last executing test programs: 11.136251195s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000001080)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="04130dfa"], 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'macvlan0\x00', &(0x7f0000000580)=@ethtool_dump={0x3e, 0x8ff7, 0xffff87cc}}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x4cd00, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x67, 0x0, 0xc, 0x4, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x1c, 0x92, 0x0, 0x7, [0x1, 0x1, 0x6, 0x1, 0x7, 0x798]}, @timestamp_addr={0x44, 0x44, 0xa3, 0x1, 0x2, [{@empty, 0x9}, {@local, 0x40}, {@multicast2, 0x8}, {@empty, 0x4}, {@private=0xa010100, 0xfffffffc}, {@loopback, 0x9}, {@remote, 0x5}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0xe, [{@remote, 0x5}, {@broadcast, 0x3ff}, {@multicast2, 0x1000}]}]}}}}}) sendto$packet(r5, &(0x7f0000000240)="0cf318111d849141c259ddd6ef0f7bfc42e66cf7ebe25ac0c567b1253485742e8f4ea0d3dc1182a0a416c6faa8f1dad877b9d7dd8993b5e69248731182787f2bf60c4350267f79368865956f0838cd7bb00ce24af533480ec8800157db097e7480237b0f2ef8624cd964d272721cb6f70c6f996c10e81159ec0fb65ad1190075a9f1055d03dbd6659e1b0d2a6452debdbdce", 0x92, 0x48001, &(0x7f00000001c0)={0x11, 0x5, r6, 0x1, 0xc, 0x6, @local}, 0x14) truncate(&(0x7f0000000000)='./file0\x00', 0x100000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 9.583611893s ago: executing program 0 (id=231): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0x5, 0x7, 0x7, 0x19, "ce3974d3156b7810"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x4000000}}, {{0xa, 0x20, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r4, &(0x7f0000000fc0)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 8.693179704s ago: executing program 4 (id=237): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) munlock(&(0x7f0000e3f000/0xe000)=nil, 0xe000) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 8.047923332s ago: executing program 0 (id=238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003b00), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 7.925454246s ago: executing program 0 (id=239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000010000040"]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setresuid(0x0, 0xee01, 0xee00) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x7e, 0xc, "d387a1ae2c04bda71eed856ce706b6dcbf0237e37acaa47224162301ffee3621634841beacda6bde72ba9f21fa577c3c2bf69390676bf4d8a18b6cff85c744354a595ebe4966100d214e14a16f63196f9a44954466b7f8d8e4a21da4da0f01340773929d4a45f6e88f7ad16a818e6a0494dd2092f3d12494fc65"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0xf469788faf45546f}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) r5 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r5, 0xb) 7.896683349s ago: executing program 3 (id=240): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioperm(0x5, 0x37, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000140)=0xffc, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000000380)) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.73335348s ago: executing program 4 (id=241): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x38001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x218802, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x2) 7.651818859s ago: executing program 0 (id=243): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000280)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 7.35258391s ago: executing program 0 (id=247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x11, &(0x7f0000000300)="0036220000005162d4ddc75abe646793b6") 7.340096688s ago: executing program 4 (id=248): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(&(0x7f0000000000)=""/176, 0xb0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) iopl(0x3) setgroups(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, &(0x7f0000002140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0)="d86ef10f163bb208748dbe5203034520d44df480848d340dc3fa2df6fa23f6ec9a64bc1ab7e2dee7106045aa9a0ea0362adfc9a99393d8635a1ec723fc98a2e80b72a3a1cd8f71731d029fe72a42094c84ee860ef5067f6bd01ba329d4aea04d62c1e969c61939482062c46fe8f3c50f3524c7866fd384b24c6a029bbb652fa202a709"}, 0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) 5.349816247s ago: executing program 1 (id=253): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001fc0)=@raw={'raw\x00', 0xe501, 0x3, 0x1c0, 0x0, 0xa, 0x1000000, 0x90, 0x0, 0x128, 0x230, 0x230, 0x128, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x4}, {0xffffffffffffffff, 0x3, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) 5.347698261s ago: executing program 3 (id=254): r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r1 = syz_io_uring_setup(0x6965, &(0x7f0000000680)={0x0, 0x68ce, 0x100, 0x4, 0x0, 0x0, r0}, &(0x7f0000000240), 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc, &(0x7f0000000100)=ANY=[]) r4 = memfd_create(&(0x7f00000003c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb\x00\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6gmH\xbf\x9c\xd3\x94\x9a\x96\xe1n\x98\xb2\xdcq\xab\xd40\x86\xf5\xea\"\x9f\xd7\x01:\x1f\xfa\x04\xc6J\xe1|\xad\xef\xc2\xdf\x96\xe9|\xa4.\xa2\xdb?', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x2012, r4, 0x0) userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4e6}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r5) syz_io_uring_setup(0x110, &(0x7f0000000240)={0x0, 0x7198, 0x80, 0xfff7fffb, 0x6e}, &(0x7f0000000180), &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xe28) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x2, 0x2, 0x1, 0x2, 0x3}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 5.270537294s ago: executing program 4 (id=255): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) r2 = socket(0x2b, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) ioctl$FIGETBSZ(r1, 0x2, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r4, 0x1, 0x0) getdents64(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="426953230e5309abe4923da177da7e3b807bf8ad9dbd10c5446518fdc6a59a4b9cb896c67667f8505fcefb41ef56b2ed1fad3b65056a3ae5fed5e3b5c9ce8c07aa47660e8162209b085874a30b74f92416f2f5", 0x53}, {&(0x7f00000001c0)="c0ea9bdbf8b9f107838489e39410451b9d66ec1248f9a17a8024474794bae2702f849443d7f66bbfcb45d75e23930b6084fb25dd146fdd2866cbb673ab5a134c39978816ee56454f01982d3d9e7962829679ded7548287821901d621f7140ed44132326c718c8589bd8edc4e4de96412e2c9a08c30be02d80a7b4b0ed5ba0e9b366fff7788138320cb72369426552fee08981e39f0733285188a7714f42e0cf3fcc140924d640729257e522786c7a055313ac677ed7617fc7e1380a7bb23b49f1c095bb603befb6d5ada9ec1cdeb5d45cba4258d2f33e82e3619f3ebdf33a040bd0cdee37275d6ce79147b932e", 0xed}, {&(0x7f00000002c0)="1103ec1bd680f77a19afb3b5435de5f2b2fa7360117be4109f800b902632bad2e30c54d81953ff80bb4a3cb40964f5962965672caf84de7e918c6475ad1f788f6b661929c08e622fb4fcd070f0b85e7c48132026ae0ec3854d2eaeb83137e90b7dcdd912300ee7d836ee2212ebbc5ebdad6d230e1112dbb4526c70f4a74cec9ed4a667210633e055ba28bbfaa129c4d5bf8d060ff840d711", 0x98}, {&(0x7f0000000380)="76965d8accb51f04f73c6ba5ad465bec2e447aeba6c00ad9605c902526fae6f86404ce37fcc46dddee2104cb90b0ccac10e56c00ecd9ffb6312d4ba00de3e9e14ae642f0bbcb1d1dc931eb497582", 0x4e}, {&(0x7f0000000940)="532a1bdaa39f77342ccb021badee862b13ca0076a9030e717d0ba6052bda97dce89f2c32974a7bec06b63ae0cd5b1807d952b1ef9e978db0028855624b1ffc033dc4f0ca9828716dd5e0f89acb5803d37b80cbede78834636e9edb916bb03a9fdbb389b2756a3bfddf8a5dee375e43367f711a7f17516c94c9b983bcaa6420a31e1e24a9f618a8d2cc21166b5dc0d2b72331d8fc23997f6c07b28d5cd899b305af89bc1c2268ea3f1871f2ac9b9286df8ead8949d1e46b1b7ed5693ddded17f9d1a9aac3643d36f34e82bba74574998ba8a6fd811f9ee12de2e4133f28d008ef7812a3792ff6d94f7ba68e891e8d1bfafa4a7fe2b6798ce6f02f23ab892ef7b604f4dd272acb95a6dcb50c14e7b992a5f482182473c1d968a75f501aa625027a5920befc38e9955cd68535cb837e011ea388f55d6c5ec168621db2b9f34e03d42b8df1cef8f94d906ffef5af3deae1c9ef9a0abc6ebdb6a1a0be0e2eb3be43e2071cc089fac66ba6d9456d54a5e743695f444b9bb66286127dd605769dea1487946464cc798ab17d10adca233db5f546d5d8f107b64af1c225cba2d1b69a74db1b19c801628bc62ff1e6311ee93d0f6024281928823c92aacd7aa0a7a86b027797ec29d15df10a1a2a425ab76b8ba64930bbb527903d506601355bf195688685470663aaee43adf340be9865ab98c5af3c65b177209618df825bfb49b1da87bd23be1f3e70bd898427c8405a4fd7a58e148fc192472ec2d21182625370d4e7d61fdf29d82e4c2135f9cd854b019f8a0748911d826915d8b760a115e598308fe78ba475ce5d2390efb3032b95a2d498e9161c48bceb15c37e7cb87378adbb8835f40b75ad5be6f1e26ca3dabc1d3ae957ad07936a8c0937e9b27f4a992e3dc32c088b76e3e5314e8cc9b8b6d2d2b6f2edd946530263073bb3066610154239b9320bc6a3892f28b8c7a21e656d29b96df05be707af8996ee34cecc779cce23dcea14addb8e93be3971352a69d805eca281e8b16c4022c986d4d4aefe041c8b2ec5675565ab40390f1c8817a0b8b1671faab61f0387446eafb5a6cd1b71ff5e9e7538f982d4e00ad53051750897db38b9156aac08f023dcd9085991051e4866d17737bf5325d07d211055cc29a8c70a5f8f7c1d614877107a041a0d0cad1b098e0319ec0b4c794365545def2a3372b42a89310a872c48e90a811ed7aeb4c49a8b9ddef444728881bba03489cd5a313f617cb80d2fe96e354f9942bdbd80e120b443776b03cc5422650d6ee74acd17305b67b5fde9e342a79ab1a97b72aa20d68a1e7bca144bfcb098aab2fc164e002403a9cd15821147e5c95986b14d192b6d9c740c1c700175f53cc7793b201d84128c3c2f5f4892f019d1b7483aa106c21a7436e64c7ee6cbd44796829ed13cba11d2049d595c1cf532fb34e82ae9565326433ac37e2165120a9ea09cd7ec04ae0ebfc29d5222041072b5a2abf21cb003ddaf5102947e65e12ef6034bb34871a9efaf0233ece7e46220e42345b0bebf104e8fa696dfc8508c2404bac3b272b846e1b9cb68cb632ce39123e7af5938dc0ef9714e485049f7e9d26d32495f32fd8c6a28a02c9f868ba14a53cd2297dd3e2f1816815be1e65d35906b4867c808bf206b27fdd595ee6de22dd9c6af84cce3fea617e60b2acc4606d3974eb5d411147eb9bfa03ac4870061bf2f15632574c40a8859f8b443c2def839c836fc606d6a5315c4497ca087fd0aaddeef46c3d44f5a473e95c8a5432ec43ea59b70fe0d74bcb5084e7c394ee1ed06884efd93b413767343ddcb40e28c44aef99e524d981310c0169f22ca2eaafb003f6c6c1474ba288bf9d37079e0b5c34ae4ebcd14ca229da55f97026ed5a12f6802cab14ab864fdd8b417579897271d723d6d3be6696f2730f845c699660cbe3bd9aa88de247217e556f2c5ea9f4336b9c2745db7f11314c70fdcfb50416cd4c2dac6c34f7d7a645ee1605f7fc55709c35ba89a4c3fa4488ea8929ebd2a5d6eb0958555747624c9ae6e41eae1e267b0478137b5dab83e97283048f1925614301154b5256389d6af0a579e947e360f811c5f649e3180a5046b051205e32c301448d30bf4bae14e8b08593bb57f6cdb1f6fbb4dd69191ec7fb5aef492b18886d65ef04f16e2a82e4a47d3831991854b9285b13a4a13e1b438791c11f24d5229720e077f4fa067c380ac3523bc92cca3a038c7b8a88d31f8cdb4c82933b90bd1cf94022c266e1b8d3d12dc45e48054a07576fe856982867275d0dc5270b4b48d5919a62598243cbc956b6abcc4e7fe79175ddc758174e2d381d6a7f444e7efb0b6eb5c6d677a68f4f1c418127179b5239acbc5257a0bc1276a1460144c46632778eee7a159580b50f2d7353f72670db682726a5838c82cbc06827ad70c4d0dc5f9d32e3191edb6c638097678993a8a40e69d439e1557611540d7ab843e1b0ad85ad4e982fb7b6fafbe1aec61f3eb4162c17f903ad3fc7901bab2062fd0a3ec4e09f9366ad2a2748f93979cba1e5ef88f596dada52428f627e809e70e47a091e60ac29a1460bed7eb3c9271d154b52c4b623a4403e0bc0abbd944f6b1c3438fd6507f270e7c7cdd8b400c4a90ce77e8cf10752f722b33e2d8434560597f336242a7fdc5fc181d96fce6b9aea7925340f93c53b8f97230374c7dac0a8c87f292fa7956c94989f62f0a5f7baa186e249db2fb9ad62981329c069a515c1b80461ae48b9d95776f336fbfff1f2cb8ade46e8199b55b2287c3c73280eb1dfcd8d973ccf25c1cf3365c3b43a15d743fc2ac90437ebc488ce98301cb8d48e571c8daa75f03c16406ed93d2c67322370a030372139cb67d83ce3a20b73e67ac8b1e1e49b0125604e6ae492142b028f4f010b20b9d958a31eb458ae10bb8c3e08e4c757328a0ae23d209adfea5323fa87c8c7eb012026a263845e064dc5742a477b580e64193354638bec10b95c33280ab312f1faf460cccfd9f0d695d41ee00dd4257fdbe2e00c44654d3622c1f17c87aea047ef5c758380f0ffad1ce7603cba1f5e57cb20743d30799daf4b7f9b3cfc61f53963333410f72d7bbeffcbf27a4ded279f66c47fdc7fc989cc0d9197696409cd5e78f5b8a22fef9f6a5e58fdc719d6c6172c89b40dbf447c4805d9deba7e2e4d7528b29ced29e671930bc1a4952b827b15c472fdb29af065277f390a65a56eb7dfd422ac9e7de11aebb3ddbd4368451672beb028357d7dcda8b138f73a61ff22bd5cb227daf3dafdb0628c42aff013e1e780570c4bbc3d9fb501a142f3b7ac9d7b65ac6e44c392a6bc33f7dddc3e79797570be7eced22b4b49022f644a39862f6e3a7c02370193537c3c548ca61514f1e7e28a97c769ea0149dfcf4dda91f3c3be7572cdba5e96f4bfb4a360625101a7beb89b7616d98cee7e50e60e8d41f562230dfed4b47b3c4a495cefcef64930aaf29e7b25a4f8beeb4462f0909b77356ba4906e17770f2307b75031f7acf1674fe188e8d20863b1b90f28c9f3e8404f0ac5aae1b53394e247e10fd09a8782fd476d1cce2f3185c9597248f37c562c0ddc46457e20604abe2a3591144ecc2db9d056288e0bf405711816dbb5c078ce368bfe9c4a05da6de9aa40d0cffac6f7ef966f7c7273f70e59aea1fa885396ac2adcf62f7c1b850a546dbc7de62faa103547036b91b2aea39cdfc313761b4e8c7ea0aabf3c16570bb5cd56cce8aa3cfc1b6aba6f5fec50a1f63577a73ed3cbb72045abb13b2db68bb29821f55bfd56bf594af63880550aeaf976ef12d89df83b28ecb8eeef4de9ab37932c33d50055f8aa03c63c31434840575cf3958007c9b95c3295f6ff37f58ef995811871e09e7f9ca54797706a6bec4c692a7941ae7f4ba1af2f3dfe7c6309635ed5e68906adf7aea6d5f62f2ef5bd32819360ab0d96f98826ba9040df165ef178493e3b6dca33439d330ac54a9039c48a27c7288db2d5e", 0xb00}, {&(0x7f0000000400)="29755102b6c01ab200f0190cfb78d395fa2fb2232f5d14d2757a3d9697c48913cafd64289c8d2b4a74f1f1869f676af46a14f1b30046cbec23c221e196a6f8aead85295ff3f60b0fbfe043306d7c49d6d311efc700c3ebc04f101c98d41b587d97a4cf72a0c470feab02cbe9f4d3a62619a4f621a879b3fb1617c183f1e2f09cec9b9b9dc73be9da5311820cffb94da3ce7c9a", 0x93}, {&(0x7f00000004c0)="d9882457fbbed0a38d1636ecfdbc7cdaeec4b333a1b9c18b14e8c8f95e7829feceb251ee915c985a122b85b7881d1d1700cf7ccea1caad65b98549561d0e0f61a1adf4", 0x43}], 0x7}, 0x8050) getdents(r4, &(0x7f0000000680)=""/228, 0xe4) close_range(r3, 0xffffffffffffffff, 0x0) 3.679322411s ago: executing program 3 (id=258): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x121) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create(0x3f) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000480)='y\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xf0\xcdC\x0eQ\xdb\xf0\x98\x14vX\xb0\xb3\xba\xbfSP\xcb0[\x89\x94\x8eQ\xd2\x9c\xab\xef\xd0\x8f\x8d\xcf\x98\x8d`\x01n\xb2\xb0U\x15\xb0\xda\x86\xa6\xbfg\x8a\x81-k\xd0\xe6\xe4\xd2,H\xb6Y\xba\xd0\x19\x97\xd2\xf4(\x9c9}G\x10\xfc}\xa8\x18U\x9b\rM\x9e(\x9dY\r\xe3\xb7\xc7ZU\bo\xc3\xea\x85\xe0\xa1kEar=\xfdA\nN\xdaZw8i\x10\xa5\xa4\x9dB\rq\x17\x1f]\xfc=\x96d\\c\x7f\x94+\xc8\xda\xfe\xca#\x02\x89J\xbc\xb9\xb7V\xb8c\xce\x94\xfc0\x93P\x00\x95SoS\x03\xb7\x8b\xbfe\xa4\xa3\xa2.)\xd8>\xce\xb1\x00'/453, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001017f0000000000000000007a82", @ANYRES32=r9, @ANYBLOB="0400000008000000"], 0x20}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) fcntl$addseals(r6, 0x409, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x8, 0x0, 0x7ff, 0x8, 0x3, 0x4, 0x0, 0x8, 0x0, 0x9, 0x4, 0x9, 0xec0, 0x2, 0xffff, 0x3798], 0x2000, 0x280080}) r10 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6}) r11 = fcntl$dupfd(r10, 0x0, r4) ioctl$SW_SYNC_IOC_INC(r11, 0x40046201, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030"], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x800001, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$key(0xf, 0x3, 0x2) 3.576433045s ago: executing program 2 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) 3.526920014s ago: executing program 2 (id=260): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.315711243s ago: executing program 1 (id=261): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="b00000001100210f0000000000000000040000009a"], 0xb0}], 0x1}, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, 'veth1\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000102, 0x0) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 3.188348631s ago: executing program 2 (id=262): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f00000028c0)="3f4218fc0a7cc78369", 0x9}], 0x1) 3.187592193s ago: executing program 1 (id=263): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) read$FUSE(r4, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202a) fchownat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, r5, 0x1000) r6 = dup3(r0, r3, 0x80000) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r6}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x2, 0x0, 0x3}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x1, {0x1, 0xf0, 0x1}, {0x0, 0xff, 0x3}, 0xfd, 0xfe}, {0x2, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0x1, 0x4}, 0x1}], 0x40) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, 0x0, 0x0) io_setup(0x22, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r9 = socket(0x28, 0x5, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.026676664s ago: executing program 2 (id=264): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) dup(r0) sendto$inet(r1, &(0x7f00000001c0)="e1", 0x1, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 2.910387193s ago: executing program 2 (id=265): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioperm(0x5, 0x37, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000140)=0xffc, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000000380)) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.322147459s ago: executing program 0 (id=266): socket$l2tp(0x2, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000), 0x8) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote}, 0xc07, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0xc1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @dev}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local, {[0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x100, 0xfff, 0x0, 0x0, 'ip6_vti0\x00', 'netpci0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811010200010902120001000000000904000600096e7e00"], 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x30}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x241, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800020, &(0x7f0000000400)='\'%:%\x00') syz_usb_disconnect(r3) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x10110ca, &(0x7f0000000140)='bridge_slave_0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x54, 0xe5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109025c0002014240030904000001020d0000052406000105240004000d240f0109000000018009000a06241a090013090581030800026b110904010000020d00000904011902020d000009058202100006060409050302f7038004"], 0x0) 2.23621148s ago: executing program 1 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {{0x21, 0x0, 0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet(0x2, 0x3, 0x5) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) write$binfmt_elf64(r4, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.038553199s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='i2c_slave\x00', r1}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000191c0)={0x0, 0x0}) syz_clone3(&(0x7f00000194c0)={0x2180c00, &(0x7f0000019240), &(0x7f0000019280), &(0x7f00000192c0), {0x3d}, &(0x7f0000019300)=""/249, 0xf9, &(0x7f0000019400)=""/116, &(0x7f0000019480)=[r2, r2], 0x2}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000019580)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000019540)='comm\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x100) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x57, 0x87, 0x40c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x7d7f, &(0x7f0000000180)={0x0, 0xb8e5, 0x80, 0x3, 0x105}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd7000fedbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00007ccce22f2cff01bfd5"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x90) setuid(0xee00) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f00000021c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000fb2ffff00000011907800000000e000000100004e200f9e907804000000ffffffff01040000000000004303259991142763059739a767eb8337efc8ffe2de4a5c69cf058ee47fc29fbb00948ed6c9b964ee249f38e29603ff8919b33c41620826724c021bffcab9b2df3e6283d7ee972c87fd9b7a584d41327d5e36bf94aac8392007f99ae5702a5a0e4024f6da56b465b353aca71e985963e52cfc5471652a27e4eb53328b3e447ac8b7320b54bdb41fb0c0166e19383fa1bf0f891d213b8c910536d864f4405d562527e3d10896a24230405f1d8d4c58cd03649c8d5c52a9b0a253f69b81812d72ff4212f492bccd9e2fbd6ccb35ec40318051d01e733877145f6b88cf18792ac2c250e2bb3375eeed43ebdf559c4b0d5e39b83c651d7546b069aa1b7ff6c7eaf6f06c3ed547073c45c0d70e14481fc450ca0c49b6ac9e099b4de04c150be8eda7944d4155bf477577b6c8ca23aeb29124b977f997c75b915bb93b929c5f9784994ceacbdd0b8c55ccb9aae9149ae3c03d3b309fc1f9bf122ac4b69e1be5215598a422023547d482adf4704608137039aa91991ac2945e3428e28a81fdbcd3f26281de4525942843469e31d2b3febe35e769615a2fdec81a49ef317f82d1683e46ee473f81eb82efd3dd0eb8fc282d6fc70289baf81d5f07d18b8b2819784c788bca5df387b2026118cab8d767774473e5456ca132220605727ee22aea41c2a7f2159e82b11c4f548bf3c207c17905666215fb760886f1ddcf470013e359eed987ca5b6ce1f4b2addb6022f5a6e8723aeb8d585554ec51d33f95dae874b6b737814816af386920d3692da8936dcc9d2d2e5135b040b85ca10b22fc570594763fef8dc0d107a7769dfc1cbec629fe8bb1eb6b9a261ee09b6fd2c295ddbdfaca162a813e5638530ee675305bef4683d1a58d886c22e5149231ec7cfaff2a88d510f5aa2627f08b4dc2234d82c36394bfd37b7b341b86889c4eb592a14cd27db7711525cbe4321e76f5a2478aabd7cf139abca52407d32cb4bc0fdbd7a99d6d53887e07267f954fd2c4ba25373346b2d1b05eb8c7b265ecdc2945031dea63a6bbbe3b9d7877f6f0d726b53295504322816467019ebca4eca9e059c2cb27fc02d65c8b8af9cd7f9f29330d10a71da030b2bcdceb67e8c9339d634f2f56bd762815e5392ea04ce710baef02fc02a51e60f7e8b7d219342270e13533d5b677abe6f75ff07f33f0e3b5a64ae4f60152f351a2d578a7c926ee7cee2707a7373dbcf1e982a157a96f6e261de02fa9d1a925dcbe1be137caf502d75ca934567c71fb2e70793adacac1e12c8909e7b4471daedd1afac96da4beef4b1ca87c5ee01e23fb18591f6547122713dd69075f7cb5e6b53ef5ac45c58ddef230a0b958e5a691f924ab3fdea75a4ea8ae61b08021dfbd0ea7fd1a1721e814f384fba645a635ef1aa434323dfdec478e3023c876d6d1e822dba2279cf7a755bf0a2015e7b21722ac60c752af4020a726dc7dbe687ac8502a729d5e1445f1eadea6fabe9839c096eda93e863adfee9acc94b52e0806be34ba9bfa2aa5d0d36fee162c6ee527ece7e008e9fd5655ca5171c46d28f5dc77f0b14c5974ecf53c77d5937691e509e5abe12b29a0d314aa1aa12ac987299cde252e2bd510f9adfe5cc0f95c7609924560dc143f64f8e6025f23abc6d7dde9ea3d985c9eca6f8a0a7a3ecd952be40c4db2251c09878a3eac6565e919c43a240a1dafac03c4b98c65f2c282b02c9c3d39afb1cc6976eb9bfde0ecd9a6d115482b29639fb133ab008c6ee0d99addab7f4b68921e9da8413f117361b6a74829080ac9afed20af66580900e4dce5b569c2a84ea093f0c8f3812ac5cbb4ac67a0928ae635471d6c77b6144c5be2eb5895121836a3b3f0a48494da40bca3601ff6cb7f72689e07f64dec45db77f6dab94bf26964f079d698a21cc6c34714cc5f03366a0e684570eb9c12f9b7fa521e30f41dd87ac70dd8e46db974dba008a0873803aa165d9e071508bcdedeb8057af9dee712063b146504b046940f16b0fc5978afb0a657c5cb127e2c08724158de9b8d5595d134f84c1dfd5f6ec02188b28c2d36ff9f54fa94b150b12d28548cf0c0fc78e1fb06324d5b6e29fb8b0fa3b15afd4662166dccaea040e19ed53d960dfc4e86435999dcd98cfd6de2b9f8eac14f25c82d28828ce70b4dff2e5d900a320629472c05e1080d85f6797f97524de445321ea85e8d9540368d81601cf66c6e054c4624840be186fb14d105bcfabd936b7975cf26dea1cd08c66da8cec4b74aa6c62cbb9a169cd044f43a33d30c9abe508f1ddb8b4093a0738f4a7285cd672ab3121a58166f2f98202cbcba2094771087aabc6d02ec646cec295fa453829bc739c0f99998bf9c2441f4f756aa736d3382009d1ccda1363e0bd484b68325431ee180659691af40c32168497d7a37af81d4780546461e8e6d38133ad74353981a989513e2e1ca7e9b68c5fbcbcf531d141a5cdb9e0f26dc4247086d85bc856c1abbec42a63f2aad31a6864340c280046eeae638c3dcb538a7481707e720878d15a55b727a52448b14724af9659447aacf6d2a3365dbb1e5cdc6125c6c4219027a81826ccd592bf60b2bd18b614df59d3d834d786f8723bd1431fca140e696959b3eebc5dd62447c4a0f47d7e10a856b0073aed0f66a87374c379d79ae17b0f1502812386c7b1f315c94f5ba103d3a7aceca469c018e5e8c9c10d6400815037fd0a59ac3f311b6dc08f181049f61f6e3bbbe05406c0237c792722e3ad3cea04d267f746a020c4678cee1289a47fd98f1a22218ea73ffd71f2c5f34610178cc56df75f1517f0d54f672daf28815784cf31f539b40293f7fd193a325a3da83d5cd17f3016fe1d9248ce0f38e9d7c9b6c81c5926a9de9fe05f5c0afd28fb6821a5e9ffb3f7b0af8d40255a5a886c808a93a1942dc5b11cf4dd93c64237822b920386acbe50c2e6c0eff403cf00ee77ce6cb5c77c8e5823b26d9974c0d70609fe303998b0990d10864fd4a129edf5a38d058e4c00719ed5fef2c87980f76357114b8712abbdbd5d77395bc42b11d10006594368346bb97f9105f67e91555d607a9a8801b116a200d6fe488b0e1dbfd03d397eb491a6ae9d2b383e5ce5e29d36319418981ebc0da839f070c87ac620ddf695e9db59c50f642a0e7eb5e2c9a201565c2a4b43d7001e32f6f3f581cee8295f0dcde8a325f546b71c0e39c3a97dc9713142de04c35d9e8dba413879a7b4e4df1094f17901e3d83106397b5774520a2de8b6346f7012f983fc81728f8500aed319c32180085c22886413a69df80ca1ba1c3d2af55be3cdb4de8420260ef4775d73552c7a7831b5548504748a975ca6de8008649ba6f24ace958801d904d32e1a351ed80c4cc6c87410b46611a8600e2c5e5fd4032826b32ea039ed291740a7d1ce4259c5d20b787bd415bcf9f1d5f2a03df16b9ef1414c2f01c8b397577a2cca4e62bcd9381f244ca8416855122c193986ed6d60ef7cc2e4efe932da63f3458cf19b43852e12b62baeb3fa9005b79bdd0b987b0ee08cb1574fc7ce1183cd75a90348deb513eff5f70cb7f169824048514c082784e25710a487ab164a0d9f8d27bcfd33221b83710b06e1641c26d4aee9b1889c481922a84fcde44bf4fbe43b99381ad7b306b0106b86b284c8afac8d644111124698092161ff91c2df1f4f8170fc0166ef07ffebcade08c67a53a731d42ee285437895d40e22943d6e6251137eeae93f1e6a36d2aa2a90853ad46d04d3f434d2dfbcec4408996b0eee8e28fa91cdf28da9c4452b90c2768c24ab32e2bb587b00ba88c8cc587fe7d4bdd879a46f55f57de9e71503b9c876998aad61686cf3d72345e658956411497b465ac5a92eb7d2fddf0fc57bc5ad696a2a3dcb1491041446f1327b99ff7772ef0c6115cdf52073cce6b8502dc74dbe69236ef448102104f9e56714b6f44f97c61f29628d71d000a9ce237f7258e2e49108d733d11140450bef2fb3cd717bcf6c2a3cf4cb34d39ce251478d5cb6ce83d705a70d3a87b3836eaec324f3076f8c3443a0c8fb9b3229c4384bdec04d7029556c4cd8c0b2b3ca163a3c968da60c06827e3f38764269206b872740d6da379debb1b06c7efc252f48af2163cacf2bad201a3b73401e9725b4db3bef74b82c4008f6fb2fd306cef8f7e98d8209fa24e29c8b192290560084e578ec4e2d515ce4626c1a8f483467ba8124dc31e39931ca5f9e6dcb7b9d8bdbd3601cbecca628776b13b658e2077e9be62605b2f42bff9a82816ae59cd2d36dea190caaf76e05346cd0d263b5fbf69c02be28047f2f9ff155b09d9bbe8682edde31f48b516f45a7fcd83b429c146f3d719946b0b4623215bf050c2cc0c2bc83ca29f1e5ef6c25665f71d1d8d1d6dd4e9bc2ee08d49c7e8c955ad31ca63dc09238728eb92bffcf60e5c693e92a479359aea69f5c7347e8966362fbda007dafe6ec21cdbd9184976022a942de2237caf56884b9df8094be7392e7a5fbf5b716fcd25f6f41cf4171a065cfb6c8e7813fb97c4cd46d416449ef1f28467ca0cf1835d7ffd9695cd802eb5cf0224af6bf4885c85e0eb04c4fe59a52c4cd2dfe231d96c8fb5bbedc0e39c6f533fb62af7fd25ebb905c50c756112765e93ca0eab01a0c35aa6b2153b6928bbf2dc44d90f54dd41862e1d8f36745d9f2454a86d30be17475e9d33bbe47a6297bf31205f8b26da623c48a99ff72a8b0fe47add46153f75d1c715eb6bc11cbac3fecc020bdc4e6f384fca58bd566df0472c0879fddf25aaa2544130bc0225ad7aff44f2b2cd742ca87af8745bd6b9785700f29116afa483d27d22601a5562c79af4a96ccfb50b2bbd61be58b2f0d44039a5fae1e12f5c4bd56a00216864f18958949e4d073b94a75ab958452493ecdb5f41698a25419baf3e1b81ba4aac19daf4b6c01173f64892e700486671f58de95598c38a89d6fefb41cffaed58a83edc14c13314c2a13426645fa5f267e07bb59d130a74b8146958739e77fd118e3962a2e51191fa7b9a8e1e5c33c652b78993f06d85054a3918a335cf4b10f2a505bb8460cc482bb3ac67299521bb6d4f011f5c7e9be9da3748e41164073574017ea13c4a4908febefefdd73123452e2bbac4e2daac26d038122c11c8197acf9da9b3bd545344d9bc49e5d685d48923b5013a0984d900da1bfb520fc8c2ae8a4f313846dbb41c525ca27c9d662c88a73e76bdb8eab67679fb7d48ce5c7f1c4e7447393757c387ff4e034507034a8e6a304dbade06c568b1e345b82e83a5ea052189fb38c880fb2e9f773699a81049eec9357f10247461184ef5b65403dc217eba6c9014eac6a5ad068554838c6cf3f6a490780a8e20f3703311024b5b53c2e67ffb8112980098eccb0f001d41e44c14552c2b54264ddc9debfff70d1cf3c893d3e53f62f29134713ec1742915bb50d4f1feabe8d033ac2b5c8d19f6de510f7b50eb70729c34c6e0d75d339e172a13aad613f500d01558b3fd5ec2587de43881975376b7bf1f8536251653b23fe5a9b043fb48d812fcc07497d3904473b8906d9e1899f93ba4388b00f55e8e587261a5b5db401cc0b9fb3192d27443b3529749c3f83abc84ecc252c76ab69799b43c72bc658e6640d1c06724f8a699"], 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x5, 0x4, 0x4, 0xa0363159, [0x9, 0x8], [0x4, 0x9], 0x32}}) memfd_create(&(0x7f0000019180)='\x00', 0x1) mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000190c0)={0x8, 0x40, [0x1, 0x0, 0xffff], &(0x7f0000019080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000019140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 1.905540839s ago: executing program 2 (id=269): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) setgroups(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x400, 0x0, {{0x22, 0x4, 0x0, 0x27, 0x88, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x800000, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@remote, 0x4}, {@multicast1}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x1}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0x0, [@local, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001c0073fc090000000000000007000003", @ANYRES32=r4, @ANYBLOB="020000000a000200bbbbbbbbbbbb00000c000e800500020000000000"], 0x34}}, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000180)=0x4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000029c0)) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000f8586", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250b00000006000a00a2aa000006000a00feff000006000a00a0aa00000c0006000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044801}, 0x4003) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000080)=0x1) (async) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000000)=0x1f) (async) ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0) 1.748231845s ago: executing program 1 (id=270): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) r7 = io_uring_setup(0x481b, &(0x7f0000000500)={0x0, 0x267f, 0x400, 0x2, 0x3d5, 0x0, r1}) r8 = syz_pidfd_open(0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000100)={r8}, 0x1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x6d, 0x2}, 0x7) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) sendmmsg$inet(r9, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74a", 0xc6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63e", 0x82}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0ef8f2d4a071d516ed09b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646", 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#\x00N', 0x3}], 0x1}}], 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) 1.365223799s ago: executing program 3 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.220691363s ago: executing program 3 (id=272): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_CLR_FD(r0, 0x4c01) 1.081813604s ago: executing program 4 (id=273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x40000, 0x3, 0xb5}) (fail_nth: 11) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) 0s ago: executing program 1 (id=274): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f371c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0xaaaab42, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = dup2(r6, r5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x7fff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)={0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) kernel console output (not intermixed with test programs): 57.589576][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.596712][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.603911][ T5812] bridge_slave_1: entered allmulticast mode [ 57.610598][ T5812] bridge_slave_1: entered promiscuous mode [ 57.634367][ T5820] team0: Port device team_slave_1 added [ 57.686988][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.709248][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.716575][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.723885][ T5821] bridge_slave_0: entered allmulticast mode [ 57.730312][ T5821] bridge_slave_0: entered promiscuous mode [ 57.737546][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.744680][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.752182][ T5821] bridge_slave_1: entered allmulticast mode [ 57.758636][ T5821] bridge_slave_1: entered promiscuous mode [ 57.766208][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.785400][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.794898][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.821345][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.856375][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.866080][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.892277][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.921203][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.928345][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.936262][ T5813] bridge_slave_0: entered allmulticast mode [ 57.942914][ T5813] bridge_slave_0: entered promiscuous mode [ 57.957073][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.968892][ T5812] team0: Port device team_slave_0 added [ 57.974896][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.984758][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.992043][ T5830] bridge_slave_0: entered allmulticast mode [ 57.998435][ T5830] bridge_slave_0: entered promiscuous mode [ 58.006157][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.013660][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.020762][ T5830] bridge_slave_1: entered allmulticast mode [ 58.027497][ T5830] bridge_slave_1: entered promiscuous mode [ 58.043183][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.050252][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.057465][ T5813] bridge_slave_1: entered allmulticast mode [ 58.064002][ T5813] bridge_slave_1: entered promiscuous mode [ 58.086269][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.105251][ T5812] team0: Port device team_slave_1 added [ 58.129697][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.141775][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.170691][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.195568][ T5821] team0: Port device team_slave_0 added [ 58.203432][ T5821] team0: Port device team_slave_1 added [ 58.209487][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.216861][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.243217][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.255812][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.275780][ T5820] hsr_slave_0: entered promiscuous mode [ 58.282205][ T5820] hsr_slave_1: entered promiscuous mode [ 58.306599][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.313897][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.347633][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.373345][ T5813] team0: Port device team_slave_0 added [ 58.397014][ T5830] team0: Port device team_slave_0 added [ 58.405196][ T5830] team0: Port device team_slave_1 added [ 58.415321][ T5813] team0: Port device team_slave_1 added [ 58.429593][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.436599][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.462957][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.496572][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.503686][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.529861][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.555045][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.562041][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.588593][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.602269][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.609225][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.635159][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.660701][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.667927][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.694214][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.706287][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.713258][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.739206][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.768303][ T5821] hsr_slave_0: entered promiscuous mode [ 58.774448][ T5821] hsr_slave_1: entered promiscuous mode [ 58.780370][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.788375][ T5821] Cannot create hsr debugfs directory [ 58.809892][ T5812] hsr_slave_0: entered promiscuous mode [ 58.816305][ T5831] Bluetooth: hci0: command tx timeout [ 58.821870][ T5826] Bluetooth: hci2: command tx timeout [ 58.828232][ T5812] hsr_slave_1: entered promiscuous mode [ 58.834483][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.842612][ T5812] Cannot create hsr debugfs directory [ 58.883554][ T5813] hsr_slave_0: entered promiscuous mode [ 58.889906][ T5813] hsr_slave_1: entered promiscuous mode [ 58.898707][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.902555][ T5831] Bluetooth: hci3: command tx timeout [ 58.906458][ T5813] Cannot create hsr debugfs directory [ 58.954788][ T5830] hsr_slave_0: entered promiscuous mode [ 58.960842][ T5830] hsr_slave_1: entered promiscuous mode [ 58.967371][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.975045][ T5831] Bluetooth: hci4: command tx timeout [ 58.975411][ T5831] Bluetooth: hci1: command tx timeout [ 58.980692][ T5830] Cannot create hsr debugfs directory [ 59.126637][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.146392][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.179803][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.192716][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.259131][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.284077][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.311326][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.331790][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.344937][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.353784][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.383889][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.399302][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.463264][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.473981][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.483924][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.496800][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.506408][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.563644][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.572025][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.595855][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.607051][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.617707][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.631242][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.638518][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.668204][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.675303][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.718466][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.766386][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.778441][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.793877][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.837288][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.844366][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.858501][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.870607][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.900263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.907384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.917767][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.925880][ T29] audit: type=1400 audit(1733729969.591:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.960112][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.996158][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.013461][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.046056][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.053140][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.066971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.074035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.092922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.099965][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.109610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.116691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.126237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.133404][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.147191][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.154287][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.242811][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.299281][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.378734][ T5820] veth0_vlan: entered promiscuous mode [ 60.414829][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.435298][ T5820] veth1_vlan: entered promiscuous mode [ 60.500547][ T5820] veth0_macvtap: entered promiscuous mode [ 60.544576][ T5820] veth1_macvtap: entered promiscuous mode [ 60.578840][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.606388][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.620457][ T5813] veth0_vlan: entered promiscuous mode [ 60.634904][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.644172][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.653712][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.662522][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.689632][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.698128][ T5813] veth1_vlan: entered promiscuous mode [ 60.745070][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.758841][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.877296][ T5813] veth0_macvtap: entered promiscuous mode [ 60.896206][ T5831] Bluetooth: hci0: command tx timeout [ 60.897170][ T5813] veth1_macvtap: entered promiscuous mode [ 60.901689][ T5831] Bluetooth: hci2: command tx timeout [ 60.916978][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.928957][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.940286][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.956781][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.958176][ T5812] veth0_vlan: entered promiscuous mode [ 60.971860][ T5831] Bluetooth: hci3: command tx timeout [ 60.982087][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.005035][ T5830] veth0_vlan: entered promiscuous mode [ 61.027199][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.034618][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.035557][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.054020][ T5831] Bluetooth: hci4: command tx timeout [ 61.054397][ T5826] Bluetooth: hci1: command tx timeout [ 61.080445][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.093079][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.115838][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.125971][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.135214][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.145400][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.155978][ T5812] veth1_vlan: entered promiscuous mode [ 61.166500][ T29] audit: type=1400 audit(1733729970.821:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.jNu4nH/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.182674][ T5821] veth0_vlan: entered promiscuous mode [ 61.199523][ T5830] veth1_vlan: entered promiscuous mode [ 61.240868][ T5821] veth1_vlan: entered promiscuous mode [ 61.262237][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.315075][ T5812] veth0_macvtap: entered promiscuous mode [ 61.353535][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.363555][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.385012][ T5812] veth1_macvtap: entered promiscuous mode [ 61.397712][ T5830] veth0_macvtap: entered promiscuous mode [ 61.537530][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 61.537545][ T29] audit: type=1400 audit(1733729971.101:130): avc: denied { create } for pid=5897 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.628742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.137316][ T29] audit: type=1400 audit(1733729971.301:131): avc: denied { create } for pid=5897 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.146355][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.167054][ T29] audit: type=1400 audit(1733729971.311:132): avc: denied { getopt } for pid=5897 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.182041][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.197643][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.208300][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.218992][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.228466][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.237565][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.241443][ T5821] veth0_macvtap: entered promiscuous mode [ 62.257897][ T5830] veth1_macvtap: entered promiscuous mode [ 62.277869][ T5821] veth1_macvtap: entered promiscuous mode [ 62.284469][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.295853][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.305780][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.389132][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.409343][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.425232][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.435984][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.450529][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.463820][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.473853][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.485333][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.497558][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.509755][ T29] audit: type=1400 audit(1733729972.171:133): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.wOu3gL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.548272][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.557966][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.573977][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.582855][ T29] audit: type=1400 audit(1733729972.171:134): avc: denied { read write } for pid=5902 comm="syz.1.6" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.605445][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.606367][ T29] audit: type=1400 audit(1733729972.171:135): avc: denied { open } for pid=5902 comm="syz.1.6" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.647073][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.659015][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.670052][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.680565][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.690464][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.701360][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.712057][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.735351][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.792305][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.805237][ T5906] kAFS: No cell specified [ 62.810009][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.819859][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.838299][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.856183][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.868245][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.885176][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.899966][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.921173][ T29] audit: type=1400 audit(1733729972.561:136): avc: denied { bpf } for pid=5905 comm="syz.1.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.948966][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.960176][ T29] audit: type=1400 audit(1733729972.561:137): avc: denied { map_create } for pid=5905 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.985291][ T5826] Bluetooth: hci0: command tx timeout [ 62.986962][ T5831] Bluetooth: hci2: command tx timeout [ 62.998663][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.009281][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.020066][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.031908][ T29] audit: type=1400 audit(1733729972.581:138): avc: denied { unlink } for pid=5905 comm="syz.1.7" name="#1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.053710][ T5826] Bluetooth: hci3: command tx timeout [ 63.069578][ T29] audit: type=1400 audit(1733729972.581:139): avc: denied { mount } for pid=5905 comm="syz.1.7" name="/" dev="overlay" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.240136][ T5826] Bluetooth: hci1: command tx timeout [ 63.246494][ T5826] Bluetooth: hci4: command tx timeout [ 63.411455][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.499122][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.591869][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.609771][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.620399][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.634951][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.644864][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.660352][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.671835][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.803629][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.818256][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.828075][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.838221][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.923036][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.944088][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.988114][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.997579][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.002423][ T5921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 64.007645][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.024940][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.032107][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.044591][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.134201][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.149369][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.158374][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.183420][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.672738][ T5937] FAULT_INJECTION: forcing a failure. [ 64.672738][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 64.686413][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.4.5 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 64.696843][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.706916][ T5937] Call Trace: [ 64.710196][ T5937] [ 64.713128][ T5937] dump_stack_lvl+0x16c/0x1f0 [ 64.717839][ T5937] should_fail_ex+0x497/0x5b0 [ 64.722530][ T5937] should_failslab+0xc2/0x120 [ 64.727225][ T5937] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 64.732605][ T5937] ? skb_clone+0x190/0x3f0 [ 64.737032][ T5937] skb_clone+0x190/0x3f0 [ 64.741279][ T5937] netlink_deliver_tap+0xabd/0xd30 [ 64.746411][ T5937] netlink_unicast+0x5e1/0x7f0 [ 64.751195][ T5937] ? __pfx_netlink_unicast+0x10/0x10 [ 64.756498][ T5937] netlink_sendmsg+0x8b8/0xd70 [ 64.761286][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.766590][ T5937] ____sys_sendmsg+0xaaf/0xc90 [ 64.771363][ T5937] ? copy_msghdr_from_user+0x10b/0x160 [ 64.776827][ T5937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.782136][ T5937] ___sys_sendmsg+0x135/0x1e0 [ 64.786822][ T5937] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.792048][ T5937] ? __fget_files+0x206/0x3a0 [ 64.796735][ T5937] __sys_sendmsg+0x16e/0x220 [ 64.801332][ T5937] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.806469][ T5937] do_syscall_64+0xcd/0x250 [ 64.810989][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.816893][ T5937] RIP: 0033:0x7f5b87d7fed9 [ 64.821322][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.840934][ T5937] RSP: 002b:00007f5b88bc7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.849354][ T5937] RAX: ffffffffffffffda RBX: 00007f5b87f46160 RCX: 00007f5b87d7fed9 [ 64.857330][ T5937] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000d [ 64.865302][ T5937] RBP: 00007f5b88bc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.873277][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.881246][ T5937] R13: 0000000000000000 R14: 00007f5b87f46160 R15: 00007ffe90857088 [ 64.889234][ T5937] [ 65.053625][ T5831] Bluetooth: hci0: command tx timeout [ 65.059198][ T5826] Bluetooth: hci2: command tx timeout [ 65.061560][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.701078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.750997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.771005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.821026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.861054][ T5826] Bluetooth: hci3: command tx timeout [ 65.861301][ T5831] Bluetooth: hci4: command tx timeout [ 65.867266][ T5826] Bluetooth: hci1: command tx timeout [ 65.930061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.156831][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.349203][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.359096][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.395501][ T8] usb 1-1: config 0 descriptor?? [ 66.549120][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 66.549136][ T29] audit: type=1326 audit(1733729976.201:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.585303][ T29] audit: type=1326 audit(1733729976.201:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.618892][ T29] audit: type=1326 audit(1733729976.201:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.642217][ T29] audit: type=1326 audit(1733729976.201:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.665718][ T29] audit: type=1326 audit(1733729976.201:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.689463][ T29] audit: type=1326 audit(1733729976.201:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.712833][ T29] audit: type=1326 audit(1733729976.201:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.736021][ T29] audit: type=1326 audit(1733729976.201:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.740231][ T5952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.759821][ T29] audit: type=1326 audit(1733729976.201:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.759863][ T29] audit: type=1326 audit(1733729976.201:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7fc00000 [ 66.811906][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 66.816941][ T46] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 66.822008][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.852922][ T8] usb 1-1: USB disconnect, device number 2 [ 66.981460][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.012424][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 67.021819][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 67.030548][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.043112][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.057502][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.068197][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.076488][ T46] usb 3-1: Product: syz [ 67.080742][ T46] usb 3-1: Manufacturer: ᐇ [ 67.086348][ T46] usb 3-1: SerialNumber: syz [ 67.089783][ T5826] Bluetooth: hci1: Malformed Event: 0x13 [ 67.149642][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 67.169741][ T5814] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 67.178954][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.187277][ T5814] usb 2-1: Product: syz [ 67.191545][ T5814] usb 2-1: Manufacturer: syz [ 67.196169][ T5814] usb 2-1: SerialNumber: syz [ 67.209500][ T5814] usb 2-1: config 0 descriptor?? [ 67.229488][ T5814] as10x_usb: device has been detected [ 67.235819][ T5814] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 67.246512][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.256592][ T5814] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 67.290709][ T5814] as10x_usb: error during firmware upload part1 [ 67.297729][ T5814] Registered device Sky IT Digital Key (green led) [ 67.384598][ T46] usb 3-1: 0:2 : does not exist [ 67.401082][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 67.402939][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.408052][ T8] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.429444][ T46] usb 3-1: USB disconnect, device number 2 [ 67.461982][ T8] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 67.494145][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.516614][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 67.528255][ T5956] binder: 5955:5956 ioctl c00c620f 200000c0 returned -22 [ 67.536546][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.546212][ T5956] binder: 5955:5956 ioctl 5408 20000140 returned -22 [ 67.567906][ T8] usb 1-1: config 0 descriptor?? [ 67.577375][ T5894] usb 2-1: USB disconnect, device number 2 [ 67.592764][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.604858][ T5869] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.623021][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.632980][ T5894] Unregistered device Sky IT Digital Key (green led) [ 67.639312][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.662590][ T5894] as10x_usb: device has been disconnected [ 67.665309][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.703558][ T5960] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 67.715709][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.787695][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 67.933836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.012059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 68.045948][ T5971] FAULT_INJECTION: forcing a failure. [ 68.045948][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.063224][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.2.20 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 68.073748][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.083790][ T5971] Call Trace: [ 68.087051][ T5971] [ 68.089964][ T5971] dump_stack_lvl+0x16c/0x1f0 [ 68.094629][ T5971] should_fail_ex+0x497/0x5b0 [ 68.099290][ T5971] _copy_from_user+0x2e/0xd0 [ 68.103861][ T5971] copy_msghdr_from_user+0x99/0x160 [ 68.109044][ T5971] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 68.114846][ T5971] ___sys_sendmsg+0xff/0x1e0 [ 68.119422][ T5971] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.124607][ T5971] ? __pfx_lock_release+0x10/0x10 [ 68.129633][ T5971] ? trace_lock_acquire+0x14e/0x1f0 [ 68.134820][ T5971] ? __fget_files+0x206/0x3a0 [ 68.139478][ T5971] __sys_sendmsg+0x16e/0x220 [ 68.144049][ T5971] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.149144][ T5971] ? __secure_computing+0x273/0x3f0 [ 68.154326][ T5971] do_syscall_64+0xcd/0x250 [ 68.158816][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.164693][ T5971] RIP: 0033:0x7f64e197fed9 [ 68.169088][ T5971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.188677][ T5971] RSP: 002b:00007f64e27c9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.197070][ T5971] RAX: ffffffffffffffda RBX: 00007f64e1b45fa0 RCX: 00007f64e197fed9 [ 68.205050][ T5971] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 68.213004][ T5971] RBP: 00007f64e27c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.220956][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.228919][ T5971] R13: 0000000000000000 R14: 00007f64e1b45fa0 R15: 00007fffe477caf8 [ 68.236963][ T5971] [ 68.245108][ T8] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 68.263156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.271228][ T8] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 68.271709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.463337][ T46] usb 4-1: USB disconnect, device number 2 [ 68.584476][ T5973] nbd: must specify a size in bytes for the device [ 68.698621][ T8] usb 1-1: USB disconnect, device number 3 [ 71.295890][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.552845][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.685034][ T29] kauditd_printk_skb: 3180 callbacks suppressed [ 71.685052][ T29] audit: type=1400 audit(1733729981.351:3613): avc: denied { create } for pid=6004 comm="syz.0.30" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.987365][ T29] audit: type=1400 audit(1733729981.581:3614): avc: denied { bind } for pid=6008 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.215678][ T29] audit: type=1400 audit(1733729981.831:3615): avc: denied { setopt } for pid=6008 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.468791][ T29] audit: type=1400 audit(1733729982.131:3616): avc: denied { create } for pid=6015 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.229779][ T29] audit: type=1400 audit(1733729982.891:3617): avc: denied { ioctl } for pid=6027 comm="syz.2.37" path="socket:[9415]" dev="sockfs" ino=9415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.464691][ T6032] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 74.261069][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.336110][ T29] audit: type=1400 audit(1733729984.001:3618): avc: denied { write } for pid=6038 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.337387][ T6042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.394222][ T6040] Zero length message leads to an empty skb [ 74.471989][ T29] audit: type=1400 audit(1733729984.141:3619): avc: denied { map } for pid=6035 comm="syz.4.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.477183][ T46] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.576049][ T29] audit: type=1400 audit(1733729984.171:3620): avc: denied { read write } for pid=6035 comm="syz.4.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.596200][ T46] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.629098][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.638726][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.742317][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.751364][ T29] audit: type=1400 audit(1733729984.181:3621): avc: denied { write } for pid=6041 comm="syz.3.43" path="socket:[9445]" dev="sockfs" ino=9445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.787618][ T6042] could not allocate digest TFM handle sha224-arm64-neon [ 74.847816][ T29] audit: type=1400 audit(1733729984.181:3622): avc: denied { nlmsg_read } for pid=6041 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.871820][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.552181][ T6056] 9pnet: Could not find request transport: fd0x0000000000000005 [ 75.794511][ T25] usb 3-1: USB disconnect, device number 3 [ 76.289865][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.356864][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.664734][ T970] cfg80211: failed to load regulatory.db [ 77.390386][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 77.390402][ T29] audit: type=1400 audit(1733729987.051:3632): avc: denied { read write } for pid=6084 comm="syz.3.54" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.522275][ T29] audit: type=1400 audit(1733729987.101:3633): avc: denied { open } for pid=6084 comm="syz.3.54" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.708774][ T29] audit: type=1400 audit(1733729987.371:3634): avc: denied { create } for pid=6090 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.774417][ T6092] bridge_slave_0: left allmulticast mode [ 77.787255][ T6092] bridge_slave_0: left promiscuous mode [ 77.799524][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.886946][ T9] libceph: connect (1)[c::]:6789 error -101 [ 77.893547][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 77.903368][ T6091] ceph: No mds server is up or the cluster is laggy [ 78.198539][ T9] libceph: connect (1)[c::]:6789 error -101 [ 78.231204][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 78.282764][ T6092] bridge_slave_1: left allmulticast mode [ 78.806934][ T9] libceph: connect (1)[c::]:6789 error -101 [ 78.813317][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 78.824213][ T6092] bridge_slave_1: left promiscuous mode [ 78.829931][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.845800][ T29] audit: type=1400 audit(1733729988.481:3635): avc: denied { setopt } for pid=6090 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.115771][ T29] audit: type=1400 audit(1733729988.491:3636): avc: denied { write } for pid=6090 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.234584][ T6092] bond0: (slave bond_slave_0): Releasing backup interface [ 79.746376][ T6092] bond0: (slave bond_slave_1): Releasing backup interface [ 79.765983][ T29] audit: type=1400 audit(1733729988.491:3637): avc: denied { ioctl } for pid=6090 comm="syz.2.57" path="socket:[9657]" dev="sockfs" ino=9657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.800167][ T29] audit: type=1326 audit(1733729989.461:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7ffc0000 [ 79.828180][ T6092] team0: Port device team_slave_0 removed [ 79.833858][ T29] audit: type=1326 audit(1733729989.461:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7ffc0000 [ 79.865007][ T6092] team0: Port device team_slave_1 removed [ 79.972821][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.132014][ T29] audit: type=1326 audit(1733729989.461:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5b87d7fed9 code=0x7ffc0000 [ 80.133267][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.160694][ T29] audit: type=1326 audit(1733729989.461:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x7ffc0000 [ 80.292972][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.301234][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.327061][ T6096] tipc: Started in network mode [ 80.337879][ T6096] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 80.349541][ T6096] tipc: Enabled bearer , priority 0 [ 80.360629][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 80.578065][ T1096] tipc: Resetting bearer [ 80.785317][ T9] hid (null): unknown global tag 0x41 [ 80.802532][ T9] hid-generic FF01:15EB:0006.0002: unknown main item tag 0x6 [ 80.810102][ T9] hid-generic FF01:15EB:0006.0002: unexpected long global item [ 80.846332][ T9] hid-generic FF01:15EB:0006.0002: probe with driver hid-generic failed with error -22 [ 81.000043][ T5826] Bluetooth: hci1: Malformed Event: 0x13 [ 81.131858][ T46] libceph: connect (1)[c::]:6789 error -101 [ 81.138090][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 81.229434][ T6140] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 81.237243][ T6140] syzkaller1: entered promiscuous mode [ 81.243002][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.250790][ T6140] syzkaller1: entered allmulticast mode [ 81.426402][ T46] libceph: connect (1)[c::]:6789 error -101 [ 81.427435][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 81.452926][ T46] tipc: Node number set to 11578026 [ 81.648285][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.654632][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.658112][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.659485][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.715804][ T6126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.722153][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.950186][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 81.958653][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 82.325445][ T6133] ceph: No mds server is up or the cluster is laggy [ 83.871368][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.041286][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 84.088958][ T5814] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.111082][ T5814] usb 2-1: config 0 has no interface number 0 [ 84.121915][ T5814] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 46336, setting to 1024 [ 84.140516][ T5814] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.178008][ T5814] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.187425][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.202204][ T5814] usb 2-1: Product: syz [ 84.203192][ T6160] netlink: 140 bytes leftover after parsing attributes in process `syz.2.77'. [ 84.222999][ T5814] usb 2-1: Manufacturer: syz [ 84.227708][ T5814] usb 2-1: SerialNumber: syz [ 84.253306][ T5814] usb 2-1: config 0 descriptor?? [ 84.271942][ T6156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.280558][ T5814] smsc95xx v2.0.0 [ 84.381343][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 84.381358][ T29] audit: type=1400 audit(1733729994.041:3742): avc: denied { create } for pid=6163 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.449840][ T29] audit: type=1400 audit(1733729994.111:3743): avc: denied { write } for pid=6163 comm="syz.4.79" path="socket:[8877]" dev="sockfs" ino=8877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.458857][ T6170] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 84.472721][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.489785][ T6154] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.681175][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.880610][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.900804][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.995597][ T25] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 85.076904][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.176142][ T25] usb 1-1: config 0 descriptor?? [ 85.251606][ T46] usb 4-1: USB disconnect, device number 3 [ 85.278733][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 85.649513][ T29] audit: type=1400 audit(1733729995.211:3744): avc: denied { getopt } for pid=6177 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.565836][ T6188] 9pnet_fd: Insufficient options for proto=fd [ 86.606505][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.658135][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 86.668992][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.679636][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 86.692652][ T5814] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.725501][ T5814] usb 2-1: USB disconnect, device number 3 [ 86.784447][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.926596][ T29] audit: type=1326 audit(1733729996.571:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.0.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de1f7fed9 code=0x0 [ 88.594384][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.601401][ T29] audit: type=1400 audit(1733729998.251:3746): avc: denied { getopt } for pid=6208 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.642592][ T46] usb 1-1: USB disconnect, device number 4 [ 88.664693][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.693333][ T6215] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 88.728637][ T29] audit: type=1400 audit(1733729998.391:3747): avc: denied { setopt } for pid=6210 comm="syz.1.92" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.749731][ T29] audit: type=1400 audit(1733729998.391:3748): avc: denied { ioctl } for pid=6208 comm="syz.4.91" path="socket:[9814]" dev="sockfs" ino=9814 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.872363][ T29] audit: type=1400 audit(1733729998.421:3749): avc: denied { write } for pid=6210 comm="syz.1.92" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.880418][ T6219] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 88.921736][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.942907][ T29] audit: type=1400 audit(1733729998.521:3750): avc: denied { create } for pid=6218 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.967842][ T29] audit: type=1400 audit(1733729998.521:3751): avc: denied { setopt } for pid=6218 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.753983][ T5814] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 89.777937][ T5814] usb 5-1: config 0 has no interface number 0 [ 89.785734][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 89.785748][ T29] audit: type=1400 audit(1733729999.451:3759): avc: denied { bind } for pid=6221 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.839267][ T5814] usb 5-1: config 0 interface 222 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.874931][ T5814] usb 5-1: config 0 interface 222 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.909974][ T29] audit: type=1400 audit(1733729999.571:3760): avc: denied { append } for pid=6238 comm="syz.0.99" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.034256][ T5814] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 90.091419][ T29] audit: type=1400 audit(1733729999.711:3761): avc: denied { sys_module } for pid=6238 comm="syz.0.99" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.114067][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.170525][ T5814] usb 5-1: config 0 descriptor?? [ 90.622704][ T5814] usbhid 5-1:0.222: can't add hid device: -71 [ 90.628935][ T5814] usbhid 5-1:0.222: probe with driver usbhid failed with error -71 [ 90.821257][ T5814] usb 5-1: USB disconnect, device number 2 [ 91.244113][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 91.256978][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 91.510700][ T6266] Bluetooth: MGMT ver 1.23 [ 91.576505][ T6268] FAULT_INJECTION: forcing a failure. [ 91.576505][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 91.610406][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.1.106 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 91.621035][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.631098][ T6268] Call Trace: [ 91.634388][ T6268] [ 91.637321][ T6268] dump_stack_lvl+0x16c/0x1f0 [ 91.642017][ T6268] should_fail_ex+0x497/0x5b0 [ 91.646698][ T6268] ? fs_reclaim_acquire+0xae/0x150 [ 91.651830][ T6268] should_failslab+0xc2/0x120 [ 91.656626][ T6268] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 91.662447][ T6268] ? __lock_acquire+0xcc5/0x3c40 [ 91.667402][ T6268] ? __alloc_skb+0x2b1/0x380 [ 91.672006][ T6268] __alloc_skb+0x2b1/0x380 [ 91.676430][ T6268] ? __pfx___alloc_skb+0x10/0x10 [ 91.681378][ T6268] ? avc_has_perm_noaudit+0x119/0x3a0 [ 91.686770][ T6268] ? __pfx_lock_release+0x10/0x10 [ 91.691805][ T6268] ? trace_lock_acquire+0x14e/0x1f0 [ 91.697021][ T6268] alloc_skb_with_frags+0xe4/0x850 [ 91.702144][ T6268] ? avc_has_perm_noaudit+0x61/0x3a0 [ 91.707457][ T6268] sock_alloc_send_pskb+0x7f1/0x980 [ 91.712769][ T6268] ? avc_has_perm+0x11b/0x1c0 [ 91.717459][ T6268] ? __pfx_avc_has_perm+0x10/0x10 [ 91.722512][ T6268] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 91.728256][ T6268] ? avc_has_perm_noaudit+0x143/0x3a0 [ 91.733665][ T6268] ? sock_has_perm+0x25a/0x2f0 [ 91.738449][ T6268] ? __pfx_sock_has_perm+0x10/0x10 [ 91.743579][ T6268] hci_sock_sendmsg+0x1c8/0x25e0 [ 91.748545][ T6268] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 91.753954][ T6268] sock_write_iter+0x4fe/0x5b0 [ 91.758732][ T6268] ? __pfx_sock_write_iter+0x10/0x10 [ 91.764043][ T6268] ? bpf_lsm_file_permission+0x9/0x10 [ 91.769430][ T6268] ? security_file_permission+0x71/0x210 [ 91.775079][ T6268] vfs_write+0x5ae/0x1150 [ 91.779416][ T6268] ? __pfx_sock_write_iter+0x10/0x10 [ 91.784726][ T6268] ? __pfx_vfs_write+0x10/0x10 [ 91.789506][ T6268] ? __fget_files+0x40/0x3a0 [ 91.794122][ T6268] ksys_write+0x207/0x250 [ 91.798467][ T6268] ? __pfx_ksys_write+0x10/0x10 [ 91.803330][ T6268] do_syscall_64+0xcd/0x250 [ 91.807854][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.813769][ T6268] RIP: 0033:0x7efc5c57fed9 [ 91.818195][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.838078][ T6268] RSP: 002b:00007efc5a3f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.846502][ T6268] RAX: ffffffffffffffda RBX: 00007efc5c745fa0 RCX: 00007efc5c57fed9 [ 91.854483][ T6268] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000004 [ 91.862461][ T6268] RBP: 00007efc5a3f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.870440][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.878423][ T6268] R13: 0000000000000000 R14: 00007efc5c745fa0 R15: 00007ffcd37846e8 [ 91.886411][ T6268] [ 91.889568][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.646625][ T29] audit: type=1400 audit(1733730001.951:3762): avc: denied { name_bind } for pid=6271 comm="syz.2.108" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.678773][ T29] audit: type=1400 audit(1733730001.951:3763): avc: denied { node_bind } for pid=6271 comm="syz.2.108" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 92.705961][ T29] audit: type=1400 audit(1733730001.951:3764): avc: denied { write } for pid=6271 comm="syz.2.108" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.021208][ T29] audit: type=1400 audit(1733730002.681:3765): avc: denied { mount } for pid=6286 comm="syz.1.111" name="/" dev="hugetlbfs" ino=9927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.071516][ T6287] ======================================================= [ 93.071516][ T6287] WARNING: The mand mount option has been deprecated and [ 93.071516][ T6287] and is ignored by this kernel. Remove the mand [ 93.071516][ T6287] option from the mount to silence this warning. [ 93.071516][ T6287] ======================================================= [ 93.111846][ T29] audit: type=1400 audit(1733730002.741:3766): avc: denied { remount } for pid=6286 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.223525][ T6292] sp0: Synchronizing with TNC [ 93.242050][ T6292] trusted_key: encrypted_key: insufficient parameters specified [ 93.281302][ T29] audit: type=1400 audit(1733730002.811:3767): avc: denied { read } for pid=6288 comm="syz.4.113" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.319569][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 93.331724][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 93.342757][ T5831] Bluetooth: hci1: hardware error 0x00 [ 93.415061][ T6287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37246 sclass=netlink_route_socket pid=6287 comm=syz.1.111 [ 93.439450][ T29] audit: type=1400 audit(1733730002.811:3768): avc: denied { open } for pid=6288 comm="syz.4.113" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.462951][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.609545][ T6287] kernel read not supported for file /!selinuxselinux (pid: 6287 comm: syz.1.111) [ 94.701889][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.832829][ T6310] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 94.891073][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 94.906848][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.927860][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.955320][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.981068][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.011234][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.031050][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.044732][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 95.044746][ T29] audit: type=1400 audit(1733730004.711:3776): avc: denied { create } for pid=6296 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.061082][ T970] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.087602][ T29] audit: type=1400 audit(1733730004.751:3777): avc: denied { read } for pid=6296 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.142863][ T29] audit: type=1400 audit(1733730004.811:3778): avc: denied { write } for pid=6296 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.221418][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.272100][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.312815][ T970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 95.328433][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 95.334170][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 95.349388][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 95.401295][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 95.402167][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 197, setting to 64 [ 95.410164][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 95.417173][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.446870][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.451027][ T29] audit: type=1400 audit(1733730005.011:3779): avc: denied { read } for pid=6296 comm="syz.3.115" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.461929][ T25] usb 5-1: Product: syz [ 95.561423][ T29] audit: type=1400 audit(1733730005.011:3780): avc: denied { open } for pid=6296 comm="syz.3.115" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.650908][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 95.681228][ T25] usb 5-1: Manufacturer: syz [ 95.687168][ T25] usb 5-1: SerialNumber: syz [ 95.687183][ T29] audit: type=1400 audit(1733730005.041:3781): avc: denied { ioctl } for pid=6296 comm="syz.3.115" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.687290][ T970] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 95.714568][ T5814] usb 3-1: USB disconnect, device number 4 [ 95.718006][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 95.742704][ T970] usb 2-1: Product: syz [ 95.747016][ T970] usb 2-1: Manufacturer: syz [ 95.748581][ T25] usb 5-1: config 0 descriptor?? [ 95.751708][ T970] usb 2-1: SerialNumber: syz [ 95.855804][ T970] usb 2-1: config 0 descriptor?? [ 95.861965][ T6308] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.967494][ T25] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 96.081297][ T970] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 96.089949][ T970] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 96.116089][ T970] usb 2-1: USB disconnect, device number 4 [ 96.413510][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.437613][ T6331] bond0: entered promiscuous mode [ 96.443142][ T6331] bond_slave_0: entered promiscuous mode [ 96.449844][ T6331] bond_slave_1: entered promiscuous mode [ 96.459318][ T6331] batadv0: entered promiscuous mode [ 96.464642][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.474242][ T6331] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 96.572448][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.583063][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 96.592534][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.602067][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.632420][ T5894] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.649649][ T5894] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 96.659113][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.678723][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.814194][ T25] usb write operation failed. (-71) [ 96.832566][ T29] audit: type=1400 audit(1733730006.501:3782): avc: denied { bind } for pid=6326 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.866429][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.868042][ T9] usb 4-1: USB disconnect, device number 4 [ 96.964221][ T5894] usb 1-1: USB disconnect, device number 5 [ 97.062085][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 97.069255][ T25] usb 5-1: media controller created [ 97.076076][ T25] usb read operation failed. (-71) [ 97.081809][ T25] usb write operation failed. (-71) [ 97.101979][ T25] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 97.108024][ T29] audit: type=1400 audit(1733730006.761:3783): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.114441][ T25] usb 5-1: USB disconnect, device number 3 [ 97.184150][ T29] audit: type=1400 audit(1733730006.761:3784): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.355121][ T29] audit: type=1400 audit(1733730006.771:3785): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.389733][ T6355] FAULT_INJECTION: forcing a failure. [ 97.389733][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 97.436855][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.2.136 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 97.447474][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.457533][ T6355] Call Trace: [ 97.460816][ T6355] [ 97.463752][ T6355] dump_stack_lvl+0x16c/0x1f0 [ 97.468443][ T6355] should_fail_ex+0x497/0x5b0 [ 97.473119][ T6355] ? fs_reclaim_acquire+0xae/0x150 [ 97.478235][ T6355] should_failslab+0xc2/0x120 [ 97.482917][ T6355] __kmalloc_noprof+0xcb/0x510 [ 97.487677][ T6355] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 97.493307][ T6355] tomoyo_realpath_from_path+0xb9/0x720 [ 97.498850][ T6355] ? tomoyo_path_number_perm+0x235/0x590 [ 97.504476][ T6355] ? tomoyo_path_number_perm+0x235/0x590 [ 97.510103][ T6355] tomoyo_path_number_perm+0x248/0x590 [ 97.515555][ T6355] ? tomoyo_path_number_perm+0x235/0x590 [ 97.521183][ T6355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.527176][ T6355] ? __pfx_lock_release+0x10/0x10 [ 97.532191][ T6355] ? trace_lock_acquire+0x14e/0x1f0 [ 97.537387][ T6355] ? lock_acquire+0x2f/0xb0 [ 97.541882][ T6355] ? __fget_files+0x40/0x3a0 [ 97.546470][ T6355] ? __fget_files+0x206/0x3a0 [ 97.551146][ T6355] security_file_ioctl+0x9b/0x240 [ 97.556181][ T6355] __x64_sys_ioctl+0xb7/0x200 [ 97.560859][ T6355] do_syscall_64+0xcd/0x250 [ 97.565361][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.571260][ T6355] RIP: 0033:0x7f64e197fed9 [ 97.575673][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.595274][ T6355] RSP: 002b:00007f64e27c9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.603678][ T6355] RAX: ffffffffffffffda RBX: 00007f64e1b45fa0 RCX: 00007f64e197fed9 [ 97.611638][ T6355] RDX: 0000000020000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 97.619599][ T6355] RBP: 00007f64e27c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.627559][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.635521][ T6355] R13: 0000000000000000 R14: 00007f64e1b45fa0 R15: 00007fffe477caf8 [ 97.643495][ T6355] [ 97.668485][ T6355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.461048][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.661069][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 98.667705][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.678632][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.688444][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.709256][ T6362] mmap: syz.2.138 (6362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.711837][ T25] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 98.751139][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.866588][ T25] usb 2-1: config 0 descriptor?? [ 99.010262][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.141'. [ 99.129666][ T6373] vcan0: entered promiscuous mode [ 99.136062][ T6373] vlan2: entered promiscuous mode [ 99.143265][ T6373] vcan0: left promiscuous mode [ 99.611252][ T5826] Bluetooth: hci0: Malformed Event: 0x13 [ 99.637055][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.805052][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.826995][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.837345][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.847914][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.856970][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.867231][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.876884][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.886554][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.895817][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.348414][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 100.354556][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 100.371795][ T25] usb 2-1: USB disconnect, device number 5 [ 100.499264][ T5894] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.533123][ T6397] FAULT_INJECTION: forcing a failure. [ 100.533123][ T6397] name failslab, interval 1, probability 0, space 0, times 0 [ 100.546946][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: syz.3.148 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 100.557548][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.567601][ T6397] Call Trace: [ 100.570881][ T6397] [ 100.573810][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 100.578501][ T6397] should_fail_ex+0x497/0x5b0 [ 100.583182][ T6397] ? fs_reclaim_acquire+0xae/0x150 [ 100.588311][ T6397] should_failslab+0xc2/0x120 [ 100.592998][ T6397] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 100.598384][ T6397] ? sk_prot_alloc+0x60/0x2a0 [ 100.603076][ T6397] sk_prot_alloc+0x60/0x2a0 [ 100.607591][ T6397] sk_alloc+0x36/0xb90 [ 100.611669][ T6397] inet_create+0x3a1/0x10a0 [ 100.616186][ T6397] ? inet_create+0x90/0x10a0 [ 100.620791][ T6397] __sock_create+0x335/0x8d0 [ 100.625396][ T6397] udp_sock_create4+0xa7/0x450 [ 100.630164][ T6397] ? __pfx_udp_sock_create4+0x10/0x10 [ 100.635540][ T6397] ? mark_held_locks+0x9f/0xe0 [ 100.640311][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.645518][ T6397] ? crng_make_state+0x48e/0x6d0 [ 100.650468][ T6397] rxrpc_open_socket+0x506/0x6c0 [ 100.655422][ T6397] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 100.660906][ T6397] ? lockdep_init_map_type+0x16d/0x7d0 [ 100.666372][ T6397] ? rcu_is_watching+0x12/0xc0 [ 100.671149][ T6397] rxrpc_lookup_local+0xa02/0x1220 [ 100.676276][ T6397] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 100.681846][ T6397] ? __local_bh_enable_ip+0xa4/0x120 [ 100.687149][ T6397] rxrpc_bind+0x369/0x5a0 [ 100.691495][ T6397] __sys_bind+0x213/0x260 [ 100.695839][ T6397] ? __pfx___sys_bind+0x10/0x10 [ 100.700704][ T6397] ? __fget_files+0x206/0x3a0 [ 100.705402][ T6397] ? __pfx_ksys_write+0x10/0x10 [ 100.710267][ T6397] __x64_sys_bind+0x72/0xb0 [ 100.714786][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.719999][ T6397] do_syscall_64+0xcd/0x250 [ 100.724513][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.730415][ T6397] RIP: 0033:0x7fbfe817fed9 [ 100.734833][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.754450][ T6397] RSP: 002b:00007fbfe5fd5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 100.762882][ T6397] RAX: ffffffffffffffda RBX: 00007fbfe8346160 RCX: 00007fbfe817fed9 [ 100.770848][ T6397] RDX: 0000000000000024 RSI: 0000000020000180 RDI: 0000000000000007 [ 100.778809][ T6397] RBP: 00007fbfe5fd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.786771][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.794729][ T6397] R13: 0000000000000000 R14: 00007fbfe8346160 R15: 00007ffc25fa7f78 [ 100.802706][ T6397] [ 100.805782][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.815886][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 100.815916][ T29] audit: type=1400 audit(1733730010.201:3812): avc: denied { bind } for pid=6394 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.934852][ T5894] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.945944][ T5894] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.957122][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.971897][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.086460][ T6389] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.196235][ T5894] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.238054][ T29] audit: type=1400 audit(1733730010.901:3813): avc: denied { read } for pid=6406 comm="syz.1.151" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.270300][ T29] audit: type=1400 audit(1733730010.901:3814): avc: denied { open } for pid=6406 comm="syz.1.151" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.293784][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.313867][ T29] audit: type=1400 audit(1733730010.971:3815): avc: denied { execute } for pid=6405 comm="syz.4.152" path="/29/cpuset.memory_pressure_enabled" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.338470][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.484361][ T29] audit: type=1400 audit(1733730011.151:3816): avc: denied { write } for pid=6406 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.505911][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.584939][ T29] audit: type=1400 audit(1733730011.251:3817): avc: denied { create } for pid=6406 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.591126][ T5832] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 101.613828][ T29] audit: type=1400 audit(1733730011.281:3818): avc: denied { ioctl } for pid=6406 comm="syz.1.151" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.691109][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 101.691109][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.705080][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 101.716101][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.728927][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.738507][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.746619][ T25] usb 4-1: Product: syz [ 101.749926][ T5832] usb 5-1: device descriptor read/64, error -71 [ 101.752510][ T25] usb 4-1: Manufacturer: syz [ 101.766894][ T25] usb 4-1: SerialNumber: syz [ 101.844772][ T5894] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 101.870171][ T5894] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 101.890116][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.900897][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.991204][ T5832] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 101.991483][ T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 102.035051][ T25] usb 4-1: unit 4 not found! [ 102.092363][ T25] usb 4-1: USB disconnect, device number 5 [ 102.095961][ T6422] process 'syz.1.156' launched '/dev/fd/7' with NULL argv: empty string added [ 102.101023][ T29] audit: type=1400 audit(1733730011.761:3819): avc: denied { watch watch_reads } for pid=6421 comm="syz.1.156" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.139658][ T6422] fuse: Bad value for 'rootmode' [ 102.141958][ T29] audit: type=1400 audit(1733730011.781:3820): avc: denied { execute_no_trans } for pid=6421 comm="syz.1.156" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.151092][ T5832] usb 5-1: device descriptor read/64, error -71 [ 102.172479][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.209519][ T5814] usb 3-1: USB disconnect, device number 5 [ 102.219097][ T29] audit: type=1400 audit(1733730011.801:3821): avc: denied { mounton } for pid=6421 comm="syz.1.156" path="/38/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.221978][ T6423] mkiss: ax0: crc mode is auto. [ 102.352275][ T5832] usb usb5-port1: attempt power cycle [ 102.424328][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 102.574211][ T25] usb 1-1: USB disconnect, device number 6 [ 102.711413][ T5832] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 102.732597][ T5832] usb 5-1: device descriptor read/8, error -71 [ 103.461633][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.531172][ T5832] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 103.563372][ T5832] usb 5-1: device descriptor read/8, error -71 [ 103.625320][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.643398][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.656695][ T5894] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.668083][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.682376][ T5832] usb usb5-port1: unable to enumerate USB device [ 103.702038][ T5894] usb 2-1: config 0 descriptor?? [ 103.737925][ T6435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.123164][ T5894] hid (null): bogus close delimiter [ 104.327607][ T5894] usb 2-1: string descriptor 0 read error: -22 [ 104.410545][ T6471] FAULT_INJECTION: forcing a failure. [ 104.410545][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.424421][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.4.165 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 104.435033][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.445091][ T6471] Call Trace: [ 104.448352][ T6471] [ 104.451268][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 104.455939][ T6471] should_fail_ex+0x497/0x5b0 [ 104.460602][ T6471] _copy_from_user+0x2e/0xd0 [ 104.465177][ T6471] copy_msghdr_from_user+0x99/0x160 [ 104.470359][ T6471] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.476154][ T6471] ___sys_sendmsg+0xff/0x1e0 [ 104.480728][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.485932][ T6471] ? __pfx_lock_release+0x10/0x10 [ 104.490969][ T6471] ? __fget_files+0x206/0x3a0 [ 104.495655][ T6471] __sys_sendmsg+0x16e/0x220 [ 104.500242][ T6471] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.505363][ T6471] do_syscall_64+0xcd/0x250 [ 104.509866][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.515758][ T6471] RIP: 0033:0x7f5b87d7fed9 [ 104.520167][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.539771][ T6471] RSP: 002b:00007f5b88be8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.548186][ T6471] RAX: ffffffffffffffda RBX: 00007f5b87f46080 RCX: 00007f5b87d7fed9 [ 104.556151][ T6471] RDX: 0000000000000000 RSI: 00000000200016c0 RDI: 0000000000000005 [ 104.564113][ T6471] RBP: 00007f5b88be80a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.572075][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.580041][ T6471] R13: 0000000000000000 R14: 00007f5b87f46080 R15: 00007ffe90857088 [ 104.588017][ T6471] [ 104.884560][ T5814] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.896612][ T5894] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 105.024268][ T25] usb 2-1: USB disconnect, device number 6 [ 105.194242][ T5814] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.205224][ T5814] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 105.216514][ T6486] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.246628][ T5814] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.260935][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.270728][ T5814] usb 4-1: Product: syz [ 105.283928][ T6490] FAULT_INJECTION: forcing a failure. [ 105.283928][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.301317][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.166 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 105.311917][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.321978][ T6490] Call Trace: [ 105.325256][ T6490] [ 105.328187][ T6490] dump_stack_lvl+0x16c/0x1f0 [ 105.332882][ T6490] should_fail_ex+0x497/0x5b0 [ 105.337566][ T6490] strncpy_from_user+0x3b/0x2d0 [ 105.342431][ T6490] keyctl_restrict_keyring+0xec/0x260 [ 105.347810][ T6490] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 105.353812][ T6490] ? __do_sys_keyctl+0x2a/0x590 [ 105.358676][ T6490] __do_sys_keyctl+0x4c1/0x590 [ 105.363452][ T6490] do_syscall_64+0xcd/0x250 [ 105.367967][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.373870][ T6490] RIP: 0033:0x7f64e197fed9 [ 105.378285][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.397901][ T6490] RSP: 002b:00007f64e2787058 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 105.406324][ T6490] RAX: ffffffffffffffda RBX: 00007f64e1b46160 RCX: 00007f64e197fed9 [ 105.414301][ T6490] RDX: 0000000020000240 RSI: 0000000009d9ee68 RDI: 000000000000001d [ 105.422273][ T6490] RBP: 00007f64e27870a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.430243][ T6490] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001 [ 105.438214][ T6490] R13: 0000000000000000 R14: 00007f64e1b46160 R15: 00007fffe477caf8 [ 105.446201][ T6490] [ 105.709007][ T46] net_ratelimit: 84 callbacks suppressed [ 105.709025][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.723065][ T5814] usb 4-1: Manufacturer: syz [ 105.728728][ T5814] usb 4-1: SerialNumber: syz [ 105.729067][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.711972][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 106.711990][ T29] audit: type=1800 audit(1733730016.341:3845): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.168" name="bus" dev="overlay" ino=250 res=0 errno=0 [ 106.828511][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.132793][ T6466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.182060][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.192641][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.211705][ T6500] ptrace attach of ""[6503] was attempted by "./syz-executor exec"[6500] [ 107.278996][ T6499] capability: warning: `syz.4.170' uses 32-bit capabilities (legacy support in use) [ 107.281116][ T29] audit: type=1400 audit(1733730016.941:3846): avc: denied { setopt } for pid=6498 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.335868][ T29] audit: type=1400 audit(1733730016.941:3847): avc: denied { connect } for pid=6498 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.581350][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.629925][ T29] audit: type=1400 audit(1733730016.951:3848): avc: denied { create } for pid=6498 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.771428][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 107.843885][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.855388][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.864010][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.873746][ T46] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.971755][ T6466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.008653][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.018679][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.019735][ T29] audit: type=1400 audit(1733730016.951:3849): avc: denied { ioctl } for pid=6498 comm="syz.4.170" path="socket:[11431]" dev="sockfs" ino=11431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.026912][ T46] usb 5-1: Product: syz [ 108.646498][ T5814] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 108.653488][ T5814] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 108.661364][ T46] usb 5-1: Manufacturer: syz [ 108.665973][ T46] usb 5-1: SerialNumber: syz [ 108.671049][ T5814] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 108.741702][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.751047][ T29] audit: type=1400 audit(1733730016.951:3850): avc: denied { bind } for pid=6498 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.809712][ T29] audit: type=1400 audit(1733730017.891:3851): avc: denied { map } for pid=6507 comm="syz.0.172" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 109.327678][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.357025][ T29] audit: type=1400 audit(1733730018.461:3852): avc: denied { create } for pid=6513 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.376786][ T29] audit: type=1400 audit(1733730018.461:3853): avc: denied { write } for pid=6513 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.404363][ T29] audit: type=1400 audit(1733730019.071:3854): avc: denied { connect } for pid=6498 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.432415][ T46] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 109.499526][ T46] usb 5-1: USB disconnect, device number 8 [ 109.545371][ T5814] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 109.595109][ T5814] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 109.609027][ T5814] wwan wwan0: port wwan0mbim0 attached [ 109.624876][ T5814] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 109.638761][ T5814] usb 4-1: USB disconnect, device number 6 [ 109.659418][ T5814] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 109.836431][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.848487][ T5814] wwan wwan0: port wwan0mbim0 disconnected [ 109.940753][ T6529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 110.011167][ T970] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.032671][ T5832] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 110.045429][ T5832] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 110.057119][ T5832] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.067527][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.161531][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 110.169014][ T970] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 110.195964][ T970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.211129][ T970] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 110.220479][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.234120][ T970] usb 1-1: config 0 descriptor?? [ 110.315110][ T5894] usb 3-1: USB disconnect, device number 6 [ 110.335437][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.659847][ T970] magicmouse 0003:05AC:0265.0004: unknown main item tag 0x0 [ 110.700161][ T970] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v20.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 110.723097][ T970] magicmouse 0003:05AC:0265.0004: magicmouse input not registered [ 110.749684][ T970] magicmouse 0003:05AC:0265.0004: probe with driver magicmouse failed with error -12 [ 110.952037][ T5894] usb 1-1: USB disconnect, device number 7 [ 111.501217][ T6542] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 111.508926][ T6542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.516594][ T6542] IPv6: NLM_F_CREATE should be set when creating new route [ 111.744530][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.955518][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.077041][ T6542] bridge1: entered promiscuous mode [ 112.082320][ T6542] bridge1: entered allmulticast mode [ 112.092847][ T6542] team0: Port device bridge1 added [ 112.354352][ T6545] overlayfs: missing 'lowerdir' [ 112.906364][ T6548] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.916042][ T6548] openvswitch: netlink: Message has 44053 unknown bytes. [ 112.925433][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.364466][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 113.364544][ T29] audit: type=1400 audit(1733730023.001:3862): avc: denied { map } for pid=6550 comm="syz.2.187" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.935554][ T6563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (245259927488 ns) > initial count (134218304 ns). Using initial count to start timer. [ 113.968800][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.052963][ T29] audit: type=1400 audit(1733730023.721:3863): avc: denied { setopt } for pid=6567 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.185988][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.731450][ T29] audit: type=1400 audit(1733730023.791:3864): avc: denied { ioctl } for pid=6564 comm="syz.4.190" path="socket:[11574]" dev="sockfs" ino=11574 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.762144][ T29] audit: type=1400 audit(1733730023.871:3865): avc: denied { ioctl } for pid=6561 comm="syz.3.188" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.883359][ T29] audit: type=1400 audit(1733730024.471:3866): avc: denied { read } for pid=6553 comm="syz.0.186" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.919776][ T29] audit: type=1400 audit(1733730024.471:3867): avc: denied { open } for pid=6553 comm="syz.0.186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.971836][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.105428][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.001052][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.001105][ T29] audit: type=1400 audit(1733730024.511:3868): avc: denied { ioctl } for pid=6553 comm="syz.0.186" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.099665][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.043539][ T29] audit: type=1326 audit(1733730026.041:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.0.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de1f7fed9 code=0x0 [ 117.148820][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.588290][ T5894] usb 3-1: unable to read config index 0 descriptor/all [ 117.595393][ T5894] usb 3-1: can't read configurations, error -71 [ 117.686484][ T29] audit: type=1400 audit(1733730027.351:3870): avc: denied { connect } for pid=6596 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.771078][ T29] audit: type=1400 audit(1733730027.821:3871): avc: denied { write } for pid=6595 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.801857][ T29] audit: type=1400 audit(1733730027.821:3872): avc: denied { nlmsg_write } for pid=6595 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.902571][ T6606] FAULT_INJECTION: forcing a failure. [ 118.902571][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 118.916900][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.3.199 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 118.927510][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.937572][ T6606] Call Trace: [ 118.940874][ T6606] [ 118.943807][ T6606] dump_stack_lvl+0x16c/0x1f0 [ 118.948512][ T6606] should_fail_ex+0x497/0x5b0 [ 118.953199][ T6606] ? fs_reclaim_acquire+0xae/0x150 [ 118.958330][ T6606] should_failslab+0xc2/0x120 [ 118.963021][ T6606] __kmalloc_noprof+0xcb/0x510 [ 118.967801][ T6606] nla_strdup+0xc6/0x150 [ 118.972064][ T6606] nf_tables_newtable+0xe08/0x1b80 [ 118.977204][ T6606] ? net_generic+0xea/0x2a0 [ 118.981728][ T6606] ? __pfx_nf_tables_newtable+0x10/0x10 [ 118.987300][ T6606] ? __nla_parse+0x40/0x60 [ 118.991740][ T6606] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 118.997066][ T6606] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 119.002731][ T6606] ? avc_has_perm_noaudit+0x119/0x3a0 [ 119.008143][ T6606] ? avc_has_perm_noaudit+0x143/0x3a0 [ 119.013564][ T6606] ? __nla_parse+0x40/0x60 [ 119.018001][ T6606] nfnetlink_rcv+0x3c3/0x430 [ 119.022612][ T6606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 119.027752][ T6606] netlink_unicast+0x53c/0x7f0 [ 119.032545][ T6606] ? __pfx_netlink_unicast+0x10/0x10 [ 119.037860][ T6606] netlink_sendmsg+0x8b8/0xd70 [ 119.042649][ T6606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.047965][ T6606] ____sys_sendmsg+0xaaf/0xc90 [ 119.052761][ T6606] ? copy_msghdr_from_user+0x10b/0x160 [ 119.058238][ T6606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.063550][ T6606] ___sys_sendmsg+0x135/0x1e0 [ 119.068238][ T6606] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.073455][ T6606] ? __pfx_lock_release+0x10/0x10 [ 119.078490][ T6606] ? trace_lock_acquire+0x14e/0x1f0 [ 119.083816][ T6606] ? __fget_files+0x206/0x3a0 [ 119.088508][ T6606] __sys_sendmsg+0x16e/0x220 [ 119.093108][ T6606] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.098247][ T6606] do_syscall_64+0xcd/0x250 [ 119.102765][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.108681][ T6606] RIP: 0033:0x7fbfe817fed9 [ 119.113103][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.132729][ T6606] RSP: 002b:00007fbfe8eb7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.141161][ T6606] RAX: ffffffffffffffda RBX: 00007fbfe8345fa0 RCX: 00007fbfe817fed9 [ 119.149163][ T6606] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 119.157143][ T6606] RBP: 00007fbfe8eb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.165122][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.173102][ T6606] R13: 0000000000000000 R14: 00007fbfe8345fa0 R15: 00007ffc25fa7f78 [ 119.181088][ T6606] [ 119.431054][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.718617][ T29] audit: type=1400 audit(1733730029.381:3873): avc: denied { read write } for pid=6620 comm="syz.1.205" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.742096][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.748978][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 119.766164][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.780324][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.782095][ T29] audit: type=1400 audit(1733730029.381:3874): avc: denied { open } for pid=6620 comm="syz.1.205" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.833546][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.843914][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.887711][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.927913][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.171287][ T29] audit: type=1326 audit(1733730029.831:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.2.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e197fed9 code=0x0 [ 120.768760][ T5832] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.776497][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 120.782413][ T9] usbtmc 1-1:16.0: can't read capabilities [ 120.803041][ T9] usb 1-1: USB disconnect, device number 8 [ 121.098636][ T5832] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.117048][ T5832] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.128760][ T5832] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.136615][ T29] audit: type=1400 audit(1733730030.781:3876): avc: denied { ioctl } for pid=6637 comm="syz.2.210" path="socket:[11688]" dev="sockfs" ino=11688 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 121.154120][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.213999][ T6627] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.586436][ T5832] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.561189][ T5814] usb 4-1: USB disconnect, device number 7 [ 123.101202][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.265010][ T6666] overlayfs: failed to resolve './file1': -2 [ 123.307889][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 123.372813][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 123.713790][ T29] audit: type=1400 audit(1733730033.381:3877): avc: denied { setopt } for pid=6661 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.716679][ T970] IPVS: starting estimator thread 0... [ 123.733942][ T46] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.752705][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.761901][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.765809][ T29] audit: type=1400 audit(1733730033.431:3878): avc: denied { write } for pid=6661 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.770930][ T46] usb 1-1: Product: syz [ 123.796066][ T46] usb 1-1: Manufacturer: syz [ 123.800743][ T46] usb 1-1: SerialNumber: syz [ 123.901284][ T6668] IPVS: using max 24 ests per chain, 57600 per kthread [ 124.061242][ T6671] ALSA: seq fatal error: cannot create timer (-22) [ 124.140622][ T46] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 124.148199][ T46] usb 1-1: unit 4 not found! [ 124.174037][ T46] usb 1-1: USB disconnect, device number 9 [ 124.383352][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.741140][ T29] audit: type=1326 audit(1733730034.341:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.4.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x0 [ 125.481726][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f41d400: rx timeout, send abort [ 125.491606][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f41d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.767211][ T6688] fuse: Unknown parameter 'gootmode' [ 125.778397][ T29] audit: type=1400 audit(1733730035.441:3880): avc: denied { getopt } for pid=6687 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.309857][ T29] audit: type=1800 audit(1733730035.891:3881): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.224" name="bus" dev="overlay" ino=329 res=0 errno=0 [ 126.654163][ T5832] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.856366][ T6712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6712 comm=syz.1.229 [ 126.989126][ T5814] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.153299][ T5814] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.167793][ T5814] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.194859][ T5814] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.219278][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.257224][ T6709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 127.353152][ T5814] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.374385][ T29] audit: type=1400 audit(1733730037.011:3882): avc: denied { create } for pid=6715 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 127.393965][ T29] audit: type=1400 audit(1733730037.011:3883): avc: denied { ioctl } for pid=6715 comm="syz.4.230" path="socket:[11799]" dev="sockfs" ino=11799 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 127.489279][ T5832] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.499005][ T5832] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.514790][ T5832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.524955][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.538738][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.563197][ T5832] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.572787][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.581619][ T5832] usb 3-1: Product: syz [ 127.585860][ T5832] usb 3-1: Manufacturer: syz [ 127.652078][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 127.659667][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 127.670205][ T5832] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.683952][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 127.701237][ T5832] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.800914][ T6726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6726 comm=syz.1.232 [ 127.814143][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 128.075415][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 128.660250][ T5814] usb 3-1: USB disconnect, device number 9 [ 128.947049][ T5814] usb 4-1: USB disconnect, device number 8 [ 129.240395][ T6753] team0: Device vlan2 is up. Set it down before adding it as a team port [ 129.265731][ T6755] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.242'. [ 129.656841][ T29] audit: type=1400 audit(1733730039.321:3884): avc: denied { bind } for pid=6769 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.741851][ T6771] FAULT_INJECTION: forcing a failure. [ 129.741851][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 129.754893][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.2.245 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 129.765614][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.775673][ T6771] Call Trace: [ 129.778955][ T6771] [ 129.781886][ T6771] dump_stack_lvl+0x16c/0x1f0 [ 129.786585][ T6771] should_fail_ex+0x497/0x5b0 [ 129.791271][ T6771] should_failslab+0xc2/0x120 [ 129.795978][ T6771] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 129.802334][ T6771] ? trace_lock_acquire+0x14e/0x1f0 [ 129.807559][ T6771] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 129.813828][ T6771] kstrdup+0x53/0x100 [ 129.817820][ T6771] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 129.823905][ T6771] selinux_netlbl_sock_genattr+0x129/0x4f0 [ 129.829734][ T6771] selinux_netlbl_socket_post_create+0xb0/0x1b0 [ 129.835995][ T6771] selinux_socket_post_create+0x2fa/0x7f0 [ 129.841729][ T6771] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 129.847983][ T6771] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 129.853377][ T6771] ? tcp_v4_init_sock+0x15/0x80 [ 129.858245][ T6771] ? inet_create+0x98d/0x10a0 [ 129.862950][ T6771] security_socket_post_create+0x247/0x260 [ 129.868779][ T6771] __sock_create+0x738/0x8d0 [ 129.873388][ T6771] mptcp_subflow_create_socket+0xf6/0x10a0 [ 129.879211][ T6771] ? __pfx___schedule+0x10/0x10 [ 129.884073][ T6771] ? __pfx_mark_lock+0x10/0x10 [ 129.888852][ T6771] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 129.895194][ T6771] ? find_held_lock+0x2d/0x110 [ 129.899983][ T6771] __mptcp_nmpc_sk+0x184/0x7d0 [ 129.904767][ T6771] ? preempt_schedule_common+0x44/0xc0 [ 129.910251][ T6771] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 129.915571][ T6771] mptcp_sendmsg+0x1693/0x1f20 [ 129.920353][ T6771] ? sock_has_perm+0x25a/0x2f0 [ 129.925129][ T6771] ? __pfx_sock_has_perm+0x10/0x10 [ 129.930256][ T6771] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 129.937056][ T6771] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 129.942192][ T6771] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 129.947319][ T6771] inet_sendmsg+0x119/0x140 [ 129.951850][ T6771] ____sys_sendmsg+0x98c/0xc90 [ 129.956632][ T6771] ? copy_msghdr_from_user+0x10b/0x160 [ 129.962100][ T6771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.967411][ T6771] ___sys_sendmsg+0x135/0x1e0 [ 129.972102][ T6771] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.977323][ T6771] ? __pfx_lock_release+0x10/0x10 [ 129.982356][ T6771] ? trace_lock_acquire+0x14e/0x1f0 [ 129.987578][ T6771] ? __fget_files+0x206/0x3a0 [ 129.992267][ T6771] __sys_sendmsg+0x16e/0x220 [ 129.996859][ T6771] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.001983][ T6771] do_syscall_64+0xcd/0x250 [ 130.006489][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.012396][ T6771] RIP: 0033:0x7f64e197fed9 [ 130.016809][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.036416][ T6771] RSP: 002b:00007f64e2787058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.044833][ T6771] RAX: ffffffffffffffda RBX: 00007f64e1b46160 RCX: 00007f64e197fed9 [ 130.052806][ T6771] RDX: 0000000030004001 RSI: 0000000020000080 RDI: 0000000000000008 [ 130.060769][ T6771] RBP: 00007f64e27870a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.068734][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.076699][ T6771] R13: 0000000000000000 R14: 00007f64e1b46160 R15: 00007fffe477caf8 [ 130.084680][ T6771] [ 130.581059][ T5814] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.758796][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.771518][ T5814] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.196567][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.203916][ T29] audit: type=1400 audit(1733730040.871:3885): avc: denied { connect } for pid=6785 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.260168][ T29] audit: type=1400 audit(1733730040.871:3886): avc: denied { name_connect } for pid=6785 comm="syz.2.252" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 131.365943][ T5814] usb 1-1: config 0 descriptor?? [ 131.396169][ T29] audit: type=1400 audit(1733730041.061:3887): avc: denied { write } for pid=6785 comm="syz.2.252" laddr=127.0.0.1 lport=33494 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.597212][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 131.621134][ T5814] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.649517][ T5814] usb 1-1: USB disconnect, device number 10 [ 131.901550][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.961052][ T970] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.052432][ T5894] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 132.078526][ T5894] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 132.109509][ T5894] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.125184][ T970] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 132.133674][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.141906][ T5814] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 132.168851][ T970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.179553][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.190803][ T970] usb 2-1: Product: syz [ 132.196512][ T970] usb 2-1: Manufacturer: syz [ 132.201382][ T970] usb 2-1: SerialNumber: syz [ 132.215552][ T970] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.255369][ T5894] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.330619][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.351802][ T5814] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.360897][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.417834][ T5814] usb 1-1: config 0 descriptor?? [ 132.497281][ T5814] hub 1-1:0.0: USB hub found [ 132.510217][ T29] audit: type=1400 audit(1733730042.141:3888): avc: denied { create } for pid=6798 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 132.527497][ T5869] usb 5-1: USB disconnect, device number 9 [ 132.841641][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848019][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857426][ T5814] hub 1-1:0.0: 1 port detected [ 132.963493][ T29] audit: type=1326 audit(1733730042.631:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.4.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b87d7fed9 code=0x0 [ 133.021421][ T9] usb 2-1: USB disconnect, device number 7 [ 133.301087][ T5894] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 133.310348][ T5894] ath9k_htc: Failed to initialize the device [ 133.341045][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 133.897539][ T5814] usb 1-1: USB disconnect, device number 11 [ 134.857037][ T6835] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.911477][ T29] audit: type=1400 audit(1733730044.581:3890): avc: denied { bind } for pid=6832 comm="syz.1.267" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.011042][ T29] audit: type=1400 audit(1733730044.581:3891): avc: denied { node_bind } for pid=6832 comm="syz.1.267" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 135.411287][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.483527][ T6850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.561232][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 135.567677][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.575642][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 135.584830][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.595769][ T9] usb 1-1: Product: syz [ 135.601434][ T9] usb 1-1: Manufacturer: syz [ 135.616334][ T9] usb 1-1: config 0 descriptor?? [ 135.628983][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 135.635189][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 135.654028][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 135.716021][ T6860] loop7: detected capacity change from 0 to 16384 [ 135.788943][ T6860] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 136.012430][ T9] gspca_zc3xx: reg_w_i err -71 [ 136.202744][ T6860] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 136.316306][ T6860] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.366386][ T6860] Buffer I/O error on dev loop7, logical block 160, async page read [ 136.434231][ T6866] FAULT_INJECTION: forcing a failure. [ 136.434231][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 136.446922][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.273 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 136.457515][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.467571][ T6866] Call Trace: [ 136.470849][ T6866] [ 136.473786][ T6866] dump_stack_lvl+0x16c/0x1f0 [ 136.478476][ T6866] should_fail_ex+0x497/0x5b0 [ 136.483159][ T6866] ? fs_reclaim_acquire+0xae/0x150 [ 136.488287][ T6866] should_failslab+0xc2/0x120 [ 136.492974][ T6866] __kmalloc_cache_noprof+0x68/0x410 [ 136.498264][ T6866] ? preempt_schedule_thunk+0x1a/0x30 [ 136.503680][ T6866] vma_node_allow+0x56/0x300 [ 136.508286][ T6866] drm_gem_handle_create_tail+0x222/0x550 [ 136.514023][ T6866] drm_gem_shmem_dumb_create+0x21c/0x300 [ 136.519670][ T6866] drm_mode_create_dumb_ioctl+0x26f/0x300 [ 136.525396][ T6866] drm_ioctl_kernel+0x1e6/0x3d0 [ 136.530255][ T6866] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 136.536501][ T6866] ? __might_fault+0xe3/0x190 [ 136.541187][ T6866] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 136.546571][ T6866] ? __might_fault+0xe3/0x190 [ 136.551272][ T6866] drm_ioctl+0x5d6/0xc00 [ 136.555544][ T6866] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 136.561792][ T6866] ? __pfx_drm_ioctl+0x10/0x10 [ 136.566565][ T6866] ? __pfx_lock_release+0x10/0x10 [ 136.571609][ T6866] ? selinux_file_ioctl+0x180/0x270 [ 136.576823][ T6866] ? selinux_file_ioctl+0xb4/0x270 [ 136.581945][ T6866] ? __pfx_drm_ioctl+0x10/0x10 [ 136.586723][ T6866] __x64_sys_ioctl+0x190/0x200 [ 136.591503][ T6866] do_syscall_64+0xcd/0x250 [ 136.596021][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.601927][ T6866] RIP: 0033:0x7f5b87d7fed9 [ 136.606343][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.625962][ T6866] RSP: 002b:00007f5b88bc7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.634382][ T6866] RAX: ffffffffffffffda RBX: 00007f5b87f46160 RCX: 00007f5b87d7fed9 [ 136.642356][ T6866] RDX: 0000000020000140 RSI: 00000000c02064b2 RDI: 0000000000000007 [ 136.650340][ T6866] RBP: 00007f5b88bc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.658320][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.666301][ T6866] R13: 0000000000000000 R14: 00007f5b87f46160 R15: 00007ffe90857088 [ 136.674302][ T6866] [ 136.706193][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 136.713898][ T9] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 136.736530][ T6860] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 136.753703][ T6860] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 136.788112][ T6860] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 136.800461][ T6860] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 136.821317][ T6860] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 136.829817][ T6860] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 136.838648][ T6860] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 136.852347][ T6860] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 136.861117][ T6860] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 136.878550][ T6860] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 136.894071][ T6860] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 136.922019][ T6863] ------------[ cut here ]------------ [ 136.927498][ T6863] WARNING: CPU: 0 PID: 6863 at drivers/gpu/drm/drm_prime.c:227 drm_prime_destroy_file_private+0x43/0x60 [ 136.938729][ T6863] Modules linked in: [ 136.942673][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.4.273 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 136.954909][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.965180][ T6863] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 136.973734][ T6863] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 73 b5 5e fc e8 6e b5 5e fc 90 <0f> 0b 90 5b e9 64 b5 5e fc e8 af 9d c1 fc eb d8 66 66 2e 0f 1f 84 [ 136.993465][ T6863] RSP: 0018:ffffc9000c357ce8 EFLAGS: 00010293 [ 137.000239][ T6863] RAX: 0000000000000000 RBX: ffff8880252d3380 RCX: 1ffffffff20bda11 [ 137.008277][ T6863] RDX: ffff888058f7a440 RSI: ffffffff853b50d2 RDI: ffff8880252d3410 [ 137.016298][ T6863] RBP: ffff8880252d3000 R08: 0000000000000001 R09: 0000000000000001 [ 137.024388][ T6863] R10: ffffffff905f12d7 R11: 0000000000000000 R12: ffff888025494000 [ 137.032451][ T6863] R13: ffff8880252d32b0 R14: ffff888025494068 R15: ffff8880254940a0 [ 137.040459][ T6863] FS: 0000555570732500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 137.049448][ T6863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.056096][ T6863] CR2: 0000001b2f0f0ff8 CR3: 000000002517c000 CR4: 00000000003526f0 [ 137.064167][ T6863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.072196][ T6863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.080189][ T6863] Call Trace: [ 137.083559][ T6863] [ 137.086499][ T6863] ? __warn+0xea/0x3c0 [ 137.090620][ T6863] ? drm_prime_destroy_file_private+0x43/0x60 [ 137.097189][ T6863] ? report_bug+0x3c0/0x580 [ 137.102153][ T6863] ? handle_bug+0x54/0xa0 [ 137.106543][ T6863] ? exc_invalid_op+0x17/0x50 [ 137.111325][ T6863] ? asm_exc_invalid_op+0x1a/0x20 [ 137.116385][ T6863] ? drm_prime_destroy_file_private+0x42/0x60 [ 137.122573][ T6863] ? drm_prime_destroy_file_private+0x43/0x60 [ 137.128667][ T6863] ? drm_prime_destroy_file_private+0x42/0x60 [ 137.134826][ T6863] ? __pfx_vgem_postclose+0x10/0x10 [ 137.140059][ T6863] drm_file_free.part.0+0x748/0xbe0 [ 137.145349][ T6863] drm_close_helper.isra.0+0x186/0x1f0 [ 137.150837][ T6863] drm_release+0x1a9/0x360 [ 137.155347][ T6863] ? __pfx_drm_release+0x10/0x10 [ 137.160296][ T6863] __fput+0x3f8/0xb60 [ 137.164349][ T6863] task_work_run+0x14e/0x250 [ 137.168955][ T6863] ? __pfx_task_work_run+0x10/0x10 [ 137.174158][ T6863] ? __pfx___do_sys_close_range+0x10/0x10 [ 137.179898][ T6863] syscall_exit_to_user_mode+0x27b/0x2a0 [ 137.185662][ T6863] do_syscall_64+0xda/0x250 [ 137.190282][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.196250][ T6863] RIP: 0033:0x7f5b87d7fed9 [ 137.201066][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.221362][ T6863] RSP: 002b:00007ffe908571e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 137.229796][ T6863] RAX: 0000000000000000 RBX: 00007f5b87f47ba0 RCX: 00007f5b87d7fed9 [ 137.237953][ T6863] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 137.245966][ T6863] RBP: 00007f5b87f47ba0 R08: 0000000000000000 R09: 00007ffe908574cf [ 137.253983][ T6863] R10: 00007f5b87f47ac0 R11: 0000000000000246 R12: 00000000000216b0 [ 137.261980][ T6863] R13: 00007f5b87f46080 R14: 0000000000000032 R15: ffffffffffffffff [ 137.269954][ T6863] [ 137.273019][ T6863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.280285][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.4.273 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 137.290848][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.300882][ T6863] Call Trace: [ 137.304146][ T6863] [ 137.307058][ T6863] dump_stack_lvl+0x3d/0x1f0 [ 137.311636][ T6863] panic+0x71d/0x800 [ 137.315517][ T6863] ? __pfx_panic+0x10/0x10 [ 137.319919][ T6863] ? show_trace_log_lvl+0x29d/0x3d0 [ 137.325103][ T6863] ? check_panic_on_warn+0x1f/0xb0 [ 137.330208][ T6863] ? drm_prime_destroy_file_private+0x43/0x60 [ 137.336272][ T6863] check_panic_on_warn+0xab/0xb0 [ 137.341206][ T6863] __warn+0xf6/0x3c0 [ 137.345094][ T6863] ? drm_prime_destroy_file_private+0x43/0x60 [ 137.351155][ T6863] report_bug+0x3c0/0x580 [ 137.355481][ T6863] handle_bug+0x54/0xa0 [ 137.359633][ T6863] exc_invalid_op+0x17/0x50 [ 137.364137][ T6863] asm_exc_invalid_op+0x1a/0x20 [ 137.368985][ T6863] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 137.375655][ T6863] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 73 b5 5e fc e8 6e b5 5e fc 90 <0f> 0b 90 5b e9 64 b5 5e fc e8 af 9d c1 fc eb d8 66 66 2e 0f 1f 84 [ 137.395258][ T6863] RSP: 0018:ffffc9000c357ce8 EFLAGS: 00010293 [ 137.401316][ T6863] RAX: 0000000000000000 RBX: ffff8880252d3380 RCX: 1ffffffff20bda11 [ 137.409278][ T6863] RDX: ffff888058f7a440 RSI: ffffffff853b50d2 RDI: ffff8880252d3410 [ 137.417240][ T6863] RBP: ffff8880252d3000 R08: 0000000000000001 R09: 0000000000000001 [ 137.425199][ T6863] R10: ffffffff905f12d7 R11: 0000000000000000 R12: ffff888025494000 [ 137.433159][ T6863] R13: ffff8880252d32b0 R14: ffff888025494068 R15: ffff8880254940a0 [ 137.441125][ T6863] ? drm_prime_destroy_file_private+0x42/0x60 [ 137.447189][ T6863] ? drm_prime_destroy_file_private+0x42/0x60 [ 137.453246][ T6863] ? __pfx_vgem_postclose+0x10/0x10 [ 137.458433][ T6863] drm_file_free.part.0+0x748/0xbe0 [ 137.463624][ T6863] drm_close_helper.isra.0+0x186/0x1f0 [ 137.469071][ T6863] drm_release+0x1a9/0x360 [ 137.473477][ T6863] ? __pfx_drm_release+0x10/0x10 [ 137.478403][ T6863] __fput+0x3f8/0xb60 [ 137.482384][ T6863] task_work_run+0x14e/0x250 [ 137.486966][ T6863] ? __pfx_task_work_run+0x10/0x10 [ 137.492067][ T6863] ? __pfx___do_sys_close_range+0x10/0x10 [ 137.497783][ T6863] syscall_exit_to_user_mode+0x27b/0x2a0 [ 137.503417][ T6863] do_syscall_64+0xda/0x250 [ 137.507917][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.513814][ T6863] RIP: 0033:0x7f5b87d7fed9 [ 137.518306][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.537903][ T6863] RSP: 002b:00007ffe908571e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 137.546307][ T6863] RAX: 0000000000000000 RBX: 00007f5b87f47ba0 RCX: 00007f5b87d7fed9 [ 137.554264][ T6863] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 137.562232][ T6863] RBP: 00007f5b87f47ba0 R08: 0000000000000000 R09: 00007ffe908574cf [ 137.570188][ T6863] R10: 00007f5b87f47ac0 R11: 0000000000000246 R12: 00000000000216b0 [ 137.578146][ T6863] R13: 00007f5b87f46080 R14: 0000000000000032 R15: ffffffffffffffff [ 137.586118][ T6863] [ 137.589326][ T6863] Kernel Offset: disabled [ 137.593629][ T6863] Rebooting in 86400 seconds..