x1f/0xb0 [ 1124.227616][T18105] ? vma_modify+0xa28/0x20a0 [ 1124.232195][T18105] check_panic_on_warn+0xab/0xb0 [ 1124.237210][T18105] __warn+0xf6/0x3c0 [ 1124.241113][T18105] ? vma_modify+0xa28/0x20a0 [ 1124.245695][T18105] report_bug+0x3c3/0x580 [ 1124.250017][T18105] ? vma_modify+0xa28/0x20a0 [ 1124.254603][T18105] handle_bug+0x184/0x210 [ 1124.258918][T18105] exc_invalid_op+0x17/0x50 [ 1124.263428][T18105] asm_exc_invalid_op+0x1a/0x20 [ 1124.268350][T18105] RIP: 0010:vma_modify+0xa28/0x20a0 [ 1124.273534][T18105] Code: 12 00 00 4c 8b 63 28 4d 85 e4 0f 85 86 02 00 00 e9 b3 01 00 00 e8 08 01 a9 ff 48 c7 c6 a0 0f bc 8b 48 89 df e8 59 20 f2 ff 90 <0f> 0b 90 e9 51 f8 ff ff e8 eb 00 a9 ff 48 8b 54 24 20 48 b8 00 00 [ 1124.293153][T18105] RSP: 0018:ffffc90003317b60 EFLAGS: 00010293 [ 1124.299216][T18105] RAX: 0000000000000000 RBX: ffffc90003317c80 RCX: ffffffff8b761883 [ 1124.307181][T18105] RDX: ffff88802e654880 RSI: ffffffff82131bb7 RDI: 0000000000000006 [ 1124.315188][T18105] RBP: ffff888056d4cdc0 R08: 0000000000000006 R09: ffffffffffffffff [ 1124.323161][T18105] R10: ffffffffffffffff R11: 0000000000000001 R12: 0000200000130001 [ 1124.331203][T18105] R13: 0000000000000001 R14: 0000200000130000 R15: ffffc90003317ca0 [ 1124.339169][T18105] ? mt_dump_node+0xcd3/0x16d0 [ 1124.344658][T18105] ? vma_modify+0xa27/0x20a0 [ 1124.349252][T18105] ? __pfx_vma_modify+0x10/0x10 [ 1124.354101][T18105] vma_modify_flags+0x212/0x2d0 [ 1124.358940][T18105] ? __pfx_vma_modify_flags+0x10/0x10 [ 1124.364300][T18105] ? mtree_range_walk+0x718/0xc00 [ 1124.369331][T18105] ? mas_walk+0x6a6/0x910 [ 1124.373659][T18105] mlock_fixup+0x27c/0xe50 [ 1124.378067][T18105] apply_mlockall_flags+0x2d4/0x470 [ 1124.383281][T18105] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1124.388987][T18105] ? __pfx___might_resched+0x10/0x10 [ 1124.394269][T18105] ? __pfx_down_write_killable+0x10/0x10 [ 1124.399886][T18105] ? __pfx_ksys_write+0x10/0x10 [ 1124.404724][T18105] ? xfd_validate_state+0x61/0x180 [ 1124.409830][T18105] __do_sys_munlockall+0xc5/0x280 [ 1124.414860][T18105] do_syscall_64+0xcd/0x4c0 [ 1124.419359][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.425239][T18105] RIP: 0033:0x7f5e5418e929 [ 1124.429652][T18105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.449537][T18105] RSP: 002b:00007f5e5506a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 1124.458031][T18105] RAX: ffffffffffffffda RBX: 00007f5e543b6080 RCX: 00007f5e5418e929 [ 1124.465988][T18105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.473950][T18105] RBP: 00007f5e5506a090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.481914][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.489904][T18105] R13: 0000000000000001 R14: 00007f5e543b6080 R15: 00007ffee13e4e68 [ 1124.497885][T18105] [ 1124.501103][T18105] Kernel Offset: disabled [ 1124.505412][T18105] Rebooting in 86400 seconds..