last executing test programs: 3m4.333270812s ago: executing program 2 (id=78): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002907814000000e000000111009078e0000001000000010000001000000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000100)={0x8, 'vxcan1\x00', {'vlan1\x00'}, 0xbc}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x3) r10 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000008f204211400000000000109022400000100a02009040006020300020009210200000122080409058103000400fe09", @ANYRESDEC=r9, @ANYRESHEX=r1, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r1, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3m1.708434047s ago: executing program 2 (id=86): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) 3m0.756213603s ago: executing program 2 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r5, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="0800050009000000d04ebbe99417bf6105ea7f8c1714144b653eb9e8e6e63e45459b3f092265a7461a031cd3bf2d184297425cb57202f5118dc5346f2e7e0665245b031c3820811736fbd9004df498d0b15b7286591811d21cb38ea16fcb1a10c2743a83e08222f18e8aafd494e0e1696a2a8482cd44979d3617e265599faa526daceb3558837def9133"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r6 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2m59.198479507s ago: executing program 2 (id=91): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002907814000000e000000111009078e0000001000000010000001000000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000100)={0x8, 'vxcan1\x00', {'vlan1\x00'}, 0xbc}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0xc, "a0"}, @local=@item_4={0x3, 0x2, 0xa, "df934309"}, @local=@item_4={0x3, 0x2, 0x3}]}}, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r1, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m55.36030461s ago: executing program 2 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r5, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="0800050009000000d04ebbe99417bf6105ea7f8c1714144b653eb9e8e6e63e45459b3f092265a7461a031cd3bf2d184297425cb57202f5118dc5346f2e7e0665245b031c3820811736fbd9004df498d0b15b7286591811d21cb38ea16fcb1a10c2743a83e08222f18e8aafd494e0e1696a2a8482cd44979d3617e265599faa526daceb3558837def9133"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r6 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2m53.836581189s ago: executing program 2 (id=103): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) splice(r5, 0x0, r2, 0x0, 0x3, 0x9) 2m38.530521229s ago: executing program 32 (id=103): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) splice(r5, 0x0, r2, 0x0, 0x3, 0x9) 13.42260645s ago: executing program 0 (id=541): ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'batadv_slave_0\x00'}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x103440) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000200)={0x1144, 0x21, 0x300, 0x70bd2d, 0x25dfdbfb, {0x8}, [@nested={0x112d, 0xf9, 0x0, 0x1, [@generic="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", @generic="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", @nested={0x4, 0xd8}, @generic="1b87c6af1a3d2794c12db247178909ba3927f131c74fd90275c60f4eee47653e031faaea7adb"]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000001440)={'syz0\x00', {0x95, 0x10, 0x8, 0x7f}, 0x56, [0x9, 0x0, 0x4, 0x6, 0x401, 0x8, 0x27b, 0x5, 0x100, 0x64000000, 0x0, 0x8, 0x5c, 0xf6f, 0x82bf, 0xa91, 0x1e466bf8, 0xa, 0x9, 0x4053, 0x400, 0x1, 0x8, 0x5, 0x6, 0x32, 0xfffffffe, 0x40, 0x0, 0x8000, 0x2, 0xf5ac5, 0xfffffffc, 0x1, 0x9, 0x94, 0x7, 0x1, 0x7fffffff, 0xe, 0x2, 0x7fff, 0x8, 0xfffffffc, 0xf, 0xf3, 0x7, 0x1, 0x7, 0x5a, 0x3, 0xfffff194, 0x8, 0x80, 0x8, 0x1, 0x9, 0x7, 0x5, 0x2, 0x7fff, 0x5, 0x80000000, 0x9], [0x3, 0x120, 0x81, 0x8, 0xc, 0x3, 0x13cf, 0x5, 0x9, 0x7, 0x10, 0x4, 0x5, 0xffffffff, 0x10001, 0xffffffcc, 0x4, 0x70f, 0x9, 0x5, 0x100, 0x1000000, 0x152e, 0x45c0, 0x1, 0x6, 0xb, 0x5, 0x3, 0x4, 0x1, 0x7fffffff, 0x7, 0x6, 0x96, 0x7, 0xb, 0x5, 0xffffffff, 0x1, 0x101, 0x4, 0x575a, 0x5, 0x3, 0x81, 0x7f, 0x5, 0xfffffffd, 0x8, 0xe, 0x0, 0xb0c, 0x447, 0xb, 0x6, 0x2fce, 0x6, 0x1, 0x2, 0xb27, 0xc, 0x3, 0xcd84], [0x0, 0xe, 0x4, 0xe5, 0xc0, 0x9, 0x5, 0x0, 0x1, 0x1, 0x5, 0xfffffe01, 0x8, 0xfffffffc, 0x4, 0x9, 0x101, 0x931, 0x1, 0x5091, 0xfffffffa, 0x2, 0xf, 0x6, 0x7e, 0x1, 0x5, 0x7, 0x400, 0x39, 0x8, 0x8, 0x8000, 0x69, 0x1, 0x2, 0x4, 0x2, 0x2, 0xffffff10, 0x6, 0x70a, 0x9, 0x8, 0x2, 0x2, 0x7824, 0x0, 0xffffffed, 0x8, 0x0, 0x0, 0x8001, 0xd, 0x2, 0x7, 0x40, 0x1, 0x3, 0xc19, 0x3, 0x80, 0x8, 0x6], [0x2, 0x6, 0x1, 0xd, 0x7, 0x4, 0x1ff, 0x40, 0x2554781a, 0x1, 0x462, 0x345, 0x8, 0x4, 0x2, 0x3, 0x3, 0x5, 0x80000000, 0xffffffff, 0x826, 0x8000, 0xd0c3, 0x4, 0x28f, 0x0, 0x8, 0x7ff, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x1, 0xfffffff5, 0x2, 0x1, 0x1, 0x0, 0xff, 0x2, 0x856, 0x0, 0xa, 0x7, 0x1, 0x100, 0x1, 0x4, 0x2, 0x4323, 0x7, 0xfff, 0x9, 0x5, 0x7ff, 0x4000000, 0x3, 0x5, 0x6, 0x1, 0x5, 0x6ad]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000018c0)={0x0, 0xfffff001}, &(0x7f0000001900)=0x8) bind$inet6(r4, &(0x7f0000001940)={0xa, 0x4e22, 0x6, @local, 0x8000}, 0x1c) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000001980)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x101, @remote, 0x2}}, 0x24) syz_open_dev$ndb(&(0x7f00000019c0), 0x0, 0x40000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001a40)={0x0, {0x2, 0x5, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @multicast2}, 0xc0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001a00)='bond_slave_0\x00', 0x0, 0x8, 0x400}) pipe(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001bc0)={'syztnl1\x00', &(0x7f0000001b00)={'syztnl1\x00', 0x0, 0x80, 0x760, 0x282, 0x400, {{0x19, 0x4, 0x3, 0x4, 0x64, 0x66, 0x0, 0xef, 0x29, 0x0, @loopback, @local, {[@lsrr={0x83, 0x23, 0x92, [@private=0xa010100, @multicast1, @broadcast, @loopback, @empty, @local, @loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0x9c, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5f7fa524}, {@multicast2, 0x6}, {@local, 0x4}, {@private=0xa010100, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001cc0)={'gretap0\x00', &(0x7f0000001c00)={'ip_vti0\x00', r9, 0x1, 0x80, 0x3, 0x8001, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x6, 0x0, 0x2, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_prespec={0x44, 0xc, 0xa0, 0x3, 0x6, [{@remote, 0x800}]}, @timestamp_prespec={0x44, 0x4c, 0x6a, 0x3, 0x8, [{@local, 0x3c076c5d}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fffffff}, {@empty, 0x5}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@remote, 0x8}, {@broadcast, 0x2}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x9}]}, @rr={0x7, 0x1b, 0x92, [@broadcast, @broadcast, @private=0xa010101, @multicast2, @private=0xa010100, @multicast2]}]}}}}}) llistxattr(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)=""/157, 0x9d) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000001e00)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000001e40)={0x28, 0x0, r10, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) r11 = accept4$x25(r8, 0x0, &(0x7f0000001e80), 0x80000) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, &(0x7f0000001ec0)={0x15}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f00)='./cgroup.cpu/syz1\x00', 0x1ff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001f40), 0x280200, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001f80)={r5, 0x3ff}, 0x8) 13.22853528s ago: executing program 0 (id=542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x3}]}) 12.786742138s ago: executing program 0 (id=544): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb49, 0xb, 0x8, 0x0, 0x3}, 0x0) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) socket(0x10, 0x5, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x9) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) r7 = dup(r5) write$uinput_user_dev(r7, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x101, 0x3, 0x1, 0x40, 0x9, 0x2, 0x6, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x20083, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x400007, 0x4c, 0xfffffffd, 0x83, 0x80000008, 0x8, 0x9, 0x7, 0x105, 0xc3c, 0x1733, 0x7ffc, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x6, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x5, 0x7, 0xa, 0x8001, 0x3, 0x8, 0x3, 0x2, 0x2, 0x0, 0x6, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x3, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x1, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x6, 0x10, 0x8, 0x2, 0x3, 0x9, 0x4, 0x4, 0x0, 0x2, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x800006, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r0, &(0x7f0000004c80)={0x2020}, 0x1d84) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000380)="776fb4af04d41ae00bd9fd9cd9a600f590f73ad97dde3f1f8bbd9e1f4ed90e6d6a9f36c26ce63647a7230d3cf9781ef3dcdd53b6c75ac63512ebf15c7885b7e341c805626001c92533e7d170a085db9b8a5ce8fc22a2b076039483ad66dea59047afc6dde1850522e3c0f9b6eb09e1f4b2962a8d9167296f1966b1a945dc6bb1e18cbfe3e2f6843d936bebcc6e5e4373fd6ded11cb06066ebb68ae6a052a4dcbd41f269efc10d4b8032c7c2db498aa1eecb23192c71e163acdf7ffbc593fe6457ec90e915eb7071e57cf7272fa", &(0x7f00000001c0)=""/90, &(0x7f0000000480)="6c11295262a93e4ae92863d3e53c44399f29b7356596d714a17146a70444dd71328a43644661b0bc8626349dbda8e6f82c7a4789100a351aa591cce023180b2dccbbe3bf922ff6715bb8f7e1372e6ed35485a08b177b7ed0f2ff0eb0bb83ac9c58b0e94bc17f225eb9286625eb7c3afd5771e5a7b88b6cf9f8aebfbe3295ecc458b73a0248c8c2a220cf3d9e657029248405efc9484d91abb0aa094d", &(0x7f0000000540)="ebf02337bc2ee841f98725d87a8bcaa11ceeb75e44620678ba35a4427bb87f7981530cc9b5fc7e1575333c8b3f992a669163bf3293b86a10742d0249b7a400a1158883b3fe9f748f352c2585391fc11439fd40ebd59edf1693059f9ffeeae8e7be27ad213dda2e6f76a5ea5eb6f5ac457796a10ffb23eacf68591509c821291ad8c18a6fe2e047537adb8f0514438c0dd70bf69f43449a69dffe9b91d478ca6e561bf1f03e3c78ecbaf8ebf2a0bdac4049a028712fa99ab9f26fc0ee56236e83ee24016f5a71268b01895f2be88c694deff6cc2fc781dad03717881f2ea238571035959ef2039b30569d2d5e8c36a2499cc92cd11a0e22c55f", 0x20000000, r7}, 0x38) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 11.29432039s ago: executing program 3 (id=548): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8, 0xc, 0x1, 0x13, 0x1]}, &(0x7f0000000140)=0x54) getpeername$inet6(r1, 0x0, &(0x7f0000000240)) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0}) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0x2c0, 0x7fffffff}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x36, "ab810f24ecf2ffab1458913a4be4040c93f8f7968d3518ac74653525f3b71027df939d8938f808314c4501e4a779bee8db83ccd04120"}, &(0x7f00000002c0)=0x3e) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r5, 0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$char_usb(r7, 0x0, 0x0) madvise(&(0x7f0000824000/0x2000)=nil, 0x2000, 0x14) 8.392412487s ago: executing program 4 (id=553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)="adaf77ed2c1dcfdeb6c5cccdaa005ecf12c1e1a92c4ee555c379e142805cf43c63172e34988360144b54221a1f1d517c050fa61f7b3dc244b31b250f344577823b4d", 0x42}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0xffffff84, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 8.276963896s ago: executing program 3 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) 8.238944604s ago: executing program 0 (id=555): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) socket(0x10, 0x5, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) 8.236164372s ago: executing program 4 (id=556): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) (fail_nth: 1) 8.198164444s ago: executing program 1 (id=558): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000b40)=@ethtool_dump={0x40, 0xff, 0xb}}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @rose, @remote, @rose, @netrom, @bcast, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000400)=""/165, 0xa5}], 0x5, &(0x7f0000000300)=""/43, 0x2b}, 0xc}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) 7.456344604s ago: executing program 3 (id=559): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) mount(0x0, 0x0, 0x0, 0x1000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) socket$inet6(0xa, 0x7, 0x1ff) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x100000000000002, &(0x7f00000004c0)={0x0, 0x989680}, 0x1, 0x40}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r3, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/117, 0x75}], 0x1}, 0x2022) 7.160719907s ago: executing program 1 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000d04ebbe99417bf6105ea7f8c1714144b653eb9e8e6e63e45459b3f092265a7461a031cd3bf2d184297425cb57202f5118dc5346f2e7e0665245b031c3820811736fbd9004df498d0b15b7286591811d21cb38ea16fcb1a10c2743a83e08222f18e8aafd494e0e1696a2a8482cd44979d3617e265599faa526daceb3558837def9133"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x2, 0x1, 0x0, 0x6}, 0x20) 7.160199309s ago: executing program 4 (id=561): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f0000000100)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000400)=0x10001, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x101, 0x80000000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4f22, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x1000, @private0, 0xc}, @in={0x2, 0x4e21, @broadcast}], 0x5c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000ac0)) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000bc0)=0x80000001) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00), 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000c40)={0x0, 0xd3a5, 0x8555, 0x7, 0x4f32, 0x8}, &(0x7f0000000c80)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f0000000d80)) read$FUSE(r3, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r5, 0x9, &(0x7f0000002e00)={0x4, 0x5}, &(0x7f0000002e40)) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000300)={0x3, 0x8, 0x5, 0x4800}) r7 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) dup(r7) epoll_pwait(r4, &(0x7f0000002fc0)=[{}, {}], 0x2, 0x2, &(0x7f0000003000)={[0x7]}, 0x8) io_uring_enter(r6, 0x45fe, 0xffb9, 0x0, &(0x7f0000003040)={[0x4]}, 0x8) 6.432504231s ago: executing program 3 (id=562): syz_usbip_server_init(0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x52000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r2, 0xd, 0x0, @void}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400, 0x80000213, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r9, r8) getpeername$packet(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) 6.043999333s ago: executing program 1 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x80000) fanotify_mark(r7, 0x105, 0x40000000, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f03) 5.932035388s ago: executing program 4 (id=564): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8, 0xc, 0x1, 0x13, 0x1]}, &(0x7f0000000140)=0x54) getpeername$inet6(r1, 0x0, &(0x7f0000000240)) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0}) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0x2c0, 0x7fffffff}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x36, "ab810f24ecf2ffab1458913a4be4040c93f8f7968d3518ac74653525f3b71027df939d8938f808314c4501e4a779bee8db83ccd04120"}, &(0x7f00000002c0)=0x3e) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r5, 0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$char_usb(r7, 0x0, 0x0) madvise(&(0x7f0000824000/0x2000)=nil, 0x2000, 0x14) 4.613005173s ago: executing program 1 (id=565): socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x101902) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0x40189206, &(0x7f0000000180)) 3.912565855s ago: executing program 5 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0xd, &(0x7f0000000300)="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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.813611628s ago: executing program 0 (id=567): newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = dup3(r0, r1, 0x60e472eea02dcda7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000180)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xea) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000100)=0x1) writev(r7, &(0x7f0000000940)=[{&(0x7f00000002c0)="d640bc2653d8afb190e7542d3519", 0xe}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000003c0)="352e8a349188d253bc912d0708405683c670a9173a24f42ede4db501569d4c37757d38de5165a0ce3116ab45cacec14d27769ccb16c5694b21476772a4be95156c4d2b8abe33b5b720b458b74d8cbabb1535af8befdcec14c6cc1c4440f1b4c8eaa5e3a6d527f1b84b1ea643d6544202d05c7cec4a89653cb8fabd645acf55b0c2bc148062f89b88d3bda9fe5a869cb3c53f9af22befc31406374a44ed256c5d4f2649b22e354553942cb2002caf20c536", 0xb1}], 0x1) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x24000840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0x1, 0x0, 0x7f, 0x5, "00800000000000f51000", "00598b00", "bf513d1d", "b94000", ["dc0000000800", '\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\x00', "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.24341584s ago: executing program 1 (id=568): newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = dup3(r0, r1, 0x60e472eea02dcda7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000180)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xea) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000100)=0x1) writev(r7, &(0x7f0000000940)=[{&(0x7f00000002c0)="d640bc2653d8afb190e7542d3519", 0xe}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000003c0)="352e8a349188d253bc912d0708405683c670a9173a24f42ede4db501569d4c37757d38de5165a0ce3116ab45cacec14d27769ccb16c5694b21476772a4be95156c4d2b8abe33b5b720b458b74d8cbabb1535af8befdcec14c6cc1c4440f1b4c8eaa5e3a6d527f1b84b1ea643d6544202d05c7cec4a89653cb8fabd645acf55b0c2bc148062f89b88d3bda9fe5a869cb3c53f9af22befc31406374a44ed256c5d4f2649b22e354553942cb2002caf20c536", 0xb1}], 0x1) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x24000840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0x1, 0x0, 0x7f, 0x5, "00800000000000f51000", "00598b00", "bf513d1d", "b94000", ["dc0000000800", '\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\x00', "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.241763477s ago: executing program 5 (id=569): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) 3.172587479s ago: executing program 3 (id=570): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_rr_get_interval(r1, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5}) 3.08018909s ago: executing program 5 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xa, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.094783286s ago: executing program 5 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x23) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='net/llc/core\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000000)={0x48}) socket$nl_generic(0x10, 0x3, 0x10) 2.094122264s ago: executing program 4 (id=573): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3c, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200009a31f1583ddc0c33e6a30c0100005403cb0086dd6003136c00068700fc02000000000000000098ab476f58c583fbe90900000000d801ff0200"/71], 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRESHEX, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.028387353s ago: executing program 3 (id=574): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000100)={0x8, 'vxcan1\x00', {'vlan1\x00'}, 0xbc}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x3) r10 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000008f204211400000000000109022400000100a02009040006020300020009210200000122080409058103000400fe09", @ANYRESDEC=r9, @ANYRESHEX=r1, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r1, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.638917043s ago: executing program 0 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002900), 0x2, 0x9}}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44050) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x1}) syz_emit_ethernet(0xd2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x88400) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000002c0)={0x5, 0x9}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 1.105856884s ago: executing program 1 (id=576): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) socket(0x10, 0x5, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) 958.293157ms ago: executing program 5 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) 397.108883ms ago: executing program 4 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x80000) fanotify_mark(r7, 0x105, 0x40000000, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f03) 0s ago: executing program 5 (id=579): socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x101902) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0x40189206, &(0x7f0000000180)) kernel console output (not intermixed with test programs): duct=db1e, bcdDevice=61.23 [ 112.076769][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.442943][ T9] usb 4-1: can't set config #16, error -71 [ 112.463590][ T9] usb 4-1: USB disconnect, device number 6 [ 112.529702][ T24] usb 1-1: USB disconnect, device number 4 [ 112.725039][ T6428] random: crng reseeded on system resumption [ 114.449527][ T30] audit: type=1400 audit(1746471204.287:257): avc: denied { read write } for pid=6439 comm="syz.3.117" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.498779][ T30] audit: type=1400 audit(1746471204.287:258): avc: denied { open } for pid=6439 comm="syz.3.117" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.528139][ T30] audit: type=1400 audit(1746471204.297:259): avc: denied { ioctl } for pid=6439 comm="syz.3.117" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.876989][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.898598][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.119649][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 115.245787][ T30] audit: type=1400 audit(1746471205.097:260): avc: denied { bind } for pid=6452 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.268439][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.284580][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.297620][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.332137][ T6459] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.383581][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.393698][ T30] audit: type=1400 audit(1746471205.247:261): avc: denied { map } for pid=6458 comm="syz.3.122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.422496][ T30] audit: type=1400 audit(1746471205.247:262): avc: denied { execute } for pid=6458 comm="syz.3.122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.487736][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 115.808708][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 115.982803][ T24] usb 2-1: USB disconnect, device number 7 [ 115.993693][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.131854][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 116.335545][ T30] audit: type=1400 audit(1746471206.187:263): avc: denied { write } for pid=6470 comm="syz.4.125" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.430904][ T30] audit: type=1400 audit(1746471206.287:264): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.079495][ T30] audit: type=1400 audit(1746471208.907:265): avc: denied { read } for pid=6501 comm="syz.4.134" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.110566][ T6500] fuse: Bad value for 'fd' [ 119.119392][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.216367][ T30] audit: type=1400 audit(1746471208.927:266): avc: denied { open } for pid=6501 comm="syz.4.134" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.299414][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.519937][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 119.582021][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 119.669578][ T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.790404][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.874470][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.926696][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.929416][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 119.950856][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 119.959037][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.962222][ T24] usbtmc 2-1:16.0: bulk endpoints not found [ 119.989490][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.999248][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.039415][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.061947][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.074670][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.089970][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.091963][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 120.172750][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.182686][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.190640][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.198582][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.206300][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.744917][ T6519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 120.807593][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 120.812850][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.840771][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.878237][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.902036][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 120.994035][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.046189][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.069721][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 121.069733][ T30] audit: type=1400 audit(1746471210.917:270): avc: denied { mounton } for pid=6515 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 121.077060][ T5868] usb 2-1: USB disconnect, device number 8 [ 121.097345][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.117107][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.152867][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 121.301040][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 121.381138][ T6521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.132'. [ 121.535067][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.545502][ T5869] usb 5-1: config 0 descriptor?? [ 122.147310][ T9] usb 4-1: USB disconnect, device number 7 [ 122.162205][ T5869] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 122.183251][ T5869] hdpvr 5-1:0.0: device init failed [ 122.188512][ T5869] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 122.266100][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 122.360875][ T9] usb 5-1: USB disconnect, device number 3 [ 122.454917][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.472511][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.486133][ T6515] bridge_slave_0: entered allmulticast mode [ 122.503694][ T6515] bridge_slave_0: entered promiscuous mode [ 122.531967][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.553590][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.564287][ T6515] bridge_slave_1: entered allmulticast mode [ 122.572887][ T6515] bridge_slave_1: entered promiscuous mode [ 123.423597][ T5129] Bluetooth: hci5: command tx timeout [ 123.640497][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.665372][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.568606][ T6515] team0: Port device team_slave_0 added [ 124.578836][ T6515] team0: Port device team_slave_1 added [ 125.400658][ T6571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.449828][ T5129] Bluetooth: hci5: command tx timeout [ 125.697359][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.707948][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.746195][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.758800][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.864763][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.943971][ T6569] uprobe: syz.0.150:6569 failed to unregister, leaking uprobe [ 125.992434][ T30] audit: type=1400 audit(1746471215.807:271): avc: denied { rename } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.050372][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.083918][ T30] audit: type=1400 audit(1746471215.807:272): avc: denied { unlink } for pid=5170 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.278515][ T30] audit: type=1400 audit(1746471215.807:273): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.666969][ T6515] hsr_slave_0: entered promiscuous mode [ 126.673244][ T6515] hsr_slave_1: entered promiscuous mode [ 126.679861][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.689613][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.733573][ T6515] Cannot create hsr debugfs directory [ 126.848414][ T6585] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.857615][ T6585] FAULT_INJECTION: forcing a failure. [ 126.857615][ T6585] name failslab, interval 1, probability 0, space 0, times 1 [ 126.879127][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.0.154 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 126.879147][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 126.879156][ T6585] Call Trace: [ 126.879162][ T6585] [ 126.879168][ T6585] dump_stack_lvl+0x16c/0x1f0 [ 126.879194][ T6585] should_fail_ex+0x512/0x640 [ 126.879214][ T6585] ? __kmalloc_node_noprof+0xc5/0x500 [ 126.879239][ T6585] should_failslab+0xc2/0x120 [ 126.879256][ T6585] __kmalloc_node_noprof+0xd8/0x500 [ 126.879272][ T6585] ? qdisc_alloc+0xbb/0xc50 [ 126.879292][ T6585] qdisc_alloc+0xbb/0xc50 [ 126.879312][ T6585] qdisc_create_dflt+0x73/0x430 [ 126.879333][ T6585] fifo_create_dflt+0x76/0xf0 [ 126.879356][ T6585] tbf_change+0x1070/0x1540 [ 126.879377][ T6585] ? __pfx_tbf_change+0x10/0x10 [ 126.879393][ T6585] ? lockdep_unlock+0x64/0xe0 [ 126.879412][ T6585] ? __lock_acquire+0xf7f/0x1ba0 [ 126.879453][ T6585] ? ktime_get+0x200/0x310 [ 126.879473][ T6585] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.879494][ T6585] ? read_tsc+0x9/0x20 [ 126.879514][ T6585] ? ktime_get+0x1a7/0x310 [ 126.879538][ T6585] tbf_init+0x94/0xd0 [ 126.879552][ T6585] ? __pfx_tbf_init+0x10/0x10 [ 126.879566][ T6585] qdisc_create+0x454/0xfa0 [ 126.879592][ T6585] tc_modify_qdisc+0x1287/0x2100 [ 126.879619][ T6585] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 126.879661][ T6585] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 126.879684][ T6585] rtnetlink_rcv_msg+0x3c6/0xe90 [ 126.879703][ T6585] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.879733][ T6585] netlink_rcv_skb+0x16a/0x440 [ 126.879753][ T6585] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.879771][ T6585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.879804][ T6585] ? netlink_deliver_tap+0x1ae/0xd30 [ 126.879826][ T6585] netlink_unicast+0x53a/0x7f0 [ 126.879848][ T6585] ? __pfx_netlink_unicast+0x10/0x10 [ 126.879874][ T6585] netlink_sendmsg+0x8d1/0xdd0 [ 126.879896][ T6585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.879924][ T6585] ____sys_sendmsg+0xa95/0xc70 [ 126.879946][ T6585] ? copy_msghdr_from_user+0x10a/0x160 [ 126.879962][ T6585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.879994][ T6585] ___sys_sendmsg+0x134/0x1d0 [ 126.880011][ T6585] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.880058][ T6585] __sys_sendmsg+0x16d/0x220 [ 126.880074][ T6585] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.880107][ T6585] do_syscall_64+0xcd/0x260 [ 126.880130][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.880146][ T6585] RIP: 0033:0x7f791058e969 [ 126.880159][ T6585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.880174][ T6585] RSP: 002b:00007f79113c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.880189][ T6585] RAX: ffffffffffffffda RBX: 00007f79107b5fa0 RCX: 00007f791058e969 [ 126.880199][ T6585] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.880209][ T6585] RBP: 00007f79113c1090 R08: 0000000000000000 R09: 0000000000000000 [ 126.880218][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.880227][ T6585] R13: 0000000000000000 R14: 00007f79107b5fa0 R15: 00007ffdd7893748 [ 126.880257][ T6585] [ 127.185872][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 127.192709][ T5869] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 127.201097][ T5869] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 127.212970][ T5869] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.222765][ T5869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.232562][ T5869] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.245553][ T5869] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.254614][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.318842][ T5869] usbtmc 2-1:16.0: bulk endpoints not found [ 127.540064][ T5129] Bluetooth: hci5: command tx timeout [ 128.181429][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'. [ 128.323687][ T6599] FAULT_INJECTION: forcing a failure. [ 128.323687][ T6599] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.345911][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.4.158 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 128.345933][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 128.345942][ T6599] Call Trace: [ 128.345947][ T6599] [ 128.345953][ T6599] dump_stack_lvl+0x16c/0x1f0 [ 128.345977][ T6599] should_fail_ex+0x512/0x640 [ 128.346000][ T6599] _copy_to_user+0x32/0xd0 [ 128.346024][ T6599] simple_read_from_buffer+0xcb/0x170 [ 128.346049][ T6599] proc_fail_nth_read+0x197/0x270 [ 128.346073][ T6599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.346098][ T6599] ? rw_verify_area+0xcf/0x680 [ 128.346117][ T6599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.346140][ T6599] vfs_read+0x1de/0xc70 [ 128.346165][ T6599] ? __pfx___mutex_lock+0x10/0x10 [ 128.346185][ T6599] ? __pfx_vfs_read+0x10/0x10 [ 128.346214][ T6599] ? __fget_files+0x20e/0x3c0 [ 128.346250][ T6599] ksys_read+0x12a/0x240 [ 128.346271][ T6599] ? __pfx_ksys_read+0x10/0x10 [ 128.346300][ T6599] do_syscall_64+0xcd/0x260 [ 128.346323][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.346340][ T6599] RIP: 0033:0x7f42f998d37c [ 128.346352][ T6599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.346367][ T6599] RSP: 002b:00007f42fa8df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.346383][ T6599] RAX: ffffffffffffffda RBX: 00007f42f9bb5fa0 RCX: 00007f42f998d37c [ 128.346393][ T6599] RDX: 000000000000000f RSI: 00007f42fa8df0a0 RDI: 0000000000000005 [ 128.346402][ T6599] RBP: 00007f42fa8df090 R08: 0000000000000000 R09: 0000000000000000 [ 128.346411][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.346420][ T6599] R13: 0000000000000000 R14: 00007f42f9bb5fa0 R15: 00007ffc94b714a8 [ 128.346442][ T6599] [ 128.540024][ T6515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.554638][ T92] usb 2-1: USB disconnect, device number 9 [ 128.605569][ T6515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.628187][ T6515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.715565][ T6515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.913332][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 129.328810][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.361517][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.374503][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.381628][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.406992][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.414157][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.439716][ T30] audit: type=1400 audit(1746471219.287:274): avc: denied { setopt } for pid=6603 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.485787][ T30] audit: type=1400 audit(1746471219.287:275): avc: denied { ioctl } for pid=6603 comm="syz.3.160" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10336 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.543736][ T30] audit: type=1400 audit(1746471219.287:276): avc: denied { write } for pid=6603 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.620497][ T5822] Bluetooth: hci5: command tx timeout [ 129.861959][ T6621] random: crng reseeded on system resumption [ 131.406534][ T30] audit: type=1400 audit(1746471219.877:277): avc: denied { bind } for pid=6626 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.491423][ T30] audit: type=1400 audit(1746471219.877:278): avc: denied { listen } for pid=6626 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.529399][ T30] audit: type=1400 audit(1746471219.937:279): avc: denied { write } for pid=6626 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.572172][ T30] audit: type=1400 audit(1746471219.937:280): avc: denied { write } for pid=6626 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.769905][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 132.921860][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928676][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936395][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.136038][ T30] audit: type=1400 audit(1746471222.987:281): avc: denied { bind } for pid=6650 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.470983][ T6515] veth0_vlan: entered promiscuous mode [ 133.494253][ T6515] veth1_vlan: entered promiscuous mode [ 133.600085][ T6515] veth0_macvtap: entered promiscuous mode [ 133.619072][ T6515] veth1_macvtap: entered promiscuous mode [ 133.670798][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.696528][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.708097][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.718971][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.833306][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.868610][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.915829][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.968254][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.003366][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.037191][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.078768][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.125528][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.174156][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.202999][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.240621][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.274510][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.319379][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.349355][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.369479][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.409423][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.442252][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.473976][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.529799][ T6515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.538515][ T6515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.587592][ T6515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.607765][ T6515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.761920][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.788267][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.857564][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.880624][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.930871][ T30] audit: type=1400 audit(1746471224.777:282): avc: denied { mount } for pid=6515 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.003449][ T30] audit: type=1400 audit(1746471224.777:283): avc: denied { mounton } for pid=6515 comm="syz-executor" path="/root/syzkaller.XwQcN8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 135.113548][ T30] audit: type=1400 audit(1746471224.857:284): avc: denied { mount } for pid=6515 comm="syz-executor" name="/" dev="gadgetfs" ino=6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.889400][ T92] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.967157][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 136.039366][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 136.155666][ T92] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 136.173799][ T92] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 136.209121][ T6692] xt_HMARK: proto mask must be zero with L3 mode [ 136.253234][ T92] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.362104][ T92] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.410079][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.442810][ T6695] xt_HMARK: proto mask must be zero with L3 mode [ 136.583195][ T92] usbtmc 6-1:16.0: bulk endpoints not found [ 137.604703][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.5.137'. [ 137.928820][ T6715] lo speed is unknown, defaulting to 1000 [ 137.935123][ T6715] lo speed is unknown, defaulting to 1000 [ 137.945957][ T6715] lo speed is unknown, defaulting to 1000 [ 137.970814][ T6715] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.019354][ T6715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.356066][ T30] audit: type=1400 audit(1746471227.777:285): avc: denied { write } for pid=6709 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.393378][ T6717] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 138.508175][ T6715] lo speed is unknown, defaulting to 1000 [ 138.514797][ T6715] lo speed is unknown, defaulting to 1000 [ 138.521292][ T6715] lo speed is unknown, defaulting to 1000 [ 138.528032][ T6715] lo speed is unknown, defaulting to 1000 [ 138.534437][ T6715] lo speed is unknown, defaulting to 1000 [ 138.540829][ T6715] lo speed is unknown, defaulting to 1000 [ 138.555644][ T30] audit: type=1400 audit(1746471227.967:286): avc: denied { connect } for pid=6709 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.686658][ T6700] uprobe: syz.4.181:6700 failed to unregister, leaking uprobe [ 138.695092][ T9] usb 6-1: USB disconnect, device number 2 [ 139.059561][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.208189][ T30] audit: type=1400 audit(1746471229.057:287): avc: denied { relabelfrom } for pid=6731 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.239378][ T92] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.259843][ T30] audit: type=1400 audit(1746471229.057:288): avc: denied { relabelto } for pid=6731 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.279286][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.299488][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 139.328285][ T5871] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 139.347574][ T5871] usb 4-1: config 252 has no interface number 0 [ 139.364270][ T5871] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 139.541656][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 139.570761][ T92] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 139.743965][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 139.767484][ T5871] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 139.788636][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.805332][ T92] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 139.807076][ T5871] usb 4-1: Product: syz [ 139.828387][ T92] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 139.829411][ T5871] usb 4-1: Manufacturer: syz [ 139.843446][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.849432][ T5871] usb 4-1: SerialNumber: syz [ 139.863681][ T92] usb 1-1: config 0 descriptor?? [ 139.880592][ T5871] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 140.080145][ T92] hdpvr 1-1:0.0: firmware version 0x0 dated [ 140.097183][ T92] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 140.139355][ T30] audit: type=1400 audit(1746471229.987:289): avc: denied { setattr } for pid=6723 comm="syz.3.186" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.140435][ T5871] usb 4-1: USB disconnect, device number 8 [ 140.162328][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.186881][ T53] usb 4-1: Failed to submit usb control message: -71 [ 140.208440][ T53] usb 4-1: unable to send the bmi data to the device: -71 [ 140.216111][ T53] usb 4-1: unable to get target info from device [ 140.232667][ T53] usb 4-1: could not get target info (-71) [ 140.287712][ T53] usb 4-1: could not probe fw (-71) [ 140.353501][ T92] hdpvr 1-1:0.0: device init failed [ 140.358817][ T92] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 140.370075][ T92] usb 1-1: USB disconnect, device number 5 [ 140.411343][ T6749] xt_HMARK: proto mask must be zero with L3 mode [ 141.333768][ T6758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.854572][ T30] audit: type=1400 audit(1746471231.707:290): avc: denied { ioctl } for pid=6759 comm="syz.3.196" path="socket:[10647]" dev="sockfs" ino=10647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.879105][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.159252][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 142.981998][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 143.038513][ T6775] lo speed is unknown, defaulting to 1000 [ 143.187641][ T30] audit: type=1400 audit(1746471233.037:291): avc: denied { write } for pid=6781 comm="syz.5.202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.192925][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.202'. [ 143.243441][ T6782] netlink: 'syz.5.202': attribute type 7 has an invalid length. [ 143.281854][ T6782] netlink: 'syz.5.202': attribute type 8 has an invalid length. [ 143.312014][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.202'. [ 143.395727][ T30] audit: type=1400 audit(1746471233.247:292): avc: denied { write } for pid=6785 comm="syz.3.203" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.641365][ T30] audit: type=1400 audit(1746471233.277:293): avc: denied { open } for pid=6785 comm="syz.3.203" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.664668][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.695768][ T6788] lo speed is unknown, defaulting to 1000 [ 144.286269][ T30] audit: type=1400 audit(1746471233.657:294): avc: denied { name_bind } for pid=6785 comm="syz.3.203" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 144.308808][ T30] audit: type=1400 audit(1746471233.657:295): avc: denied { node_bind } for pid=6785 comm="syz.3.203" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 145.185819][ T6800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.190304][ T6800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.255377][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.210'. [ 148.396798][ T30] audit: type=1400 audit(1746471238.247:296): avc: denied { bind } for pid=6839 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.463250][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 148.766035][ T30] audit: type=1400 audit(1746471238.577:297): avc: denied { name_bind } for pid=6839 comm="syz.4.216" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 148.825144][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 148.924366][ T30] audit: type=1400 audit(1746471238.587:298): avc: denied { node_bind } for pid=6839 comm="syz.4.216" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 149.003055][ T30] audit: type=1400 audit(1746471238.847:299): avc: denied { read write } for pid=6838 comm="syz.5.215" name="cec5" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.066926][ T30] audit: type=1400 audit(1746471238.847:300): avc: denied { open } for pid=6838 comm="syz.5.215" path="/dev/cec5" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.902496][ T30] audit: type=1400 audit(1746471238.877:301): avc: denied { ioctl } for pid=6838 comm="syz.5.215" path="/dev/cec5" dev="devtmpfs" ino=976 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.965640][ T30] audit: type=1400 audit(1746471239.817:302): avc: denied { write } for pid=6839 comm="syz.4.216" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.994059][ T6842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.216'. [ 150.077125][ T6859] overlayfs: failed to resolve './file1': -2 [ 150.096217][ T30] audit: type=1400 audit(1746471239.927:303): avc: denied { mount } for pid=6858 comm="syz.5.222" name="/" dev="ramfs" ino=10854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 150.495947][ T6864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.839478][ T30] audit: type=1400 audit(1746471240.677:304): avc: denied { bind } for pid=6858 comm="syz.5.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.869068][ T30] audit: type=1400 audit(1746471240.677:305): avc: denied { node_bind } for pid=6858 comm="syz.5.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 150.933469][ T30] audit: type=1400 audit(1746471240.777:306): avc: denied { unmount } for pid=6515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.281768][ T6874] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.366861][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 152.989530][ T52] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.219563][ T52] usb 4-1: device descriptor read/64, error -71 [ 153.330185][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.495751][ T6900] cgroup: No subsys list or none specified [ 153.509431][ T52] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.849479][ T52] usb 4-1: device descriptor read/64, error -71 [ 153.988995][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 154.003939][ T5871] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 154.015102][ T5871] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.027654][ T5871] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.029654][ T52] usb usb4-port1: attempt power cycle [ 154.043121][ T5871] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.055111][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.074731][ T5871] usbtmc 6-1:16.0: bulk endpoints not found [ 154.479473][ T52] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.573507][ T52] usb 4-1: device descriptor read/8, error -71 [ 154.739964][ T5868] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 154.788804][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.5.227'. [ 154.869606][ T92] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.889421][ T52] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.975620][ T52] usb 4-1: device descriptor read/8, error -71 [ 154.998906][ T5868] usb 1-1: config 0 interface 0 altsetting 4 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 155.059474][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 155.076767][ T92] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 155.091558][ T5868] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.098443][ T92] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.121433][ T52] usb usb4-port1: unable to enumerate USB device [ 155.131065][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.132101][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.171176][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.178935][ T5868] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 155.185313][ T92] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 155.206050][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.206244][ T5871] usb 6-1: USB disconnect, device number 3 [ 155.214884][ T92] usb 5-1: Product: syz [ 155.307237][ T92] usb 5-1: Manufacturer: syz [ 155.318722][ T92] usb 5-1: SerialNumber: syz [ 155.323226][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.326838][ T92] usb 5-1: config 0 descriptor?? [ 155.336991][ T6913] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 155.347217][ T5868] usb 1-1: config 0 descriptor?? [ 155.373873][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 155.579533][ T5173] bcm5974 1-1:0.0: could not read from device [ 155.591661][ T5173] bcm5974 1-1:0.0: could not read from device [ 155.614927][ T5173] bcm5974 1-1:0.0: could not read from device [ 155.627619][ T5868] usb 1-1: USB disconnect, device number 6 [ 155.643020][ T5173] bcm5974 1-1:0.0: could not read from device [ 155.696704][ T5830] bcm5974 1-1:0.0: could not read from device [ 155.793042][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.236'. [ 156.008432][ T6922] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 156.100819][ T6922] netlink: 224 bytes leftover after parsing attributes in process `syz.4.236'. [ 156.172093][ T6921] loop9: detected capacity change from 0 to 7 [ 156.191168][ T6921] Dev loop9: unable to read RDB block 7 [ 156.197202][ T6921] loop9: unable to read partition table [ 156.203015][ T6921] loop9: partition table beyond EOD, truncated [ 156.209179][ T6921] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 156.231224][ T6925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.745071][ T92] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 157.885050][ T92] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 158.143555][ T6939] xt_HMARK: proto mask must be zero with L3 mode [ 158.276169][ C1] powermate: config urb returned -71 [ 158.281785][ C1] powermate: config urb returned -71 [ 158.287424][ C1] powermate: config urb returned -71 [ 158.293469][ C1] powermate: config urb returned -71 [ 158.318685][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 158.327699][ T92] usb 5-1: USB disconnect, device number 4 [ 159.395187][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 159.884354][ T6962] affs: No valid root block on device nullb0 [ 159.891940][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 159.891952][ T30] audit: type=1400 audit(1746471249.737:311): avc: denied { mounton } for pid=6961 comm="syz.0.248" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 160.358604][ T6966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.452869][ T6966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.489513][ T30] audit: type=1400 audit(1746471251.327:312): avc: denied { read } for pid=6961 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.759560][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.776939][ T6977] syzkaller1: entered promiscuous mode [ 161.782501][ T6977] syzkaller1: entered allmulticast mode [ 162.167446][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 162.251443][ T6982] FAULT_INJECTION: forcing a failure. [ 162.251443][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.264879][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 162.289461][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.3.254 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 162.289485][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 162.289495][ T6982] Call Trace: [ 162.289501][ T6982] [ 162.289507][ T6982] dump_stack_lvl+0x16c/0x1f0 [ 162.289534][ T6982] should_fail_ex+0x512/0x640 [ 162.289558][ T6982] _copy_to_user+0x32/0xd0 [ 162.289583][ T6982] simple_read_from_buffer+0xcb/0x170 [ 162.289608][ T6982] proc_fail_nth_read+0x197/0x270 [ 162.289632][ T6982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.289657][ T6982] ? rw_verify_area+0xcf/0x680 [ 162.289677][ T6982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.289706][ T6982] vfs_read+0x1de/0xc70 [ 162.289731][ T6982] ? __pfx___mutex_lock+0x10/0x10 [ 162.289752][ T6982] ? __pfx_vfs_read+0x10/0x10 [ 162.289780][ T6982] ? __fget_files+0x20e/0x3c0 [ 162.289811][ T6982] ksys_read+0x12a/0x240 [ 162.289833][ T6982] ? __pfx_ksys_read+0x10/0x10 [ 162.289863][ T6982] do_syscall_64+0xcd/0x260 [ 162.289890][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.289907][ T6982] RIP: 0033:0x7ff5a058d37c [ 162.289920][ T6982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.289936][ T6982] RSP: 002b:00007ff5a14c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.289952][ T6982] RAX: ffffffffffffffda RBX: 00007ff5a07b5fa0 RCX: 00007ff5a058d37c [ 162.289963][ T6982] RDX: 000000000000000f RSI: 00007ff5a14c90a0 RDI: 0000000000000004 [ 162.289973][ T6982] RBP: 00007ff5a14c9090 R08: 0000000000000000 R09: 0000000000000000 [ 162.289982][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.289991][ T6982] R13: 0000000000000000 R14: 00007ff5a07b5fa0 R15: 00007ffcfbd76638 [ 162.290019][ T6982] [ 162.469300][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.677700][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 163.021409][ T5868] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 163.030235][ T5868] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 163.041409][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.056189][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.130574][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.241184][ T5868] usbtmc 2-1:16.0: bulk endpoints not found [ 165.467073][ T7005] warning: `syz.3.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.203075][ T5868] usb 2-1: USB disconnect, device number 10 [ 166.502474][ T7013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.513163][ T7013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.750093][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.257044][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 168.283335][ T7030] xt_HMARK: proto mask must be zero with L3 mode [ 168.699861][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 169.134017][ T30] audit: type=1400 audit(1746471258.987:313): avc: denied { shutdown } for pid=7034 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.190106][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 170.216190][ T7049] FAULT_INJECTION: forcing a failure. [ 170.216190][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 170.250452][ T7049] CPU: 0 UID: 0 PID: 7049 Comm: syz.0.273 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 170.250476][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 170.250485][ T7049] Call Trace: [ 170.250491][ T7049] [ 170.250498][ T7049] dump_stack_lvl+0x16c/0x1f0 [ 170.250522][ T7049] should_fail_ex+0x512/0x640 [ 170.250542][ T7049] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 170.250571][ T7049] should_failslab+0xc2/0x120 [ 170.250588][ T7049] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 170.250613][ T7049] ? __alloc_skb+0x2b2/0x380 [ 170.250632][ T7049] __alloc_skb+0x2b2/0x380 [ 170.250647][ T7049] ? __pfx___alloc_skb+0x10/0x10 [ 170.250664][ T7049] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 170.250687][ T7049] netlink_alloc_large_skb+0x69/0x130 [ 170.250707][ T7049] netlink_sendmsg+0x6a1/0xdd0 [ 170.250728][ T7049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.250754][ T7049] ____sys_sendmsg+0xa95/0xc70 [ 170.250776][ T7049] ? copy_msghdr_from_user+0x10a/0x160 [ 170.250792][ T7049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.250824][ T7049] ___sys_sendmsg+0x134/0x1d0 [ 170.250841][ T7049] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.250886][ T7049] __sys_sendmsg+0x16d/0x220 [ 170.250903][ T7049] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.250926][ T7049] ? rcu_is_watching+0x12/0xc0 [ 170.250952][ T7049] do_syscall_64+0xcd/0x260 [ 170.250983][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.251000][ T7049] RIP: 0033:0x7f791058e969 [ 170.251013][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.251028][ T7049] RSP: 002b:00007f79113c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.251043][ T7049] RAX: ffffffffffffffda RBX: 00007f79107b5fa0 RCX: 00007f791058e969 [ 170.251054][ T7049] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.251063][ T7049] RBP: 00007f79113c1090 R08: 0000000000000000 R09: 0000000000000000 [ 170.251072][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.251082][ T7049] R13: 0000000000000000 R14: 00007f79107b5fa0 R15: 00007ffdd7893748 [ 170.251103][ T7049] [ 170.593584][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 170.611740][ T24] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.611894][ T24] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.611949][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.611974][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.783688][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.112460][ T24] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 171.130199][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.157239][ T24] usb 6-1: USB disconnect, device number 4 [ 171.177105][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.329148][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.346528][ T5871] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.366746][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.386174][ T5871] usb 5-1: config 0 descriptor?? [ 171.839812][ T7067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.303444][ T5871] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 172.348269][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input15 [ 172.391048][ T7073] FAULT_INJECTION: forcing a failure. [ 172.391048][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.428490][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.0.280 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 172.428513][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 172.428522][ T7073] Call Trace: [ 172.428528][ T7073] [ 172.428534][ T7073] dump_stack_lvl+0x16c/0x1f0 [ 172.428564][ T7073] should_fail_ex+0x512/0x640 [ 172.428589][ T7073] _copy_to_user+0x32/0xd0 [ 172.428613][ T7073] simple_read_from_buffer+0xcb/0x170 [ 172.428639][ T7073] proc_fail_nth_read+0x197/0x270 [ 172.428665][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.428690][ T7073] ? rw_verify_area+0xcf/0x680 [ 172.428717][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.428741][ T7073] vfs_read+0x1de/0xc70 [ 172.428767][ T7073] ? __pfx___mutex_lock+0x10/0x10 [ 172.428790][ T7073] ? __pfx_vfs_read+0x10/0x10 [ 172.428819][ T7073] ? __fget_files+0x20e/0x3c0 [ 172.428842][ T7073] ? jump_label_swap+0x180/0x180 [ 172.428873][ T7073] ksys_read+0x12a/0x240 [ 172.428895][ T7073] ? __pfx_ksys_read+0x10/0x10 [ 172.428925][ T7073] do_syscall_64+0xcd/0x260 [ 172.428948][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.428965][ T7073] RIP: 0033:0x7f791058d37c [ 172.428978][ T7073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.428993][ T7073] RSP: 002b:00007f79113c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.429009][ T7073] RAX: ffffffffffffffda RBX: 00007f79107b5fa0 RCX: 00007f791058d37c [ 172.429020][ T7073] RDX: 000000000000000f RSI: 00007f79113c10a0 RDI: 0000000000000003 [ 172.429029][ T7073] RBP: 00007f79113c1090 R08: 0000000000000000 R09: 0000000000000000 [ 172.429038][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.429047][ T7073] R13: 0000000000000001 R14: 00007f79107b5fa0 R15: 00007ffdd7893748 [ 172.429069][ T7073] [ 172.644587][ T5871] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 172.695347][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 172.762979][ T52] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.919478][ T7084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.218033][ T7051] xt_hashlimit: max too large, truncated to 1048576 [ 173.221260][ T7051] xt_limit: Overflow, try lower: 0/0 [ 173.291745][ T52] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.291783][ T52] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.291812][ T52] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.291832][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.322923][ T52] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.329429][ T5869] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 173.411688][ T52] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 173.503920][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.614964][ T5869] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 173.635857][ T5869] usb 1-1: config 0 has no interface number 0 [ 173.650834][ T24] usb 5-1: USB disconnect, device number 5 [ 173.661055][ T5869] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 173.669808][ T5871] usb 4-1: USB disconnect, device number 13 [ 173.682408][ T5869] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.705673][ T5869] usb 1-1: config 0 interface 113 has no altsetting 0 [ 173.718679][ T5869] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 173.733118][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.756022][ T5869] usb 1-1: Product: syz [ 173.771662][ T5869] usb 1-1: Manufacturer: syz [ 173.776318][ T5869] usb 1-1: SerialNumber: syz [ 173.878344][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 173.924591][ T5869] usb 1-1: config 0 descriptor?? [ 174.036333][ T5869] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 175.105699][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 175.135858][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 176.415211][ T5869] usb 1-1: USB disconnect, device number 7 [ 176.628372][ T30] audit: type=1400 audit(1746471266.467:314): avc: denied { write } for pid=7121 comm="syz.1.292" path="socket:[12508]" dev="sockfs" ino=12508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.720242][ T30] audit: type=1400 audit(1746471266.517:315): avc: denied { read write } for pid=7122 comm="syz.5.295" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.811131][ T30] audit: type=1400 audit(1746471266.517:316): avc: denied { open } for pid=7122 comm="syz.5.295" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.910381][ T30] audit: type=1400 audit(1746471266.697:317): avc: denied { read } for pid=7121 comm="syz.1.292" dev="sockfs" ino=12508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.972953][ T30] audit: type=1400 audit(1746471266.707:318): avc: denied { getopt } for pid=7121 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.999373][ T5869] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 177.301126][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.317887][ T5869] usb 1-1: not running at top speed; connect to a high speed hub [ 177.343523][ T5869] usb 1-1: config 129 has an invalid interface number: 81 but max is 0 [ 177.363793][ T5869] usb 1-1: config 129 has no interface number 0 [ 177.389087][ T5869] usb 1-1: config 129 interface 81 has no altsetting 0 [ 177.423168][ T5869] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.a8 [ 177.441041][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.448467][ T7126] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 177.469159][ T5869] usb 1-1: Product: syz [ 177.492922][ T5869] usb 1-1: Manufacturer: syz [ 177.497526][ T5869] usb 1-1: SerialNumber: syz [ 177.746312][ T30] audit: type=1400 audit(1746471267.577:319): avc: denied { write } for pid=7150 comm="syz.5.297" path="socket:[13466]" dev="sockfs" ino=13466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.769911][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.776888][ T7151] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 178.107671][ T5869] ttusbir 1-1:129.81: cannot find expected altsetting [ 178.248039][ T5869] usb 1-1: USB disconnect, device number 8 [ 179.418949][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 179.586314][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 179.749494][ T5869] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.359458][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 180.371886][ T5869] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 180.389763][ T5869] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 180.424257][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.438009][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.453767][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.490807][ T5869] usbtmc 4-1:16.0: bulk endpoints not found [ 181.057818][ T7199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.306'. [ 181.202192][ T5871] usb 4-1: USB disconnect, device number 14 [ 181.840628][ T7211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.558026][ T7215] xt_HMARK: proto mask must be zero with L3 mode [ 183.072361][ T7228] uprobe: syz.5.315:7228 failed to unregister, leaking uprobe [ 183.415357][ T30] audit: type=1400 audit(1746471273.267:320): avc: denied { module_load } for pid=7236 comm="syz.3.320" path="/64/bus" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 183.440517][ T7237] Invalid ELF header len 8 [ 183.481244][ T7236] ALSA: mixer_oss: invalid OSS volume '' [ 183.502444][ T7236] ALSA: mixer_oss: invalid OSS volume '' [ 183.528831][ T7236] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 183.550193][ T7236] ALSA: mixer_oss: invalid OSS volume '2' [ 183.556066][ T7236] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 183.585700][ T7236] ALSA: mixer_oss: invalid OSS volume '3' [ 183.593592][ T7236] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 183.614589][ T7236] ALSA: mixer_oss: invalid OSS volume '4' [ 183.801410][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 184.027746][ T30] audit: type=1326 audit(1746471273.837:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47f8e969 code=0x7fc00000 [ 184.050975][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.693380][ T7259] overlayfs: missing 'lowerdir' [ 185.099401][ T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.136893][ T30] audit: type=1400 audit(1746471274.987:322): avc: denied { setattr } for pid=7254 comm="syz.5.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 185.254058][ T30] audit: type=1400 audit(1746471275.017:323): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.403250][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.432741][ T52] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 185.441809][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.455735][ T52] usb 1-1: config 0 descriptor?? [ 185.650312][ T7250] uprobe: syz.3.323:7250 failed to unregister, leaking uprobe [ 185.868101][ T52] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 185.886915][ T52] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input18 [ 186.028972][ T52] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 186.432335][ T7280] xt_hashlimit: max too large, truncated to 1048576 [ 186.440828][ T7280] xt_limit: Overflow, try lower: 0/0 [ 186.483461][ T30] audit: type=1400 audit(1746471276.267:324): avc: denied { remount } for pid=7277 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.234109][ T52] usb 1-1: USB disconnect, device number 9 [ 187.881171][ T7275] syz.1.330 (7275): drop_caches: 2 [ 187.909810][ T7275] syz.1.330 (7275): drop_caches: 2 [ 188.358097][ T7290] Invalid ELF header magic: != ELF [ 188.585416][ T30] audit: type=1400 audit(1746471278.437:325): avc: denied { map } for pid=7291 comm="syz.0.336" path="socket:[12849]" dev="sockfs" ino=12849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.612010][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 188.857369][ T7303] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 188.888050][ T7303] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 188.908710][ T7306] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 188.916668][ T30] audit: type=1400 audit(1746471278.757:326): avc: denied { ioctl } for pid=7292 comm="syz.4.335" path="socket:[13802]" dev="sockfs" ino=13802 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.947749][ T7303] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 188.949753][ T7306] syz_tun: entered promiscuous mode [ 189.053338][ T30] audit: type=1400 audit(1746471278.797:327): avc: denied { firmware_load } for pid=7292 comm="syz.4.335" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 190.017330][ T7306] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 190.059997][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.899485][ T7157] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 191.061069][ T7157] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 191.078785][ T7157] usb 2-1: config 0 has no interface number 0 [ 191.102988][ T7157] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 191.117500][ T7157] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.128257][ T7157] usb 2-1: config 0 interface 113 has no altsetting 0 [ 191.141444][ T7157] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 191.160772][ T7157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.168922][ T7157] usb 2-1: Product: syz [ 191.175951][ T7157] usb 2-1: Manufacturer: syz [ 191.181767][ T7157] usb 2-1: SerialNumber: syz [ 191.192471][ T7157] usb 2-1: config 0 descriptor?? [ 191.205542][ T7157] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 191.379506][ T7306] syz.4.335 (7306) used greatest stack depth: 21384 bytes left [ 192.121786][ T30] audit: type=1400 audit(1746471281.967:328): avc: denied { override_creds } for pid=7340 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.139384][ T5871] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 192.174557][ T7343] fuse: Bad value for 'fd' [ 192.310978][ T5871] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 192.427357][ T5871] usb 6-1: config 0 has no interface number 0 [ 192.439592][ T5871] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 192.468054][ T5871] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.665312][ T5871] usb 6-1: config 0 interface 113 has no altsetting 0 [ 192.675870][ T5871] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 192.691935][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.700270][ T5871] usb 6-1: Product: syz [ 192.706112][ T5871] usb 6-1: Manufacturer: syz [ 192.711116][ T5871] usb 6-1: SerialNumber: syz [ 192.718031][ T5871] usb 6-1: config 0 descriptor?? [ 192.725589][ T5871] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 193.089570][ T5868] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.110634][ T7356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.520501][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 193.566910][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 193.580375][ T5868] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 193.589564][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.597592][ T5868] usb 1-1: Product: syz [ 193.602885][ T5868] usb 1-1: Manufacturer: syz [ 193.607661][ T5868] usb 1-1: SerialNumber: syz [ 193.614437][ T5868] usb 1-1: config 0 descriptor?? [ 193.620138][ T7351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.627871][ T7351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.856643][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 193.889497][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.896972][ T7351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.897068][ T7351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 194.127707][ T9] usb 2-1: USB disconnect, device number 11 [ 194.411279][ T5868] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 194.608887][ T5868] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 194.969474][ T5868] usb 1-1: USB disconnect, device number 10 [ 195.167011][ T5871] usb 6-1: USB disconnect, device number 5 [ 195.348351][ T30] audit: type=1400 audit(1746471285.197:329): avc: denied { bind } for pid=7373 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.368434][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.405221][ T7387] xt_HMARK: proto mask must be zero with L3 mode [ 195.876232][ T7393] random: crng reseeded on system resumption [ 196.625086][ T7393] netlink: 80 bytes leftover after parsing attributes in process `syz.0.360'. [ 197.125325][ T7397] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 197.135874][ T7397] siw: device registration error -23 [ 197.455757][ T7399] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 197.536543][ T30] audit: type=1400 audit(1746471287.387:330): avc: denied { mount } for pid=7401 comm="syz.4.363" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.645218][ T30] audit: type=1400 audit(1746471287.387:331): avc: denied { read } for pid=7402 comm="syz.1.362" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.721632][ T30] audit: type=1400 audit(1746471287.387:332): avc: denied { open } for pid=7402 comm="syz.1.362" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.915616][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.933268][ T30] audit: type=1400 audit(1746471287.427:333): avc: denied { read } for pid=7402 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.178445][ T5871] usb 5-1: config 0 has no interfaces? [ 198.184503][ T5871] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.204640][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.518912][ T5871] usb 5-1: config 0 descriptor?? [ 198.740569][ T7157] usb 5-1: USB disconnect, device number 6 [ 199.601007][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.368'. [ 199.631108][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 199.713977][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 199.890925][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.901409][ T7440] FAULT_INJECTION: forcing a failure. [ 199.901409][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 199.915261][ T30] audit: type=1400 audit(1746471289.747:334): avc: denied { create } for pid=7439 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.935381][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 199.943680][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.1.373 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 199.943701][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 199.943710][ T7440] Call Trace: [ 199.943716][ T7440] [ 199.943722][ T7440] dump_stack_lvl+0x16c/0x1f0 [ 199.943746][ T7440] should_fail_ex+0x512/0x640 [ 199.943766][ T7440] ? fs_reclaim_acquire+0xae/0x150 [ 199.943796][ T7440] should_failslab+0xc2/0x120 [ 199.943813][ T7440] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 199.943839][ T7440] ? security_inode_alloc+0x3b/0x2b0 [ 199.943863][ T7440] security_inode_alloc+0x3b/0x2b0 [ 199.943883][ T7440] inode_init_always_gfp+0xce4/0x1030 [ 199.943913][ T7440] alloc_inode+0x86/0x240 [ 199.943932][ T7440] sock_alloc+0x40/0x280 [ 199.943951][ T7440] __sock_create+0xc1/0x8d0 [ 199.943977][ T7440] udp_sock_create4+0xa6/0x450 [ 199.943994][ T7440] ? __pfx_udp_sock_create4+0x10/0x10 [ 199.944013][ T7440] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.944033][ T7440] ? crng_make_state+0x48e/0x6d0 [ 199.944055][ T7440] rxrpc_open_socket+0x4f5/0x6b0 [ 199.944073][ T7440] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 199.944101][ T7440] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 199.944120][ T7440] ? rcu_is_watching+0x12/0xc0 [ 199.944142][ T7440] rxrpc_lookup_local+0xa01/0x1220 [ 199.944164][ T7440] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 199.944188][ T7440] rxrpc_sendmsg+0x375/0x5f0 [ 199.944211][ T7440] ____sys_sendmsg+0xa95/0xc70 [ 199.944234][ T7440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.944266][ T7440] ___sys_sendmsg+0x134/0x1d0 [ 199.944285][ T7440] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.944333][ T7440] __sys_sendmsg+0x16d/0x220 [ 199.944350][ T7440] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.944375][ T7440] ? rcu_is_watching+0x12/0xc0 [ 199.944401][ T7440] do_syscall_64+0xcd/0x260 [ 199.944423][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.944440][ T7440] RIP: 0033:0x7f3f47f8e969 [ 199.944454][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.944470][ T7440] RSP: 002b:00007f3f48d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.944486][ T7440] RAX: ffffffffffffffda RBX: 00007f3f481b5fa0 RCX: 00007f3f47f8e969 [ 199.944496][ T7440] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 199.944505][ T7440] RBP: 00007f3f48d84090 R08: 0000000000000000 R09: 0000000000000000 [ 199.944515][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.944524][ T7440] R13: 0000000000000000 R14: 00007f3f481b5fa0 R15: 00007ffd3a8e1078 [ 199.944546][ T7440] [ 199.944573][ T7440] socket: no more sockets [ 199.965110][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.079542][ T30] audit: type=1400 audit(1746471289.757:335): avc: denied { write } for pid=7439 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.141386][ T7444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.239393][ T7157] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.244296][ T7444] IPv6: NLM_F_CREATE should be set when creating new route [ 200.244365][ T7444] IPv6: NLM_F_CREATE should be set when creating new route [ 200.301633][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.349161][ T5868] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.399510][ T7157] usb 6-1: Using ep0 maxpacket: 8 [ 200.415421][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.416460][ T7157] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 200.424669][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.437405][ T7157] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 200.452661][ T7157] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.464148][ T9] usb 1-1: Product: syz [ 200.464194][ T7157] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.483181][ T9] usb 1-1: Manufacturer: syz [ 200.486568][ T7157] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 200.501951][ T9] usb 1-1: SerialNumber: syz [ 200.528078][ T7157] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.559345][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 200.560811][ T7157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.590292][ T5868] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 200.603815][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.702157][ T7157] usbtmc 6-1:16.0: bulk endpoints not found [ 200.765770][ T5868] pvrusb2: Hardware description: Terratec Grabster AV400 [ 200.782236][ T5868] pvrusb2: ********** [ 200.788817][ T5868] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 200.804324][ T5868] pvrusb2: Important functionality might not be entirely working. [ 200.813047][ T5868] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.824608][ T5868] pvrusb2: ********** [ 200.912996][ T9] usb 1-1: 0:2 : does not exist [ 200.925663][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 201.057483][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 201.241516][ T5868] usb 4-1: USB disconnect, device number 15 [ 201.274488][ T2327] pvrusb2: Invalid write control endpoint [ 201.292464][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 201.339732][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 201.386012][ T7442] netlink: 36 bytes leftover after parsing attributes in process `syz.5.374'. [ 201.506118][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 201.529814][ T92] usb 6-1: USB disconnect, device number 6 [ 201.583809][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 201.702185][ T9] usb 1-1: USB disconnect, device number 11 [ 201.730487][ T2327] pvrusb2: Invalid write control endpoint [ 201.743450][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.167973][ T7456] uprobe: syz.4.378:7456 failed to unregister, leaking uprobe [ 202.181350][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 202.191673][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 202.241605][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 202.266977][ T2327] pvrusb2: Device being rendered inoperable [ 202.294329][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 202.308074][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 202.312457][ T7479] uprobe: syz.3.382:7479 failed to unregister, leaking uprobe [ 202.338934][ T2327] pvrusb2: Attached sub-driver cx25840 [ 202.347971][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 202.850145][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 202.865682][ T7483] FAULT_INJECTION: forcing a failure. [ 202.865682][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 202.878618][ T7483] CPU: 1 UID: 0 PID: 7483 Comm: syz.1.383 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 202.878637][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 202.878645][ T7483] Call Trace: [ 202.878650][ T7483] [ 202.878655][ T7483] dump_stack_lvl+0x16c/0x1f0 [ 202.878678][ T7483] should_fail_ex+0x512/0x640 [ 202.878696][ T7483] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 202.878722][ T7483] should_failslab+0xc2/0x120 [ 202.878738][ T7483] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 202.878761][ T7483] ? __alloc_skb+0x2b2/0x380 [ 202.878778][ T7483] __alloc_skb+0x2b2/0x380 [ 202.878790][ T7483] ? __pfx___alloc_skb+0x10/0x10 [ 202.878802][ T7483] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 202.878820][ T7483] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 202.878845][ T7483] netlink_alloc_large_skb+0x69/0x130 [ 202.878864][ T7483] netlink_sendmsg+0x6a1/0xdd0 [ 202.878884][ T7483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.878909][ T7483] ____sys_sendmsg+0xa95/0xc70 [ 202.878929][ T7483] ? copy_msghdr_from_user+0x10a/0x160 [ 202.878945][ T7483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.878976][ T7483] ___sys_sendmsg+0x134/0x1d0 [ 202.878992][ T7483] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.879030][ T7483] __sys_sendmsg+0x16d/0x220 [ 202.879046][ T7483] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.879069][ T7483] ? rcu_is_watching+0x12/0xc0 [ 202.879095][ T7483] do_syscall_64+0xcd/0x260 [ 202.879118][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.879135][ T7483] RIP: 0033:0x7f3f47f8e969 [ 202.879148][ T7483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.879163][ T7483] RSP: 002b:00007f3f48d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.879178][ T7483] RAX: ffffffffffffffda RBX: 00007f3f481b5fa0 RCX: 00007f3f47f8e969 [ 202.879187][ T7483] RDX: 0000000000000840 RSI: 0000200000000a40 RDI: 0000000000000004 [ 202.879195][ T7483] RBP: 00007f3f48d84090 R08: 0000000000000000 R09: 0000000000000000 [ 202.879203][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.879210][ T7483] R13: 0000000000000000 R14: 00007f3f481b5fa0 R15: 00007ffd3a8e1078 [ 202.879228][ T7483] [ 203.098305][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.770868][ T7491] input: syz1 as /devices/virtual/input/input20 [ 203.787374][ T30] audit: type=1400 audit(1746471293.607:336): avc: denied { getopt } for pid=7486 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.182286][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.387'. [ 205.340763][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 205.460514][ T7516] FAULT_INJECTION: forcing a failure. [ 205.460514][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.537514][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.1.393 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 205.537539][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 205.537548][ T7516] Call Trace: [ 205.537554][ T7516] [ 205.537560][ T7516] dump_stack_lvl+0x16c/0x1f0 [ 205.537586][ T7516] should_fail_ex+0x512/0x640 [ 205.537610][ T7516] _copy_from_user+0x2e/0xd0 [ 205.537633][ T7516] copy_mount_options+0x76/0x190 [ 205.537656][ T7516] __x64_sys_mount+0x1ac/0x310 [ 205.537674][ T7516] ? __pfx___x64_sys_mount+0x10/0x10 [ 205.537690][ T7516] ? syscall_user_dispatch+0x78/0x140 [ 205.537713][ T7516] do_syscall_64+0xcd/0x260 [ 205.537736][ T7516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.537752][ T7516] RIP: 0033:0x7f3f47f8e969 [ 205.537771][ T7516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.537786][ T7516] RSP: 002b:00007f3f48d84038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.537802][ T7516] RAX: ffffffffffffffda RBX: 00007f3f481b5fa0 RCX: 00007f3f47f8e969 [ 205.537812][ T7516] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 0000000000000000 [ 205.537822][ T7516] RBP: 00007f3f48d84090 R08: 0000200000000400 R09: 0000000000000000 [ 205.537832][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.537841][ T7516] R13: 0000000000000000 R14: 00007f3f481b5fa0 R15: 00007ffd3a8e1078 [ 205.537863][ T7516] [ 205.744684][ T30] audit: type=1400 audit(1746471295.577:337): avc: denied { mount } for pid=7515 comm="syz.1.393" name="/" dev="autofs" ino=14285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 205.834110][ T30] audit: type=1400 audit(1746471295.637:338): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 206.165208][ T7522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.182330][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 207.252464][ T7546] uprobe: syz.4.399:7546 failed to unregister, leaking uprobe [ 207.802149][ T7532] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.303651][ T7555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.869373][ T92] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 211.839508][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 211.851237][ T92] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 211.869630][ T92] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 211.896160][ T92] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.941272][ T92] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.960762][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.974037][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 212.843268][ T92] usbtmc 4-1:16.0: bulk endpoints not found [ 212.881926][ T7584] FAULT_INJECTION: forcing a failure. [ 212.881926][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 212.952555][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.1.410 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 212.952580][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 212.952590][ T7584] Call Trace: [ 212.952596][ T7584] [ 212.952602][ T7584] dump_stack_lvl+0x16c/0x1f0 [ 212.952629][ T7584] should_fail_ex+0x512/0x640 [ 212.952650][ T7584] ? fs_reclaim_acquire+0xae/0x150 [ 212.952673][ T7584] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 212.952696][ T7584] should_failslab+0xc2/0x120 [ 212.952713][ T7584] __kmalloc_noprof+0xd2/0x510 [ 212.952744][ T7584] tomoyo_realpath_from_path+0xc2/0x6e0 [ 212.952770][ T7584] ? tomoyo_profile+0x47/0x60 [ 212.952798][ T7584] tomoyo_path_number_perm+0x245/0x580 [ 212.952817][ T7584] ? tomoyo_path_number_perm+0x237/0x580 [ 212.952839][ T7584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.952860][ T7584] ? find_held_lock+0x2b/0x80 [ 212.952902][ T7584] ? find_held_lock+0x2b/0x80 [ 212.952921][ T7584] ? hook_file_ioctl_common+0x145/0x410 [ 212.952942][ T7584] ? __fget_files+0x20e/0x3c0 [ 212.952971][ T7584] security_file_ioctl+0x9b/0x240 [ 212.952995][ T7584] __x64_sys_ioctl+0xb7/0x200 [ 212.953018][ T7584] do_syscall_64+0xcd/0x260 [ 212.953042][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.953059][ T7584] RIP: 0033:0x7f3f47f8e969 [ 212.953073][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.953089][ T7584] RSP: 002b:00007f3f48d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.953106][ T7584] RAX: ffffffffffffffda RBX: 00007f3f481b5fa0 RCX: 00007f3f47f8e969 [ 212.953117][ T7584] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 212.953127][ T7584] RBP: 00007f3f48d84090 R08: 0000000000000000 R09: 0000000000000000 [ 212.953137][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.953147][ T7584] R13: 0000000000000000 R14: 00007f3f481b5fa0 R15: 00007ffd3a8e1078 [ 212.953169][ T7584] [ 212.954492][ T7584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.303597][ T7589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.405'. [ 213.705862][ T7584] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.930463][ T5129] Bluetooth: hci5: command 0x0405 tx timeout [ 213.950532][ T9] usb 4-1: USB disconnect, device number 16 [ 214.110167][ T7598] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 214.220737][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 214.221761][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.237085][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.254940][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.262095][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.269538][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.276662][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.316176][ T7598] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 214.393458][ T7600] bridge_slave_1: left allmulticast mode [ 214.399232][ T7600] bridge_slave_1: left promiscuous mode [ 214.516337][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.615048][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.791015][ T7600] bridge_slave_0: left allmulticast mode [ 214.798007][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.808812][ T9] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 214.828594][ T7600] bridge_slave_0: left promiscuous mode [ 214.835676][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.289117][ T9] usb 1-1: config 0 descriptor?? [ 215.293973][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.298974][ T9] rndis_host 1-1:0.0: skipping garbage [ 215.322393][ T9] usb 1-1: bad CDC descriptors [ 215.366834][ T7600] bond0: (slave bridge0): Releasing backup interface [ 215.500777][ T7599] fuse: Bad value for 'fd' [ 215.510283][ T30] audit: type=1400 audit(1746471305.357:339): avc: denied { watch } for pid=7597 comm="syz.0.415" path="/86" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 215.590561][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.604967][ T5868] usb 1-1: USB disconnect, device number 12 [ 215.784129][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.795547][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.418'. [ 215.806966][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.806988][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.813355][ T9] usb 5-1: config 0 descriptor?? [ 216.096328][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 216.562523][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 216.580260][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input23 [ 216.652680][ T7614] uprobe: syz.1.419:7614 failed to unregister, leaking uprobe [ 216.715145][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 217.097066][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.293628][ T7610] xt_hashlimit: max too large, truncated to 1048576 [ 217.523676][ T7610] xt_limit: Overflow, try lower: 0/0 [ 217.568597][ T7635] FAULT_INJECTION: forcing a failure. [ 217.568597][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.709633][ T7635] CPU: 1 UID: 0 PID: 7635 Comm: syz.3.424 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 217.709658][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 217.709668][ T7635] Call Trace: [ 217.709674][ T7635] [ 217.709680][ T7635] dump_stack_lvl+0x16c/0x1f0 [ 217.709706][ T7635] should_fail_ex+0x512/0x640 [ 217.709731][ T7635] _copy_from_user+0x2e/0xd0 [ 217.709754][ T7635] quota_setquota+0x26a/0x5e0 [ 217.709776][ T7635] ? __pfx_quota_setquota+0x10/0x10 [ 217.709802][ T7635] ? avc_has_perm+0x11a/0x1c0 [ 217.709831][ T7635] ? selinux_quotactl+0x171/0x300 [ 217.709852][ T7635] do_quotactl+0xaf6/0x13d0 [ 217.709875][ T7635] ? __pfx_do_quotactl+0x10/0x10 [ 217.709897][ T7635] ? lock_acquire+0x62/0x350 [ 217.709923][ T7635] ? __pfx___might_resched+0x10/0x10 [ 217.709945][ T7635] ? find_held_lock+0x2b/0x80 [ 217.709966][ T7635] ? down_read+0x13d/0x480 [ 217.709987][ T7635] ? mnt_get_write_access+0x54/0x300 [ 217.710006][ T7635] ? __pfx_down_read+0x10/0x10 [ 217.710028][ T7635] ? mnt_get_write_access+0x20c/0x300 [ 217.710052][ T7635] __x64_sys_quotactl_fd+0x309/0x540 [ 217.710080][ T7635] do_syscall_64+0xcd/0x260 [ 217.710103][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.710119][ T7635] RIP: 0033:0x7ff5a058e969 [ 217.710132][ T7635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.710147][ T7635] RSP: 002b:00007ff5a14c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 217.710164][ T7635] RAX: ffffffffffffffda RBX: 00007ff5a07b5fa0 RCX: 00007ff5a058e969 [ 217.710174][ T7635] RDX: 0000000000000000 RSI: ffffffff80000800 RDI: 0000000000000003 [ 217.710184][ T7635] RBP: 00007ff5a14c9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.710194][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.710203][ T7635] R13: 0000000000000000 R14: 00007ff5a07b5fa0 R15: 00007ffcfbd76638 [ 217.710226][ T7635] [ 217.913073][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.105186][ T9] usb 5-1: USB disconnect, device number 7 [ 218.112790][ T30] audit: type=1400 audit(1746471307.787:340): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 220.699401][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 222.986884][ T7668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.998686][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 223.724059][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.748160][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.088553][ T30] audit: type=1400 audit(1746471313.937:341): avc: denied { accept } for pid=7683 comm="syz.3.437" lport=43365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.108871][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.316659][ T30] audit: type=1400 audit(1746471314.007:342): avc: denied { listen } for pid=7683 comm="syz.3.437" lport=43365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.627753][ T7710] random: crng reseeded on system resumption [ 226.296111][ T7710] netlink: 80 bytes leftover after parsing attributes in process `syz.4.440'. [ 227.455074][ T7721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.268065][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.275831][ T30] audit: type=1400 audit(1746471318.097:343): avc: denied { create } for pid=7727 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.329948][ T7731] trusted_key: encrypted_key: master key parameter '{3$6By T\>{8&:9a%΁>S' is invalid [ 228.491029][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 228.618982][ T30] audit: type=1400 audit(1746471318.097:344): avc: denied { read } for pid=7727 comm="syz.3.446" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 228.678269][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 228.771321][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 228.966982][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.990740][ T30] audit: type=1400 audit(1746471318.097:345): avc: denied { open } for pid=7727 comm="syz.3.446" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 229.057283][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.099436][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.132201][ T30] audit: type=1400 audit(1746471318.157:346): avc: denied { name_connect } for pid=7727 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 229.145198][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.167779][ T30] audit: type=1400 audit(1746471318.177:347): avc: denied { watch_reads } for pid=7727 comm="syz.3.446" path="/96" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 229.195109][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 229.224315][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.362468][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.384049][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.384093][ T5871] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.384115][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.390959][ T5871] usb 5-1: config 0 descriptor?? [ 229.490419][ T7744] syzkaller1: entered promiscuous mode [ 229.490488][ T7744] syzkaller1: entered allmulticast mode [ 230.361699][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 231.427085][ T5871] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 231.445664][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input25 [ 231.923375][ T7750] xt_hashlimit: max too large, truncated to 1048576 [ 231.924873][ T7750] xt_limit: Overflow, try lower: 0/0 [ 231.953651][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.076427][ T5871] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 232.115075][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.443'. [ 232.210646][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 232.218123][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.218144][ T9] usb 1-1: Product: syz [ 232.218157][ T9] usb 1-1: Manufacturer: syz [ 232.218171][ T9] usb 1-1: SerialNumber: syz [ 232.243039][ T9] usb 1-1: config 0 descriptor?? [ 232.366316][ T9] usb 1-1: can't set config #0, error -71 [ 232.385892][ T9] usb 1-1: USB disconnect, device number 13 [ 232.503087][ T7219] usb 6-1: USB disconnect, device number 7 [ 232.609394][ T5868] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 233.440865][ T5868] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 233.453797][ T5868] usb 4-1: config 0 has no interface number 0 [ 233.460118][ T5868] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 233.471909][ T5868] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.484205][ T5868] usb 4-1: config 0 interface 113 has no altsetting 0 [ 233.494063][ T5868] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 233.503556][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.511693][ T5868] usb 4-1: Product: syz [ 233.512231][ T7157] usb 5-1: USB disconnect, device number 8 [ 233.516227][ T5868] usb 4-1: Manufacturer: syz [ 233.528404][ T5868] usb 4-1: SerialNumber: syz [ 233.590488][ T5868] usb 4-1: config 0 descriptor?? [ 233.614282][ T5868] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 235.506981][ T7775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.021299][ T7774] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 236.068264][ T30] audit: type=1400 audit(1746471325.777:348): avc: denied { execmem } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.087804][ T30] audit: type=1400 audit(1746471325.837:349): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.132402][ T30] audit: type=1400 audit(1746471325.837:350): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.156430][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.174425][ T30] audit: type=1400 audit(1746471325.837:351): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.204171][ T30] audit: type=1400 audit(1746471325.917:352): avc: denied { append } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 236.226767][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.239116][ T30] audit: type=1400 audit(1746471325.967:353): avc: denied { create } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.263253][ T7219] usb 4-1: USB disconnect, device number 17 [ 236.299012][ T30] audit: type=1400 audit(1746471325.967:354): avc: denied { bind } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.374643][ T30] audit: type=1400 audit(1746471325.967:355): avc: denied { setopt } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.398193][ T30] audit: type=1400 audit(1746471325.967:356): avc: denied { accept } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.417656][ T30] audit: type=1400 audit(1746471325.967:357): avc: denied { write } for pid=7777 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 238.130915][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 238.229002][ T912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.780848][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.633607][ T912] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.091280][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.226025][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 241.226039][ T30] audit: type=1400 audit(1746471331.077:412): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 241.264612][ T912] usb 2-1: config 0 descriptor?? [ 241.285082][ T30] audit: type=1400 audit(1746471331.077:413): avc: denied { create } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.347036][ T7822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.379188][ T7822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.669756][ T912] usb 2-1: can't set config #0, error -71 [ 241.688128][ T30] audit: type=1400 audit(1746471331.077:414): avc: denied { setopt } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.737445][ T912] usb 2-1: USB disconnect, device number 12 [ 241.780882][ T30] audit: type=1400 audit(1746471331.077:415): avc: denied { create } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.816455][ T30] audit: type=1400 audit(1746471331.077:416): avc: denied { setopt } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.854267][ T30] audit: type=1400 audit(1746471331.077:417): avc: denied { connect } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.934882][ T30] audit: type=1400 audit(1746471331.077:418): avc: denied { name_connect } for pid=7819 comm="syz.5.468" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 241.997740][ T30] audit: type=1400 audit(1746471331.157:419): avc: denied { getopt } for pid=7819 comm="syz.5.468" lport=45187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.028822][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 242.096190][ T30] audit: type=1400 audit(1746471331.167:420): avc: denied { create } for pid=7819 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 242.116036][ T30] audit: type=1400 audit(1746471331.167:421): avc: denied { ioctl } for pid=7819 comm="syz.5.468" path="socket:[14796]" dev="sockfs" ino=14796 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 242.149376][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.310086][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 242.342979][ T5871] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 242.370547][ T5871] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 242.512366][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.594745][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.622407][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.638103][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.649221][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.675325][ T5871] usbtmc 5-1:16.0: bulk endpoints not found [ 243.059644][ T7844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.461512][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.469'. [ 244.488664][ T912] usb 5-1: USB disconnect, device number 9 [ 246.201406][ T7874] syzkaller1: entered promiscuous mode [ 246.206964][ T7874] syzkaller1: entered allmulticast mode [ 247.054200][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 247.108003][ T7873] random: crng reseeded on system resumption [ 247.160094][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 247.160106][ T30] audit: type=1400 audit(1746471336.957:438): avc: denied { append } for pid=7872 comm="syz.5.480" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 247.222457][ T30] audit: type=1400 audit(1746471336.957:439): avc: denied { open } for pid=7872 comm="syz.5.480" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 247.289796][ T30] audit: type=1400 audit(1746471337.127:440): avc: denied { create } for pid=7876 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 248.002226][ T7890] FAULT_INJECTION: forcing a failure. [ 248.002226][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.066216][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.1.484 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 248.066241][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 248.066251][ T7890] Call Trace: [ 248.066257][ T7890] [ 248.066263][ T7890] dump_stack_lvl+0x16c/0x1f0 [ 248.066291][ T7890] should_fail_ex+0x512/0x640 [ 248.066316][ T7890] _copy_to_user+0x32/0xd0 [ 248.066342][ T7890] copy_to_sockptr_offset.constprop.0+0x129/0x150 [ 248.066371][ T7890] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 248.066397][ T7890] ? kfree+0x2b6/0x4d0 [ 248.066419][ T7890] ? btf_new_fd+0x3f61/0x53a0 [ 248.066442][ T7890] ? bpf_vlog_finalize+0x1ba/0x360 [ 248.066465][ T7890] btf_new_fd+0x41ed/0x53a0 [ 248.066511][ T7890] ? __pfx_btf_new_fd+0x10/0x10 [ 248.066538][ T7890] ? cap_capable+0xb3/0x250 [ 248.066559][ T7890] ? bpf_lsm_capable+0x9/0x10 [ 248.066573][ T7890] ? security_capable+0x7e/0x260 [ 248.066593][ T7890] ? ns_capable+0xd7/0x110 [ 248.066614][ T7890] __sys_bpf+0x1adb/0x4d80 [ 248.066638][ T7890] ? __pfx___sys_bpf+0x10/0x10 [ 248.066665][ T7890] ? __lock_acquire+0xaa4/0x1ba0 [ 248.066702][ T7890] ? find_held_lock+0x2b/0x80 [ 248.066721][ T7890] ? __might_fault+0xe3/0x190 [ 248.066736][ T7890] ? __might_fault+0xe3/0x190 [ 248.066750][ T7890] ? __might_fault+0x13b/0x190 [ 248.066771][ T7890] __x64_sys_bpf+0x78/0xc0 [ 248.066794][ T7890] do_syscall_64+0xcd/0x260 [ 248.066817][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.066835][ T7890] RIP: 0033:0x7f3f47f8e969 [ 248.066848][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.066864][ T7890] RSP: 002b:00007f3f48d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.066881][ T7890] RAX: ffffffffffffffda RBX: 00007f3f481b5fa0 RCX: 00007f3f47f8e969 [ 248.066891][ T7890] RDX: 0000000000000020 RSI: 0000200000000d80 RDI: 0000000000000012 [ 248.066901][ T7890] RBP: 00007f3f48d84090 R08: 0000000000000000 R09: 0000000000000000 [ 248.066910][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.066920][ T7890] R13: 0000000000000001 R14: 00007f3f481b5fa0 R15: 00007ffd3a8e1078 [ 248.066942][ T7890] [ 248.406046][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 248.804520][ T30] audit: type=1400 audit(1746471338.657:441): avc: denied { nlmsg_write } for pid=7872 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 248.992750][ T7903] uprobe: syz.1.486:7903 failed to unregister, leaking uprobe [ 249.804990][ T30] audit: type=1400 audit(1746471339.657:442): avc: denied { create } for pid=7911 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.824875][ T30] audit: type=1400 audit(1746471339.677:443): avc: denied { setopt } for pid=7911 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.844509][ T30] audit: type=1400 audit(1746471339.677:444): avc: denied { create } for pid=7911 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.864681][ T30] audit: type=1400 audit(1746471339.697:445): avc: denied { write } for pid=7911 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.884694][ T30] audit: type=1400 audit(1746471339.717:446): avc: denied { connect } for pid=7911 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 250.059605][ T7918] random: crng reseeded on system resumption [ 251.351567][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 251.461574][ T30] audit: type=1400 audit(1746471341.317:447): avc: denied { read write } for pid=7922 comm="syz.5.492" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.485056][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.700475][ T7157] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 255.489985][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.973493][ T7157] usb 4-1: device not accepting address 18, error -71 [ 259.012903][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 259.034543][ T8007] uprobe: syz.3.519:8007 failed to unregister, leaking uprobe [ 259.274415][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.045781][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.079430][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.790371][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 260.790386][ T30] audit: type=1400 audit(1746471350.637:452): avc: denied { kexec_image_load } for pid=8029 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 260.883193][ T8036] random: crng reseeded on system resumption [ 260.969524][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 261.079344][ T30] audit: type=1400 audit(1746471350.787:453): avc: denied { write } for pid=8029 comm="syz.1.530" path="socket:[15190]" dev="sockfs" ino=15190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.120931][ T30] audit: type=1400 audit(1746471350.967:454): avc: denied { sqpoll } for pid=8017 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 261.139957][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.147505][ T30] audit: type=1400 audit(1746471350.967:455): avc: denied { write } for pid=8017 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.803259][ T8036] netlink: 80 bytes leftover after parsing attributes in process `syz.5.529'. [ 264.439341][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 264.440978][ T30] audit: type=1400 audit(1746471354.287:456): avc: denied { write } for pid=8062 comm="syz.0.538" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.489771][ T8066] uprobe: syz.5.536:8066 failed to unregister, leaking uprobe [ 264.503941][ T30] audit: type=1400 audit(1746471354.287:457): avc: denied { open } for pid=8062 comm="syz.0.538" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.535626][ T30] audit: type=1400 audit(1746471354.297:458): avc: denied { read } for pid=8062 comm="syz.0.538" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.630242][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 264.652326][ T92] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 264.672236][ T92] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 264.697191][ T92] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.717179][ T92] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.758128][ T30] audit: type=1400 audit(1746471354.297:459): avc: denied { open } for pid=8062 comm="syz.0.538" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.763613][ T92] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.804781][ T30] audit: type=1400 audit(1746471354.297:460): avc: denied { ioctl } for pid=8062 comm="syz.0.538" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.882935][ T30] audit: type=1400 audit(1746471354.297:461): avc: denied { create } for pid=8062 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.912963][ T92] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.933530][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.976485][ T92] usbtmc 2-1:16.0: bulk endpoints not found [ 265.029337][ T912] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 265.224024][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.236841][ T912] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.416605][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.533'. [ 265.460746][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.552040][ T912] usb 6-1: config 0 descriptor?? [ 265.654358][ T5871] usb 2-1: USB disconnect, device number 13 [ 265.827052][ T8087] input: syz1 as /devices/virtual/input/input29 [ 265.854194][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 265.854209][ T30] audit: type=1400 audit(1746471355.697:473): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=2916 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.934226][ T8087] sp0: Synchronizing with TNC [ 265.953397][ T30] audit: type=1400 audit(1746471355.697:474): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2916 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.982155][ T912] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 266.012269][ T30] audit: type=1400 audit(1746471355.697:475): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2916 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.179925][ T30] audit: type=1400 audit(1746471355.777:476): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 266.604660][ T30] audit: type=1400 audit(1746471355.797:477): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.662417][ T912] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0008/input/input30 [ 266.676209][ T30] audit: type=1400 audit(1746471355.797:478): avc: denied { read } for pid=5482 comm="dhcpcd" name="n100" dev="tmpfs" ino=4082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.719074][ T30] audit: type=1400 audit(1746471355.797:479): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.742035][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.767897][ T912] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 266.832788][ T30] audit: type=1400 audit(1746471355.797:480): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.856048][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.987153][ T8070] xt_hashlimit: max too large, truncated to 1048576 [ 266.999002][ T8070] xt_limit: Overflow, try lower: 0/0 [ 267.280305][ T8105] random: crng reseeded on system resumption [ 267.404118][ T8083] [U] [ 267.673003][ T8111] netlink: 80 bytes leftover after parsing attributes in process `syz.1.547'. [ 268.638668][ T30] audit: type=1400 audit(1746471358.487:481): avc: denied { read } for pid=8104 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 268.674560][ T52] usb 6-1: USB disconnect, device number 8 [ 268.713295][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 269.050777][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 269.376104][ T8124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.025796][ T30] audit: type=1400 audit(1746471359.857:482): avc: denied { write } for pid=8130 comm="syz.4.553" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 Stopping sshd: [ 271.757697][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 272.369368][ T8168] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 272.376114][ T8168] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.451051][ T8168] vhci_hcd vhci_hcd.0: Device attached [ 273.159586][ T52] vhci_hcd: vhci_device speed not set Connection to 10.128.0.3 closed by remote host. [ 273.613848][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 273.613863][ T30] audit: type=1400 audit(1746471363.457:484): avc: denied { listen } for pid=8166 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.613940][ T52] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 273.623940][ T30] audit: type=1400 audit(1746471363.457:485): avc: denied { accept } for pid=8166 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.639433][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.701737][ T8173] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 273.708334][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.715802][ T8168] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 273.722307][ T8168] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) OK [ 273.770476][ T8173] vhci_hcd vhci_hcd.0: Device attached Stopping dhcpcd... [ 273.821694][ T8168] vhci_hcd vhci_hcd.0: Device attached [ 273.866943][ T30] audit: type=1400 audit(1746471363.457:486): avc: denied { create } for pid=8166 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 273.873625][ T8184] vhci_hcd: connection closed [ 273.986084][ T995] vhci_hcd: stop threads [ 274.010062][ T8169] vhci_hcd: connection reset by peer stopped /sbin/dhcpcd (pid 5481) [ 274.019338][ T8182] vhci_hcd: connection closed [ 274.022429][ T995] vhci_hcd: release socket [ 274.146653][ T995] vhci_hcd: disconnect device Stopping network: [ 274.504340][ T995] vhci_hcd: stop threads [ 274.508698][ T995] vhci_hcd: release socket [ 274.523754][ T995] vhci_hcd: disconnect device [ 274.539131][ T995] vhci_hcd: stop threads [ 274.578072][ T995] vhci_hcd: release socket [ 274.594586][ T995] vhci_hcd: disconnect device [ 275.962469][ T30] audit: type=1400 audit(1746471365.797:487): avc: denied { setopt } for pid=8215 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.199404][ T30] audit: type=1400 audit(1746471365.867:488): avc: denied { mount } for pid=8219 comm="syz.5.571" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 276.221144][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.295913][ T30] audit: type=1400 audit(1746471366.107:489): avc: denied { unmount } for pid=6515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 276.408983][ T30] audit: type=1400 audit(1746471366.257:490): avc: denied { read } for pid=8229 comm="syz.4.573" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 276.610947][ T30] audit: type=1400 audit(1746471366.467:491): avc: denied { read write } for pid=8231 comm="ip" path="/dev/console" dev="rootfs" ino=1058 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 276.700028][ T912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 276.816611][ T8244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.839054][ T8244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.219345][ T912] usb 4-1: Using ep0 maxpacket: 8 [ 277.232687][ T912] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 277.252868][ T912] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 277.299839][ T912] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.340380][ T912] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.369755][ T912] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 277.406351][ T912] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.495309][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.592003][ T5871] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 277.623671][ T912] usbtmc 4-1:16.0: bulk endpoints not found OK Stopping iptables: [ 277.894493][ T30] audit: type=1400 audit(1746471367.737:492): avc: denied { read write } for pid=8263 comm="iptables" path="/dev/console" dev="rootfs" ino=1058 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 277.927723][ T5871] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.965188][ T5871] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.107862][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.574'. [ 278.324710][ T30] audit: type=1400 audit(1746471367.837:493): avc: denied { search } for pid=8263 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 278.376768][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 Stopping system message bus: [ 278.548918][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 278.889485][ T31] INFO: task kworker/0:1:10 blocked for more than 145 seconds. [ 278.904375][ T92] usb 4-1: USB disconnect, device number 20 [ 278.959571][ T52] vhci_hcd: vhci_device speed not set [ 280.300655][ T31] Not tainted 6.15.0-rc5-syzkaller #0 [ 280.929348][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 280.940805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.949690][ T31] task:kworker/0:1 state:D stack:21432 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 280.961933][ T5871] usb 1-1: string descriptor 0 read error: -71 [ 280.968255][ T5871] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.977552][ T31] Workqueue: events p9_write_work [ 280.982715][ T31] Call Trace: [ 280.986026][ T31] [ 280.988990][ T31] __schedule+0x116f/0x5de0 [ 280.993616][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.003110][ T31] ? __lock_acquire+0xee1/0x1ba0 [ 281.008134][ T31] ? __pfx___schedule+0x10/0x10 [ 281.013967][ T5871] usb 1-1: can't set config #1, error -71 [ 281.020726][ T5871] usb 1-1: USB disconnect, device number 14 [ 281.029338][ T31] ? find_held_lock+0x2b/0x80 [ 281.034083][ T31] ? schedule+0x2d7/0x3a0 [ 281.045750][ T31] schedule+0xe7/0x3a0 [ 281.050147][ T31] schedule_preempt_disabled+0x13/0x30 [ 281.055658][ T31] __mutex_lock+0x6c7/0xb90 [ 281.060523][ T31] ? anon_pipe_write+0x15d/0x1a70 [ 281.065553][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 281.070781][ T31] ? find_held_lock+0x2b/0x80 [ 281.075460][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 281.086278][ T31] ? anon_pipe_write+0x15d/0x1a70 [ 281.091813][ T31] anon_pipe_write+0x15d/0x1a70 [ 281.097222][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 281.102445][ T31] ? avc_has_perm+0x11a/0x1c0 [ 281.107137][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 281.127068][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 281.143144][ T31] ? inode_has_perm+0x16f/0x1d0 [ 281.148098][ T31] ? file_has_perm+0x27d/0x350 [ 281.148457][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 281.148467][ T30] audit: type=1400 audit(1746471370.997:499): avc: denied { write } for pid=5482 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.153948][ T31] ? __pfx_file_has_perm+0x10/0x10 [ 281.194358][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 281.209459][ T30] audit: type=1400 audit(1746471370.997:500): avc: denied { remove_name } for pid=5482 comm="dhcpcd" name="sock" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.270938][ T31] __kernel_write_iter+0x317/0xa90 [ 281.279146][ T30] audit: type=1400 audit(1746471370.997:501): avc: denied { unlink } for pid=5482 comm="dhcpcd" name="sock" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 281.306403][ T31] ? __pfx___kernel_write_iter+0x10/0x10 [ 281.320832][ T31] ? selinux_file_permission+0x11f/0x580 [ 281.326510][ T31] ? bpf_lsm_file_permission+0x9/0x10 [ 281.353380][ T31] ? security_file_permission+0x71/0x210 [ 281.359065][ T31] ? rw_verify_area+0xcf/0x680 done[ 281.371032][ T30] audit: type=1400 audit(1746471371.017:502): avc: denied { unlink } for pid=5482 comm="dhcpcd" name="pid" dev="tmpfs" ino=1702 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 281.401592][ T30] audit: type=1400 audit(1746471371.227:503): avc: denied { search } for pid=5466 comm="dbus-daemon" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:system_dbusd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.429371][ T31] kernel_write+0x1f4/0x6c0 [ 281.433961][ T31] ? __pfx_kernel_write+0x10/0x10 [ 281.439086][ T31] ? p9_write_work+0x7d6/0xc10 [ 281.445667][ T31] p9_write_work+0x258/0xc10 [ 281.451452][ T31] process_one_work+0x9cc/0x1b70 [ 281.463113][ T31] ? __pfx_process_one_work+0x10/0x10 [ 281.468562][ T31] ? assign_work+0x1a0/0x250 [ 281.474818][ T31] worker_thread+0x6c8/0xf10 [ 281.482111][ T31] ? __pfx_worker_thread+0x10/0x10 [ 281.491823][ T31] kthread+0x3c2/0x780 [ 281.495962][ T31] ? __pfx_kthread+0x10/0x10 [ 281.504496][ T31] ? __pfx_kthread+0x10/0x10 [ 281.509145][ T31] ? __pfx_kthread+0x10/0x10 [ 281.514075][ T31] ? __pfx_kthread+0x10/0x10 [ 281.518723][ T31] ? rcu_is_watching+0x12/0xc0 [ 281.525323][ T31] ? __pfx_kthread+0x10/0x10 [ 281.531061][ T31] ret_from_fork+0x45/0x80 [ 281.535535][ T31] ? __pfx_kthread+0x10/0x10 [ 281.541921][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.552258][ T31] [ 281.577004][ T31] [ 281.577004][ T31] Showing all locks held in the system: [ 281.620182][ T31] 3 locks held by kworker/0:1/10: [ 281.625971][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 281.636966][ T31] #1: ffffc900000f7d18 ((work_completion)(&m->wq)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 281.650627][ T31] #2: ffff88807e0cc068 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1a70 [ 281.663431][ T31] 1 lock held by khungtaskd/31: [ 281.683740][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 281.719408][ T31] 3 locks held by kworker/1:1/52: [ 281.724462][ T31] #0: ffff888145281948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 281.744569][ T31] #1: ffffc90000be7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 281.756094][ T31] #2: ffff888146357198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 281.765263][ T31] 2 locks held by getty/5568: [ 281.770272][ T31] #0: ffff888031ad40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 281.780825][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 281.791184][ T31] 2 locks held by syz.2.103/6378: [ 281.796262][ T31] #0: ffff88807e0cc068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 281.805336][ T31] #1: ffff88807de60148 (&sb->s_type->i_mutex_key#22){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 281.823768][ T31] 2 locks held by killall/8283: [ 281.828711][ T31] [ 281.832399][ T31] ============================================= [ 281.832399][ T31] [ 281.843964][ T31] NMI backtrace for cpu 1 [ 281.843976][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 281.843995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 281.844004][ T31] Call Trace: [ 281.844009][ T31] [ 281.844016][ T31] dump_stack_lvl+0x116/0x1f0 [ 281.844042][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 281.844067][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.844085][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 281.844104][ T31] watchdog+0xf70/0x12c0 [ 281.844125][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.844139][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.844161][ T31] ? __kthread_parkme+0x19e/0x250 [ 281.844185][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.844199][ T31] kthread+0x3c2/0x780 [ 281.844215][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844228][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844242][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844256][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844270][ T31] ? rcu_is_watching+0x12/0xc0 [ 281.844289][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844305][ T31] ret_from_fork+0x45/0x80 [ 281.844319][ T31] ? __pfx_kthread+0x10/0x10 [ 281.844334][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.844367][ T31] [ 281.844373][ T31] Sending NMI from CPU 1 to CPUs 0: [ 281.977414][ C0] NMI backtrace for cpu 0 [ 281.977427][ C0] CPU: 0 UID: 0 PID: 8283 Comm: killall Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 281.977443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 281.977451][ C0] RIP: 0010:check_preemption_disabled+0x2c/0xe0 [ 281.977472][ C0] Code: 55 53 48 83 ec 08 65 8b 1d 85 34 37 08 65 8b 05 7a 34 37 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc <9c> 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 3a 34 37 08 f6 40 2f 04 [ 281.977484][ C0] RSP: 0018:ffffc9000cec7598 EFLAGS: 00000046 [ 281.977495][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 00000000ef9d33e4 [ 281.977504][ C0] RDX: 0000000000000000 RSI: ffffffff8dcd20c4 RDI: ffffffff8bf48260 [ 281.977512][ C0] RBP: 00007fd41deb79a4 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 281.977520][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81a62ec4 [ 281.977527][ C0] R13: 0000000000000206 R14: ffff8880309bc880 R15: ffff8880309bc880 [ 281.977535][ C0] FS: 00007fd41dd63500(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 281.977548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.977556][ C0] CR2: 00007fd41de36bc4 CR3: 00000000278ff000 CR4: 00000000003526f0 [ 281.977563][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.977571][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.977578][ C0] Call Trace: [ 281.977583][ C0] [ 281.977587][ C0] ? is_module_text_address+0x144/0x230 [ 281.977607][ C0] ? is_module_text_address+0x144/0x230 [ 281.977624][ C0] lock_release+0x9c/0x2f0 [ 281.977642][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.977657][ C0] is_module_text_address+0x149/0x230 [ 281.977675][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.977689][ C0] kernel_text_address+0x81/0x100 [ 281.977703][ C0] __kernel_text_address+0xd/0x40 [ 281.977715][ C0] unwind_get_return_address+0x59/0xa0 [ 281.977730][ C0] arch_stack_walk+0xa6/0x100 [ 281.977748][ C0] stack_trace_save+0x8e/0xc0 [ 281.977762][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 281.977778][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 281.977795][ C0] kasan_save_stack+0x33/0x60 [ 281.977813][ C0] ? kasan_save_stack+0x33/0x60 [ 281.977829][ C0] ? kasan_save_track+0x14/0x30 [ 281.977845][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 281.977856][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 281.977875][ C0] ? security_file_alloc+0x34/0x2b0 [ 281.977891][ C0] ? init_file+0x93/0x4c0 [ 281.977902][ C0] ? alloc_empty_file+0x73/0x1e0 [ 281.977914][ C0] ? path_openat+0xe0/0x2d40 [ 281.977931][ C0] ? do_filp_open+0x20b/0x470 [ 281.977947][ C0] ? do_sys_openat2+0x11b/0x1d0 [ 281.977959][ C0] ? __x64_sys_openat+0x174/0x210 [ 281.977972][ C0] ? do_syscall_64+0xcd/0x260 [ 281.977988][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.978011][ C0] kasan_save_track+0x14/0x30 [ 281.978027][ C0] __kasan_slab_alloc+0x89/0x90 [ 281.978038][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 281.978057][ C0] ? security_file_alloc+0x34/0x2b0 [ 281.978074][ C0] security_file_alloc+0x34/0x2b0 [ 281.978090][ C0] init_file+0x93/0x4c0 [ 281.978102][ C0] alloc_empty_file+0x73/0x1e0 [ 281.978115][ C0] path_openat+0xe0/0x2d40 [ 281.978132][ C0] ? __x64_sys_openat+0x174/0x210 [ 281.978144][ C0] ? do_syscall_64+0xcd/0x260 [ 281.978159][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.978174][ C0] ? __pfx_path_openat+0x10/0x10 [ 281.978193][ C0] do_filp_open+0x20b/0x470 [ 281.978210][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 281.978234][ C0] ? alloc_fd+0x471/0x7d0 [ 281.978253][ C0] do_sys_openat2+0x11b/0x1d0 [ 281.978266][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.978280][ C0] ? __fput+0x68d/0xb70 [ 281.978294][ C0] __x64_sys_openat+0x174/0x210 [ 281.978312][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 281.978329][ C0] do_syscall_64+0xcd/0x260 [ 281.978344][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.978359][ C0] RIP: 0033:0x7fd41deb79a4 [ 281.978369][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 281.978380][ C0] RSP: 002b:00007ffd5a8421f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.978391][ C0] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd41deb79a4 [ 281.978399][ C0] RDX: 0000000000000000 RSI: 00007ffd5a842357 RDI: 00000000ffffff9c [ 281.978407][ C0] RBP: 00007ffd5a842357 R08: 0000000000000001 R09: 00007ffd5a841c58 [ 281.978414][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.978421][ C0] R13: 00007ffd5a842357 R14: 00007ffd5a842388 R15: 00007ffd5a843f30 [ 281.978433][ C0] [ 282.439504][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 282.446365][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 282.456428][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 282.466480][ T31] Call Trace: [ 282.469754][ T31] [ 282.472684][ T31] dump_stack_lvl+0x3d/0x1f0 [ 282.477279][ T31] panic+0x71c/0x800 [ 282.481168][ T31] ? __pfx_panic+0x10/0x10 [ 282.485569][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 282.490925][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 282.496883][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 282.502235][ T31] ? watchdog+0xdda/0x12c0 [ 282.506629][ T31] ? watchdog+0xdcd/0x12c0 [ 282.511047][ T31] watchdog+0xdeb/0x12c0 [ 282.515273][ T31] ? __pfx_watchdog+0x10/0x10 [ 282.519930][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.525115][ T31] ? __kthread_parkme+0x19e/0x250 [ 282.530129][ T31] ? __pfx_watchdog+0x10/0x10 [ 282.534787][ T31] kthread+0x3c2/0x780 [ 282.538834][ T31] ? __pfx_kthread+0x10/0x10 [ 282.543404][ T31] ? __pfx_kthread+0x10/0x10 [ 282.547972][ T31] ? __pfx_kthread+0x10/0x10 [ 282.552539][ T31] ? __pfx_kthread+0x10/0x10 [ 282.557114][ T31] ? rcu_is_watching+0x12/0xc0 [ 282.561862][ T31] ? __pfx_kthread+0x10/0x10 [ 282.566431][ T31] ret_from_fork+0x45/0x80 [ 282.570828][ T31] ? __pfx_kthread+0x10/0x10 [ 282.575399][ T31] ret_from_fork_asm+0x1a/0x30 [ 282.580159][ T31] [ 282.583334][ T31] Kernel Offset: disabled [ 282.587632][ T31] Rebooting in 86400 seconds..