last executing test programs: 26.364060456s ago: executing program 3 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xecf, 0x5c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3dd0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68be}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}]}, 0x94}}, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 25.402079269s ago: executing program 3 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2006e2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "10eae40036f465ec", "5b72e7f351595d23d24575126a56eab2840b81a1adc6d8cfc4e551163ff66dec", '#\x00', "fa31024de00b1600"}, 0x38) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@md0, r5, &(0x7f0000000440)={0x800, 0x0, 0x1795bc1e, 0x0, 0x9, 0x0, 0xed, 0xd6, 0x6}) mount$bpf(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030372c6d6f64653d30303030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031312c6d6f64653d30303030303030303030303030303030303030303031302c6d6f64653d30303030303030303030303030303030303030363731372c6d6f64653d30303030303030303030303030303030303030303030352c6d6f64653d30303030303030303030303030303030303030303030352c6d6f64653d30303030343030303030303030303030303030303130302c6d6f64653d30303030303030303030303030303030303030303030312c666f776e65723ca9291b16eb9e49942732b20247b438d9bf6f9522ddfa", @ANYRESDEC=0x0, @ANYBLOB=',appraise,nolazytime,fowner<', @ANYRESDEC, @ANYBLOB=',\x00']) r6 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x20000000008, 0x9}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 23.852295473s ago: executing program 3 (id=2665): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d00010700000009040000050300000009210000000122050009058103000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='V', 0x1}, {0x0, 0x700}], 0x2, 0x0, 0x0) 20.224877134s ago: executing program 3 (id=2678): keyctl$session_to_parent(0x12) r0 = memfd_secret(0x80000) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000021c0), &(0x7f0000002200)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000023c0)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000024c0)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r4, 0x0) setregid(0x0, 0x0) 19.883294674s ago: executing program 3 (id=2682): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffcc6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4286322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000349a028044ed6af70cf6a524e6ab46c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df554401221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b5662586c216a3473ff6c72835d51eb48887003d27468225b2594a05044baf314113e8894689e4c5f47222b2692db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c981cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe500ead8857acf0166dbd9f30a9b9c8a9b9faf1356fa0269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc02004a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d2b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000001c33e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd10ba82c82957fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d40fd22551560e0c24d9d28206b3b9e103dad25f1211d071453b3a7765d4c94d455dc9c7d44167902ddeefeb8c0932c04f830823da0d51dd21f6067e4bacab3261f392fa5ea17f4fa60b24f4e267560e987cc0d585cf3582a12e16004dd3b46d33e04"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="3635b13128585e55e4928b0896d1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000107d1ece310000000000010902"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000440)={0xbc, "119b870320c20a7b3f75303d340202c5e6ee8c03da5baf8efccc11c73b47c097da4e394426350163ab1d836796ad1b11f005a4ef2064e9297106506932688248ed3870f248e9035baeff52450264b9d5b2ccc65606b0d00a8cfe2cea2042d269fde21cf13c1f093eb86eebc116f9575d4df48a6ddb751c889aae54b1891b62affacb9e8b2cfa30d6ef24c1ed3bb679cce8c1b1bce8c46d34ffe6034f4af02eb2a9714a856919fc8d8ed94442e9a902dcfb4b21463ac448bdf3596001"}) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000400)=0xfffffffc) read$FUSE(r0, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x9ca, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0xfffffffffffffffc, 0x0, {0x2, 0x10, 0x0, 0x41d, 0x0, 0x8000, {0x2000000000000000, 0x80000000000000, 0x0, 0x7f, 0x0, 0x400000, 0x0, 0x10000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000c1d1009500000000000000e5fc1803d3da1a2dcb98cc85"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 19.882680103s ago: executing program 0 (id=2683): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2002000aaaaaaaaaaff8100000086dd60f53a0400503a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000000000000000000000000000000000003a0100000000000007080000000000000000000000000000000000000000000078aba33d8b694b0d0ae8bab7229a8c536cb114dabe8eefd611b01bde845dca2e207838428c3cf5f63c1bc7cdc8e1ffa93c53ece044cc7974c484bb3c9b719ea0f78aba48417b20e00f28593613307167da5e8561df0d98703293810f89468fb8a9d5063473d9eab2ec8d2c363cd365"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2b}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r3}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000004c0)={0x5, 0x0, [{0x40000092}, {0x890, 0x0, 0x28}, {0x39b, 0x0, 0x400}, {0x382, 0x0, 0x39e7}, {0x3a0, 0x0, 0x8}]}) 18.241436678s ago: executing program 0 (id=2685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x10}, 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) (fail_nth: 1) 17.42020956s ago: executing program 0 (id=2687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f00000003c0)={0x1a0046000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, 0x0, {0xa}, &(0x7f0000000300)=""/68, 0x44, &(0x7f0000000280)=""/18, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r0}}, 0x58) getpriority(0x2, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) syz_clone(0x0, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17.257741132s ago: executing program 4 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000004c0)=""/255, 0xff, 0x40000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) getgroups(0xfffffc8b, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 16.596409387s ago: executing program 2 (id=2689): bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xb00, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 15.522194683s ago: executing program 3 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 15.498854529s ago: executing program 0 (id=2692): pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2ca, 0x0, &(0x7f0000000140)="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)=',\'!%^[(@\xb2-\x00', &(0x7f0000000480)='wlan1\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000100003050000", @ANYRES32=0x0, @ANYBLOB="020000000000000008001300", @ANYRES32=0x0, @ANYBLOB="5a85d81790aa60660da463e46b202b8484cb4adf64c2e37ae4d400549e81c393a42f073c29e72d855840d380f7b745743610cddb677176708a67cb74aa194b92b423d7b628d6f0043538b5a7583500be3d49fee25e021e744c1bf723ecad5bd9698a47b878d1c37c7af5165ef29e3b983e1fe799e9aec7675652b7950080b5901b9625e3006cfb3e21dbc57dfefce3c0cf4184da2830886ddfded23add62cdf5930e6ce8e47c42c112b34c8bae53a72fb851d4f8802be74b6d9a6927dd2dd487f3526cfced"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=r7, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x1000000, 0x1, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) 14.786484395s ago: executing program 4 (id=2694): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x108) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8001) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\b\x00', 0x14, 0x2f, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000080)=0x8) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x4, &(0x7f0000000640)={r9}, 0x4) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r10) 13.643798905s ago: executing program 4 (id=2695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000000)=0x1) write$dsp(r3, &(0x7f00000001c0)="d1", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dvmrp0\x00'}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r6, &(0x7f0000002140)=[{&(0x7f0000002080)='T', 0x1}], 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) 12.635013573s ago: executing program 4 (id=2696): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000300)) socket(0x11, 0xa, 0x0) socket$rxrpc(0x21, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/233, 0x42}], 0x1, &(0x7f0000002d00)=""/4073, 0xfe9}, 0x0) close(r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x76cc5ae9}, @padn, @padn]}]}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="e8206f15619a4b58d6b6ca5a1ffad434843f62a4dde1a11a0a7a354bad0365425682374f8bc245310000", 0x2a) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000540)=[@iv={0x18}], 0x18}], 0x1, 0x0) recvfrom$inet_nvme(r8, &(0x7f0000000100)=""/135, 0x87, 0x0, 0x0, 0x0) 12.567082901s ago: executing program 1 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x6, 0x10) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000740)={0xf}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r5, @ANYRES32=r7, @ANYBLOB="ac02038097000400ed68c0059946b7484b1597647b4d43a50f2b21bc4331a6af17d4fa304e100d5b9af5aa3c6ad1b9f0624f02d37e68ecafaae6b0c78948b6c292b32d9d64db3f77c0a48638d431d74bbf123d2ebb41aebee582bb698d4d72e37eb66555f651a40dd754fc5e56a8dcfb321da7171f81aec969b76935a3a24981b14c7d15784c058895de00869d0850100ae4d749a3f2aa350046000400e6447e7f2a7bee3b0e52561bc91fa9a038ae4f77b64496d1ce8c1ce0a669fcd3b48aabc85f844374b3e6c11cf6c4d4af027ee82474bfad9ebd4fc0c80639c3cdffe00000a001038040000180070002002d2c000008000100000001000d0002002f6465762f6b766d000000000e0002002f6465762f707470300000000400030004000300040003001000018004000300040003000400030020000180040003000800020025282d000800020047504c0008000100020000003800018004000300080001000400000004000300060002002600000008000100030000000500020000000000040003000800020047504c002000018004000300080001000e4d00000e0002002f6465762f707470300000003c0001800400030004000300080001001f88042a050002000000000008000100070000000e0002002323ba2c2d24402e5b000000080001000100010018000180080001007f00000004000300080001000080000030000180090002005e265b2a0000000004000300080001000d0000000800010001000000080001001f000000040003005000018004000300040003001600020021242b2ec73a257d2f285b3a21232c5e5b0000000800010010000000080001000104000008000100010000000800010042280000040003000800010080000000200003801c0001800f0002002f6465762f6877726e6700000800010020000000080002"], 0x4dc}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r9}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000300)=ANY=[]) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r12, 0x1, &(0x7f0000000280)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 12.332134534s ago: executing program 2 (id=2698): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)="711f2abf2d0c38265264344732", 0xd}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12062, 0x0) (async) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12062, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000012c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0xab, 'syz1\x00', "2039f9dbbaad53d57672cf49627343cba09d53dacf78235962d492c1710c1eba", "3332a1efc47e1144cebedf8e059d3bf38d21c4e8017a4a8e715ccd72d7818c59"}}}]}, 0x268}}, 0x0) 11.790159114s ago: executing program 2 (id=2699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f00000003c0)={0x1a0046000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, 0x0, {0xa}, &(0x7f0000000300)=""/68, 0x44, &(0x7f0000000280)=""/18, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r0}}, 0x58) getpriority(0x2, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) syz_clone(0x0, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 10.893607876s ago: executing program 1 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x300, &(0x7f00000002c0)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 9.614399917s ago: executing program 1 (id=2701): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000200)='omfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000005640)=0x42, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xa4, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd81f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x119}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0xfffffffffffffeb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x8010) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1e9000, 0x5) 9.486243826s ago: executing program 0 (id=2702): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080006000000000008000b00", @ANYRES32=0x0, @ANYBLOB="670ae76e5e9af050974088c23332c2dae1423e18f6dd3ad1deb12747a126a1d018934339e8ad38393615c8d36812795d5f3965bb0a26a51634933d59d3f873fd377cb09ada835c8e0657833c"], 0x24}}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) add_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xfffffffdffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.400042631s ago: executing program 2 (id=2703): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000080), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x0, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x3e, 0x0, &(0x7f0000000440)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c108035d320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000580)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000040), 0x1003) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054001ffff7ff00000800000007000000", @ANYRESOCT=r3, @ANYBLOB="20000100", @ANYRESHEX=r2, @ANYBLOB="01000000"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 9.182981104s ago: executing program 4 (id=2704): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)=0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) openat$nullb(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000080)={0x10, 0x0, r5}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r6, 0x5385, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x800000000000a) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x210) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000001c0)=0x500, 0x4) 8.301281177s ago: executing program 1 (id=2705): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000380), 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20080001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) accept(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc011}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r6, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0x1d, 0x4) recvmmsg(r6, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42201, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0d9c0c958b1c04"], 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) 7.883476389s ago: executing program 4 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x21c000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000280)=0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x0, {0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)=' ', 0x1}]) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 6.564186287s ago: executing program 1 (id=2707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000000)=0x1) write$dsp(r3, &(0x7f00000001c0)="d1", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dvmrp0\x00'}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r6, &(0x7f0000002140)=[{&(0x7f0000002080)='T', 0x1}], 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) 6.396767999s ago: executing program 2 (id=2708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x9, 0x0, {0xa, @pix_mp={0x0, 0x0, 0xb5315258, 0x0, 0x0, [{}, {0x0, 0x7fff}, {}, {}, {}, {}, {0xffffffff}], 0xc0, 0x0, 0x6}}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000067000000080001"], 0x28}}, 0x0) syz_clone3(&(0x7f00000003c0)={0x1a0046000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xa}, &(0x7f0000000300)=""/68, 0x44, &(0x7f0000000280)=""/18, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r0}}, 0x58) 5.785851162s ago: executing program 0 (id=2709): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = gettid() tkill(r6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r7, 0x10, 0x8000, 0x200, 0x3, {{0x1c, 0x4, 0x2, 0x3, 0x70, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x6}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x31}, @timestamp_addr={0x44, 0x2c, 0x28, 0x1, 0x3, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x5ef}, {@remote, 0x8}, {@multicast2}]}, @lsrr={0x83, 0xf, 0xd2, [@private=0xa010102, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}}}}) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$netlink(0x10, 0x3, 0xc) write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='!\x00\x00\x007\x00\x00\x00\x00\x00\x00\x00\x00#\x00'/24, @ANYRES32=0x0, @ANYBLOB="0300252b28"], 0xe6da) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) fcntl$setstatus(r3, 0x4, 0x2400) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 5.75187353s ago: executing program 1 (id=2710): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x3, &(0x7f0000000300)=@gcm_128={{}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca0500000052f4"}, 0x28) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0xfffffffffffffea9) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) 0s ago: executing program 2 (id=2711): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) close_range(r4, 0xffffffffffffffff, 0xc8) kernel console output (not intermixed with test programs): .798029][T14573] dump_stack_lvl+0x16c/0x1f0 [ 1102.802707][T14573] should_fail_ex+0x497/0x5b0 [ 1102.807379][T14573] should_failslab+0x9/0x20 [ 1102.811879][T14573] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1102.817357][T14573] ? skb_clone+0x190/0x3f0 [ 1102.821772][T14573] skb_clone+0x190/0x3f0 [ 1102.826027][T14573] ip6_err_gen_icmpv6_unreach+0x181/0x840 [ 1102.831757][T14573] ? __pfx_ip6_err_gen_icmpv6_unreach+0x10/0x10 [ 1102.837999][T14573] ipip6_err+0x43f/0xa40 [ 1102.842240][T14573] ? __pfx_ipip6_err+0x10/0x10 [ 1102.846997][T14573] tunnelmpls4_err+0x85/0x210 [ 1102.851669][T14573] ? __pfx_tunnelmpls4_err+0x10/0x10 [ 1102.856944][T14573] icmp_socket_deliver+0x1bd/0x380 [ 1102.862064][T14573] icmp_unreach+0x35d/0xe50 [ 1102.866555][T14573] icmp_rcv+0xbb5/0x1080 [ 1102.870788][T14573] ? __pfx_icmp_rcv+0x10/0x10 [ 1102.875457][T14573] ip_protocol_deliver_rcu+0x45e/0x4e0 [ 1102.880909][T14573] ip_local_deliver_finish+0x316/0x570 [ 1102.886356][T14573] ip_local_deliver+0x18e/0x1f0 [ 1102.891217][T14573] ? __pfx_ip_local_deliver+0x10/0x10 [ 1102.896615][T14573] ip_rcv+0x2c5/0x5d0 [ 1102.900599][T14573] ? __pfx_ip_rcv+0x10/0x10 [ 1102.905090][T14573] __netif_receive_skb_one_core+0x199/0x1e0 [ 1102.910983][T14573] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1102.917388][T14573] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1102.923123][T14573] __netif_receive_skb+0x1d/0x160 [ 1102.928150][T14573] netif_receive_skb+0x13f/0x7b0 [ 1102.933074][T14573] ? __pfx_netif_receive_skb+0x10/0x10 [ 1102.938522][T14573] ? __pfx___lock_acquire+0x10/0x10 [ 1102.943720][T14573] ? __tun_build_skb+0x1e5/0x340 [ 1102.948655][T14573] tun_rx_batched+0x429/0x780 [ 1102.953325][T14573] ? __pfx_tun_rx_batched+0x10/0x10 [ 1102.958515][T14573] ? __lock_acquire+0xc5d/0x3b30 [ 1102.963446][T14573] ? tun_get_user+0x1d7d/0x3c30 [ 1102.968289][T14573] tun_get_user+0x2a58/0x3c30 [ 1102.972978][T14573] ? __pfx_tun_get_user+0x10/0x10 [ 1102.978009][T14573] ? find_held_lock+0x2d/0x110 [ 1102.982773][T14573] ? __pfx_lock_release+0x10/0x10 [ 1102.987798][T14573] tun_chr_write_iter+0xe8/0x210 [ 1102.992839][T14573] vfs_write+0x6b6/0x1140 [ 1102.997172][T14573] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1103.002716][T14573] ? __pfx_vfs_write+0x10/0x10 [ 1103.007479][T14573] ? __fget_files+0x256/0x400 [ 1103.012151][T14573] ? __fget_light+0x173/0x210 [ 1103.016817][T14573] ksys_write+0x12f/0x260 [ 1103.021139][T14573] ? __pfx_ksys_write+0x10/0x10 [ 1103.025994][T14573] do_syscall_64+0xcd/0x250 [ 1103.030504][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.036407][T14573] RIP: 0033:0x7f86a997475f [ 1103.040901][T14573] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1103.060503][T14573] RSP: 002b:00007f86aa6ea010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1103.068923][T14573] RAX: ffffffffffffffda RBX: 00007f86a9b03f60 RCX: 00007f86a997475f [ 1103.076879][T14573] RDX: 000000000000007e RSI: 0000000020000140 RDI: 00000000000000c8 [ 1103.084838][T14573] RBP: 00007f86aa6ea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.092795][T14573] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 1103.100751][T14573] R13: 000000000000000b R14: 00007f86a9b03f60 R15: 00007ffefacb4a48 [ 1103.108716][T14573] [ 1103.126938][ T5144] cdc_ncm 1-1:1.0: bind() failure [ 1103.170009][ T5144] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1103.201040][ T5144] cdc_ncm 1-1:1.1: bind() failure [ 1104.260880][ T5144] usb 1-1: USB disconnect, device number 38 [ 1104.275134][ T5142] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1104.504866][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 1104.519212][ T5142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.544206][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1104.583219][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1104.601863][ T5142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1104.612115][ T5142] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.625171][ T8808] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1104.625302][ T8808] Bluetooth: hci4: Injecting HCI hardware error event [ 1104.627488][ T8808] Bluetooth: hci4: hardware error 0x00 [ 1104.672319][ T5142] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1104.681856][ T5142] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1104.690001][ T5142] usb 5-1: Manufacturer: syz [ 1104.712239][ T5142] usb 5-1: config 0 descriptor?? [ 1105.015019][ T5142] rc_core: IR keymap rc-hauppauge not found [ 1105.020965][ T5142] Registered IR keymap rc-empty [ 1105.032947][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1105.074195][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1105.115826][ T5142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1105.154550][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 1105.185731][T14596] FAULT_INJECTION: forcing a failure. [ 1105.185731][T14596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.208381][T14596] CPU: 1 PID: 14596 Comm: syz.3.2418 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1105.218591][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1105.228671][T14596] Call Trace: [ 1105.231981][T14596] [ 1105.234925][T14596] dump_stack_lvl+0x16c/0x1f0 [ 1105.239632][T14596] should_fail_ex+0x497/0x5b0 [ 1105.244340][T14596] _copy_from_user+0x30/0xf0 [ 1105.248956][T14596] copy_msghdr_from_user+0x99/0x160 [ 1105.254188][T14596] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1105.260028][T14596] ? find_held_lock+0x2d/0x110 [ 1105.264828][T14596] ? __pfx___lock_acquire+0x10/0x10 [ 1105.270066][T14596] ___sys_sendmsg+0xff/0x1e0 [ 1105.274691][T14596] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.279929][T14596] ? ksys_write+0x21c/0x260 [ 1105.284480][T14596] ? __fget_light+0x173/0x210 [ 1105.289199][T14596] __sys_sendmsg+0x117/0x1f0 [ 1105.293833][T14596] ? __pfx___sys_sendmsg+0x10/0x10 [ 1105.298981][T14596] do_syscall_64+0xcd/0x250 [ 1105.303555][T14596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.309489][T14596] RIP: 0033:0x7ff754975bd9 [ 1105.313923][T14596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.333562][T14596] RSP: 002b:00007ff7556f1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.342016][T14596] RAX: ffffffffffffffda RBX: 00007ff754b03f60 RCX: 00007ff754975bd9 [ 1105.350024][T14596] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1105.358035][T14596] RBP: 00007ff7556f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.366036][T14596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.374044][T14596] R13: 000000000000000b R14: 00007ff754b03f60 R15: 00007fff7ecc1378 [ 1105.382045][T14596] [ 1105.886431][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1105.935309][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1105.986890][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.025260][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.065321][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.115252][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.155121][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.194995][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.258652][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.335029][ T5142] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1106.386562][ T5142] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1106.443409][ T5142] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1106.522615][ T5142] usb 5-1: USB disconnect, device number 35 [ 1106.705216][ T8808] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1108.775172][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1109.086636][ T5144] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1109.276821][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 1109.310790][ T5144] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 1109.330584][ T5144] usb 3-1: config 0 has no interface number 0 [ 1109.355036][ T5144] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1109.371072][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.398437][ T5144] usb 3-1: Product: syz [ 1109.409649][ T5144] usb 3-1: Manufacturer: syz [ 1109.432891][ T5144] usb 3-1: SerialNumber: syz [ 1109.461424][ T5144] usb 3-1: config 0 descriptor?? [ 1109.483772][ T5144] option 3-1:0.86: GSM modem (1-port) converter detected [ 1110.225149][T14626] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1110.424888][T14626] usb 2-1: Using ep0 maxpacket: 16 [ 1110.444694][T14626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.482701][T14626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.515335][T14628] usb 3-1: USB disconnect, device number 45 [ 1110.522827][T14628] option 3-1:0.86: device disconnected [ 1110.545911][T14626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1110.595886][T14626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1110.659312][T14626] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.720082][T14626] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.744946][T14626] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.752999][T14626] usb 2-1: Manufacturer: syz [ 1110.768098][T14626] usb 2-1: config 0 descriptor?? [ 1110.869634][ T29] audit: type=1400 audit(1720243868.722:579): avc: denied { ioctl } for pid=14659 comm="syz.3.2437" path="socket:[47571]" dev="sockfs" ino=47571 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1111.130157][T14626] rc_core: IR keymap rc-hauppauge not found [ 1111.174178][T14626] Registered IR keymap rc-empty [ 1111.186019][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.245031][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.306131][T14626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1111.337248][T14626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input69 [ 1111.403508][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.476636][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.536880][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.639952][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.679711][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.729821][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.759702][T14671] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1111.788953][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.841156][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.885053][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.985181][T14626] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1111.986797][ T57] block nbd4: Possible stuck request ffff8880207a8000: control (read@0,4096B). Runtime 60 seconds [ 1112.110465][T14626] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1112.344957][T14626] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1112.618641][T14626] usb 2-1: USB disconnect, device number 44 [ 1113.014301][T14689] FAULT_INJECTION: forcing a failure. [ 1113.014301][T14689] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.029834][T14689] CPU: 0 PID: 14689 Comm: syz.0.2447 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1113.040026][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1113.050197][T14689] Call Trace: [ 1113.053508][T14689] [ 1113.056479][T14689] dump_stack_lvl+0x16c/0x1f0 [ 1113.061199][T14689] should_fail_ex+0x497/0x5b0 [ 1113.065911][T14689] should_failslab+0x9/0x20 [ 1113.070450][T14689] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1113.076307][T14689] ? __alloc_skb+0x2b1/0x380 [ 1113.080932][T14689] __alloc_skb+0x2b1/0x380 [ 1113.085361][T14689] ? __pfx___alloc_skb+0x10/0x10 [ 1113.090291][T14689] ? rtnl_prop_list_size+0x230/0x2d0 [ 1113.095567][T14689] ? if_nlmsg_size+0x606/0x9f0 [ 1113.100322][T14689] rtmsg_ifinfo_build_skb+0x81/0x280 [ 1113.105605][T14689] rtmsg_ifinfo+0x9f/0x1a0 [ 1113.110009][T14689] __dev_notify_flags+0x24e/0x2e0 [ 1113.115022][T14689] ? __pfx___dev_notify_flags+0x10/0x10 [ 1113.120555][T14689] ? __pfx___dev_change_flags+0x10/0x10 [ 1113.126088][T14689] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1113.131972][T14689] dev_change_flags+0x10c/0x160 [ 1113.136825][T14689] dev_ifsioc+0x9c8/0x10b0 [ 1113.141262][T14689] ? __pfx_dev_ifsioc+0x10/0x10 [ 1113.146135][T14689] ? dev_ioctl+0x213/0x10a0 [ 1113.150650][T14689] ? __pfx___mutex_lock+0x10/0x10 [ 1113.155668][T14689] ? __pfx_lock_release+0x10/0x10 [ 1113.160698][T14689] ? full_name_hash+0xbc/0x110 [ 1113.165479][T14689] dev_ioctl+0x224/0x10a0 [ 1113.169798][T14689] sock_do_ioctl+0x19e/0x280 [ 1113.174383][T14689] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1113.179505][T14689] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 1113.186007][T14689] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1113.192857][T14689] sock_ioctl+0x22e/0x6c0 [ 1113.197211][T14689] ? __pfx_sock_ioctl+0x10/0x10 [ 1113.202087][T14689] ? selinux_file_ioctl+0x180/0x270 [ 1113.207310][T14689] ? selinux_file_ioctl+0xb4/0x270 [ 1113.212448][T14689] ? __pfx_sock_ioctl+0x10/0x10 [ 1113.217437][T14689] __x64_sys_ioctl+0x193/0x220 [ 1113.222246][T14689] do_syscall_64+0xcd/0x250 [ 1113.226880][T14689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.232810][T14689] RIP: 0033:0x7f16d8f75bd9 [ 1113.237245][T14689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.256874][T14689] RSP: 002b:00007f16d9df6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.265293][T14689] RAX: ffffffffffffffda RBX: 00007f16d9103f60 RCX: 00007f16d8f75bd9 [ 1113.273271][T14689] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 1113.281229][T14689] RBP: 00007f16d9df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.289187][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.297144][T14689] R13: 000000000000000b R14: 00007f16d9103f60 R15: 00007ffcb9154a38 [ 1113.305108][T14689] [ 1113.378331][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.495042][ T5142] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1113.695202][ T5142] usb 2-1: Using ep0 maxpacket: 32 [ 1113.931118][ T5142] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 1113.939494][ T5142] usb 2-1: config 0 has no interface number 0 [ 1114.179462][ T5142] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1114.191795][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.200023][ T5142] usb 2-1: Product: syz [ 1114.204204][ T5142] usb 2-1: Manufacturer: syz [ 1114.209304][ T5142] usb 2-1: SerialNumber: syz [ 1114.247856][ T5142] usb 2-1: config 0 descriptor?? [ 1114.318222][ T5142] option 2-1:0.86: GSM modem (1-port) converter detected [ 1114.475682][T14713] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1114.805023][T13821] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1115.064974][T13821] usb 3-1: Using ep0 maxpacket: 16 [ 1115.077225][T13821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.123552][T13821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.174207][T13821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1115.222195][T13821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1115.248274][T13821] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.326798][T13821] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1115.364076][T13821] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1115.397362][T13821] usb 3-1: Manufacturer: syz [ 1115.427768][T13821] usb 3-1: config 0 descriptor?? [ 1115.874975][T13821] rc_core: IR keymap rc-hauppauge not found [ 1115.936089][T13821] Registered IR keymap rc-empty [ 1115.955858][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.014974][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.035315][ T29] audit: type=1400 audit(1720243873.882:580): avc: denied { read write } for pid=14718 comm="syz.4.2456" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1116.076035][ T5142] usb 2-1: USB disconnect, device number 45 [ 1116.097054][ T29] audit: type=1400 audit(1720243873.882:581): avc: denied { open } for pid=14718 comm="syz.4.2456" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1116.123600][T13821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1116.153165][ T5142] option 2-1:0.86: device disconnected [ 1116.163352][T13821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input70 [ 1116.258594][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.328037][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.363829][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.376203][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.420401][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.435114][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.469834][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.476396][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.485012][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.512022][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.522929][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.533522][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.545275][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.558745][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.607233][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.616717][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.636010][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.644956][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.666964][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.674946][T14626] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1116.682796][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.703298][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.711153][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.716233][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.729816][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.738906][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.751733][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.763860][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.780048][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.788436][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.792734][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.816207][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.827520][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.846432][T13821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1116.859845][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.868346][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.881744][T14626] usb 5-1: config 0 has no interfaces? [ 1116.889500][T14626] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1116.904992][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.920720][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.931923][T14626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.947661][T13821] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1116.954810][T14628] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1116.967321][T14626] usb 5-1: config 0 descriptor?? [ 1116.993357][T13821] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1117.017862][T14628] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1117.107094][ T5140] IPVS: starting estimator thread 0... [ 1117.153566][T13821] usb 3-1: USB disconnect, device number 46 [ 1117.195046][T14737] IPVS: using max 31 ests per chain, 74400 per kthread [ 1117.401362][T14628] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1117.436821][ T29] audit: type=1326 audit(1720243875.292:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.2.2462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69e2975bd9 code=0x7ffb0000 [ 1117.606611][T14628] usb 1-1: Using ep0 maxpacket: 16 [ 1117.614737][T14628] usb 1-1: config index 0 descriptor too short (expected 2066, got 18) [ 1117.632291][T14628] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1117.649234][T14628] usb 1-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=4b.90 [ 1117.654939][ T5140] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1117.659726][T14628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.704826][T14628] usb 1-1: Product: syz [ 1117.711959][T14628] usb 1-1: Manufacturer: syz [ 1117.724738][T14628] usb 1-1: SerialNumber: syz [ 1117.749286][T14628] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1117.765993][T14628] r8152-cfgselector 1-1: config 0 descriptor?? [ 1117.895020][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 1117.927926][ T5140] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 1117.954900][ T5140] usb 2-1: config 0 has no interface number 0 [ 1117.987853][ T5140] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1118.007530][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.038304][ T5140] usb 2-1: Product: syz [ 1118.042693][ T5140] usb 2-1: Manufacturer: syz [ 1118.062215][ T5140] usb 2-1: SerialNumber: syz [ 1118.079164][ T5140] usb 2-1: config 0 descriptor?? [ 1118.106660][ T5140] option 2-1:0.86: GSM modem (1-port) converter detected [ 1118.205548][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.678503][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.841536][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 1118.866559][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.894569][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.952501][ T29] audit: type=1400 audit(1720243876.802:583): avc: denied { ioctl } for pid=14718 comm="syz.4.2456" path="socket:[47746]" dev="sockfs" ino=47746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1119.038949][T14754] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1119.702851][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.726305][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.219956][ T5140] usb 2-1: USB disconnect, device number 46 [ 1120.252338][ T5140] option 2-1:0.86: device disconnected [ 1120.408194][T14628] usb 5-1: USB disconnect, device number 36 [ 1120.426999][T13821] r8152-cfgselector 1-1: USB disconnect, device number 39 [ 1120.602005][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1120.643152][ T29] audit: type=1400 audit(1720243878.492:584): avc: denied { create } for pid=14760 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1120.906235][ T5143] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1121.577123][ T5143] usb 4-1: Using ep0 maxpacket: 32 [ 1121.611184][ T5143] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1121.625180][T14628] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1121.652131][ T5143] usb 4-1: config 0 has no interface number 0 [ 1121.678034][ T5143] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1121.701502][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.713502][ T5143] usb 4-1: Product: syz [ 1121.720226][ T5143] usb 4-1: Manufacturer: syz [ 1121.729587][ T5143] usb 4-1: SerialNumber: syz [ 1121.740171][ T5143] usb 4-1: config 0 descriptor?? [ 1121.765827][ T5143] option 4-1:0.86: GSM modem (1-port) converter detected [ 1121.844964][T14628] usb 5-1: Using ep0 maxpacket: 16 [ 1121.861921][T14628] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.891307][T14628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.922515][T14628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1121.952266][T14628] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1121.992806][T14628] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.026318][T14628] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1122.049093][ T5141] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1122.059487][T14628] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1122.087962][T14628] usb 5-1: Manufacturer: syz [ 1122.104559][T14628] usb 5-1: config 0 descriptor?? [ 1122.255667][ T5141] usb 2-1: Using ep0 maxpacket: 16 [ 1122.269873][ T5141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.283152][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.295201][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.305900][ T5141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.315947][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.331910][ T5141] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1122.362621][ T5141] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1122.378809][ T5141] usb 2-1: Manufacturer: syz [ 1122.382378][ T29] audit: type=1400 audit(1720243880.232:585): avc: denied { name_bind } for pid=14781 comm="syz.2.2475" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1122.392307][ T5141] usb 2-1: config 0 descriptor?? [ 1122.485144][T14628] rc_core: IR keymap rc-hauppauge not found [ 1122.500833][T14628] Registered IR keymap rc-empty [ 1122.510929][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.555015][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.596570][T14628] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1122.631156][T14628] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 1122.669952][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.740369][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.775161][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.817257][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.855038][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.895211][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.925549][ T5141] rc_core: IR keymap rc-hauppauge not found [ 1122.940610][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1122.960541][ T5141] Registered IR keymap rc-empty [ 1123.170963][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1123.195384][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1123.206238][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1123.235580][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1123.344039][T14628] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1123.391848][ T5141] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1123.474229][T14628] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1123.620412][ T5141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input72 [ 1123.635819][T14628] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1123.807155][T14628] usb 4-1: USB disconnect, device number 40 [ 1123.823453][T14628] option 4-1:0.86: device disconnected [ 1123.846777][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1123.935817][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1123.971663][T14794] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1123.988253][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.035131][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.127404][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.365147][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.414959][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.466108][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.507965][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.625543][ T5144] usb 5-1: USB disconnect, device number 37 [ 1124.647305][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1124.706395][ T5141] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1124.732643][ T5141] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1124.767175][ T5141] usb 2-1: USB disconnect, device number 47 [ 1124.877703][ T29] audit: type=1400 audit(1720243882.712:586): avc: denied { watch_mount } for pid=14799 comm="syz.2.2479" path="/199" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1125.527644][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 1125.673106][ T5144] IPVS: starting estimator thread 0... [ 1125.785006][T14812] IPVS: using max 31 ests per chain, 74400 per kthread [ 1125.965089][ T5144] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1126.164883][ T5144] usb 3-1: Using ep0 maxpacket: 16 [ 1126.191381][ T5144] usb 3-1: config index 0 descriptor too short (expected 2066, got 18) [ 1126.206140][ T5144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.247705][ T5144] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=4b.90 [ 1126.285079][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.309974][ T5144] usb 3-1: Product: syz [ 1126.318542][ T5144] usb 3-1: Manufacturer: syz [ 1126.323194][ T5144] usb 3-1: SerialNumber: syz [ 1126.338016][ T5141] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1126.367350][ T5144] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1126.378685][ T5144] r8152-cfgselector 3-1: config 0 descriptor?? [ 1126.564972][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 1126.572603][ T5141] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1126.587729][ T5141] usb 4-1: config 0 has no interface number 0 [ 1126.602682][ T5141] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1126.839181][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.924869][ T5141] usb 4-1: Product: syz [ 1126.925496][T14832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1126.954583][ T5141] usb 4-1: Manufacturer: syz [ 1126.964862][ T5141] usb 4-1: SerialNumber: syz [ 1126.996586][ T5141] usb 4-1: config 0 descriptor?? [ 1127.031903][ T5141] option 4-1:0.86: GSM modem (1-port) converter detected [ 1127.164719][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.181446][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.355890][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.402585][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.545341][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 1127.694966][ T5144] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1127.934972][ T5144] usb 1-1: Using ep0 maxpacket: 16 [ 1127.975377][ T5144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.016143][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.031904][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.065232][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1128.084940][ T5144] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1128.102746][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.123599][ T5144] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1128.133468][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.143070][ T5144] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1128.179738][ T5144] usb 1-1: Manufacturer: syz [ 1128.205176][ T5140] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1128.234265][ T5144] usb 1-1: config 0 descriptor?? [ 1128.405049][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 1128.421872][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.470968][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.520357][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1128.609436][ T5140] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1128.717291][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.774946][ T5144] rc_core: IR keymap rc-hauppauge not found [ 1128.793204][ T5144] Registered IR keymap rc-empty [ 1128.809697][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.830992][ T5140] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1128.846791][ T5140] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1128.855476][ T5140] usb 2-1: Manufacturer: syz [ 1128.881228][ T5140] usb 2-1: config 0 descriptor?? [ 1128.887537][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.962945][ T5144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1129.040484][ T5142] r8152-cfgselector 3-1: USB disconnect, device number 47 [ 1129.074649][ T5144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73 [ 1129.113846][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.245051][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.276723][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.380256][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.485266][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.492450][ T5140] rc_core: IR keymap rc-hauppauge not found [ 1129.523958][T13821] usb 4-1: USB disconnect, device number 41 [ 1129.533784][ T5140] Registered IR keymap rc-empty [ 1129.547444][T13821] option 4-1:0.86: device disconnected [ 1129.553831][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1129.577762][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.594948][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1129.623238][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.708483][ T5140] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1130.109833][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1130.126569][ T5140] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input74 [ 1130.154987][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1130.170184][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.218956][ T5144] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1130.227787][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.266490][ T5144] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1130.274634][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.281965][ T5144] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1130.326509][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.342532][ T5144] usb 1-1: USB disconnect, device number 40 [ 1130.356082][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.425018][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.465157][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.577150][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.586046][T14860] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1130.639335][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.695476][ T5140] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.746203][ T5140] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1130.759014][ T5140] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1130.778370][ T5140] usb 2-1: USB disconnect, device number 48 [ 1131.687488][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1131.992989][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 1132.199870][T14885] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1132.994743][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 1133.025915][T14898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14898 comm=syz.0.2509 [ 1133.041494][ T29] audit: type=1400 audit(1720243890.902:587): avc: denied { read } for pid=14896 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1133.067790][T14898] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 1133.085711][ T29] audit: type=1400 audit(1720243890.942:588): avc: denied { wake_alarm } for pid=14896 comm="syz.0.2509" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1133.114642][ T5141] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1133.325102][ T5142] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1133.364876][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 1133.386754][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.398411][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1133.413699][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1133.452284][ T5141] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1133.501854][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.551099][ T5141] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1133.564329][ T5141] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1133.572441][ T5141] usb 3-1: Manufacturer: syz [ 1133.577259][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 1133.611039][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.625884][ T5141] usb 3-1: config 0 descriptor?? [ 1133.636454][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1133.661154][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1133.677646][ T5142] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1133.687519][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.707743][ T5142] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1133.717585][ T5142] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1133.725823][ T5142] usb 4-1: Manufacturer: syz [ 1133.765351][ T5142] usb 4-1: config 0 descriptor?? [ 1134.065205][ T5141] rc_core: IR keymap rc-hauppauge not found [ 1134.081662][ T5141] Registered IR keymap rc-empty [ 1134.095579][ T5142] rc_core: IR keymap rc-hauppauge not found [ 1134.101514][ T5142] Registered IR keymap rc-empty [ 1134.116718][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.127801][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.164939][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.172206][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.216672][ T5141] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1134.230932][ T5142] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1134.253653][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input76 [ 1134.268869][ T5141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 1134.309772][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.364602][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.394980][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.403448][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.455375][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.485422][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.532778][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.549468][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.615123][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.622508][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.666022][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.673486][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.714965][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.722220][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.766701][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.775633][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.814992][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.822226][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.864974][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1134.873956][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1134.916587][ T5142] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1134.927573][ T5141] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1134.942632][ T5142] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1134.960214][ T5141] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1134.989890][ T5142] usb 4-1: USB disconnect, device number 42 [ 1135.015405][ T5141] usb 3-1: USB disconnect, device number 48 [ 1135.071483][T14921] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1135.229715][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 1135.602136][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2519'. [ 1135.642848][ T29] audit: type=1400 audit(1720243893.492:589): avc: denied { setopt } for pid=14924 comm="syz.3.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1136.773964][T14952] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2523'. [ 1138.185035][ T5141] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1138.290695][T14974] ALSA: mixer_oss: invalid OSS volume '~|4z('[b"Q_' [ 1138.324840][T14974] ALSA: mixer_oss: invalid OSS volume '' [ 1138.335378][T14974] FAULT_INJECTION: forcing a failure. [ 1138.335378][T14974] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1138.376632][T14974] CPU: 1 PID: 14974 Comm: syz.1.2530 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1138.386844][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1138.396927][T14974] Call Trace: [ 1138.400203][T14974] [ 1138.403129][T14974] dump_stack_lvl+0x16c/0x1f0 [ 1138.407811][T14974] should_fail_ex+0x497/0x5b0 [ 1138.412522][T14974] ? fs_reclaim_acquire+0xae/0x160 [ 1138.417633][T14974] __should_fail_alloc_page+0xe7/0x130 [ 1138.423101][T14974] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1138.429264][T14974] __alloc_pages_noprof+0x194/0x2460 [ 1138.434553][T14974] ? __kernel_text_address+0xd/0x40 [ 1138.439750][T14974] ? hlock_class+0x4e/0x130 [ 1138.444253][T14974] ? __lock_acquire+0xc5d/0x3b30 [ 1138.449198][T14974] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1138.454930][T14974] ? __pfx___lock_acquire+0x10/0x10 [ 1138.460234][T14974] ? hlock_class+0x4e/0x130 [ 1138.464739][T14974] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1138.470636][T14974] ? policy_nodemask+0xea/0x4e0 [ 1138.475483][T14974] alloc_pages_mpol_noprof+0x275/0x610 [ 1138.480948][T14974] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1138.486930][T14974] ? find_held_lock+0x2d/0x110 [ 1138.491695][T14974] vma_alloc_folio_noprof+0xad/0x1f0 [ 1138.496981][T14974] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1138.502888][T14974] ? reacquire_held_locks+0x20b/0x4c0 [ 1138.508264][T14974] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1138.513463][T14974] __handle_mm_fault+0x2cc7/0x5430 [ 1138.518666][T14974] ? down_read_trylock+0x1ed/0x3f0 [ 1138.523794][T14974] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1138.528996][T14974] ? __pfx___handle_mm_fault+0x10/0x10 [ 1138.534462][T14974] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1138.540008][T14974] handle_mm_fault+0x476/0xa00 [ 1138.544788][T14974] do_user_addr_fault+0x426/0xe50 [ 1138.549830][T14974] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 1138.555916][T14974] exc_page_fault+0x5c/0xc0 [ 1138.560435][T14974] asm_exc_page_fault+0x26/0x30 [ 1138.565301][T14974] RIP: 0033:0x7f86a9922f8b [ 1138.569717][T14974] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 1138.589326][T14974] RSP: 002b:00007f86aa6e7e20 EFLAGS: 00010246 [ 1138.595391][T14974] RAX: 00007f86aa6e9f40 RBX: 00007f86a9ad4620 RCX: 0000000000000000 [ 1138.603442][T14974] RDX: 00007f86aa6e9f88 RSI: 00007f86a99d47f8 RDI: 00007f86aa6e7e40 [ 1138.611410][T14974] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 1138.619375][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.627429][T14974] R13: 000000000000000b R14: 00007f86a9b03f60 R15: 00007ffefacb4a48 [ 1138.635397][T14974] [ 1138.689548][T14974] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1138.700042][T11422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1138.719574][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 1138.728629][T11422] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1138.735476][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.746240][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.787712][T11422] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1138.796959][T11422] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1138.807981][T11422] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1138.815048][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1138.825994][T11422] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1138.890606][ T5141] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1138.941286][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.052474][ T5141] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1139.102649][ T5141] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1139.118557][T14982] libceph: resolve '. [ 1139.118557][T14982] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1139.118557][T14982] ' (ret=-3): failed [ 1139.157542][ T5141] usb 3-1: Manufacturer: syz [ 1139.188989][ T5141] usb 3-1: config 0 descriptor?? [ 1139.498751][ T5141] rc_core: IR keymap rc-hauppauge not found [ 1139.513111][ T5141] Registered IR keymap rc-empty [ 1139.626731][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1139.755490][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1139.819128][ T5141] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1139.849083][T14976] chnl_net:caif_netlink_parms(): no params data found [ 1139.951761][ T5141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input77 [ 1140.182510][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.245991][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.285946][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.316720][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.346598][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.383015][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.407228][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.418607][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.441147][T14976] bridge_slave_0: entered allmulticast mode [ 1140.447377][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.496334][T14976] bridge_slave_0: entered promiscuous mode [ 1140.518939][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.529144][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.538428][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.592874][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.603398][T14976] bridge_slave_1: entered allmulticast mode [ 1140.632651][T14976] bridge_slave_1: entered promiscuous mode [ 1140.655000][ T5141] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1140.711555][ T5141] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1140.733367][ T5141] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1140.776468][ T5141] usb 3-1: USB disconnect, device number 49 [ 1140.884060][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.934525][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.945316][T11422] Bluetooth: hci6: command tx timeout [ 1141.220787][T14976] team0: Port device team_slave_0 added [ 1141.276087][T14976] team0: Port device team_slave_1 added [ 1141.400638][T15000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1141.426020][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.445221][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.514968][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.519535][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1141.588036][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.606760][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.673411][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.936859][ T5142] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1141.947794][T14976] hsr_slave_0: entered promiscuous mode [ 1141.975672][T14976] hsr_slave_1: entered promiscuous mode [ 1141.991813][T14976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.022955][T14976] Cannot create hsr debugfs directory [ 1142.070687][ T57] block nbd4: Possible stuck request ffff8880207a8000: control (read@0,4096B). Runtime 90 seconds [ 1142.184876][ T5142] usb 4-1: Using ep0 maxpacket: 32 [ 1142.208136][ T5142] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1142.238814][ T5142] usb 4-1: config 0 has no interface number 0 [ 1142.269633][ T5142] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1142.299219][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.324970][ T5142] usb 4-1: Product: syz [ 1142.329184][ T5142] usb 4-1: Manufacturer: syz [ 1142.365571][ T5142] usb 4-1: SerialNumber: syz [ 1142.383769][ T5142] usb 4-1: config 0 descriptor?? [ 1142.408786][ T5142] option 4-1:0.86: GSM modem (1-port) converter detected [ 1143.035501][T11422] Bluetooth: hci6: command tx timeout [ 1143.179639][T14976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.531016][T14976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.847963][T15015] Unknown options in mask 4 [ 1143.851820][T14976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.110413][T14976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.200362][ T29] audit: type=1400 audit(1720243902.052:590): avc: denied { mount } for pid=15017 comm="syz.0.2538" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1144.765599][T14976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1144.814469][T14976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1144.892027][T14976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1145.012743][T14976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1145.105751][T11422] Bluetooth: hci6: command tx timeout [ 1145.342190][T15026] netlink: 'syz.0.2539': attribute type 5 has an invalid length. [ 1145.503653][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.583593][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.668158][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.675421][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.829616][ T5145] usb 4-1: USB disconnect, device number 43 [ 1145.837976][ T5145] option 4-1:0.86: device disconnected [ 1145.950611][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.957888][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.051180][ T29] audit: type=1400 audit(1720243903.762:591): avc: denied { getopt } for pid=15027 comm="syz.1.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1146.627780][ T29] audit: type=1400 audit(1720243904.482:592): avc: denied { nlmsg_read } for pid=15033 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1146.781641][ T29] audit: type=1400 audit(1720243904.622:593): avc: denied { mounton } for pid=15033 comm="syz.1.2542" path="/261/file0" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1146.864326][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 1146.899080][ T29] audit: type=1400 audit(1720243904.632:594): avc: denied { write } for pid=13821 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48935 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1147.189744][T11422] Bluetooth: hci6: command tx timeout [ 1147.326230][T13821] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1147.666120][T13821] usb 1-1: Using ep0 maxpacket: 16 [ 1147.863525][T13821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.919249][T13821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.949676][T13821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1147.973860][T13821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1148.003613][T13821] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1148.048269][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.125842][T13821] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1148.175132][T13821] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1148.226277][T13821] usb 1-1: Manufacturer: syz [ 1148.265575][T13821] usb 1-1: config 0 descriptor?? [ 1148.955033][T13821] rc_core: IR keymap rc-hauppauge not found [ 1148.986546][T13821] Registered IR keymap rc-empty [ 1149.016516][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.085020][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.176289][T13821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1149.198222][T14976] veth0_vlan: entered promiscuous mode [ 1149.248330][T14976] veth1_vlan: entered promiscuous mode [ 1149.260404][T13821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input78 [ 1149.331307][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.415017][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.438988][T14976] veth0_macvtap: entered promiscuous mode [ 1149.462536][T14976] veth1_macvtap: entered promiscuous mode [ 1149.525104][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.565124][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.574807][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.607808][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.609209][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.619908][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.683747][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.735133][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.765086][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.783061][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.804195][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.823518][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.823819][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.836398][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.861875][T14628] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1149.890725][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.895093][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.921657][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.953005][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.985514][T13821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1149.985852][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.022772][T13821] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1150.054826][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.068855][T14628] usb 2-1: Using ep0 maxpacket: 32 [ 1150.089699][T14628] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 1150.098426][T13821] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1150.102918][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.260139][T14628] usb 2-1: config 0 has no interface number 0 [ 1150.292814][T14628] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1150.313647][T14628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.322699][T13821] usb 1-1: USB disconnect, device number 41 [ 1150.324953][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.348701][T14628] usb 2-1: Product: syz [ 1150.356969][T14628] usb 2-1: Manufacturer: syz [ 1150.361673][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.381920][T14628] usb 2-1: SerialNumber: syz [ 1150.415902][T14628] usb 2-1: config 0 descriptor?? [ 1150.488670][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.575249][T14628] option 2-1:0.86: GSM modem (1-port) converter detected [ 1150.686574][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.824484][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.864933][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.912837][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.951249][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.996157][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.018967][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.039025][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.078417][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.145717][T14976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.173452][T14976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.188274][T14976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.212745][T14976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.683756][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.764932][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.882672][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.917104][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.967175][T15087] FAULT_INJECTION: forcing a failure. [ 1151.967175][T15087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.993324][T15087] CPU: 0 PID: 15087 Comm: syz.0.2551 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1152.003531][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1152.013694][T15087] Call Trace: [ 1152.016992][T15087] [ 1152.019915][T15087] dump_stack_lvl+0x16c/0x1f0 [ 1152.024593][T15087] should_fail_ex+0x497/0x5b0 [ 1152.029306][T15087] _copy_from_user+0x30/0xf0 [ 1152.033979][T15087] bpf_test_init.isra.0+0xf1/0x150 [ 1152.039088][T15087] bpf_prog_test_run_skb+0x23b/0x1db0 [ 1152.044858][T15087] ? __might_fault+0x13b/0x190 [ 1152.049663][T15087] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1152.055519][T15087] ? __fget_light+0x173/0x210 [ 1152.060263][T15087] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1152.066076][T15087] __sys_bpf+0x10d2/0x49a0 [ 1152.070515][T15087] ? __pfx___sys_bpf+0x10/0x10 [ 1152.075279][T15087] ? vfs_write+0x14d/0x1140 [ 1152.079825][T15087] ? __pfx_vfs_write+0x10/0x10 [ 1152.084606][T15087] ? do_sys_openat2+0xb1/0x1e0 [ 1152.089417][T15087] ? ksys_write+0x1ab/0x260 [ 1152.093958][T15087] ? __pfx_ksys_write+0x10/0x10 [ 1152.098842][T15087] __x64_sys_bpf+0x78/0xc0 [ 1152.103271][T15087] ? lockdep_hardirqs_on+0x7c/0x110 [ 1152.108573][T15087] do_syscall_64+0xcd/0x250 [ 1152.113101][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.119014][T15087] RIP: 0033:0x7f16d8f75bd9 [ 1152.123434][T15087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.143047][T15087] RSP: 002b:00007f16d9dd5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1152.151467][T15087] RAX: ffffffffffffffda RBX: 00007f16d9104038 RCX: 00007f16d8f75bd9 [ 1152.159561][T15087] RDX: 0000000000000023 RSI: 0000000020000240 RDI: 000000000000000a [ 1152.167536][T15087] RBP: 00007f16d9dd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.175524][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.183513][T15087] R13: 000000000000006e R14: 00007f16d9104038 R15: 00007ffcb9154a38 [ 1152.191501][T15087] [ 1152.365751][ T8808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1152.376446][ T5142] usb 2-1: USB disconnect, device number 49 [ 1152.389122][ T5142] option 2-1:0.86: device disconnected [ 1152.389874][ T8808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1152.404334][ T8808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1152.413460][ T8808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1152.436640][ T8808] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1152.453894][ T8808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1154.257936][T15107] FAULT_INJECTION: forcing a failure. [ 1154.257936][T15107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.271281][ T29] audit: type=1400 audit(1720243912.112:595): avc: denied { setopt } for pid=15105 comm="syz.3.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1154.319820][T15107] CPU: 0 PID: 15107 Comm: syz.3.2556 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1154.330034][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1154.340093][T15107] Call Trace: [ 1154.343375][T15107] [ 1154.346310][T15107] dump_stack_lvl+0x16c/0x1f0 [ 1154.351000][T15107] should_fail_ex+0x497/0x5b0 [ 1154.355685][T15107] _copy_to_user+0x30/0xc0 [ 1154.360128][T15107] simple_read_from_buffer+0xd0/0x160 [ 1154.365556][T15107] proc_fail_nth_read+0x1b0/0x290 [ 1154.370596][T15107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.376161][T15107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.381721][T15107] vfs_read+0x1d4/0xbd0 [ 1154.385890][T15107] ? __fdget_pos+0xeb/0x180 [ 1154.390406][T15107] ? __pfx_vfs_read+0x10/0x10 [ 1154.395092][T15107] ? __pfx___mutex_lock+0x10/0x10 [ 1154.400126][T15107] ? __fget_files+0x256/0x400 [ 1154.404827][T15107] ksys_read+0x12f/0x260 [ 1154.409078][T15107] ? __pfx_ksys_read+0x10/0x10 [ 1154.413850][T15107] do_syscall_64+0xcd/0x250 [ 1154.418364][T15107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.424338][T15107] RIP: 0033:0x7ff7549746bc [ 1154.428771][T15107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1154.448503][T15107] RSP: 002b:00007ff7556f1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.456944][T15107] RAX: ffffffffffffffda RBX: 00007ff754b03f60 RCX: 00007ff7549746bc [ 1154.464932][T15107] RDX: 000000000000000f RSI: 00007ff7556f10b0 RDI: 0000000000000005 [ 1154.472916][T15107] RBP: 00007ff7556f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.480889][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.488950][T15107] R13: 000000000000000b R14: 00007ff754b03f60 R15: 00007fff7ecc1378 [ 1154.496930][T15107] [ 1154.555310][ T8808] Bluetooth: hci7: command tx timeout [ 1155.280692][T15089] chnl_net:caif_netlink_parms(): no params data found [ 1155.330762][ T29] audit: type=1400 audit(1720243913.182:596): avc: denied { mount } for pid=15110 comm="syz.3.2558" name="/" dev="autofs" ino=49031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1155.381140][T15120] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1155.551404][ T29] audit: type=1400 audit(1720243913.402:597): avc: denied { create } for pid=15122 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1155.631396][ T29] audit: type=1400 audit(1720243913.472:598): avc: denied { create } for pid=15122 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1155.658752][ T29] audit: type=1400 audit(1720243913.492:599): avc: denied { setopt } for pid=15122 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1155.870500][ T29] audit: type=1400 audit(1720243913.722:600): avc: denied { unmount } for pid=10729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1156.046923][T15089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.073029][T15089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.101510][T15089] bridge_slave_0: entered allmulticast mode [ 1156.122456][T15089] bridge_slave_0: entered promiscuous mode [ 1156.141389][T15089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.181713][T15089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.203643][ T29] audit: type=1400 audit(1720243914.042:601): avc: denied { setopt } for pid=15134 comm="syz.1.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1156.243072][T15089] bridge_slave_1: entered allmulticast mode [ 1156.263204][T15089] bridge_slave_1: entered promiscuous mode [ 1156.505289][ T9049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.689636][ T8808] Bluetooth: hci7: command tx timeout [ 1156.863233][T15089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.909055][T15089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.279933][ T9049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.542584][ T29] audit: type=1400 audit(1720243915.392:602): avc: denied { sqpoll } for pid=15154 comm="syz.3.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1157.600287][ T9049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.660802][T15089] team0: Port device team_slave_0 added [ 1157.702911][T15089] team0: Port device team_slave_1 added [ 1157.962267][ T9049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.476260][ T29] audit: type=1400 audit(1720243916.102:603): avc: denied { create } for pid=15162 comm="syz.0.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1158.495648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.502289][ T29] audit: type=1400 audit(1720243916.102:604): avc: denied { bind } for pid=15162 comm="syz.0.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1158.707888][ T8808] Bluetooth: hci7: command tx timeout [ 1159.334687][T15089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.341883][T15089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.367916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.525211][T15089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.551939][T15089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.596147][T15089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.695166][T15089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.181616][T15089] hsr_slave_0: entered promiscuous mode [ 1160.209810][T15089] hsr_slave_1: entered promiscuous mode [ 1160.234810][T15089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.278105][T15089] Cannot create hsr debugfs directory [ 1160.325354][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 1160.597202][ T5142] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1160.786234][ T8808] Bluetooth: hci7: command tx timeout [ 1160.805107][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 1160.872572][ T5142] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 1160.910430][ T5142] usb 5-1: config 0 has no interface number 0 [ 1160.977722][ T5142] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1161.004377][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.114947][ T5142] usb 5-1: Product: syz [ 1161.119639][ T5142] usb 5-1: Manufacturer: syz [ 1161.124510][ T5142] usb 5-1: SerialNumber: syz [ 1161.151379][ T9049] bridge_slave_1: left allmulticast mode [ 1161.163492][ T9049] bridge_slave_1: left promiscuous mode [ 1161.171137][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.227757][ T5142] usb 5-1: config 0 descriptor?? [ 1161.272653][ T5142] option 5-1:0.86: GSM modem (1-port) converter detected [ 1161.495980][ T9049] bridge_slave_0: left allmulticast mode [ 1161.502239][ T9049] bridge_slave_0: left promiscuous mode [ 1161.513970][T15197] libceph: resolve '. [ 1161.513970][T15197] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1161.513970][T15197] ' (ret=-3): failed [ 1161.555054][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.050879][ T9049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.087960][ T5146] usb 5-1: USB disconnect, device number 38 [ 1163.099963][ T5146] option 5-1:0.86: device disconnected [ 1163.108096][ T9049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.149796][ T9049] bond0 (unregistering): Released all slaves [ 1163.217667][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1163.761976][ T5141] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1164.845642][T14626] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1164.965104][ T5142] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1165.049417][T14626] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.079210][T14626] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1165.097694][T14626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.124471][ T9049] hsr_slave_0: left promiscuous mode [ 1165.128685][T14626] usb 5-1: config 0 descriptor?? [ 1165.143389][ T9049] hsr_slave_1: left promiscuous mode [ 1165.449240][T14626] rndis_host 5-1:0.0: skipping garbage [ 1165.460041][T14626] usb 5-1: bad CDC descriptors [ 1165.465881][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.469872][ T5142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.492503][T15225] overlayfs: cannot append lower layer [ 1165.495654][ T5142] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1165.510648][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.511947][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.558548][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.558985][ T5142] usb 2-1: config 0 descriptor?? [ 1165.584724][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.606103][ T5142] rndis_host 2-1:0.0: skipping garbage [ 1165.616152][ T5142] usb 2-1: bad CDC descriptors [ 1165.665347][ T9049] veth1_macvtap: left promiscuous mode [ 1165.674603][ T9049] veth0_macvtap: left promiscuous mode [ 1165.680767][ T9049] veth1_vlan: left promiscuous mode [ 1165.686395][ T9049] veth0_vlan: left allmulticast mode [ 1165.693880][ T9049] veth0_vlan: left promiscuous mode [ 1166.493486][ T5141] usb 5-1: USB disconnect, device number 39 [ 1166.573494][ T9049] team0 (unregistering): Port device team_slave_1 removed [ 1166.621486][ T9049] team0 (unregistering): Port device team_slave_0 removed [ 1166.655086][ T5142] usb 2-1: USB disconnect, device number 50 [ 1167.432114][T15227] Bluetooth: MGMT ver 1.22 [ 1167.511861][T15227] 9pnet_fd: Insufficient options for proto=fd [ 1167.990762][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1167.990836][ T29] audit: type=1400 audit(1720243925.842:606): avc: denied { accept } for pid=15226 comm="syz.1.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1168.567748][T15246] FAULT_INJECTION: forcing a failure. [ 1168.567748][T15246] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.581112][T15246] CPU: 0 PID: 15246 Comm: syz.4.2594 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1168.591290][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1168.601356][T15246] Call Trace: [ 1168.604633][T15246] [ 1168.607570][T15246] dump_stack_lvl+0x16c/0x1f0 [ 1168.612243][T15246] should_fail_ex+0x497/0x5b0 [ 1168.616931][T15246] should_failslab+0x9/0x20 [ 1168.621446][T15246] __kmalloc_noprof+0xcf/0x410 [ 1168.626198][T15246] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1168.633307][T15246] genl_start+0x18e/0x950 [ 1168.637725][T15246] __netlink_dump_start+0x614/0x9b0 [ 1168.642917][T15246] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 1168.648648][T15246] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1168.654883][T15246] ? __pfx_genl_get_cmd+0x10/0x10 [ 1168.659900][T15246] ? __pfx_genl_start+0x10/0x10 [ 1168.664774][T15246] ? __pfx_genl_dumpit+0x10/0x10 [ 1168.669724][T15246] ? __pfx_genl_done+0x10/0x10 [ 1168.674501][T15246] ? __radix_tree_lookup+0x21f/0x2c0 [ 1168.679774][T15246] genl_rcv_msg+0x470/0x800 [ 1168.684377][T15246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.689396][T15246] ? __pfx___lock_acquire+0x10/0x10 [ 1168.694587][T15246] ? __pfx_ethnl_default_start+0x10/0x10 [ 1168.700220][T15246] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1168.705943][T15246] ? __pfx_ethnl_default_done+0x10/0x10 [ 1168.711473][T15246] netlink_rcv_skb+0x16b/0x440 [ 1168.716229][T15246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.721245][T15246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.726541][T15246] ? down_read+0xc9/0x330 [ 1168.730863][T15246] ? __pfx_down_read+0x10/0x10 [ 1168.735619][T15246] ? netlink_deliver_tap+0x1ae/0xd90 [ 1168.740893][T15246] genl_rcv+0x28/0x40 [ 1168.744882][T15246] netlink_unicast+0x542/0x820 [ 1168.749635][T15246] ? __pfx_netlink_unicast+0x10/0x10 [ 1168.754913][T15246] netlink_sendmsg+0x8b8/0xd70 [ 1168.759669][T15246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.764956][T15246] ? __import_iovec+0x1fd/0x6e0 [ 1168.769862][T15246] ____sys_sendmsg+0xab5/0xc90 [ 1168.774614][T15246] ? copy_msghdr_from_user+0x10b/0x160 [ 1168.780586][T15246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.785859][T15246] ? find_held_lock+0x2d/0x110 [ 1168.791159][T15246] ? __pfx___lock_acquire+0x10/0x10 [ 1168.796892][T15246] ___sys_sendmsg+0x135/0x1e0 [ 1168.801581][T15246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.806781][T15246] ? ksys_write+0x21c/0x260 [ 1168.811295][T15246] ? __fget_light+0x173/0x210 [ 1168.815976][T15246] __sys_sendmsg+0x117/0x1f0 [ 1168.820577][T15246] ? __pfx___sys_sendmsg+0x10/0x10 [ 1168.825690][T15246] do_syscall_64+0xcd/0x250 [ 1168.830191][T15246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.836087][T15246] RIP: 0033:0x7fb66a175bd9 [ 1168.840514][T15246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.860126][T15246] RSP: 002b:00007fb66ae8f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.868537][T15246] RAX: ffffffffffffffda RBX: 00007fb66a303f60 RCX: 00007fb66a175bd9 [ 1168.876500][T15246] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1168.884460][T15246] RBP: 00007fb66ae8f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.892421][T15246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.900379][T15246] R13: 000000000000000b R14: 00007fb66a303f60 R15: 00007ffd7e00e178 [ 1168.908353][T15246] [ 1168.995391][T15248] libceph: resolve '. [ 1168.995391][T15248] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1168.995391][T15248] ' (ret=-3): failed [ 1169.261773][ T9049] IPVS: stop unused estimator thread 0... [ 1169.269571][T15089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1169.321624][T15089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1169.416280][ T5144] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1169.434991][ T5144] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1169.443416][T15089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1169.455556][ T5144] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1169.501313][T15089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1169.911091][T15089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.936889][T15252] Unknown options in mask 4 [ 1170.150768][T15089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.235575][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.242858][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.359947][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.368725][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.074306][T15089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.203845][T15089] veth0_vlan: entered promiscuous mode [ 1171.240356][T15089] veth1_vlan: entered promiscuous mode [ 1171.510263][T15089] veth0_macvtap: entered promiscuous mode [ 1172.341659][ T57] block nbd4: Possible stuck request ffff8880207a8000: control (read@0,4096B). Runtime 120 seconds [ 1172.393020][T15089] veth1_macvtap: entered promiscuous mode [ 1172.528339][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.551898][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.591595][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.607302][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.623851][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.636174][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.907912][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.960237][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.991408][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.002283][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.012585][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.028717][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.061784][T15089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.094661][T15274] FAULT_INJECTION: forcing a failure. [ 1173.094661][T15274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.116261][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.130346][T15274] CPU: 0 PID: 15274 Comm: syz.0.2598 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1173.140592][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1173.150675][T15274] Call Trace: [ 1173.153974][T15274] [ 1173.156917][T15274] dump_stack_lvl+0x16c/0x1f0 [ 1173.161627][T15274] should_fail_ex+0x497/0x5b0 [ 1173.166327][T15274] _copy_to_user+0x30/0xc0 [ 1173.170831][T15274] simple_read_from_buffer+0xd0/0x160 [ 1173.176223][T15274] proc_fail_nth_read+0x1b0/0x290 [ 1173.181246][T15274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1173.186789][T15274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1173.192334][T15274] vfs_read+0x1d4/0xbd0 [ 1173.196488][T15274] ? __fdget_pos+0xeb/0x180 [ 1173.200990][T15274] ? __pfx_vfs_read+0x10/0x10 [ 1173.205672][T15274] ? __pfx___mutex_lock+0x10/0x10 [ 1173.210703][T15274] ? __fget_files+0x256/0x400 [ 1173.215384][T15274] ksys_read+0x12f/0x260 [ 1173.219629][T15274] ? __pfx_ksys_read+0x10/0x10 [ 1173.224398][T15274] do_syscall_64+0xcd/0x250 [ 1173.228908][T15274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.234817][T15274] RIP: 0033:0x7f16d8f746bc [ 1173.239260][T15274] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1173.258889][T15274] RSP: 002b:00007f16d9df6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1173.267300][T15274] RAX: ffffffffffffffda RBX: 00007f16d9103f60 RCX: 00007f16d8f746bc [ 1173.275269][T15274] RDX: 000000000000000f RSI: 00007f16d9df60b0 RDI: 0000000000000007 [ 1173.283253][T15274] RBP: 00007f16d9df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.291273][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.299771][T15274] R13: 000000000000000b R14: 00007f16d9103f60 R15: 00007ffcb9154a38 [ 1173.307741][T15274] [ 1173.319827][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.375113][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.386029][ T5142] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1173.401992][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.502027][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.513911][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.526255][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.537061][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.554849][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.570067][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.581539][T15089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.592604][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.607101][ T5142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.617953][ T5142] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1173.627560][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.644319][T15089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.653155][ T5142] usb 2-1: config 0 descriptor?? [ 1173.661552][ T5142] rndis_host 2-1:0.0: skipping garbage [ 1173.681701][ T5142] usb 2-1: bad CDC descriptors [ 1173.702525][T15089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.719018][T15089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.731751][T15089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.740808][T15089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.903263][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.938478][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.080738][ T2840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.113550][ T2840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.359528][T15296] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2604'. [ 1175.132992][ T5144] usb 2-1: USB disconnect, device number 51 [ 1175.520927][T15307] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2607'. [ 1175.735058][T15307] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1175.854988][T15312] libceph: resolve '. [ 1175.854988][T15312] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1175.854988][T15312] ' (ret=-3): failed [ 1176.185668][ T5146] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1176.374994][ T5146] usb 1-1: Using ep0 maxpacket: 8 [ 1176.398498][ T5146] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.418559][T15318] Cannot find add_set index 0 as target [ 1176.423488][ T5146] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.430516][T15318] FAULT_INJECTION: forcing a failure. [ 1176.430516][T15318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.470282][T15318] CPU: 1 PID: 15318 Comm: syz.4.2610 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1176.480491][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1176.490543][T15318] Call Trace: [ 1176.493921][T15318] [ 1176.496839][T15318] dump_stack_lvl+0x16c/0x1f0 [ 1176.501526][T15318] should_fail_ex+0x497/0x5b0 [ 1176.506218][T15318] _copy_from_user+0x30/0xf0 [ 1176.510801][T15318] kstrtouint_from_user+0xd7/0x1c0 [ 1176.515940][T15318] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1176.521680][T15318] ? __pfx_lock_acquire+0x10/0x10 [ 1176.526707][T15318] proc_fail_nth_write+0x84/0x270 [ 1176.531729][T15318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1176.537357][T15318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1176.542983][T15318] vfs_write+0x29a/0x1140 [ 1176.547328][T15318] ? __fdget_pos+0xeb/0x180 [ 1176.551862][T15318] ? __pfx_vfs_write+0x10/0x10 [ 1176.556652][T15318] ? __pfx___mutex_lock+0x10/0x10 [ 1176.561670][T15318] ? __fget_files+0x256/0x400 [ 1176.566341][T15318] ksys_write+0x12f/0x260 [ 1176.570666][T15318] ? __pfx_ksys_write+0x10/0x10 [ 1176.575511][T15318] do_syscall_64+0xcd/0x250 [ 1176.580014][T15318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.585904][T15318] RIP: 0033:0x7fb66a17475f [ 1176.590306][T15318] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1176.609900][T15318] RSP: 002b:00007fb66ae8f040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1176.618302][T15318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66a17475f [ 1176.626272][T15318] RDX: 0000000000000001 RSI: 00007fb66ae8f0b0 RDI: 0000000000000004 [ 1176.634249][T15318] RBP: 00007fb66ae8f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.642207][T15318] R10: 0000000020000680 R11: 0000000000000293 R12: 0000000000000001 [ 1176.650166][T15318] R13: 000000000000000b R14: 00007fb66a303f60 R15: 00007ffd7e00e178 [ 1176.658129][T15318] [ 1176.663553][ T5146] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1176.694030][ T5146] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1176.717198][ T5146] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.739216][ T5146] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1176.749394][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.000869][ T5146] usb 1-1: GET_CAPABILITIES returned 0 [ 1177.016240][ T5146] usbtmc 1-1:16.0: can't read capabilities [ 1177.912192][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.918831][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.060289][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1178.375124][ T5143] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1178.428141][T14626] usb 1-1: USB disconnect, device number 42 [ 1178.741010][ T5143] usb 3-1: Using ep0 maxpacket: 32 [ 1178.774689][T15338] dlm: no local IP address has been set [ 1178.780725][T15338] dlm: cannot start dlm midcomms -107 [ 1178.807450][ T5143] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 1178.884087][ T5143] usb 3-1: config 0 has no interface number 0 [ 1178.893819][ T29] audit: type=1400 audit(1720243936.612:607): avc: denied { append } for pid=15337 comm="syz.0.2617" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1178.920100][ T5143] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1178.947652][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.986238][ T5143] usb 3-1: Product: syz [ 1178.990458][ T5143] usb 3-1: Manufacturer: syz [ 1179.006863][ T29] audit: type=1400 audit(1720243936.612:608): avc: denied { getopt } for pid=15337 comm="syz.0.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1179.028540][ T5143] usb 3-1: SerialNumber: syz [ 1179.105391][ T5143] usb 3-1: config 0 descriptor?? [ 1179.374964][ T5143] option 3-1:0.86: GSM modem (1-port) converter detected [ 1179.444328][T15343] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2618'. [ 1180.736202][ T5143] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1180.859724][ T5144] usb 3-1: USB disconnect, device number 50 [ 1180.860604][ T5144] option 3-1:0.86: device disconnected [ 1180.977833][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.977911][ T5143] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1180.977947][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.980161][ T5143] usb 4-1: config 0 descriptor?? [ 1181.031433][ T5143] rndis_host 4-1:0.0: skipping garbage [ 1181.044722][ T5143] usb 4-1: bad CDC descriptors [ 1181.192871][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 1181.282152][T15371] libceph: resolve '. [ 1181.282152][T15371] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1181.282152][T15371] ' (ret=-3): failed [ 1181.500783][T15373] FAULT_INJECTION: forcing a failure. [ 1181.500783][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.562505][T15373] CPU: 1 PID: 15373 Comm: syz.4.2628 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1181.572705][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1181.582954][T15373] Call Trace: [ 1181.586229][T15373] [ 1181.589162][T15373] dump_stack_lvl+0x16c/0x1f0 [ 1181.593845][T15373] should_fail_ex+0x497/0x5b0 [ 1181.598524][T15373] should_failslab+0x9/0x20 [ 1181.603028][T15373] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1181.608404][T15373] ? security_inode_alloc+0x3e/0x240 [ 1181.613689][T15373] security_inode_alloc+0x3e/0x240 [ 1181.618811][T15373] inode_init_always+0xc2f/0xf50 [ 1181.623747][T15373] alloc_inode+0x7d/0x230 [ 1181.628074][T15373] new_inode_pseudo+0x16/0x80 [ 1181.632746][T15373] sock_alloc+0x40/0x280 [ 1181.636992][T15373] __sock_create+0xc0/0x800 [ 1181.641556][T15373] __sys_socket+0x14f/0x260 [ 1181.646050][T15373] ? __pfx___sys_socket+0x10/0x10 [ 1181.651062][T15373] ? ksys_write+0x1ab/0x260 [ 1181.655557][T15373] ? __pfx_ksys_write+0x10/0x10 [ 1181.660401][T15373] __x64_sys_socket+0x72/0xb0 [ 1181.665076][T15373] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.670301][T15373] do_syscall_64+0xcd/0x250 [ 1181.674810][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.680723][T15373] RIP: 0033:0x7fb66a175bd9 [ 1181.685125][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.704743][T15373] RSP: 002b:00007fb66ae8f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1181.713162][T15373] RAX: ffffffffffffffda RBX: 00007fb66a303f60 RCX: 00007fb66a175bd9 [ 1181.721132][T15373] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1181.729128][T15373] RBP: 00007fb66ae8f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.737092][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.745062][T15373] R13: 000000000000000b R14: 00007fb66a303f60 R15: 00007ffd7e00e178 [ 1181.753042][T15373] [ 1181.756121][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.786722][T14626] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1181.795292][T15373] socket: no more sockets [ 1182.025046][T14626] usb 1-1: Using ep0 maxpacket: 32 [ 1182.073067][T14626] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 1182.090516][T15377] warning: `syz.4.2629' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1182.133443][T14626] usb 1-1: config 0 has no interface number 0 [ 1182.197962][T14626] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1182.223143][T14626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.264014][T14626] usb 1-1: Product: syz [ 1182.279685][T14626] usb 1-1: Manufacturer: syz [ 1182.305036][T14626] usb 1-1: SerialNumber: syz [ 1182.341283][T14626] usb 1-1: config 0 descriptor?? [ 1182.366465][T14626] option 1-1:0.86: GSM modem (1-port) converter detected [ 1182.454081][T13821] usb 4-1: USB disconnect, device number 45 [ 1183.415763][T15386] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2631'. [ 1184.662628][ T5144] usb 1-1: USB disconnect, device number 43 [ 1184.671248][ T5144] option 1-1:0.86: device disconnected [ 1185.052406][ T29] audit: type=1400 audit(1720243942.892:609): avc: denied { view } for pid=15403 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1185.459702][T15416] FAULT_INJECTION: forcing a failure. [ 1185.459702][T15416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.473766][T15416] CPU: 0 PID: 15416 Comm: syz.1.2639 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1185.483960][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1185.494040][T15416] Call Trace: [ 1185.497337][T15416] [ 1185.500286][T15416] dump_stack_lvl+0x16c/0x1f0 [ 1185.504994][T15416] should_fail_ex+0x497/0x5b0 [ 1185.509702][T15416] _copy_from_user+0x30/0xf0 [ 1185.514319][T15416] do_tcp_setsockopt+0x6a8/0x2660 [ 1185.519374][T15416] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1185.524862][T15416] ? sock_has_perm+0x25a/0x2f0 [ 1185.529658][T15416] ? __pfx_sock_has_perm+0x10/0x10 [ 1185.534795][T15416] ? selinux_netlbl_socket_setsockopt+0x142/0x440 [ 1185.541215][T15416] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1185.547989][T15416] ? find_held_lock+0x2d/0x110 [ 1185.552756][T15416] tcp_setsockopt+0xe2/0x100 [ 1185.557350][T15416] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1185.563265][T15416] do_sock_setsockopt+0x222/0x480 [ 1185.568301][T15416] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1185.573856][T15416] ? __fget_light+0x173/0x210 [ 1185.578538][T15416] __sys_setsockopt+0x1a4/0x270 [ 1185.583391][T15416] ? __pfx___sys_setsockopt+0x10/0x10 [ 1185.588764][T15416] ? fput+0x32/0x390 [ 1185.592656][T15416] ? ksys_write+0x1ab/0x260 [ 1185.597196][T15416] ? __pfx_ksys_write+0x10/0x10 [ 1185.602054][T15416] __x64_sys_setsockopt+0xbd/0x160 [ 1185.607167][T15416] ? do_syscall_64+0x91/0x250 [ 1185.611847][T15416] ? lockdep_hardirqs_on+0x7c/0x110 [ 1185.617046][T15416] do_syscall_64+0xcd/0x250 [ 1185.621552][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.627455][T15416] RIP: 0033:0x7f86a9975bd9 [ 1185.631867][T15416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.651474][T15416] RSP: 002b:00007f86aa6ea048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1185.659892][T15416] RAX: ffffffffffffffda RBX: 00007f86a9b03f60 RCX: 00007f86a9975bd9 [ 1185.667872][T15416] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 1185.675847][T15416] RBP: 00007f86aa6ea0a0 R08: 0000000000000004 R09: 0000000000000000 [ 1185.683814][T15416] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.691781][T15416] R13: 000000000000000b R14: 00007f86a9b03f60 R15: 00007ffefacb4a48 [ 1185.699756][T15416] [ 1185.702881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1186.020934][ T8808] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 1186.707800][T15425] libceph: resolve '. [ 1186.707800][T15425] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1186.707800][T15425] ' (ret=-3): failed [ 1186.821467][ T29] audit: type=1400 audit(1720243944.672:610): avc: denied { read } for pid=15426 comm="syz.0.2643" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1186.884134][ T29] audit: type=1400 audit(1720243944.672:611): avc: denied { open } for pid=15426 comm="syz.0.2643" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1186.996469][ T29] audit: type=1400 audit(1720243944.742:612): avc: denied { create } for pid=15426 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1187.133453][ T29] audit: type=1400 audit(1720243944.982:613): avc: denied { lock } for pid=15429 comm="syz.3.2644" path="socket:[52326]" dev="sockfs" ino=52326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1187.187031][T15440] FAULT_INJECTION: forcing a failure. [ 1187.187031][T15440] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.201363][T15440] CPU: 0 PID: 15440 Comm: syz.0.2647 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1187.211537][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1187.221599][T15440] Call Trace: [ 1187.224888][T15440] [ 1187.227806][T15440] dump_stack_lvl+0x16c/0x1f0 [ 1187.232475][T15440] should_fail_ex+0x497/0x5b0 [ 1187.237141][T15440] should_failslab+0x9/0x20 [ 1187.241640][T15440] __kmalloc_noprof+0xcf/0x410 [ 1187.246390][T15440] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1187.253493][T15440] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1187.258946][T15440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.265013][T15440] ? ns_capable+0xd7/0x110 [ 1187.269420][T15440] genl_rcv_msg+0x565/0x800 [ 1187.273918][T15440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.278933][T15440] ? __pfx___lock_acquire+0x10/0x10 [ 1187.284124][T15440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1187.289483][T15440] ? __pfx_nl80211_set_bss+0x10/0x10 [ 1187.294758][T15440] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1187.300236][T15440] netlink_rcv_skb+0x16b/0x440 [ 1187.305006][T15440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.310048][T15440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.315325][T15440] ? down_read+0xc9/0x330 [ 1187.319643][T15440] ? __pfx_down_read+0x10/0x10 [ 1187.324414][T15440] ? netlink_deliver_tap+0x1ae/0xd90 [ 1187.329688][T15440] genl_rcv+0x28/0x40 [ 1187.333661][T15440] netlink_unicast+0x542/0x820 [ 1187.338413][T15440] ? __pfx_netlink_unicast+0x10/0x10 [ 1187.343687][T15440] netlink_sendmsg+0x8b8/0xd70 [ 1187.348439][T15440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.353710][T15440] ? __import_iovec+0x1fd/0x6e0 [ 1187.358551][T15440] ____sys_sendmsg+0xab5/0xc90 [ 1187.363301][T15440] ? copy_msghdr_from_user+0x10b/0x160 [ 1187.368750][T15440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.374018][T15440] ? find_held_lock+0x2d/0x110 [ 1187.378790][T15440] ? __pfx___lock_acquire+0x10/0x10 [ 1187.383979][T15440] ___sys_sendmsg+0x135/0x1e0 [ 1187.388730][T15440] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.393914][T15440] ? ksys_write+0x21c/0x260 [ 1187.398409][T15440] ? __fget_light+0x173/0x210 [ 1187.403079][T15440] __sys_sendmsg+0x117/0x1f0 [ 1187.407662][T15440] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.412767][T15440] do_syscall_64+0xcd/0x250 [ 1187.417261][T15440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.423148][T15440] RIP: 0033:0x7f16d8f75bd9 [ 1187.427550][T15440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.447144][T15440] RSP: 002b:00007f16d9df6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.455549][T15440] RAX: ffffffffffffffda RBX: 00007f16d9103f60 RCX: 00007f16d8f75bd9 [ 1187.463509][T15440] RDX: 0000000000000000 RSI: 00000000200088c0 RDI: 0000000000000004 [ 1187.471466][T15440] RBP: 00007f16d9df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.479423][T15440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.487379][T15440] R13: 000000000000000b R14: 00007f16d9103f60 R15: 00007ffcb9154a38 [ 1187.495339][T15440] [ 1187.498445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1187.664884][ T29] audit: type=1400 audit(1720243945.022:614): avc: denied { read } for pid=15428 comm="syz.1.2645" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1187.687575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1187.732973][T15438] ptrace attach of "./syz-executor exec"[9992] was attempted by "./syz-executor exec"[15438] [ 1187.799368][T15438] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1187.845917][T15454] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1187.873783][ T29] audit: type=1400 audit(1720243945.022:615): avc: denied { open } for pid=15428 comm="syz.1.2645" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1188.070914][ T29] audit: type=1400 audit(1720243945.602:616): avc: denied { ioctl } for pid=15441 comm="syz.2.2648" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1188.123272][ T29] audit: type=1400 audit(1720243945.832:617): avc: denied { write } for pid=15428 comm="syz.1.2645" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1188.588370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1189.906396][ T8808] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 1190.023873][T15489] libceph: resolve '. [ 1190.023873][T15489] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1190.023873][T15489] ' (ret=-3): failed [ 1190.176384][ T29] audit: type=1400 audit(1720243948.032:618): avc: denied { setopt } for pid=15490 comm="syz.1.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1191.002260][T15507] ptrace attach of "./syz-executor exec"[13327] was attempted by "./syz-executor exec"[15507] [ 1191.110875][T15507] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1191.176083][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1191.514986][ T5143] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1191.815422][ T5143] usb 5-1: Using ep0 maxpacket: 32 [ 1191.836896][ T5143] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 1191.859290][ T5143] usb 5-1: config 0 has no interface number 0 [ 1191.894281][ T5143] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1191.924029][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.932593][ T5143] usb 5-1: Product: syz [ 1191.942808][ T5143] usb 5-1: Manufacturer: syz [ 1191.954602][ T5143] usb 5-1: SerialNumber: syz [ 1191.962709][ T5143] usb 5-1: config 0 descriptor?? [ 1192.105021][ T5141] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1192.209952][ T5143] option 5-1:0.86: GSM modem (1-port) converter detected [ 1192.655686][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 1192.709956][ T5141] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.785323][ T5141] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.804889][ T5141] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.957133][ T5141] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1193.000564][ T5141] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1193.031193][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.162806][ T29] audit: type=1400 audit(1720243951.012:619): avc: denied { map } for pid=15522 comm="syz.2.2669" path="socket:[52528]" dev="sockfs" ino=52528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.186055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.233305][ T29] audit: type=1400 audit(1720243951.052:620): avc: denied { read } for pid=15522 comm="syz.2.2669" path="socket:[52528]" dev="sockfs" ino=52528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.541588][ T5141] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1193.609022][ T5141] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1193.660948][ T5141] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1193.695130][ T5141] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1193.727315][ T5141] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1193.803196][ T5141] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 1193.864103][ T5141] usb 4-1: USB disconnect, device number 46 [ 1194.344696][ T5144] usb 5-1: USB disconnect, device number 40 [ 1194.353384][ T5144] option 5-1:0.86: device disconnected [ 1194.664681][T15547] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1194.747045][T15548] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2677'. [ 1195.514662][T15547] audit: out of memory in audit_log_start [ 1196.125029][ T5141] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1196.504856][ T5141] usb 2-1: Using ep0 maxpacket: 16 [ 1196.575968][ T5141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.709292][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1196.742328][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1196.762405][ T5141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1196.775625][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.802701][ T5141] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1196.819068][ T5141] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1196.836384][ T5141] usb 2-1: Manufacturer: syz [ 1196.844492][ T5141] usb 2-1: config 0 descriptor?? [ 1196.945342][ T5144] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1197.178839][ T5144] usb 4-1: Using ep0 maxpacket: 32 [ 1197.224954][ T5144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1197.266440][ T5144] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1197.275707][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1197.298650][ T5144] usb 4-1: Product: syz [ 1197.302877][ T5144] usb 4-1: Manufacturer: syz [ 1197.322568][ T5144] usb 4-1: SerialNumber: syz [ 1197.354589][ T5144] usb 4-1: config 0 descriptor?? [ 1197.370394][T15559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1197.464862][ T5141] rc_core: IR keymap rc-hauppauge not found [ 1197.470856][ T5141] Registered IR keymap rc-empty [ 1197.486924][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.536355][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1197.568195][T15577] FAULT_INJECTION: forcing a failure. [ 1197.568195][T15577] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.590019][ T5141] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1197.647003][T15577] CPU: 1 PID: 15577 Comm: syz.0.2685 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1197.657227][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1197.667376][T15577] Call Trace: [ 1197.670672][T15577] [ 1197.673618][T15577] dump_stack_lvl+0x16c/0x1f0 [ 1197.678330][T15577] should_fail_ex+0x497/0x5b0 [ 1197.683037][T15577] should_failslab+0x9/0x20 [ 1197.687746][T15577] kmalloc_trace_noprof+0x6b/0x300 [ 1197.692906][T15577] ? sctp_datamsg_from_user+0x8d/0x1320 [ 1197.698573][T15577] sctp_datamsg_from_user+0x8d/0x1320 [ 1197.703978][T15577] ? __sk_mem_raise_allocated+0x8a0/0x1740 [ 1197.709819][T15577] ? __sk_mem_schedule+0xd0/0x100 [ 1197.714877][T15577] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 1197.720192][T15577] ? print_usage_bug.part.0+0x510/0x550 [ 1197.725750][T15577] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1197.731477][T15577] ? sctp_sendmsg+0xff0/0x1eb0 [ 1197.736242][T15577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1197.741614][T15577] ? mark_held_locks+0x9f/0xe0 [ 1197.746392][T15577] ? sctp_sendmsg+0xff0/0x1eb0 [ 1197.751173][T15577] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1197.756991][T15577] sctp_sendmsg+0xf0a/0x1eb0 [ 1197.761583][T15577] ? __pfx_avc_has_perm+0x10/0x10 [ 1197.766611][T15577] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1197.771635][T15577] ? sock_has_perm+0x25a/0x2f0 [ 1197.776407][T15577] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1197.781781][T15577] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1197.786805][T15577] inet_sendmsg+0x119/0x140 [ 1197.791318][T15577] sock_write_iter+0x4b8/0x5c0 [ 1197.796081][T15577] ? __pfx_sock_write_iter+0x10/0x10 [ 1197.801371][T15577] ? __pfx_file_has_perm+0x10/0x10 [ 1197.806487][T15577] do_iter_readv_writev+0x504/0x780 [ 1197.811691][T15577] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1197.817415][T15577] ? selinux_file_permission+0x125/0x590 [ 1197.823049][T15577] ? security_file_permission+0x98/0xc0 [ 1197.828599][T15577] vfs_writev+0x36f/0xde0 [ 1197.832939][T15577] ? __pfx_vfs_writev+0x10/0x10 [ 1197.837793][T15577] ? __fget_files+0x24c/0x400 [ 1197.842495][T15577] ? do_writev+0x287/0x370 [ 1197.846929][T15577] do_writev+0x287/0x370 [ 1197.851177][T15577] ? __pfx_do_writev+0x10/0x10 [ 1197.855946][T15577] do_syscall_64+0xcd/0x250 [ 1197.860542][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.866445][T15577] RIP: 0033:0x7f16d8f75bd9 [ 1197.870890][T15577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.890672][T15577] RSP: 002b:00007f16d9df6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1197.899090][T15577] RAX: ffffffffffffffda RBX: 00007f16d9103f60 RCX: 00007f16d8f75bd9 [ 1197.907081][T15577] RDX: 0000000000000001 RSI: 0000000020001300 RDI: 0000000000000003 [ 1197.915052][T15577] RBP: 00007f16d9df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.923021][T15577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.931003][T15577] R13: 000000000000000b R14: 00007f16d9103f60 R15: 00007ffcb9154a38 [ 1197.939018][T15577] [ 1197.942148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.967041][ T5141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 1198.013574][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.055266][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.121865][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.179028][T15559] fuse: Bad value for 'fd' [ 1198.188237][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.285354][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.307249][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.337557][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.363320][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.406082][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.455215][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.505757][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.549262][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.606269][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.630271][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.656966][ T5141] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1198.682778][ T5141] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1198.750271][ T5141] usb 2-1: USB disconnect, device number 52 [ 1198.860702][ T5142] usb 4-1: USB disconnect, device number 47 [ 1199.493311][T15599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.633286][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.857387][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.967152][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1202.198768][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.395081][ T5141] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1202.506534][T11422] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1202.517683][T11422] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1202.526637][T11422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1202.544608][T11422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1202.555229][T11422] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1202.564015][T11422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.734859][ T5141] usb 1-1: Using ep0 maxpacket: 32 [ 1202.751688][ T5141] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 1202.760008][ T5141] usb 1-1: config 0 has no interface number 0 [ 1202.811355][ T5141] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab [ 1202.830776][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.870517][ T57] block nbd4: Possible stuck request ffff8880207a8000: control (read@0,4096B). Runtime 150 seconds [ 1202.886432][ T5141] usb 1-1: Product: syz [ 1202.890632][ T5141] usb 1-1: Manufacturer: syz [ 1202.927087][ T5141] usb 1-1: SerialNumber: syz [ 1202.958230][ T5141] usb 1-1: config 0 descriptor?? [ 1203.056853][ T5141] option 1-1:0.86: GSM modem (1-port) converter detected [ 1203.088563][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.596332][ T11] bridge_slave_1: left allmulticast mode [ 1204.632539][ T11] bridge_slave_1: left promiscuous mode [ 1204.662756][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.715003][T11422] Bluetooth: hci0: command tx timeout [ 1204.765985][ T11] bridge_slave_0: left allmulticast mode [ 1204.771678][ T11] bridge_slave_0: left promiscuous mode [ 1204.787644][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.282872][T15646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1205.291956][T15646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1205.457878][ T29] audit: type=1400 audit(1720243963.112:621): avc: denied { mount } for pid=15643 comm="syz.1.2700" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1205.963785][ T29] audit: type=1400 audit(1720243963.812:622): avc: denied { unmount } for pid=9992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1206.008656][ T5146] usb 1-1: USB disconnect, device number 44 [ 1206.017118][ T5146] option 1-1:0.86: device disconnected [ 1206.750859][T15660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.790853][T11422] Bluetooth: hci0: command tx timeout [ 1208.512175][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.632450][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.788373][ T11] bond0 (unregistering): Released all slaves [ 1208.800223][T15621] chnl_net:caif_netlink_parms(): no params data found [ 1208.870923][T11422] Bluetooth: hci0: command tx timeout [ 1208.922601][T15657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2703'. [ 1209.915189][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.927686][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.969614][T15621] bridge_slave_0: entered allmulticast mode [ 1210.291425][T15621] bridge_slave_0: entered promiscuous mode [ 1210.945081][T11422] Bluetooth: hci0: command tx timeout [ 1212.979146][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.430720][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.490655][T15621] bridge_slave_1: entered allmulticast mode [ 1215.594983][T15621] bridge_slave_1: entered promiscuous mode [ 1215.666114][ T30] INFO: task syz.4.2247:13979 blocked for more than 143 seconds. [ 1215.673928][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1215.764901][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1215.801271][ T30] task:syz.4.2247 state:D stack:23432 pid:13979 tgid:13978 ppid:13711 flags:0x00004006 [ 1215.845317][ T30] Call Trace: [ 1215.848649][ T30] [ 1215.851596][ T30] __schedule+0xf15/0x5d00 [ 1215.898603][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1215.903883][ T30] ? hlock_class+0x4e/0x130 [ 1215.931267][ T30] ? __pfx___schedule+0x10/0x10 [ 1215.940030][ T30] ? schedule+0x298/0x350 [ 1215.955033][ T30] ? __pfx_lock_release+0x10/0x10 [ 1215.964936][ T30] schedule+0xe7/0x350 [ 1215.969018][ T30] io_schedule+0xbf/0x130 [ 1215.974563][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1215.999251][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1216.004743][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1216.019605][ T30] ? filemap_read_folio+0x101/0x2c0 [ 1216.026569][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1216.032126][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1216.065625][ T30] ? __filemap_get_folio+0x2a1/0xae0 [ 1216.070951][ T30] do_read_cache_folio+0x2e2/0x540 [ 1216.084904][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1216.097067][ T30] read_part_sector+0xd3/0x410 [ 1216.101879][ T30] adfspart_check_POWERTEC+0x8f/0x710 [ 1216.107331][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1216.113344][ T30] ? bdev_disk_changed+0x48c/0x14f0 [ 1216.118632][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1216.124648][ T30] bdev_disk_changed+0x71f/0x14f0 [ 1216.129731][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1216.138049][ T30] blkdev_get_whole+0x187/0x290 [ 1216.142936][ T30] bdev_open+0x2c7/0xe50 [ 1216.147264][ T30] ? iput+0x5c/0x80 [ 1216.151107][ T30] blkdev_open+0x17b/0x1f0 [ 1216.155603][ T30] do_dentry_open+0x91f/0x15f0 [ 1216.160559][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1216.165731][ T30] vfs_open+0x82/0x3f0 [ 1216.169817][ T30] ? may_open+0x1f2/0x400 [ 1216.174150][ T30] path_openat+0x21fc/0x2e50 [ 1216.179940][ T30] ? __pfx_path_openat+0x10/0x10 [ 1216.185062][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1216.190313][ T30] ? find_held_lock+0x2d/0x110 [ 1216.195148][ T30] do_filp_open+0x1dc/0x430 [ 1216.199655][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1216.204673][ T30] ? find_held_lock+0x2d/0x110 [ 1216.209504][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1216.214367][ T30] ? alloc_fd+0x2d7/0x6c0 [ 1216.218816][ T30] do_sys_openat2+0x17a/0x1e0 [ 1216.223508][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1216.228843][ T30] __x64_sys_openat+0x175/0x210 [ 1216.233708][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1216.239130][ T30] do_syscall_64+0xcd/0x250 [ 1216.243631][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.249611][ T30] RIP: 0033:0x7fcadf974610 [ 1216.254033][ T30] RSP: 002b:00007fcae0722b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1216.262517][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcadf974610 [ 1216.271284][ T30] RDX: 0000000000000000 RSI: 00007fcae0722c20 RDI: 00000000ffffff9c [ 1216.280400][ T30] RBP: 00007fcae0722c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 1216.288472][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1216.296593][ T30] R13: 000000000000000b R14: 00007fcadfb03f60 R15: 00007ffcad42ef18 [ 1216.304583][ T30] [ 1216.308585][ T30] INFO: task syz.4.2247:13984 blocked for more than 143 seconds. [ 1216.316573][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1216.324210][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1216.332913][ T30] task:syz.4.2247 state:D stack:27152 pid:13984 tgid:13978 ppid:13711 flags:0x00004004 [ 1216.343112][ T30] Call Trace: [ 1216.346481][ T30] [ 1216.349417][ T30] __schedule+0xf15/0x5d00 [ 1216.353823][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1216.359110][ T30] ? __pfx___schedule+0x10/0x10 [ 1216.363979][ T30] ? schedule+0x298/0x350 [ 1216.368388][ T30] ? __pfx_lock_release+0x10/0x10 [ 1216.373411][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1216.379602][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1216.386406][ T30] schedule+0xe7/0x350 [ 1216.390498][ T30] schedule_preempt_disabled+0x13/0x30 [ 1216.396150][ T30] __mutex_lock+0x5b8/0x9c0 [ 1216.400672][ T30] ? bdev_release+0x166/0x6f0 [ 1216.405455][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1216.410494][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1216.415765][ T30] ? bdev_release+0x166/0x6f0 [ 1216.420458][ T30] bdev_release+0x166/0x6f0 [ 1216.425195][ T30] ? task_work_run+0x126/0x250 [ 1216.430042][ T30] ? evm_file_release+0xd6/0x1d0 [ 1216.435126][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1216.440364][ T30] blkdev_release+0x15/0x20 [ 1216.444972][ T30] __fput+0x408/0xbb0 [ 1216.448986][ T30] task_work_run+0x14e/0x250 [ 1216.453601][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1216.458802][ T30] syscall_exit_to_user_mode+0x275/0x2a0 [ 1216.464443][ T30] do_syscall_64+0xda/0x250 [ 1216.473385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.479586][ T30] RIP: 0033:0x7fcadf975bd9 [ 1216.486706][ T30] RSP: 002b:00007fcae06e1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.495229][ T30] RAX: 0000000000000000 RBX: 00007fcadfb04110 RCX: 00007fcadf975bd9 [ 1216.503211][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 1216.511204][ T30] RBP: 00007fcadf9e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1216.519214][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1216.527270][ T30] R13: 000000000000006e R14: 00007fcadfb04110 R15: 00007ffcad42ef18 [ 1216.535318][ T30] [ 1216.538377][ T30] [ 1216.538377][ T30] Showing all locks held in the system: [ 1216.577759][ T30] 5 locks held by kworker/u8:0/11: [ 1216.582924][ T30] #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1216.644802][ T30] #1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1216.674837][ T30] #2: ffffffff8f732fd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 1216.684252][ T30] #3: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 1216.744805][ T30] #4: ffff88802ef48768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_stop+0xbe/0x6b0 [ 1216.754487][ T30] 1 lock held by khungtaskd/30: [ 1216.793511][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1216.826513][ T30] 3 locks held by kworker/u8:5/1048: [ 1216.831849][ T30] #0: ffff888016b72948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1216.874861][ T30] #1: ffffc900044e7d80 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1216.914829][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xd0/0x640 [ 1216.953992][ T30] 2 locks held by getty/4841: [ 1216.996628][ T30] #0: ffff88802b09e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1217.016106][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1217.044810][ T30] 3 locks held by kworker/0:3/5140: [ 1217.050066][ T30] 3 locks held by kworker/1:5/5142: [ 1217.055658][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1217.074798][ T30] #1: ffffc9000381fd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1217.094820][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1217.108715][ T30] 3 locks held by kworker/0:6/5146: [ 1217.113939][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1217.148083][ T30] #1: ffffc90003f7fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1217.174798][ T30] #2: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1217.184030][ T30] 1 lock held by syz-executor/9992: [ 1217.204861][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 1217.213921][ T30] 1 lock held by syz-executor/13327: [ 1217.248696][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 1217.257813][ T30] 1 lock held by syz.4.2247/13979: [ 1217.262908][ T30] #0: ffff88802051e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x41a/0xe50 [ 1217.276254][ T30] 1 lock held by syz.4.2247/13984: [ 1217.281403][ T30] #0: ffff88802051e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x166/0x6f0 [ 1217.295030][ T30] 3 locks held by kworker/1:0/14626: [ 1217.300325][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1217.314908][ T30] #1: ffffc9000343fd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1217.334933][ T30] #2: ffffffff8dbbcdb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1217.345169][ T30] 1 lock held by syz.4.2494/14844: [ 1217.350293][ T30] #0: ffff88802051e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0xed/0x340 [ 1217.365177][ T30] 3 locks held by syz-executor/15089: [ 1217.370547][ T30] #0: ffff88802b1fcd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1217.386212][ T30] #1: ffff88802b1fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x339/0x1100 [ 1217.396068][ T30] #2: ffffffff8f9aa368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1217.407090][ T30] 1 lock held by syz-executor/15621: [ 1217.412369][ T30] #0: ffffffff8f748268 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1217.424907][ T30] 4 locks held by syz.2.2699/15642: [ 1217.430157][ T30] 1 lock held by syz.4.2706/15669: [ 1217.444902][ T30] #0: ffffffff8dbbcdb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1217.455217][ T30] [ 1217.458669][ T30] ============================================= [ 1217.458669][ T30] [ 1217.496192][ T30] NMI backtrace for cpu 0 [ 1217.500564][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1217.510484][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1217.520559][ T30] Call Trace: [ 1217.523845][ T30] [ 1217.526771][ T30] dump_stack_lvl+0x116/0x1f0 [ 1217.531454][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1217.536409][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1217.542394][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1217.548377][ T30] watchdog+0xf86/0x1240 [ 1217.552616][ T30] ? __pfx_watchdog+0x10/0x10 [ 1217.557289][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.562489][ T30] ? __kthread_parkme+0x148/0x220 [ 1217.567516][ T30] ? __pfx_watchdog+0x10/0x10 [ 1217.572186][ T30] kthread+0x2c1/0x3a0 [ 1217.576254][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1217.581448][ T30] ? __pfx_kthread+0x10/0x10 [ 1217.586035][ T30] ret_from_fork+0x45/0x80 [ 1217.590456][ T30] ? __pfx_kthread+0x10/0x10 [ 1217.595045][ T30] ret_from_fork_asm+0x1a/0x30 [ 1217.599814][ T30] [ 1217.604931][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1217.611760][ C1] NMI backtrace for cpu 1 [ 1217.611783][ C1] CPU: 1 PID: 15642 Comm: syz.2.2699 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1217.611807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1217.611819][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1c/0x60 [ 1217.611847][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 64 f4 75 7e 65 8b 05 65 f4 75 7e a9 00 01 ff 00 48 8b 34 24 <74> 0f f6 c4 01 74 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 [ 1217.611868][ C1] RSP: 0018:ffffc9000384f0a0 EFLAGS: 00000246 [ 1217.611885][ C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1217.611899][ C1] RDX: ffff888022405a00 RSI: ffffffff81342ac2 RDI: ffffc9000384f110 [ 1217.611914][ C1] RBP: ffffc9000384f140 R08: 0000000000000001 R09: 0000000000000000 [ 1217.611928][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000384f0b0 [ 1217.611941][ C1] R13: ffffffff81798340 R14: ffffc9000384f170 R15: ffff888022405a00 [ 1217.611956][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1217.611978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.611993][ C1] CR2: 00007f86aa637d60 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 1217.612008][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1217.612021][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1217.612034][ C1] Call Trace: [ 1217.612042][ C1] [ 1217.612049][ C1] ? show_regs+0x8c/0xa0 [ 1217.612084][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1217.612114][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1217.612142][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1217.612171][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x60 [ 1217.612193][ C1] ? default_do_nmi+0x6a/0x160 [ 1217.612213][ C1] ? exc_nmi+0x170/0x1e0 [ 1217.612232][ C1] ? end_repeat_nmi+0xf/0x53 [ 1217.612252][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1217.612281][ C1] ? arch_stack_walk+0x162/0x170 [ 1217.612302][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x60 [ 1217.612323][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x60 [ 1217.612345][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x60 [ 1217.612367][ C1] [ 1217.612373][ C1] [ 1217.612380][ C1] arch_stack_walk+0x162/0x170 [ 1217.612403][ C1] stack_trace_save+0x95/0xd0 [ 1217.612429][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1217.612457][ C1] save_stack+0x162/0x1f0 [ 1217.612478][ C1] ? __pfx_save_stack+0x10/0x10 [ 1217.612499][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1217.612532][ C1] __reset_page_owner+0x8d/0x400 [ 1217.612556][ C1] free_unref_folios+0x991/0x1310 [ 1217.612582][ C1] ? const_folio_flags+0x60/0x1f0 [ 1217.612612][ C1] folios_put_refs+0x487/0x6d0 [ 1217.612642][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1217.612672][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 1217.612698][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1217.612721][ C1] shmem_undo_range+0x5a1/0x1160 [ 1217.612749][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1217.612773][ C1] ? hlock_class+0x4e/0x130 [ 1217.612801][ C1] ? mark_lock+0xb5/0xc60 [ 1217.612828][ C1] ? is_module_text_address+0x145/0x1a0 [ 1217.612849][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1217.612881][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1217.612910][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1217.612938][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1217.612968][ C1] shmem_evict_inode+0x3a3/0xbb0 [ 1217.612993][ C1] ? find_held_lock+0x2d/0x110 [ 1217.613017][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1217.613041][ C1] ? evict+0x2b7/0x6c0 [ 1217.613069][ C1] ? __pfx_lock_release+0x10/0x10 [ 1217.613101][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 1217.613132][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1217.613155][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1217.613180][ C1] evict+0x2ed/0x6c0 [ 1217.613208][ C1] iput.part.0+0x5a8/0x7f0 [ 1217.613236][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 1217.613262][ C1] iput+0x5c/0x80 [ 1217.613289][ C1] dentry_unlink_inode+0x295/0x480 [ 1217.613321][ C1] __dentry_kill+0x1d0/0x600 [ 1217.613342][ C1] dput.part.0+0x4b1/0x9b0 [ 1217.613362][ C1] dput+0x1f/0x30 [ 1217.613382][ C1] __fput+0x54e/0xbb0 [ 1217.613403][ C1] task_work_run+0x14e/0x250 [ 1217.613423][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1217.613443][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1217.613466][ C1] do_exit+0xa9b/0x2ba0 [ 1217.613494][ C1] ? __pfx_do_exit+0x10/0x10 [ 1217.613523][ C1] do_group_exit+0xd3/0x2a0 [ 1217.613552][ C1] get_signal+0x2616/0x2710 [ 1217.613577][ C1] ? __pfx_get_signal+0x10/0x10 [ 1217.613601][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 1217.613625][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1217.613651][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1217.613678][ C1] ? spurious_kernel_fault+0x2f4/0x3c0 [ 1217.613704][ C1] irqentry_exit_to_user_mode+0x139/0x280 [ 1217.613731][ C1] asm_exc_page_fault+0x26/0x30 [ 1217.613781][ C1] RIP: 0033:0x7f5356b75be1 [ 1217.613796][ C1] Code: Unable to access opcode bytes at 0x7f5356b75bb7. [ 1217.613806][ C1] RSP: 002b:fffffffffffffd80 EFLAGS: 00010217 [ 1217.613822][ C1] RAX: 0000000000000000 RBX: 00007f5356d04110 RCX: 00007f5356b75bd9 [ 1217.613836][ C1] RDX: 0000000000000000 RSI: fffffffffffffd80 RDI: 0000000000000000 [ 1217.613850][ C1] RBP: 00007f5356be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1217.613863][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.613877][ C1] R13: 000000000000006e R14: 00007f5356d04110 R15: 00007fff2388bb78 [ 1217.613894][ C1] [ 1217.838078][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1217.838096][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1217.838123][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1217.838138][ T30] Call Trace: [ 1217.838147][ T30] [ 1217.838157][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1217.838188][ T30] panic+0x6f5/0x7a0 [ 1217.838221][ T30] ? __pfx_panic+0x10/0x10 [ 1217.838252][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1217.838278][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1217.838309][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1217.838333][ T30] ? watchdog+0xd3d/0x1240 [ 1217.838357][ T30] ? watchdog+0xd30/0x1240 [ 1217.838380][ T30] watchdog+0xd4e/0x1240 [ 1217.838406][ T30] ? __pfx_watchdog+0x10/0x10 [ 1217.838429][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.838457][ T30] ? __kthread_parkme+0x148/0x220 [ 1217.838486][ T30] ? __pfx_watchdog+0x10/0x10 [ 1217.838509][ T30] kthread+0x2c1/0x3a0 [ 1217.838536][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1217.838561][ T30] ? __pfx_kthread+0x10/0x10 [ 1217.838588][ T30] ret_from_fork+0x45/0x80 [ 1217.838619][ T30] ? __pfx_kthread+0x10/0x10 [ 1217.838647][ T30] ret_from_fork_asm+0x1a/0x30 [ 1217.838683][ T30] [ 1217.842938][ T30] Kernel Offset: disabled [ 1218.278253][ T30] Rebooting in 86400 seconds..