last executing test programs: 1m19.001901809s ago: executing program 4 (id=274): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='d,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) close(r2) socket$nl_route(0x10, 0x3, 0x0) dup(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m17.942388028s ago: executing program 4 (id=277): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x190, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x6, 0x5, 0x0, 0x456, 0x3, 0x4}}, {0xc, 0x2, [0x1d5, 0xff81, 0x9, 0x4]}}, {{0x1c, 0x1, {0xf0, 0x0, 0x1, 0x5ecf9237, 0x2, 0x715, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x7, 0x2, 0xf6a0, 0x2, 0x76eb8877, 0x4, 0x6}}, {0x10, 0x2, [0x2, 0x9, 0x3, 0x7fff, 0x101, 0x9]}}]}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x8, 0xa, 0x69080d5a77a880d9, 0x1a, 0xffffff81, 0x6}}, {0x10, 0x2, [0x1, 0x7, 0x400, 0x0, 0xfffb, 0x5]}}, {{0x1c, 0x1, {0x1, 0x8, 0xf538, 0x0, 0x0, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x7, 0x2, 0x329, 0x4, 0x1, 0xbce5, 0x6, 0x4, 0x4]}}, {{0x1c, 0x1, {0x1, 0x8, 0xadb, 0x8, 0x1, 0x0, 0xfffffff7, 0x8}}, {0x14, 0x2, [0x7fff, 0x3, 0x8, 0x5, 0x3ff, 0xce81, 0x9, 0x9]}}, {{0x1c, 0x1, {0x5, 0xfc, 0x6, 0x8, 0x2, 0x7, 0xac, 0x1}}, {0x6, 0x2, [0x40ea]}}, {{0x1c, 0x1, {0x80, 0xd, 0x8, 0xfffff000, 0x0, 0xe, 0x9, 0x5}}, {0xe, 0x2, [0x5507, 0x7, 0x1, 0x1, 0x2]}}]}]}, 0x190}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x2f, 0x0, &(0x7f0000be9000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000500)=[{&(0x7f0000000140)="2e0000001100ff00040f46ecdb4cb9cca7480ef441000000e374c5ff4ef59205d6bd6efb446009000e000a001000", 0x2e}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x110, 0x6, 0x0, 0x20000000) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_emit_ethernet(0xa6, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c20000000180c200000086dd2000000000703afffe80006a0000000000000000000000bbff02000000000000000000000000000186009078000020000000000000000000010aa78ce5da37004023493b87aafaffffffffffffff37ff0000eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34246d42ca0a5c15b37adac15084dbaf736ba3f8e856751e05752629a4680c518e3aa9b3c8fb64e575930c1bf4816f261f2e1669f2abcd06d6ae31c7cd156ddda5bc3a71502196a68305c591397bbd0ef157f89ed91fd2eb004c04ed00"/233], 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1m15.917659887s ago: executing program 4 (id=284): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000040000000000000018"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (fail_nth: 3) 1m14.955024286s ago: executing program 4 (id=286): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xbf}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 1m11.926634596s ago: executing program 4 (id=295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x324e, &(0x7f0000000080)={0x0, 0x4, 0x13580, 0x4002}, &(0x7f0000000100), &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 1m10.766750455s ago: executing program 4 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x401}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x200) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000700)=ANY=[], 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 55.058458055s ago: executing program 32 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x401}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x200) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000700)=ANY=[], 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 18.911612062s ago: executing program 3 (id=427): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='hostfs\x00', 0x8a801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x12}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 17.686749882s ago: executing program 3 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x80000, 0x2f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x51) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xfffd}, 0x8) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000000)={0x82, 0x16}) 14.178943163s ago: executing program 3 (id=443): mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=r0], 0x15) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'veth0\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'vlan1\x00', 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="740000000000000002000000000100", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) r8 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x0, &(0x7f0000000040)}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) creat(&(0x7f0000000000)='./file0\x00', 0x100) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8402, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x8000000000000000) read$FUSE(r9, &(0x7f0000002c80)={0x2020}, 0xfffffd1f) creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x7f8, 0x0) 11.514613704s ago: executing program 0 (id=452): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r0, 0x0, 0x0) 11.259236111s ago: executing program 0 (id=453): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000340)={0xc8b, 0x1f4b600, 0x1, 0x0, 0x6, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 9.93726455s ago: executing program 3 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x8c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x66, 0x99, {0x8, 0x12}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x25}, 0x40000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000001e000000003083363b96", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYBLOB="cdc22b0e4e0e166cc930bd38cf916f72da0847325a267eac38d21e5f9ccfbf1ac0682c664421fb5ae76514dd583d03c116e7de70fa00e9738a3de569aeae8b6a382fbca498e7de3df69dc5afe47e17cd5e1e3840c04bfdae942668d29cfa7fdad342cc058a0eea1489e7dabafa161b386543413ba5d77282f924b42a0da4271475197b6e6196510a4036ee5fdc9229b51a8976d3dd8e15f6922f488656c63ce79c9b954f0b9361dbf137aaf21c", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fcntl$addseals(r4, 0x409, 0x7) r7 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0x98f900}) r8 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x1000, 0x1000}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201410000000020d80472f30000000000010902240001000010000904000401030003000921510b0001220700090581030002080002"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r12 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r12, 0xffff) 9.910832322s ago: executing program 0 (id=459): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000003c0), 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000015040)={0x0, 0x2b7a, 0x80, 0x2, 0x4}, &(0x7f0000000240)=0x0, &(0x7f00000150c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x47f6, 0x7f000000, 0x0, 0x0, 0x0) 9.325637527s ago: executing program 0 (id=462): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_setup(0x94c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r2, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$msr(r5, &(0x7f0000000240)=""/177, 0xb1) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESOCT], 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.755050238s ago: executing program 5 (id=465): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x2, 0x4e, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x2c020400) 6.617124219s ago: executing program 1 (id=469): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000080)=0xfffffffd, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a09e2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000340), 0x0, 0xc0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) syz_open_procfs(r3, &(0x7f0000000440)='attr/prev\x00') r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@full={0xb, @remote, @null, 0x0, [@default, @bcast, @bcast, @netrom, @default, @default]}, &(0x7f0000000380)=0x40, 0x81000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$unix(0x1, 0x5, 0x0) 6.584781508s ago: executing program 5 (id=470): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xff}}}}, 0x32) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.214887254s ago: executing program 3 (id=472): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x4}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x3, 0x0, 0x1}}, 0x80, 0x0}}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) dup3(r7, r6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r9, @ANYBLOB="015980500025bd70a50f281f219bab686ec500fbdbdf2506000000080001020063690011000200303030303a30303a31302e300000"], 0x40}, 0x1, 0x0, 0x0, 0x400c1}, 0x80) writev(r3, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x800}, {&(0x7f0000000540)}, {&(0x7f0000000580)="95c7ad4f3731bf1995dbce26bf", 0xd}, {&(0x7f00000005c0)}], 0x4) 5.15503405s ago: executing program 2 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 5.086185681s ago: executing program 5 (id=474): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 5.083602869s ago: executing program 1 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0) open(0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023892) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000040)) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) 4.846257222s ago: executing program 5 (id=476): socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x400c052) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x16, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x6f01, 0x800}, @val={0x1, 0x80, 0x5, 0x4, 0xfffe, 0x1}, @llc={@snap={0xaa, 0xab, "6bf3", "c9ed3b", 0xa00, "58ce2fb6ac652b5150d8a6c3486371fef28cc0a0152a6c47b63ac2cf8e1cc72eeffa2f245d402ccb113e75423516fc9cf86aebb057062cd8f30458978bf753b4e1bec388e2ada70f53860a03983739d752a92560094dadf7ec5a2091995552eab09e0925f3b1f2a2407d26402de43707458ef186c2db230e31d57afd6b6e0813ef74f43f29f5417a20017d83ab3932a0ee247f8ae25b4f8dbf712f3d9a626d3a2a40c79ec429c5ee9be4cccccd007724238f84e92fc8e78f2d66d2c1e49a8c3ead"}}}, 0xd8) socket$inet_dccp(0x2, 0x6, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f00000000c0)=0x101) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000160a030200f9ff000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) 4.767034305s ago: executing program 2 (id=477): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r0) close_range(r4, 0xffffffffffffffff, 0x0) 3.94603252s ago: executing program 1 (id=478): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$btrfs_control(0xffffff9c, 0x0, 0x303000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800000000000243, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000400)="4d3de8ac0fe15636cc6b0638fd942fffe6a4fc85ad8db9e817067a7bb1eb480411ca35816b2b8cafe7934b35eb1e17f58591fe06aaecc03b473e001330ed045d7c30b3c56f0574f8de4d00dc230821e82498d7c6ba699f61bc8caafa8c", 0x5d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x800) 3.822771384s ago: executing program 5 (id=479): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="ceb0", 0x2}], 0x1, 0x2, 0x6) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc0000006800100428bd7000fddbdf250200000018000000060007000c00000008000100000000000400040044000c8008000300f8000000060001000000000006000100090000000800020001000080080002000600000006000100000000000800030000100000060001000800000008000500", @ANYRES32=r3, @ANYBLOB="06000700070000000c000880060006000050000014000600fe8800000000040000000000000001013c0002000100000000000000000000004600000002000000010000000200000009000000010000000e00000000000000020000000200000000000000"], 0xdc}}, 0x0) 2.941069162s ago: executing program 1 (id=480): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000012) syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000000100), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000100000000000f400040000000000000020"], 0x1c, 0x0) syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0xc269, 0x8, 0x3, 0x286}, &(0x7f0000000300), &(0x7f0000000280)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000200)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup2(r1, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0x4008af14, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c}}, './file0\x00'}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) 2.514984998s ago: executing program 2 (id=481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) set_tid_address(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendfile(r0, r0, &(0x7f0000000000)=0x2443, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) write$binfmt_aout(r4, 0x0, 0xfdef) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r6, 0x541b, 0x1000000000000) 2.186770022s ago: executing program 1 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 1.90270399s ago: executing program 3 (id=483): ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@local, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x90b7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xba01}, 0x1, {[0x8, 0x8, 0x1, 0x401, 0x1ff00000, 0x4, 0x800, 0xb49]}}, 0x5c) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x0, 0x0, 0x3c}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0x6, 0x3e, 0x64, 0x0, 0x6, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x1, 0x5cd, 0x68, 0x8, 0x10, 0xb8, 0x2, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x8, 0x46, 0x0, 0x6, [0x8001]}]}}, "74edbb0d8825"}}}}, 0x4c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 1.443470699s ago: executing program 0 (id=484): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xff}}}}, 0x32) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.443026766s ago: executing program 2 (id=485): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r6, 0x18, 0x0, 0x4) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x5) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 190.625291ms ago: executing program 2 (id=486): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 146.957461ms ago: executing program 5 (id=487): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (fail_nth: 5) 47.088765ms ago: executing program 0 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c900007ba3bec86b"], 0x7) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000c060101000000000000000000000000050001"], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r5, r6) r7 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x0, 0x4000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 3.309538ms ago: executing program 1 (id=489): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x100000000) (fail_nth: 4) 0s ago: executing program 2 (id=490): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000003c0), 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000015040)={0x0, 0x2b7a, 0x80, 0x2, 0x8}, &(0x7f0000000240)=0x0, &(0x7f00000150c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =1450, bcdDevice=c2.c6 [ 101.770891][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.784251][ T5868] usb 2-1: config 0 descriptor?? [ 102.198859][ T29] audit: type=1400 audit(1733032135.038:332): avc: denied { read } for pid=6324 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.355877][ T29] audit: type=1400 audit(1733032135.198:333): avc: denied { write } for pid=6338 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.940657][ T29] audit: type=1400 audit(1733032135.778:334): avc: denied { read } for pid=6370 comm="syz.2.119" path="socket:[9044]" dev="sockfs" ino=9044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.312855][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.386539][ T5868] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 103.396130][ T5868] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 103.406814][ T29] audit: type=1400 audit(1733032136.238:335): avc: denied { ioctl } for pid=6378 comm="syz.0.122" path="socket:[10097]" dev="sockfs" ino=10097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.439719][ T5868] mxuport 2-1:0.0: probe with driver mxuport failed with error -71 [ 103.464640][ T5868] usb 2-1: USB disconnect, device number 6 [ 103.536010][ T5869] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 103.557594][ T5869] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 103.567995][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 103.618168][ T5869] usb 5-1: Product: syz [ 103.622438][ T5869] usb 5-1: Manufacturer: syz [ 103.627150][ T5869] usb 5-1: SerialNumber: syz [ 103.634877][ T5869] usb 5-1: config 0 descriptor?? [ 103.649958][ T5869] ims_pcu 5-1:0.0: Zero length descriptor [ 103.657787][ T5869] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 105.371663][ T6377] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 105.380558][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 105.428360][ T51] usb 5-1: USB disconnect, device number 4 [ 105.534921][ T6397] syz.1.125[6397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.535340][ T6397] syz.1.125[6397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.547089][ T6397] syz.1.125[6397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.292912][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.356830][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 106.422954][ T29] audit: type=1400 audit(1733032139.188:336): avc: denied { create } for pid=6398 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.481954][ T6409] loop9: detected capacity change from 0 to 7 [ 106.590503][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.731832][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.742462][ T6409] Dev loop9: unable to read RDB block 7 [ 106.748291][ T6409] loop9: unable to read partition table [ 106.754098][ T6409] loop9: partition table beyond EOD, truncated [ 106.756529][ T29] audit: type=1400 audit(1733032139.598:337): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.760252][ T6409] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.763062][ T5867] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.803370][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.821949][ T5818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 106.831142][ T5818] Bluetooth: hci1: Injecting HCI hardware error event [ 106.840038][ T5818] Bluetooth: hci1: hardware error 0x00 [ 106.849009][ T5867] usb 3-1: config 0 descriptor?? [ 106.855363][ T6405] 9pnet_fd: Insufficient options for proto=fd [ 106.859320][ T29] audit: type=1400 audit(1733032139.598:338): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.886650][ T29] audit: type=1400 audit(1733032139.598:339): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.277994][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.131'. [ 107.311135][ T6416] syz.4.131 uses old SIOCAX25GETINFO [ 107.374924][ T29] audit: type=1400 audit(1733032140.118:340): avc: denied { create } for pid=6411 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 107.693481][ T5867] hid (null): bogus close delimiter [ 107.702030][ T29] audit: type=1400 audit(1733032140.118:341): avc: denied { write } for pid=6411 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 107.786617][ T29] audit: type=1400 audit(1733032140.148:342): avc: denied { ioctl } for pid=6411 comm="syz.4.131" path="socket:[9118]" dev="sockfs" ino=9118 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.797630][ T5867] usb 3-1: language id specifier not provided by device, defaulting to English [ 107.838854][ T29] audit: type=1400 audit(1733032140.168:343): avc: denied { bind } for pid=6411 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.863757][ T29] audit: type=1400 audit(1733032140.348:344): avc: denied { ioctl } for pid=6392 comm="syz.2.126" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.895556][ T29] audit: type=1400 audit(1733032140.668:345): avc: denied { read } for pid=6419 comm="syz.0.133" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.296956][ T6435] netlink: 'syz.0.137': attribute type 3 has an invalid length. [ 108.313000][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 108.787734][ T6439] FAULT_INJECTION: forcing a failure. [ 108.787734][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.800925][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.3.139 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 108.811181][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.821244][ T6439] Call Trace: [ 108.824521][ T6439] [ 108.827451][ T6439] dump_stack_lvl+0x16c/0x1f0 [ 108.832140][ T6439] should_fail_ex+0x497/0x5b0 [ 108.836835][ T6439] _copy_from_iter+0x2a1/0x1560 [ 108.841696][ T6439] ? trace_lock_acquire+0x14e/0x1f0 [ 108.846920][ T6439] ? __alloc_skb+0x1fe/0x380 [ 108.851533][ T6439] ? __pfx__copy_from_iter+0x10/0x10 [ 108.856827][ T6439] ? __virt_addr_valid+0x1a4/0x590 [ 108.861957][ T6439] ? __virt_addr_valid+0x5e/0x590 [ 108.866995][ T6439] ? __phys_addr_symbol+0x30/0x80 [ 108.872036][ T6439] ? __check_object_size+0x488/0x710 [ 108.877353][ T6439] netlink_sendmsg+0x813/0xd70 [ 108.882146][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.887464][ T6439] ____sys_sendmsg+0xaaf/0xc90 [ 108.892243][ T6439] ? copy_msghdr_from_user+0x10b/0x160 [ 108.897709][ T6439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.903018][ T6439] ___sys_sendmsg+0x135/0x1e0 [ 108.907703][ T6439] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.912920][ T6439] ? __pfx_lock_release+0x10/0x10 [ 108.917949][ T6439] ? trace_lock_acquire+0x14e/0x1f0 [ 108.923166][ T6439] ? __fget_files+0x206/0x3a0 [ 108.927855][ T6439] __sys_sendmsg+0x16e/0x220 [ 108.932453][ T6439] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.937566][ T6439] ? __pfx___schedule+0x10/0x10 [ 108.942445][ T6439] do_syscall_64+0xcd/0x250 [ 108.946962][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.952862][ T6439] RIP: 0033:0x7f66d7f80849 [ 108.957277][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.977422][ T6439] RSP: 002b:00007f66d5dd5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.985845][ T6439] RAX: ffffffffffffffda RBX: 00007f66d8146160 RCX: 00007f66d7f80849 [ 108.993824][ T6439] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 109.001795][ T6439] RBP: 00007f66d5dd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.009765][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.017736][ T6439] R13: 0000000000000000 R14: 00007f66d8146160 R15: 00007ffd2ac52f78 [ 109.025983][ T6439] [ 109.284683][ T5818] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.291624][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.320707][ T5867] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 109.329668][ T5867] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 109.349956][ T5867] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 109.451844][ T5867] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 109.460527][ T5867] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 109.575413][ T5867] usb 3-1: USB disconnect, device number 4 [ 109.705243][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 109.776007][ T5869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.786653][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.797953][ T5869] usb 2-1: Product: syz [ 109.802158][ T5869] usb 2-1: Manufacturer: syz [ 109.806871][ T5869] usb 2-1: SerialNumber: syz [ 110.085863][ T5868] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.137730][ T5869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.406102][ T6418] random: crng reseeded on system resumption [ 111.075093][ T6461] program syz.3.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.177476][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.219967][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.411330][ T5867] usb 2-1: USB disconnect, device number 7 [ 111.426518][ T6468] FAULT_INJECTION: forcing a failure. [ 111.426518][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 111.489388][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.4.148 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 111.499672][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.509733][ T6468] Call Trace: [ 111.513017][ T6468] [ 111.513531][ T5868] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 111.515936][ T6468] dump_stack_lvl+0x16c/0x1f0 [ 111.524248][ T5868] ath9k_htc: Failed to initialize the device [ 111.527408][ T6468] should_fail_ex+0x497/0x5b0 [ 111.538071][ T6468] ? fs_reclaim_acquire+0xae/0x150 [ 111.543209][ T6468] should_failslab+0xc2/0x120 [ 111.547914][ T6468] __kmalloc_noprof+0xcb/0x510 [ 111.552701][ T6468] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.558360][ T6468] tomoyo_realpath_from_path+0xb9/0x720 [ 111.563930][ T6468] ? tomoyo_path_number_perm+0x235/0x590 [ 111.569582][ T6468] ? tomoyo_path_number_perm+0x235/0x590 [ 111.575235][ T6468] tomoyo_path_number_perm+0x248/0x590 [ 111.580712][ T6468] ? tomoyo_path_number_perm+0x235/0x590 [ 111.586357][ T6468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.592375][ T6468] ? __pfx_lock_release+0x10/0x10 [ 111.597416][ T6468] ? trace_lock_acquire+0x14e/0x1f0 [ 111.602642][ T6468] ? lock_acquire+0x2f/0xb0 [ 111.607245][ T6468] ? __fget_files+0x40/0x3a0 [ 111.611854][ T6468] ? __fget_files+0x206/0x3a0 [ 111.616546][ T6468] security_file_ioctl+0x9b/0x240 [ 111.621588][ T6468] __x64_sys_ioctl+0xb7/0x200 [ 111.626330][ T6468] do_syscall_64+0xcd/0x250 [ 111.630850][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.636760][ T6468] RIP: 0033:0x7f2bccb80849 [ 111.641186][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.660801][ T6468] RSP: 002b:00007f2bcd9b1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.669244][ T6468] RAX: ffffffffffffffda RBX: 00007f2bccd45fa0 RCX: 00007f2bccb80849 [ 111.677229][ T6468] RDX: 0000000020000180 RSI: 0000000000003b82 RDI: 0000000000000003 [ 111.685211][ T6468] RBP: 00007f2bcd9b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.693190][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.701351][ T6468] R13: 0000000000000000 R14: 00007f2bccd45fa0 R15: 00007ffd994a8ce8 [ 111.709347][ T6468] [ 111.714789][ T5867] usb 2-1: ath9k_htc: USB layer deinitialized [ 111.729459][ T6468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.922497][ T6480] block device autoloading is deprecated and will be removed. [ 113.792968][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 113.792984][ T29] audit: type=1400 audit(1733032146.638:361): avc: denied { map } for pid=6491 comm="syz.4.156" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.833049][ T5869] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.852024][ T29] audit: type=1400 audit(1733032146.668:362): avc: denied { call } for pid=6491 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.002826][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 114.109779][ T5869] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 114.122796][ T5869] usb 2-1: config 0 has no interface number 0 [ 114.161144][ T5869] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.226711][ T5869] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 114.238583][ T5869] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.249627][ T5869] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.262805][ T5869] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.538314][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.969093][ T5869] usb 2-1: config 0 descriptor?? [ 115.188922][ T5869] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 115.388661][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 115.529032][ T29] audit: type=1400 audit(1733032148.028:363): avc: denied { setopt } for pid=6505 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.996627][ T29] audit: type=1400 audit(1733032148.228:364): avc: denied { bind } for pid=6505 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.046500][ T9] usb 2-1: USB disconnect, device number 8 [ 116.080151][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 116.357602][ T29] audit: type=1400 audit(1733032149.198:365): avc: denied { mount } for pid=6530 comm="syz.4.166" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.439205][ T29] audit: type=1400 audit(1733032149.218:366): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.559579][ T51] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.581360][ T6522] Bluetooth: MGMT ver 1.23 [ 116.613179][ T29] audit: type=1400 audit(1733032149.418:367): avc: denied { setopt } for pid=6521 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.856393][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.868764][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.878923][ T51] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.888222][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.575312][ T51] usb 4-1: config 0 descriptor?? [ 117.657615][ T29] audit: type=1400 audit(1733032150.488:368): avc: denied { write } for pid=6542 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.182370][ T51] hid (null): bogus close delimiter [ 118.516646][ T51] usb 4-1: language id specifier not provided by device, defaulting to English [ 118.772818][ T900] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.852739][ T29] audit: type=1400 audit(1733032151.688:369): avc: denied { create } for pid=6556 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.058733][ T6561] netlink: 'syz.2.173': attribute type 29 has an invalid length. [ 119.091202][ T900] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 119.100493][ T6561] netlink: 'syz.2.173': attribute type 29 has an invalid length. [ 119.107813][ T900] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 119.118136][ T900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 119.126340][ T900] usb 2-1: Product: syz [ 119.130510][ T900] usb 2-1: Manufacturer: syz [ 119.135165][ T900] usb 2-1: SerialNumber: syz [ 119.141637][ T900] usb 2-1: config 0 descriptor?? [ 119.148957][ T900] ims_pcu 2-1:0.0: Zero length descriptor [ 119.155966][ T900] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 119.213260][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.256399][ T51] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 119.265500][ T51] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 119.284304][ T51] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 119.301902][ T51] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 119.319391][ T51] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 119.355347][ T51] usb 4-1: USB disconnect, device number 4 [ 119.387465][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.405571][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.432207][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.474968][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.499416][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.511293][ T9] usb 5-1: config 0 descriptor?? [ 119.656303][ T900] usb 2-1: USB disconnect, device number 9 [ 119.985030][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x3 [ 119.996714][ T9] plantronics 0003:047F:FFFF.0006: report_id 52442 is invalid [ 120.010891][ T6567] nfs: Unknown parameter 'Zz-#FÇ<æõ]%gCžÊ [ 120.010891][ T6567] SÃȘØÈžZ§6ŸÂ' [ 120.012729][ T9] plantronics 0003:047F:FFFF.0006: item 0 2 1 8 parsing failed [ 120.029408][ T29] audit: type=1400 audit(1733032152.868:370): avc: denied { listen } for pid=6566 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.043120][ T9] plantronics 0003:047F:FFFF.0006: parse failed [ 120.087081][ T29] audit: type=1400 audit(1733032152.898:371): avc: denied { accept } for pid=6566 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.159448][ T29] audit: type=1400 audit(1733032152.898:372): avc: denied { create } for pid=6566 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.233107][ T9] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 120.246766][ T29] audit: type=1400 audit(1733032152.898:373): avc: denied { write } for pid=6566 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.162868][ T29] audit: type=1400 audit(1733032152.898:374): avc: denied { ioctl } for pid=6566 comm="syz.2.178" path="socket:[10375]" dev="sockfs" ino=10375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.651079][ T6590] FAULT_INJECTION: forcing a failure. [ 121.651079][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 121.664126][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.3.184 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 121.674392][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.684454][ T6590] Call Trace: [ 121.687737][ T6590] [ 121.690670][ T6590] dump_stack_lvl+0x16c/0x1f0 [ 121.695365][ T6590] should_fail_ex+0x497/0x5b0 [ 121.700064][ T6590] ? trace_lock_acquire+0x14e/0x1f0 [ 121.705286][ T6590] should_failslab+0xc2/0x120 [ 121.709978][ T6590] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 121.715366][ T6590] ? __nf_conntrack_alloc+0xd1/0x5e0 [ 121.720672][ T6590] __nf_conntrack_alloc+0xd1/0x5e0 [ 121.725806][ T6590] init_conntrack.constprop.0+0xd3e/0x1080 [ 121.731644][ T6590] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 121.737909][ T6590] ? ip6t_do_table+0xd50/0x1d40 [ 121.742773][ T6590] nf_conntrack_in+0xafb/0x1850 [ 121.747651][ T6590] ? __pfx_nf_conntrack_in+0x10/0x10 [ 121.752946][ T6590] ? ip6t_do_table+0x54/0x1d40 [ 121.757700][ T6590] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 121.763145][ T6590] nf_hook_slow+0xbb/0x200 [ 121.767547][ T6590] nf_hook.constprop.0+0x42e/0x750 [ 121.772652][ T6590] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 121.777856][ T6590] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 121.783474][ T6590] ? sock_wfree+0x11c/0x880 [ 121.787981][ T6590] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 121.793169][ T6590] ? __pfx_ipv6_rcv+0x10/0x10 [ 121.797928][ T6590] ipv6_rcv+0xa4/0x680 [ 121.801984][ T6590] ? __pfx_ipv6_rcv+0x10/0x10 [ 121.806651][ T6590] __netif_receive_skb_one_core+0x12e/0x1e0 [ 121.812538][ T6590] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 121.818962][ T6590] ? rcu_is_watching+0x12/0xc0 [ 121.823724][ T6590] ? ktime_get_with_offset+0x273/0x3a0 [ 121.829447][ T6590] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.834738][ T6590] ? netif_receive_skb+0x109/0x7b0 [ 121.839853][ T6590] __netif_receive_skb+0x1d/0x160 [ 121.844876][ T6590] netif_receive_skb+0x13f/0x7b0 [ 121.849802][ T6590] ? __pfx_netif_receive_skb+0x10/0x10 [ 121.855251][ T6590] ? __pfx___lock_acquire+0x10/0x10 [ 121.860541][ T6590] tun_rx_batched.isra.0+0x3eb/0x730 [ 121.865844][ T6590] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 121.871664][ T6590] ? tun_get_user+0x13e6/0x3e40 [ 121.876505][ T6590] ? lock_acquire+0x2f/0xb0 [ 121.880999][ T6590] ? tun_get_user+0x13e6/0x3e40 [ 121.885842][ T6590] tun_get_user+0x2a16/0x3e40 [ 121.890521][ T6590] ? find_held_lock+0x2d/0x110 [ 121.895277][ T6590] ? __pfx_tun_get_user+0x10/0x10 [ 121.900290][ T6590] ? find_held_lock+0x2d/0x110 [ 121.905058][ T6590] ? __pfx_lock_release+0x10/0x10 [ 121.910073][ T6590] tun_chr_write_iter+0xdc/0x210 [ 121.915002][ T6590] vfs_write+0x5ae/0x1150 [ 121.919314][ T6590] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 121.924856][ T6590] ? __pfx_vfs_write+0x10/0x10 [ 121.929616][ T6590] ? __fget_files+0x40/0x3a0 [ 121.934210][ T6590] ksys_write+0x12b/0x250 [ 121.938521][ T6590] ? __pfx_ksys_write+0x10/0x10 [ 121.943355][ T6590] do_syscall_64+0xcd/0x250 [ 121.947854][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.953743][ T6590] RIP: 0033:0x7f66d7f7f2ff [ 121.958167][ T6590] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 121.977776][ T6590] RSP: 002b:00007f66d5df6020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 121.986207][ T6590] RAX: ffffffffffffffda RBX: 00007f66d8146080 RCX: 00007f66d7f7f2ff [ 121.994209][ T6590] RDX: 0000000000000047 RSI: 0000000020000fc0 RDI: 00000000000000c8 [ 122.002185][ T6590] RBP: 00007f66d5df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.010140][ T6590] R10: 0000000000000047 R11: 0000000000000293 R12: 0000000000000001 [ 122.018094][ T6590] R13: 0000000000000001 R14: 00007f66d8146080 R15: 00007ffd2ac52f78 [ 122.026060][ T6590] [ 122.046578][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.059183][ T900] IPVS: starting estimator thread 0... [ 122.191289][ T6594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.183'. [ 122.218893][ T29] audit: type=1400 audit(1733032155.048:375): avc: denied { mount } for pid=6580 comm="syz.0.183" name="/" dev="hugetlbfs" ino=10480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.243492][ T6593] IPVS: using max 27 ests per chain, 64800 per kthread [ 122.639181][ T29] audit: type=1400 audit(1733032155.058:376): avc: denied { create } for pid=6580 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.672748][ T29] audit: type=1400 audit(1733032155.118:377): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.747318][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.759834][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.784799][ T900] usb 5-1: USB disconnect, device number 5 [ 122.805054][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.775980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.804641][ T9] usb 2-1: config 0 descriptor?? [ 123.809854][ T29] audit: type=1400 audit(1733032156.638:378): avc: denied { write } for pid=6605 comm="syz.0.188" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.315001][ T29] audit: type=1400 audit(1733032157.148:379): avc: denied { execute } for pid=6599 comm="syz.4.187" path="/48/cpu.stat" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.613158][ T6612] sctp: [Deprecated]: syz.0.188 (pid 6612) Use of int in max_burst socket option. [ 124.613158][ T6612] Use struct sctp_assoc_value instead [ 125.554025][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 125.743871][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.753995][ T9] usb 2-1: USB disconnect, device number 10 [ 126.362567][ T29] audit: type=1400 audit(1733032159.198:380): avc: denied { accept } for pid=6619 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 127.257155][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=6623 comm=syz.2.189 [ 128.255664][ T6651] Bluetooth: MGMT ver 1.23 [ 128.431962][ T6658] overlayfs: workdir and upperdir must be separate subtrees [ 128.692906][ T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 128.714363][ T6660] netlink: 'syz.0.199': attribute type 3 has an invalid length. [ 128.722103][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 128.954251][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.965341][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.332228][ T51] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.346194][ T6677] netlink: 296 bytes leftover after parsing attributes in process `syz.3.204'. [ 129.349520][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.380264][ T51] usb 2-1: config 0 descriptor?? [ 129.523058][ T29] audit: type=1400 audit(1733032162.368:381): avc: denied { bind } for pid=6669 comm="syz.3.204" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.182243][ T29] audit: type=1400 audit(1733032163.018:382): avc: denied { read } for pid=6688 comm="syz.2.209" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.257562][ T6693] FAULT_INJECTION: forcing a failure. [ 130.257562][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.260794][ T29] audit: type=1400 audit(1733032163.018:383): avc: denied { open } for pid=6688 comm="syz.2.209" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.297987][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.211 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 130.308295][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.310193][ T51] hid (null): bogus close delimiter [ 130.318366][ T6693] Call Trace: [ 130.318380][ T6693] [ 130.318388][ T6693] dump_stack_lvl+0x16c/0x1f0 [ 130.318416][ T6693] should_fail_ex+0x497/0x5b0 [ 130.318445][ T6693] _copy_from_iter+0x2a1/0x1560 [ 130.318464][ T6693] ? trace_lock_acquire+0x14e/0x1f0 [ 130.318489][ T6693] ? __alloc_skb+0x1fe/0x380 [ 130.318517][ T6693] ? __pfx__copy_from_iter+0x10/0x10 [ 130.318535][ T6693] ? __virt_addr_valid+0x1a4/0x590 [ 130.318563][ T6693] ? __virt_addr_valid+0x5e/0x590 [ 130.318586][ T6693] ? __phys_addr_symbol+0x30/0x80 [ 130.318611][ T6693] ? __check_object_size+0x488/0x710 [ 130.318639][ T6693] netlink_sendmsg+0x813/0xd70 [ 130.318667][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.318700][ T6693] ____sys_sendmsg+0xaaf/0xc90 [ 130.394401][ T6693] ? copy_msghdr_from_user+0x10b/0x160 [ 130.399874][ T6693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.405173][ T6693] ? __lock_acquire+0xcc5/0x3c40 [ 130.410136][ T6693] ___sys_sendmsg+0x135/0x1e0 [ 130.414825][ T6693] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.420056][ T6693] ? trace_lock_acquire+0x14e/0x1f0 [ 130.425288][ T6693] __sys_sendmmsg+0x201/0x420 [ 130.429989][ T6693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.435393][ T6693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.441454][ T6693] ? fput+0x67/0x440 [ 130.445412][ T6693] ? ksys_write+0x1ba/0x250 [ 130.450305][ T6693] ? __pfx_ksys_write+0x10/0x10 [ 130.455285][ T6693] __x64_sys_sendmmsg+0x9c/0x100 [ 130.460243][ T6693] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.465497][ T6693] do_syscall_64+0xcd/0x250 [ 130.470029][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.476042][ T6693] RIP: 0033:0x7fb1c5780849 [ 130.480474][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.500285][ T6693] RSP: 002b:00007fb1c65ae058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.508723][ T6693] RAX: ffffffffffffffda RBX: 00007fb1c5945fa0 RCX: 00007fb1c5780849 [ 130.516799][ T6693] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 130.524786][ T6693] RBP: 00007fb1c65ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.532766][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.540748][ T6693] R13: 0000000000000000 R14: 00007fb1c5945fa0 R15: 00007ffd74f06868 [ 130.548759][ T6693] [ 130.560342][ T51] usb 2-1: language id specifier not provided by device, defaulting to English [ 130.666697][ T29] audit: type=1400 audit(1733032163.508:384): avc: denied { listen } for pid=6697 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.749958][ T29] audit: type=1400 audit(1733032163.548:385): avc: denied { accept } for pid=6697 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.953288][ T29] audit: type=1400 audit(1733032163.788:386): avc: denied { write } for pid=6703 comm="syz.0.214" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 131.558134][ T29] audit: type=1400 audit(1733032164.398:387): avc: denied { compute_member } for pid=6703 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.658514][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 131.666676][ T9] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 131.675476][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 131.683417][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x6 [ 131.690817][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 131.693789][ T29] audit: type=1400 audit(1733032164.428:388): avc: denied { read write } for pid=6703 comm="syz.0.214" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.713484][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.730403][ T29] audit: type=1400 audit(1733032164.428:389): avc: denied { open } for pid=6703 comm="syz.0.214" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.773342][ T51] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 131.782176][ T51] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 131.790437][ T51] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 131.798606][ T51] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 131.806198][ T51] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 131.910804][ T51] usb 2-1: USB disconnect, device number 11 [ 131.985641][ T6713] FAULT_INJECTION: forcing a failure. [ 131.985641][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.998824][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.4.216 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 132.009072][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.019136][ T6713] Call Trace: [ 132.022432][ T6713] [ 132.025361][ T6713] dump_stack_lvl+0x16c/0x1f0 [ 132.030047][ T6713] should_fail_ex+0x497/0x5b0 [ 132.034740][ T6713] _copy_from_iter+0x2a1/0x1560 [ 132.039598][ T6713] ? preempt_schedule_common+0x44/0xc0 [ 132.045066][ T6713] ? __pfx__copy_from_iter+0x10/0x10 [ 132.050350][ T6713] ? __virt_addr_valid+0x2d3/0x590 [ 132.055469][ T6713] ? __virt_addr_valid+0x2e0/0x590 [ 132.060591][ T6713] ? __virt_addr_valid+0x5e/0x590 [ 132.065622][ T6713] ? __phys_addr_symbol+0x30/0x80 [ 132.070660][ T6713] ? __check_object_size+0x488/0x710 [ 132.075957][ T6713] netlink_sendmsg+0x813/0xd70 [ 132.080732][ T6713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.086028][ T6713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.091329][ T6713] ____sys_sendmsg+0xaaf/0xc90 [ 132.096101][ T6713] ? copy_msghdr_from_user+0x10b/0x160 [ 132.101574][ T6713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.106875][ T6713] ___sys_sendmsg+0x135/0x1e0 [ 132.111555][ T6713] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.116773][ T6713] ? __pfx_lock_release+0x10/0x10 [ 132.121800][ T6713] ? trace_lock_acquire+0x14e/0x1f0 [ 132.127019][ T6713] ? __fget_files+0x206/0x3a0 [ 132.131710][ T6713] __sys_sendmsg+0x16e/0x220 [ 132.136303][ T6713] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.141433][ T6713] do_syscall_64+0xcd/0x250 [ 132.145946][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.151845][ T6713] RIP: 0033:0x7f2bccb80849 [ 132.156260][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.175870][ T6713] RSP: 002b:00007f2bcd96f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.184285][ T6713] RAX: ffffffffffffffda RBX: 00007f2bccd46160 RCX: 00007f2bccb80849 [ 132.192254][ T6713] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 132.200411][ T6713] RBP: 00007f2bcd96f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.208394][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.216395][ T6713] R13: 0000000000000000 R14: 00007f2bccd46160 R15: 00007ffd994a8ce8 [ 132.224379][ T6713] [ 132.263223][ T1215] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.422979][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 132.430774][ T1215] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 132.440339][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.457561][ T1215] usb 3-1: config 0 descriptor?? [ 132.472801][ T5904] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 132.616611][ T6715] FAULT_INJECTION: forcing a failure. [ 132.616611][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 132.639802][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.1.217 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 132.650088][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.660156][ T6715] Call Trace: [ 132.663475][ T6715] [ 132.666412][ T6715] dump_stack_lvl+0x16c/0x1f0 [ 132.671104][ T6715] should_fail_ex+0x497/0x5b0 [ 132.675810][ T6715] ? fs_reclaim_acquire+0xae/0x150 [ 132.680909][ T6715] should_failslab+0xc2/0x120 [ 132.685567][ T6715] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 132.690920][ T6715] ? alloc_empty_file+0x73/0x1e0 [ 132.695860][ T6715] alloc_empty_file+0x73/0x1e0 [ 132.700633][ T6715] path_openat+0xe1/0x2d60 [ 132.705040][ T6715] ? hlock_class+0x4e/0x130 [ 132.709558][ T6715] ? __lock_acquire+0x15a9/0x3c40 [ 132.714601][ T6715] ? __pfx_path_openat+0x10/0x10 [ 132.717056][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 132.719538][ T6715] ? __pfx___lock_acquire+0x10/0x10 [ 132.736376][ T6715] ? lock_acquire.part.0+0x11b/0x380 [ 132.738042][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 17151, setting to 64 [ 132.741748][ T6715] ? find_held_lock+0x2d/0x110 [ 132.757452][ T6715] do_filp_open+0x20c/0x470 [ 132.759218][ T5904] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 132.761947][ T6715] ? __pfx_do_filp_open+0x10/0x10 [ 132.771214][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.775934][ T6715] ? find_held_lock+0x2d/0x110 [ 132.775980][ T6715] ? alloc_fd+0x41f/0x760 [ 132.776006][ T6715] do_sys_openat2+0x17a/0x1e0 [ 132.776032][ T6715] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.776056][ T6715] ? __might_fault+0xe3/0x190 [ 132.776083][ T6715] ? __might_fault+0xe3/0x190 [ 132.776114][ T6715] __do_sys_openat2+0x1c1/0x2d0 [ 132.776139][ T6715] ? __pfx___do_sys_openat2+0x10/0x10 [ 132.776163][ T6715] ? ksys_write+0x1ba/0x250 [ 132.776191][ T6715] do_syscall_64+0xcd/0x250 [ 132.776219][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.776245][ T6715] RIP: 0033:0x7f71ed980849 [ 132.776262][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.776281][ T6715] RSP: 002b:00007f71ee700058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 132.776302][ T6715] RAX: ffffffffffffffda RBX: 00007f71edb45fa0 RCX: 00007f71ed980849 [ 132.776317][ T6715] RDX: 0000000020000380 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 132.776331][ T6715] RBP: 00007f71ee7000a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.776344][ T6715] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 132.776356][ T6715] R13: 0000000000000000 R14: 00007f71edb45fa0 R15: 00007ffc51599c08 [ 132.776381][ T6715] [ 132.849436][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.925866][ T1215] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 132.935863][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.112615][ T1215] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 134.317836][ T1215] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 134.352397][ T5904] usb 1-1: Product: syz [ 134.685523][ T5904] usb 1-1: Manufacturer: syz [ 134.685910][ T1215] asix 3-1:0.0: probe with driver asix failed with error -71 [ 134.700218][ T5904] usb 1-1: SerialNumber: syz [ 134.721094][ T1215] usb 3-1: USB disconnect, device number 5 [ 134.938110][ T5904] usb 1-1: config 0 descriptor?? [ 134.953296][ T5904] usb 1-1: can't set config #0, error -71 [ 134.989462][ T6729] TCP: out of memory -- consider tuning tcp_mem [ 135.002128][ T5904] usb 1-1: USB disconnect, device number 5 [ 135.045295][ T29] audit: type=1400 audit(1733032167.888:390): avc: denied { read } for pid=6726 comm="syz.0.220" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.071556][ T6733] binder: 6728:6733 ioctl 4018620d 0 returned -22 [ 135.086411][ T29] audit: type=1400 audit(1733032167.888:391): avc: denied { open } for pid=6726 comm="syz.0.220" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.438441][ T29] audit: type=1400 audit(1733032168.278:392): avc: denied { create } for pid=6744 comm="syz.2.226" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.077041][ T6750] netlink: 14 bytes leftover after parsing attributes in process `syz.0.227'. [ 136.137818][ T29] audit: type=1400 audit(1733032168.968:393): avc: denied { getopt } for pid=6749 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.431432][ T6752] bridge0: port 3(erspan0) entered blocking state [ 136.439224][ T6752] bridge0: port 3(erspan0) entered disabled state [ 136.452804][ T6752] erspan0: entered allmulticast mode [ 136.453357][ T29] audit: type=1400 audit(1733032169.228:394): avc: denied { ioctl } for pid=6744 comm="syz.2.226" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.463338][ T6752] erspan0: entered promiscuous mode [ 136.493776][ T6752] bridge0: port 3(erspan0) entered blocking state [ 136.500435][ T6752] bridge0: port 3(erspan0) entered forwarding state [ 136.857157][ T6759] binder: 6758:6759 ioctl ae9a 0 returned -22 [ 136.942960][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.052283][ T6765] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 137.060096][ T6765] netlink: 228 bytes leftover after parsing attributes in process `syz.3.231'. [ 137.138292][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.239020][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.608447][ T6767] FAULT_INJECTION: forcing a failure. [ 137.608447][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.622038][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.0.232 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 137.632305][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.642347][ T6767] Call Trace: [ 137.645621][ T6767] [ 137.648577][ T6767] dump_stack_lvl+0x16c/0x1f0 [ 137.653249][ T6767] should_fail_ex+0x497/0x5b0 [ 137.657917][ T6767] _copy_from_user+0x2e/0xd0 [ 137.662508][ T6767] kstrtouint_from_user+0xd7/0x1c0 [ 137.667609][ T6767] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 137.673334][ T6767] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 137.678972][ T6767] proc_fail_nth_write+0x84/0x250 [ 137.683993][ T6767] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.689662][ T6767] ? ksys_write+0x12b/0x250 [ 137.694151][ T6767] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.699785][ T6767] vfs_write+0x24c/0x1150 [ 137.704277][ T6767] ? __fget_files+0x1fc/0x3a0 [ 137.708945][ T6767] ? __pfx___mutex_lock+0x10/0x10 [ 137.713986][ T6767] ? __pfx_vfs_write+0x10/0x10 [ 137.718782][ T6767] ? __fget_files+0x206/0x3a0 [ 137.723465][ T6767] ksys_write+0x12b/0x250 [ 137.727792][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 137.732640][ T6767] do_syscall_64+0xcd/0x250 [ 137.737143][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.743035][ T6767] RIP: 0033:0x7fb1c577f2ff [ 137.747441][ T6767] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 137.767048][ T6767] RSP: 002b:00007fb1c65ae050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 137.775463][ T6767] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1c577f2ff [ 137.783425][ T6767] RDX: 0000000000000001 RSI: 00007fb1c65ae0b0 RDI: 0000000000000004 [ 137.791400][ T6767] RBP: 00007fb1c65ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.799378][ T6767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 137.807788][ T6767] R13: 0000000000000000 R14: 00007fb1c5945fa0 R15: 00007ffd74f06868 [ 137.815764][ T6767] [ 137.832866][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.840304][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.862868][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.870380][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.877935][ T29] audit: type=1400 audit(1733032170.678:395): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.908365][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 137.915268][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.933984][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.935273][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 137.959660][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.976789][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.994734][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 137.996890][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 138.014328][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.016681][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.031674][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.050179][ T5904] usb 5-1: Product: syz [ 138.052636][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.065218][ T5904] usb 5-1: Manufacturer: syz [ 138.080343][ T5904] usb 5-1: SerialNumber: syz [ 138.108083][ T5904] usb 5-1: config 0 descriptor?? [ 138.147450][ T5904] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 138.242771][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.250320][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.908433][ T5904] gspca_zc3xx: reg_w_i err -110 [ 138.961921][ T29] audit: type=1400 audit(1733032171.208:396): avc: denied { getopt } for pid=6775 comm="syz.1.236" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.043947][ T6768] TCP: out of memory -- consider tuning tcp_mem [ 139.052741][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.060168][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.068540][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.076468][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.084357][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.091753][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.101625][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.372752][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.380204][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.402761][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.410202][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.432738][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.440150][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.478418][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.497136][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.517310][ T1215] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.522832][ T5904] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 139.530999][ T5904] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 139.554587][ T1215] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.797272][ T6798] FAULT_INJECTION: forcing a failure. [ 139.797272][ T6798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.885147][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz.3.241 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 139.895423][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.905487][ T6798] Call Trace: [ 139.908765][ T6798] [ 139.911695][ T6798] dump_stack_lvl+0x16c/0x1f0 [ 139.916386][ T6798] should_fail_ex+0x497/0x5b0 [ 139.921082][ T6798] _copy_from_user+0x2e/0xd0 [ 139.925676][ T6798] bpf_test_init.isra.0+0xf1/0x150 [ 139.931315][ T6798] bpf_prog_test_run_xdp+0x4f0/0x1580 [ 139.936710][ T6798] ? lock_acquire+0x2f/0xb0 [ 139.941225][ T6798] ? __fget_files+0x40/0x3a0 [ 139.945827][ T6798] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.951653][ T6798] ? __fget_files+0x206/0x3a0 [ 139.956345][ T6798] ? fput+0x67/0x440 [ 139.960249][ T6798] ? __bpf_prog_get+0xa0/0x290 [ 139.965018][ T6798] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.970831][ T6798] __sys_bpf+0xfc6/0x49c0 [ 139.975167][ T6798] ? __pfx_lock_release+0x10/0x10 [ 139.980194][ T6798] ? __pfx___sys_bpf+0x10/0x10 [ 139.984965][ T6798] ? vfs_write+0x306/0x1150 [ 139.989480][ T6798] ? __mutex_unlock_slowpath+0x164/0x690 [ 139.995145][ T6798] ? fput+0x67/0x440 [ 139.999073][ T6798] ? ksys_write+0x1ba/0x250 [ 140.003586][ T6798] ? __pfx_ksys_write+0x10/0x10 [ 140.008460][ T6798] __x64_sys_bpf+0x78/0xc0 [ 140.012895][ T6798] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.018109][ T6798] do_syscall_64+0xcd/0x250 [ 140.022626][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.028619][ T6798] RIP: 0033:0x7f66d7f80849 [ 140.033040][ T6798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.052662][ T6798] RSP: 002b:00007f66d8cb9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.061089][ T6798] RAX: ffffffffffffffda RBX: 00007f66d8145fa0 RCX: 00007f66d7f80849 [ 140.069079][ T6798] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a [ 140.077070][ T6798] RBP: 00007f66d8cb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.085060][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.093043][ T6798] R13: 0000000000000000 R14: 00007f66d8145fa0 R15: 00007ffd2ac52f78 [ 140.101057][ T6798] [ 140.329468][ T6804] process 'syz.0.242' launched './file0' with NULL argv: empty string added [ 140.466371][ T29] audit: type=1400 audit(1733032172.978:397): avc: denied { wake_alarm } for pid=6801 comm="syz.0.242" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.548560][ T29] audit: type=1400 audit(1733032173.178:398): avc: denied { execute_no_trans } for pid=6801 comm="syz.0.242" path="/48/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.634913][ T29] audit: type=1400 audit(1733032173.478:399): avc: denied { map } for pid=6807 comm="syz.2.243" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.650600][ T5816] usb 5-1: USB disconnect, device number 6 [ 140.685198][ T29] audit: type=1400 audit(1733032173.488:400): avc: denied { read write } for pid=6807 comm="syz.2.243" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.904851][ T29] audit: type=1400 audit(1733032173.668:401): avc: denied { map } for pid=6811 comm="syz.4.245" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 141.256062][ T29] audit: type=1400 audit(1733032173.898:402): avc: denied { write } for pid=6816 comm="syz.2.247" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.185041][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.307874][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.412839][ T29] audit: type=1400 audit(1733032175.198:403): avc: denied { append } for pid=6821 comm="syz.1.248" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.532948][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.732915][ T29] audit: type=1400 audit(1733032175.198:404): avc: denied { create } for pid=6821 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.754623][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 142.775396][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.775433][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.775458][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.775496][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.775522][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.777448][ T5904] usb 5-1: config 0 descriptor?? [ 142.962810][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.231645][ T5904] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 143.260788][ T5904] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input6 [ 143.507854][ T29] audit: type=1400 audit(1733032176.338:405): avc: denied { mount } for pid=6850 comm="syz.3.254" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.510483][ T5904] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 143.575796][ T5904] usb 5-1: USB disconnect, device number 7 [ 144.078329][ T29] audit: type=1400 audit(1733032176.918:406): avc: denied { accept } for pid=6856 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 144.446764][ T6871] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.260'. [ 145.127184][ T5904] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.299262][ T5904] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 147.308407][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.363940][ T5904] usb 4-1: config 0 descriptor?? [ 147.594175][ T5904] usb 4-1: can't set config #0, error -71 [ 147.789858][ T5904] usb 4-1: USB disconnect, device number 5 [ 148.013809][ T6896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.272916][ T1215] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.643734][ T6911] nvme_fabrics: missing parameter 'transport=%s' [ 149.650425][ T6911] nvme_fabrics: missing parameter 'nqn=%s' [ 149.814513][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.825894][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.848020][ T1215] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.877762][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.909982][ T1215] usb 4-1: config 0 descriptor?? [ 150.000575][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.951675][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 150.959205][ T5904] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.013014][ T5904] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.074294][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.103970][ T6927] afs: Unknown parameter 'd' [ 151.131000][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.149092][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.159728][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.169379][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.180193][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.476894][ T1215] usb 4-1: language id specifier not provided by device, defaulting to English [ 151.689847][ T1215] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 151.709907][ T5904] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.715206][ T1215] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 151.719145][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.753546][ T6934] netlink: 'syz.1.273': attribute type 3 has an invalid length. [ 151.765552][ T1215] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 151.811482][ T1215] usb 4-1: USB disconnect, device number 6 [ 151.836717][ T5904] usb 3-1: config 0 descriptor?? [ 151.874001][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 151.966439][ T5904] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.980352][ T5904] usb 3-1: USB disconnect, device number 6 [ 152.001440][ T5904] usblp0: removed [ 152.623619][ T6945] netlink: 14 bytes leftover after parsing attributes in process `syz.4.277'. [ 152.844008][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 152.844025][ T29] audit: type=1400 audit(1733032185.678:408): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 153.101162][ T6949] input: syz1 as /devices/virtual/input/input7 [ 153.369047][ T6944] netlink: 'syz.2.276': attribute type 3 has an invalid length. [ 153.992884][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 154.158292][ T6969] FAULT_INJECTION: forcing a failure. [ 154.158292][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.202861][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.4.284 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 154.213180][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.223250][ T6969] Call Trace: [ 154.226541][ T6969] [ 154.229486][ T6969] dump_stack_lvl+0x16c/0x1f0 [ 154.234180][ T6969] should_fail_ex+0x497/0x5b0 [ 154.238884][ T6969] _copy_from_iter+0x2a1/0x1560 [ 154.243747][ T6969] ? trace_lock_acquire+0x14e/0x1f0 [ 154.248971][ T6969] ? __pfx__copy_from_iter+0x10/0x10 [ 154.254262][ T6969] ? __virt_addr_valid+0x1a4/0x590 [ 154.259379][ T6969] ? __virt_addr_valid+0x5e/0x590 [ 154.264405][ T6969] ? const_folio_flags.constprop.0+0x56/0x150 [ 154.270465][ T6969] ? __phys_addr_symbol+0x30/0x80 [ 154.275480][ T6969] ? __check_object_size+0x488/0x710 [ 154.280760][ T6969] netlink_sendmsg+0x813/0xd70 [ 154.285522][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.290803][ T6969] sock_write_iter+0x4fe/0x5b0 [ 154.295562][ T6969] ? __pfx_sock_write_iter+0x10/0x10 [ 154.300847][ T6969] ? bpf_lsm_file_permission+0x9/0x10 [ 154.306207][ T6969] ? security_file_permission+0x71/0x210 [ 154.311832][ T6969] vfs_write+0x5ae/0x1150 [ 154.316148][ T6969] ? __pfx_sock_write_iter+0x10/0x10 [ 154.321422][ T6969] ? __pfx_vfs_write+0x10/0x10 [ 154.326173][ T6969] ? __fget_files+0x40/0x3a0 [ 154.330760][ T6969] ksys_write+0x207/0x250 [ 154.335089][ T6969] ? __pfx_ksys_write+0x10/0x10 [ 154.339943][ T6969] do_syscall_64+0xcd/0x250 [ 154.344447][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.350343][ T6969] RIP: 0033:0x7f2bccb80849 [ 154.354750][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.374346][ T6969] RSP: 002b:00007f2bcd9b1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.382750][ T6969] RAX: ffffffffffffffda RBX: 00007f2bccd45fa0 RCX: 00007f2bccb80849 [ 154.390706][ T6969] RDX: 000000000000fe33 RSI: 0000000020000040 RDI: 0000000000000003 [ 154.398664][ T6969] RBP: 00007f2bcd9b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.406621][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.414580][ T6969] R13: 0000000000000000 R14: 00007f2bccd45fa0 R15: 00007ffd994a8ce8 [ 154.422547][ T6969] [ 155.991942][ T6988] syz.4.286: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.009963][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.4.286 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 156.020213][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.030267][ T6988] Call Trace: [ 156.033543][ T6988] [ 156.036475][ T6988] dump_stack_lvl+0x16c/0x1f0 [ 156.041163][ T6988] warn_alloc+0x24d/0x3a0 [ 156.045503][ T6988] ? __pfx_warn_alloc+0x10/0x10 [ 156.050373][ T6988] ? __get_vm_area_node+0x1b0/0x2f0 [ 156.055574][ T6988] ? __get_vm_area_node+0x1dc/0x2f0 [ 156.060780][ T6988] __vmalloc_node_range_noprof+0x1105/0x1530 [ 156.066766][ T6988] ? kasan_save_stack+0x42/0x60 [ 156.071621][ T6988] ? kasan_save_stack+0x33/0x60 [ 156.076491][ T6988] ? xt_alloc_entry_offsets+0x3a/0x60 [ 156.081881][ T6988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.088229][ T6988] ? rcu_is_watching+0x12/0xc0 [ 156.093004][ T6988] ? trace_kmalloc+0x2d/0xd0 [ 156.097618][ T6988] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 156.103359][ T6988] ? xt_alloc_entry_offsets+0x3a/0x60 [ 156.108747][ T6988] __kvmalloc_node_noprof+0x14f/0x1a0 [ 156.114129][ T6988] ? xt_alloc_entry_offsets+0x3a/0x60 [ 156.119524][ T6988] xt_alloc_entry_offsets+0x3a/0x60 [ 156.124746][ T6988] translate_table+0x22e/0x17b0 [ 156.129605][ T6988] ? __might_fault+0x13b/0x190 [ 156.134384][ T6988] ? __pfx_lock_release+0x10/0x10 [ 156.139426][ T6988] ? __pfx_translate_table+0x10/0x10 [ 156.144730][ T6988] ? __might_fault+0xe3/0x190 [ 156.149436][ T6988] do_ip6t_set_ctl+0x605/0xc40 [ 156.154210][ T6988] ? __mutex_lock+0x1cc/0xa60 [ 156.158907][ T6988] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 156.164196][ T6988] ? __mutex_unlock_slowpath+0x164/0x690 [ 156.169839][ T6988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.175849][ T6988] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 156.181845][ T6988] nf_setsockopt+0x8a/0xf0 [ 156.186272][ T6988] ipv6_setsockopt+0x135/0x170 [ 156.191043][ T6988] tcp_setsockopt+0xa4/0x100 [ 156.195641][ T6988] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 156.201538][ T6988] do_sock_setsockopt+0x222/0x480 [ 156.206567][ T6988] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.212117][ T6988] ? lock_acquire+0x2f/0xb0 [ 156.216643][ T6988] __sys_setsockopt+0x1a0/0x230 [ 156.221503][ T6988] __x64_sys_setsockopt+0xbd/0x160 [ 156.226613][ T6988] ? syscall_trace_enter+0xf0/0x260 [ 156.231826][ T6988] do_syscall_64+0xcd/0x250 [ 156.236340][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.242241][ T6988] RIP: 0033:0x7f2bccb80849 [ 156.246657][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.266275][ T6988] RSP: 002b:00007f2bcd96f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.274704][ T6988] RAX: ffffffffffffffda RBX: 00007f2bccd46160 RCX: 00007f2bccb80849 [ 156.282687][ T6988] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 156.290670][ T6988] RBP: 00007f2bccbf3986 R08: 0000000000000450 R09: 0000000000000000 [ 156.298655][ T6988] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000000 [ 156.306640][ T6988] R13: 0000000000000000 R14: 00007f2bccd46160 R15: 00007ffd994a8ce8 [ 156.314652][ T6988] [ 156.318446][ T6988] Mem-Info: [ 156.321613][ T6988] active_anon:16948 inactive_anon:0 isolated_anon:0 [ 156.321613][ T6988] active_file:13296 inactive_file:38499 isolated_file:0 [ 156.321613][ T6988] unevictable:1515 dirty:196 writeback:0 [ 156.321613][ T6988] slab_reclaimable:11067 slab_unreclaimable:99025 [ 156.321613][ T6988] mapped:37270 shmem:13074 pagetables:877 [ 156.321613][ T6988] sec_pagetables:0 bounce:0 [ 156.321613][ T6988] kernel_misc_reclaimable:0 [ 156.321613][ T6988] free:1293221 free_pcp:3842 free_cma:0 [ 156.367156][ T6988] Node 0 active_anon:70092kB inactive_anon:0kB active_file:55352kB inactive_file:153920kB unevictable:4524kB isolated(anon):0kB isolated(file):0kB mapped:151324kB dirty:784kB writeback:0kB shmem:53060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:3508kB sec_pagetables:0kB all_unreclaimable? no [ 156.400392][ T6988] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 156.430844][ T6988] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.457968][ T6988] lowmem_reserve[]: 0 2459 2459 0 0 [ 156.463935][ T6988] Node 0 DMA32 free:1270400kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:58488kB inactive_anon:0kB active_file:55352kB inactive_file:153820kB unevictable:4524kB writepending:784kB present:3129332kB managed:2547144kB mlocked:3076kB bounce:0kB free_pcp:3876kB local_pcp:3584kB free_cma:0kB [ 156.495627][ T6988] lowmem_reserve[]: 0 0 0 0 0 [ 156.500699][ T6988] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 156.527449][ T6988] lowmem_reserve[]: 0 0 0 0 0 [ 156.532272][ T6988] Node 1 Normal free:3906536kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 156.561349][ T6988] lowmem_reserve[]: 0 0 0 0 0 [ 156.566148][ T6988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.578896][ T6988] Node 0 DMA32: 2*4kB (UM) 2*8kB (ME) 4*16kB (UME) 60*32kB (UME) 118*64kB (UME) 3*128kB (UE) 29*256kB (M) 20*512kB (UME) 14*1024kB (UME) 6*2048kB (ME) 296*4096kB (UM) = 1266648kB [ 156.597213][ T6988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.609194][ T6988] Node 1 Normal: 172*4kB (UME) 35*8kB (UME) 30*16kB (UE) 180*32kB (UME) 91*64kB (UE) 30*128kB (UME) 16*256kB (UME) 11*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3906536kB [ 156.624871][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 156.627830][ T6988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.646318][ T6988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.655677][ T6988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.665268][ T6988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.674604][ T6988] 63819 total pagecache pages [ 156.679283][ T6988] 0 pages in swap cache [ 156.683531][ T6988] Free swap = 124476kB [ 156.687695][ T6988] Total swap = 124996kB [ 156.692216][ T6988] 2097051 pages RAM [ 156.696545][ T6988] 0 pages HighMem/MovableOnly [ 156.701230][ T6988] 428607 pages reserved [ 156.705491][ T6988] 0 pages cma reserved [ 158.152078][ T7012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.294'. [ 158.333386][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.464647][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.472507][ T5816] usb 3-1: device descriptor read/64, error -71 [ 159.263477][ T51] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 159.275029][ T51] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 159.282912][ T51] usb 2-1: can't read configurations, error -61 [ 159.312805][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.347307][ T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 160.354992][ T5816] usb 3-1: device descriptor read/64, error -71 [ 160.595994][ T5816] usb usb3-port1: attempt power cycle [ 160.840685][ T51] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 160.881086][ T51] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 160.891945][ T51] usb 2-1: can't read configurations, error -61 [ 161.470172][ T51] usb usb2-port1: attempt power cycle [ 161.593493][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.995666][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.998297][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.179697][ T29] audit: type=1400 audit(1733032194.865:409): avc: denied { create } for pid=7050 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 162.212655][ T5816] usb 3-1: device descriptor read/8, error -71 [ 163.893118][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.916355][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 163.930354][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.955457][ T5816] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 163.955544][ T5816] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 163.955604][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.982737][ T5816] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.982939][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.983433][ T5816] usb 3-1: Product: syz [ 163.983491][ T5816] usb 3-1: Manufacturer: syz [ 163.983546][ T5816] usb 3-1: SerialNumber: syz [ 164.246332][ T5816] usb 3-1: 0:2 : does not exist [ 164.254206][ T5816] usb 3-1: USB disconnect, device number 10 [ 164.420539][ T7040] tty tty28: ldisc open failed (-12), clearing slot 27 [ 164.427891][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.542565][ T7071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.309'. [ 166.484843][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.722860][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 166.738671][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 166.748712][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.756825][ T9] usb 1-1: Product: syz [ 166.761157][ T9] usb 1-1: Manufacturer: syz [ 166.765876][ T9] usb 1-1: SerialNumber: syz [ 166.827048][ T9] usb 1-1: config 0 descriptor?? [ 167.141361][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.247301][ T5816] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.259645][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.452799][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 167.461234][ T9] airspy 1-1:0.0: Could not detect board [ 167.471053][ T9] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 167.484404][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.494946][ T5816] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.504819][ T9] usb 1-1: USB disconnect, device number 7 [ 168.064224][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.080918][ T5816] usb 3-1: config 0 descriptor?? [ 168.090158][ T5816] pwc: Askey VC010 type 2 USB webcam detected. [ 169.941061][ T7119] binder: 7117:7119 ioctl 4610 20000500 returned -22 [ 170.907985][ T29] audit: type=1400 audit(1733032203.745:410): avc: denied { bind } for pid=7135 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.259412][ T29] audit: type=1400 audit(1733032203.745:411): avc: denied { listen } for pid=7135 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.193207][ T29] audit: type=1400 audit(1733032203.765:412): avc: denied { write } for pid=7135 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.262340][ T5879] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.650368][ T7155] tmpfs: Bad value for 'mpol' [ 172.769289][ T5879] usb 2-1: config 4 has an invalid interface number: 39 but max is 1 [ 173.234548][ T5879] usb 2-1: config 4 has an invalid interface number: 142 but max is 1 [ 173.264210][ T5816] pwc: send_video_command error -110 [ 173.269537][ T5816] pwc: Failed to set video mode CIF@30 fps; return code = -110 [ 173.277272][ T5879] usb 2-1: config 4 has no interface number 0 [ 173.277294][ T5879] usb 2-1: config 4 has no interface number 1 [ 173.285612][ T5816] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -110 [ 173.290561][ T5879] usb 2-1: too many endpoints for config 4 interface 142 altsetting 253: 145, using maximum allowed: 30 [ 173.310795][ T5879] usb 2-1: config 4 interface 142 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 173.324953][ T5879] usb 2-1: config 4 interface 39 has no altsetting 0 [ 173.332738][ T5879] usb 2-1: config 4 interface 142 has no altsetting 0 [ 173.419714][ T29] audit: type=1400 audit(1733032206.245:413): avc: denied { write } for pid=7157 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.600131][ T5879] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 173.609602][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.617733][ T5879] usb 2-1: Product: syz [ 173.621869][ T5879] usb 2-1: Manufacturer: syz [ 173.626467][ T5879] usb 2-1: SerialNumber: syz [ 173.716548][ T7161] vivid-000: ================= START STATUS ================= [ 173.724763][ T7161] vivid-000: Radio HW Seek Mode: Bounded [ 173.730703][ T7161] vivid-000: Radio Programmable HW Seek: false [ 173.740056][ T7161] vivid-000: RDS Rx I/O Mode: Block I/O [ 173.745827][ T7161] vivid-000: Generate RBDS Instead of RDS: false [ 173.752226][ T7161] vivid-000: RDS Reception: true [ 173.757708][ T7161] vivid-000: RDS Program Type: 0 inactive [ 173.763532][ T7161] vivid-000: RDS PS Name: inactive [ 173.768799][ T7161] vivid-000: RDS Radio Text: inactive [ 173.774476][ T7161] vivid-000: RDS Traffic Announcement: false inactive [ 173.781316][ T7161] vivid-000: RDS Traffic Program: false inactive [ 173.787764][ T7161] vivid-000: RDS Music: false inactive [ 173.793697][ T7161] vivid-000: ================== END STATUS ================== [ 173.802771][ T1215] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.893347][ T7167] bridge0: port 3(erspan0) entered disabled state [ 173.899981][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.907476][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.947694][ T5879] usb 2-1: USB disconnect, device number 15 [ 173.972928][ T7167] bridge0: entered allmulticast mode [ 174.008700][ T7167] erspan0: left allmulticast mode [ 174.014999][ T7167] erspan0: left promiscuous mode [ 174.024078][ T7167] bridge0: port 3(erspan0) entered disabled state [ 174.037566][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 174.056368][ T1215] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 174.103778][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.111851][ T1215] usb 1-1: Product: syz [ 174.487471][ T1215] usb 1-1: Manufacturer: syz [ 174.509810][ T1215] usb 1-1: SerialNumber: syz [ 174.634015][ T1215] usb 1-1: config 0 descriptor?? [ 174.780045][ T7167] bridge_slave_1: left allmulticast mode [ 174.816347][ T7167] bridge_slave_1: left promiscuous mode [ 174.822175][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.921074][ T5879] usb 1-1: USB disconnect, device number 8 [ 175.554645][ T7167] bridge_slave_0: left allmulticast mode [ 175.572432][ T7167] bridge_slave_0: left promiscuous mode [ 175.631772][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.459081][ T29] audit: type=1400 audit(1733032209.295:414): avc: denied { getopt } for pid=7192 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.967189][ T29] audit: type=1400 audit(1733032209.755:415): avc: denied { ioctl } for pid=7192 comm="syz.0.344" path="socket:[12908]" dev="sockfs" ino=12908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.492965][ T5818] Bluetooth: hci2: command tx timeout [ 177.557821][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.568422][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.583742][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.591588][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.601310][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 177.608888][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.480903][ T7205] netlink: 'syz.0.347': attribute type 3 has an invalid length. [ 178.519363][ T29] audit: type=1400 audit(1733032211.335:416): avc: denied { mounton } for pid=7206 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 178.576456][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 178.907865][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 178.916514][ T5816] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.462851][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 179.477049][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.548636][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.608751][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.670280][ T5816] usb 2-1: New USB device found, idVendor=1038, idProduct=1210, bcdDevice= 0.00 [ 179.679678][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.711755][ T5816] usb 2-1: config 0 descriptor?? [ 179.848403][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.891359][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.919222][ T7206] bridge_slave_0: entered allmulticast mode [ 179.942359][ T7206] bridge_slave_0: entered promiscuous mode [ 180.006840][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.991971][ T5834] Bluetooth: hci5: command tx timeout [ 180.998083][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 180.998711][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 181.004143][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 181.988800][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.997275][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.004710][ T7206] bridge_slave_1: entered allmulticast mode [ 182.012178][ T7206] bridge_slave_1: entered promiscuous mode [ 182.513395][ T5816] usbhid 2-1:0.0: can't add hid device: -71 [ 182.522588][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.542826][ T5816] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 182.580379][ T5816] usb 2-1: USB disconnect, device number 16 [ 182.630808][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.793194][ T7251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 183.786119][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.816046][ T54] Bluetooth: hci5: command tx timeout [ 183.995839][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.046578][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 184.550379][ T7206] team0: Port device team_slave_0 added [ 184.565699][ T7206] team0: Port device team_slave_1 added [ 185.378961][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.401449][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.428622][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.442241][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.450051][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.502573][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.581929][ T29] audit: type=1400 audit(1733032218.365:417): avc: denied { map } for pid=7272 comm="syz.3.361" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.627960][ T29] audit: type=1400 audit(1733032218.365:418): avc: denied { execute } for pid=7272 comm="syz.3.361" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.836672][ T29] audit: type=1400 audit(1733032218.675:419): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.934141][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.942954][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.994955][ T54] Bluetooth: hci5: command tx timeout [ 186.173907][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.183133][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.531770][ T29] audit: type=1400 audit(1733032218.675:420): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=3326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.593990][ T29] audit: type=1400 audit(1733032218.675:421): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.630984][ T29] audit: type=1400 audit(1733032218.675:422): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.654477][ T29] audit: type=1400 audit(1733032218.765:423): avc: denied { bind } for pid=7278 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.886229][ T7206] hsr_slave_0: entered promiscuous mode [ 186.893232][ T7206] hsr_slave_1: entered promiscuous mode [ 186.900356][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.456920][ T7206] Cannot create hsr debugfs directory [ 188.002884][ T29] audit: type=1400 audit(1733032220.795:424): avc: denied { read } for pid=7303 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.069838][ T54] Bluetooth: hci5: command tx timeout [ 188.115745][ T29] audit: type=1400 audit(1733032220.795:425): avc: denied { open } for pid=7303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.212843][ T29] audit: type=1400 audit(1733032220.795:426): avc: denied { getattr } for pid=7303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.516478][ T29] audit: type=1400 audit(1733032224.355:427): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.701538][ T29] audit: type=1400 audit(1733032224.465:428): avc: denied { add_name } for pid=7298 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.730753][ T29] audit: type=1400 audit(1733032224.465:429): avc: denied { create } for pid=7298 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.753569][ T29] audit: type=1400 audit(1733032224.465:430): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.779934][ T29] audit: type=1400 audit(1733032224.465:431): avc: denied { append } for pid=7298 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.036325][ T29] audit: type=1400 audit(1733032224.875:432): avc: denied { remove_name } for pid=7341 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.206542][ T29] audit: type=1400 audit(1733032224.945:433): avc: denied { unlink } for pid=7341 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.025857][ T1215] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.078285][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.091330][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 193.108084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.120415][ T12] bond0 (unregistering): Released all slaves [ 193.194092][ T1215] usb 2-1: Using ep0 maxpacket: 16 [ 193.214207][ T1215] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 193.259743][ T1215] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.295482][ T1215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.309186][ T1215] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.324322][ T1215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.336823][ T1215] usb 2-1: Product: syz [ 193.341145][ T1215] usb 2-1: Manufacturer: syz [ 193.383184][ T1215] usb 2-1: SerialNumber: syz [ 194.084049][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 194.162052][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 194.174814][ T1215] usb 2-1: 0:2 : does not exist [ 194.241943][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.248409][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.403140][ T1215] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 194.440799][ T7359] xfrm1: entered promiscuous mode [ 194.446191][ T1215] usb 2-1: USB disconnect, device number 17 [ 194.654729][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.308447][ T12] hsr_slave_0: left promiscuous mode [ 197.499606][ T12] hsr_slave_1: left promiscuous mode [ 197.512767][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.520218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.539149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.566473][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 197.576247][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 197.583042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.665990][ T12] veth1_macvtap: left promiscuous mode [ 197.681194][ T12] veth0_macvtap: left promiscuous mode [ 197.690457][ T12] veth1_vlan: left promiscuous mode [ 197.703536][ T12] veth0_vlan: left promiscuous mode [ 198.847636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.886372][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.483249][ T29] audit: type=1400 audit(1733032232.275:434): avc: denied { read } for pid=7424 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.505745][ T29] audit: type=1400 audit(1733032232.295:435): avc: denied { bind } for pid=7426 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 199.569989][ T7206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.673832][ T29] audit: type=1400 audit(1733032232.295:436): avc: denied { name_bind } for pid=7426 comm="syz.0.392" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 199.709397][ T7206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.785643][ T7436] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 199.824790][ T29] audit: type=1400 audit(1733032232.295:437): avc: denied { node_bind } for pid=7426 comm="syz.0.392" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 199.870886][ T7206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.905920][ T7206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.918044][ T29] audit: type=1400 audit(1733032232.305:438): avc: denied { listen } for pid=7426 comm="syz.0.392" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 199.945305][ T7436] loop2: detected capacity change from 0 to 7 [ 200.029993][ T29] audit: type=1400 audit(1733032232.305:439): avc: denied { connect } for pid=7426 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 200.086551][ T7439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7439 comm=syz.2.394 [ 200.139915][ T29] audit: type=1400 audit(1733032232.305:440): avc: denied { name_connect } for pid=7426 comm="syz.0.392" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 200.333017][ T29] audit: type=1400 audit(1733032232.305:441): avc: denied { accept } for pid=7426 comm="syz.0.392" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 200.416503][ T29] audit: type=1400 audit(1733032232.305:442): avc: denied { read } for pid=7426 comm="syz.0.392" laddr=127.0.0.1 lport=40518 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 200.880322][ T29] audit: type=1400 audit(1733032232.385:443): avc: denied { write } for pid=7426 comm="syz.0.392" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=40518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 200.903126][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.125125][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.495576][ T7460] FAULT_INJECTION: forcing a failure. [ 201.495576][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.522510][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.529648][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.539316][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.546469][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.572861][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.2.397 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 201.583135][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.593202][ T7460] Call Trace: [ 201.596495][ T7460] [ 201.599439][ T7460] dump_stack_lvl+0x16c/0x1f0 [ 201.604137][ T7460] should_fail_ex+0x497/0x5b0 [ 201.608847][ T7460] _copy_from_user+0x2e/0xd0 [ 201.613454][ T7460] get_user_ifreq+0xf1/0x250 [ 201.617809][ T12] IPVS: stop unused estimator thread 0... [ 201.618040][ T7460] sock_ioctl+0x58c/0x6c0 [ 201.628195][ T7460] ? __pfx_sock_ioctl+0x10/0x10 [ 201.633063][ T7460] ? selinux_file_ioctl+0x180/0x270 [ 201.638267][ T7460] ? selinux_file_ioctl+0xb4/0x270 [ 201.643381][ T7460] ? __pfx_sock_ioctl+0x10/0x10 [ 201.648234][ T7460] __x64_sys_ioctl+0x190/0x200 [ 201.653003][ T7460] do_syscall_64+0xcd/0x250 [ 201.657522][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.663414][ T7460] RIP: 0033:0x7f477f180849 [ 201.667829][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.687690][ T7460] RSP: 002b:00007f477ff99058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.696096][ T7460] RAX: ffffffffffffffda RBX: 00007f477f345fa0 RCX: 00007f477f180849 [ 201.704054][ T7460] RDX: 0000000020000440 RSI: 00000000000089f3 RDI: 0000000000000003 [ 201.712011][ T7460] RBP: 00007f477ff990a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.719966][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.727942][ T7460] R13: 0000000000000000 R14: 00007f477f345fa0 R15: 00007ffd5bcd0e18 [ 201.735908][ T7460] [ 201.745773][ T7206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.772494][ T7206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.180049][ T7474] FAULT_INJECTION: forcing a failure. [ 202.180049][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 202.193144][ T7474] CPU: 0 UID: 0 PID: 7474 Comm: syz.1.400 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 202.203409][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.213491][ T7474] Call Trace: [ 202.216764][ T7474] [ 202.219674][ T7474] dump_stack_lvl+0x16c/0x1f0 [ 202.224337][ T7474] should_fail_ex+0x497/0x5b0 [ 202.228995][ T7474] ? fs_reclaim_acquire+0xae/0x150 [ 202.234096][ T7474] should_failslab+0xc2/0x120 [ 202.238755][ T7474] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 202.244108][ T7474] ? security_file_alloc+0x34/0x2b0 [ 202.249292][ T7474] security_file_alloc+0x34/0x2b0 [ 202.254316][ T7474] init_file+0x93/0x480 [ 202.258490][ T7474] alloc_empty_file+0x91/0x1e0 [ 202.263254][ T7474] path_openat+0xe1/0x2d60 [ 202.267671][ T7474] ? getname+0x8d/0xe0 [ 202.271718][ T7474] ? filter_irq_stacks+0x5a/0x90 [ 202.276637][ T7474] ? __pfx_path_openat+0x10/0x10 [ 202.281552][ T7474] ? __pfx_stack_trace_save+0x10/0x10 [ 202.286907][ T7474] ? stack_depot_save_flags+0x28/0x8f0 [ 202.292355][ T7474] do_filp_open+0x20c/0x470 [ 202.296837][ T7474] ? __pfx_do_filp_open+0x10/0x10 [ 202.301851][ T7474] ? __virt_addr_valid+0x2b4/0x590 [ 202.306950][ T7474] ? __pfx_lock_release+0x10/0x10 [ 202.311962][ T7474] ? trace_lock_acquire+0x14e/0x1f0 [ 202.317158][ T7474] do_open_execat+0xfa/0x400 [ 202.321737][ T7474] ? __pfx_do_open_execat+0x10/0x10 [ 202.326922][ T7474] ? __virt_addr_valid+0x5e/0x590 [ 202.331936][ T7474] ? __phys_addr_symbol+0x30/0x80 [ 202.336948][ T7474] ? __check_object_size+0x488/0x710 [ 202.342222][ T7474] alloc_bprm+0x2b/0xc90 [ 202.346450][ T7474] ? strncpy_from_user+0x1fe/0x2d0 [ 202.351556][ T7474] do_execveat_common.isra.0+0x1cd/0x630 [ 202.357177][ T7474] __x64_sys_execve+0x8c/0xb0 [ 202.361845][ T7474] do_syscall_64+0xcd/0x250 [ 202.366605][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.372489][ T7474] RIP: 0033:0x7f71ed980849 [ 202.376890][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.396654][ T7474] RSP: 002b:00007f71ee6df058 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 202.405056][ T7474] RAX: ffffffffffffffda RBX: 00007f71edb46080 RCX: 00007f71ed980849 [ 202.413014][ T7474] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 00000000200001c0 [ 202.420970][ T7474] RBP: 00007f71ee6df0a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.428940][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.436897][ T7474] R13: 0000000000000000 R14: 00007f71edb46080 R15: 00007ffc51599c08 [ 202.444866][ T7474] [ 204.146884][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.369335][ T7505] FAULT_INJECTION: forcing a failure. [ 204.369335][ T7505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.364671][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: syz.0.406 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 205.374956][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.385026][ T7505] Call Trace: [ 205.388310][ T7505] [ 205.391279][ T7505] dump_stack_lvl+0x16c/0x1f0 [ 205.395974][ T7505] should_fail_ex+0x497/0x5b0 [ 205.400685][ T7505] _copy_from_user+0x2e/0xd0 [ 205.405286][ T7505] copy_msghdr_from_user+0x99/0x160 [ 205.410496][ T7505] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 205.416326][ T7505] ___sys_sendmsg+0xff/0x1e0 [ 205.420924][ T7505] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.426230][ T7505] ? __pfx_lock_release+0x10/0x10 [ 205.431273][ T7505] ? trace_lock_acquire+0x14e/0x1f0 [ 205.436503][ T7505] ? __fget_files+0x206/0x3a0 [ 205.441200][ T7505] __sys_sendmsg+0x16e/0x220 [ 205.445798][ T7505] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.450934][ T7505] do_syscall_64+0xcd/0x250 [ 205.455451][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.461384][ T7505] RIP: 0033:0x7fb1c5780849 [ 205.465807][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.485431][ T7505] RSP: 002b:00007fb1c65ae058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.493860][ T7505] RAX: ffffffffffffffda RBX: 00007fb1c5945fa0 RCX: 00007fb1c5780849 [ 205.501822][ T7505] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 205.509778][ T7505] RBP: 00007fb1c65ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.517734][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.525712][ T7505] R13: 0000000000000000 R14: 00007fb1c5945fa0 R15: 00007ffd74f06868 [ 205.533697][ T7505] [ 206.130373][ T7528] fuse: Bad value for 'group_id' [ 206.134959][ T7206] veth0_vlan: entered promiscuous mode [ 206.152766][ T7528] fuse: Bad value for 'group_id' [ 206.177131][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 206.177146][ T29] audit: type=1400 audit(1733032239.015:446): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.298164][ T7531] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 206.305453][ T7531] PKCS7: Only support pkcs7_signedData type [ 206.448065][ T7206] veth1_vlan: entered promiscuous mode [ 206.456218][ T29] audit: type=1400 audit(1733032239.135:447): avc: denied { audit_write } for pid=7524 comm="syz.3.410" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 206.478796][ T7533] xt_cgroup: path and classid specified [ 206.701388][ T7206] veth0_macvtap: entered promiscuous mode [ 206.710751][ T7206] veth1_macvtap: entered promiscuous mode [ 206.739933][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.759562][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.778809][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.791752][ T29] audit: type=1400 audit(1733032239.565:448): avc: denied { mount } for pid=7529 comm="syz.2.412" name="/" dev="ramfs" ino=14948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 206.832270][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.852320][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.045716][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.137970][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.143332][ T29] audit: type=1400 audit(1733032239.985:449): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 207.149359][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.187336][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.212109][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.222821][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.232760][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.243269][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.253707][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.265840][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.265906][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.265948][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.272129][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.287016][ T7206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.287152][ T7206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.287239][ T7206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.287338][ T7206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.653728][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.653749][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.766721][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.802393][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.865310][ T7523] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.546234][ T29] audit: type=1400 audit(1733032241.385:450): avc: denied { mounton } for pid=7206 comm="syz-executor" path="/root/syzkaller.5ZELdO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 209.274356][ T29] audit: type=1400 audit(1733032241.955:451): avc: denied { ioctl } for pid=7560 comm="syz.0.419" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15596 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.783630][ T7581] FAULT_INJECTION: forcing a failure. [ 209.783630][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 209.832785][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.2.420 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 209.843069][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.853142][ T7581] Call Trace: [ 209.856427][ T7581] [ 209.859363][ T7581] dump_stack_lvl+0x16c/0x1f0 [ 209.864061][ T7581] should_fail_ex+0x497/0x5b0 [ 209.868772][ T7581] should_failslab+0xc2/0x120 [ 209.873468][ T7581] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 209.878863][ T7581] ? skb_clone+0x190/0x3f0 [ 209.883308][ T7581] skb_clone+0x190/0x3f0 [ 209.887567][ T7581] netlink_deliver_tap+0xabd/0xd30 [ 209.892706][ T7581] netlink_unicast+0x5e1/0x7f0 [ 209.897506][ T7581] ? __pfx_netlink_unicast+0x10/0x10 [ 209.902808][ T7581] ? const_folio_flags.constprop.0+0x56/0x150 [ 209.908898][ T7581] netlink_sendmsg+0x8b8/0xd70 [ 209.913686][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.919008][ T7581] __sys_sendto+0x488/0x4f0 [ 209.923641][ T7581] ? __pfx___sys_sendto+0x10/0x10 [ 209.928704][ T7581] ? ksys_write+0x1ba/0x250 [ 209.933221][ T7581] ? __pfx_ksys_write+0x10/0x10 [ 209.938087][ T7581] __x64_sys_sendto+0xe0/0x1c0 [ 209.942869][ T7581] ? do_syscall_64+0x91/0x250 [ 209.947566][ T7581] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.952779][ T7581] do_syscall_64+0xcd/0x250 [ 209.957305][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.963231][ T7581] RIP: 0033:0x7f477f180849 [ 209.967658][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.987285][ T7581] RSP: 002b:00007f477ff99058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.995723][ T7581] RAX: ffffffffffffffda RBX: 00007f477f345fa0 RCX: 00007f477f180849 [ 210.003793][ T7581] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000003 [ 210.011777][ T7581] RBP: 00007f477ff990a0 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 210.019765][ T7581] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 210.027753][ T7581] R13: 0000000000000000 R14: 00007f477f345fa0 R15: 00007ffd5bcd0e18 [ 210.035754][ T7581] [ 210.059506][ T7581] netlink: 10 bytes leftover after parsing attributes in process `syz.2.420'. [ 210.233903][ T7588] netlink: 'syz.0.422': attribute type 3 has an invalid length. [ 210.241578][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 210.992800][ T29] audit: type=1400 audit(1733032243.815:452): avc: denied { setrlimit } for pid=7596 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 211.254565][ T29] audit: type=1400 audit(1733032244.085:453): avc: denied { ioctl } for pid=7601 comm="syz.2.425" path="socket:[15175]" dev="sockfs" ino=15175 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.307983][ T5904] IPVS: starting estimator thread 0... [ 211.855268][ T7610] IPVS: using max 32 ests per chain, 76800 per kthread [ 212.059782][ T29] audit: type=1400 audit(1733032244.895:454): avc: denied { map } for pid=7615 comm="syz.1.417" path="socket:[15182]" dev="sockfs" ino=15182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.109172][ T29] audit: type=1400 audit(1733032244.895:455): avc: denied { accept } for pid=7615 comm="syz.1.417" path="socket:[15182]" dev="sockfs" ino=15182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.604474][ T29] audit: type=1400 audit(1733032245.445:456): avc: denied { mounton } for pid=7643 comm="syz.5.434" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 212.816473][ T1215] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.576565][ T7658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.435'. [ 213.900877][ T1215] usb 4-1: Using ep0 maxpacket: 16 [ 214.257690][ T1215] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 214.266666][ T1215] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.274903][ T1215] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.287957][ T1215] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.296266][ T1215] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.305181][ T1215] usb 4-1: config 0 has no interface number 0 [ 214.311282][ T1215] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 214.323218][ T1215] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 214.333127][ T1215] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.343398][ T1215] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.359071][ T1215] usb 4-1: config 0 interface 125 has no altsetting 2 [ 214.549622][ T29] audit: type=1400 audit(1733032247.385:457): avc: denied { setopt } for pid=7672 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.773248][ T7676] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 215.190810][ T29] audit: type=1400 audit(1733032247.525:458): avc: denied { write } for pid=7668 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.364966][ T29] audit: type=1400 audit(1733032247.695:459): avc: denied { setopt } for pid=7668 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 215.767105][ T29] audit: type=1326 audit(1733032248.605:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc19580849 code=0x7ffc0000 [ 215.801570][ T29] audit: type=1326 audit(1733032248.625:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbc19580849 code=0x7ffc0000 [ 215.826214][ T1215] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 215.837341][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.864651][ T1215] usb 4-1: Product: syz [ 215.868863][ T1215] usb 4-1: Manufacturer: syz [ 215.900944][ T1215] usb 4-1: config 0 descriptor?? [ 215.908865][ T29] audit: type=1326 audit(1733032248.625:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc19580849 code=0x7ffc0000 [ 215.953933][ T1215] usb 4-1: can't set config #0, error -71 [ 215.992918][ T1215] usb 4-1: USB disconnect, device number 7 [ 218.873170][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 218.873207][ T29] audit: type=1400 audit(1733032251.685:502): avc: denied { create } for pid=7738 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.998655][ T7750] overlayfs: statfs failed on './file0' [ 219.257012][ T29] audit: type=1400 audit(1733032251.685:503): avc: denied { bind } for pid=7738 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.276988][ T29] audit: type=1400 audit(1733032251.685:504): avc: denied { write } for pid=7738 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.296676][ T29] audit: type=1400 audit(1733032251.925:505): avc: denied { mounton } for pid=7699 comm="syz.3.443" path="/87/file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.336536][ T29] audit: type=1400 audit(1733032252.165:506): avc: denied { write } for pid=7699 comm="syz.3.443" name="file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.414460][ T7759] netlink: 14 bytes leftover after parsing attributes in process `syz.2.454'. [ 219.516235][ T29] audit: type=1400 audit(1733032252.175:507): avc: denied { open } for pid=7699 comm="syz.3.443" path="/87/file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.539680][ T29] audit: type=1400 audit(1733032252.195:508): avc: denied { map } for pid=7699 comm="syz.3.443" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 220.150835][ T5904] IPVS: starting estimator thread 0... [ 220.443408][ T7785] IPVS: using max 25 ests per chain, 60000 per kthread [ 220.669180][ T7792] fuse: Unknown parameter '€ÎÖ’p'¥EìgNÒÜU' [ 220.719695][ T7792] bridge1: entered promiscuous mode [ 220.741359][ T7792] bridge1: entered allmulticast mode [ 220.872444][ T900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.632851][ T900] usb 4-1: Using ep0 maxpacket: 32 [ 221.651472][ T900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.658232][ T900] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 221.692163][ T29] audit: type=1400 audit(1733032254.515:509): avc: denied { sys_chroot } for pid=7807 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 221.713815][ T900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.723426][ T29] audit: type=1400 audit(1733032254.525:510): avc: denied { setgid } for pid=7807 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 221.797846][ T900] usb 4-1: config 0 descriptor?? [ 223.161989][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.355349][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.430266][ T900] usbhid 4-1:0.0: can't add hid device: -71 [ 223.436731][ T900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 223.475044][ T900] usb 4-1: USB disconnect, device number 8 [ 223.479031][ T29] audit: type=1400 audit(1733032256.315:511): avc: denied { setopt } for pid=7799 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.669254][ T7806] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 225.112963][ T900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.304169][ T900] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 225.313586][ T900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.333131][ T900] usb 4-1: config 0 descriptor?? [ 225.340684][ T900] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 226.313179][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.329067][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.372908][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 227.424866][ T900] usb 4-1: USB disconnect, device number 9 [ 227.538010][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 227.548523][ T5879] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.591318][ T5879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 227.645155][ T5879] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.691379][ T5879] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.705772][ T5879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 227.733925][ T5879] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.770696][ T5879] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.790808][ T5879] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 227.820729][ T5879] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.865405][ T5879] usb 6-1: string descriptor 0 read error: -22 [ 227.872854][ T5879] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 227.892267][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.927826][ T5879] adutux 6-1:168.0: interrupt endpoints not found [ 228.155934][ T29] audit: type=1400 audit(1733032260.995:512): avc: denied { mounton } for pid=7905 comm="syz.3.483" path="/90/file0" dev="proc" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 228.412788][ T5904] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.572864][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 228.596060][ T5904] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 228.637695][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.665022][ T5904] usb 4-1: Product: syz [ 228.673405][ T5904] usb 4-1: Manufacturer: syz [ 228.691300][ T5904] usb 4-1: SerialNumber: syz [ 228.726743][ T5904] usb 4-1: config 0 descriptor?? [ 228.736622][ T5904] gspca_main: se401-2.14.0 probing 047d:5003 [ 228.858979][ T5868] usb 6-1: USB disconnect, device number 2 [ 229.678785][ T5904] gspca_se401: ExtraFeatures: 79 [ 229.684096][ T5904] gspca_se401: Frame size: 0x0 1/16th janggu [ 229.923658][ T5904] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 229.968802][ T5904] usb 4-1: USB disconnect, device number 10 [ 230.207868][ T7932] FAULT_INJECTION: forcing a failure. [ 230.207868][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.102956][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.5.487 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 231.113237][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.123302][ T7932] Call Trace: [ 231.126587][ T7932] [ 231.129523][ T7932] dump_stack_lvl+0x16c/0x1f0 [ 231.134213][ T7932] should_fail_ex+0x497/0x5b0 [ 231.138913][ T7932] _copy_from_user+0x2e/0xd0 [ 231.143514][ T7932] dev_ethtool+0x150/0x57e0 [ 231.148029][ T7932] ? kernel_text_address+0x8d/0x100 [ 231.153239][ T7932] ? __kernel_text_address+0xd/0x40 [ 231.158446][ T7932] ? unwind_get_return_address+0x59/0xa0 [ 231.164090][ T7932] ? arch_stack_walk+0xa7/0x100 [ 231.168956][ T7932] ? __pfx_dev_ethtool+0x10/0x10 [ 231.173909][ T7932] ? hlock_class+0x4e/0x130 [ 231.178431][ T7932] ? hlock_class+0x4e/0x130 [ 231.182945][ T7932] ? mark_lock+0xb5/0xc60 [ 231.187282][ T7932] ? __pfx_mark_lock+0x10/0x10 [ 231.192079][ T7932] ? __pfx_mark_lock+0x10/0x10 [ 231.196873][ T7932] ? __pfx___lock_acquire+0x10/0x10 [ 231.202078][ T7932] ? kasan_save_stack+0x42/0x60 [ 231.206936][ T7932] ? kasan_save_stack+0x33/0x60 [ 231.211799][ T7932] ? kasan_save_track+0x14/0x30 [ 231.216656][ T7932] ? kasan_save_free_info+0x3b/0x60 [ 231.221863][ T7932] ? __kasan_slab_free+0x51/0x70 [ 231.226819][ T7932] ? kfree+0x14f/0x4b0 [ 231.231252][ T7932] ? hlock_class+0x4e/0x130 [ 231.235775][ T7932] ? __lock_acquire+0xcc5/0x3c40 [ 231.240739][ T7932] ? __pfx___lock_acquire+0x10/0x10 [ 231.245954][ T7932] ? __pfx___lock_acquire+0x10/0x10 [ 231.251163][ T7932] ? avc_has_extended_perms+0x902/0xf70 [ 231.256731][ T7932] ? find_held_lock+0x2d/0x110 [ 231.261515][ T7932] ? dev_load+0x8e/0x240 [ 231.265776][ T7932] ? __pfx_lock_release+0x10/0x10 [ 231.270822][ T7932] ? trace_lock_acquire+0x14e/0x1f0 [ 231.276037][ T7932] ? full_name_hash+0xbc/0x110 [ 231.280823][ T7932] dev_ioctl+0x2a2/0x10c0 [ 231.285171][ T7932] sock_do_ioctl+0x19e/0x280 [ 231.289781][ T7932] ? __pfx_sock_do_ioctl+0x10/0x10 [ 231.294913][ T7932] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 231.301428][ T7932] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 231.307949][ T7932] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 231.314819][ T7932] sock_ioctl+0x228/0x6c0 [ 231.319162][ T7932] ? __pfx_sock_ioctl+0x10/0x10 [ 231.324034][ T7932] ? selinux_file_ioctl+0x180/0x270 [ 231.329250][ T7932] ? selinux_file_ioctl+0xb4/0x270 [ 231.334379][ T7932] ? __pfx_sock_ioctl+0x10/0x10 [ 231.339247][ T7932] __x64_sys_ioctl+0x190/0x200 [ 231.344032][ T7932] do_syscall_64+0xcd/0x250 [ 231.348565][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.354476][ T7932] RIP: 0033:0x7fbc19580849 [ 231.358899][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.378525][ T7932] RSP: 002b:00007fbc1a43b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.386958][ T7932] RAX: ffffffffffffffda RBX: 00007fbc19746080 RCX: 00007fbc19580849 [ 231.394946][ T7932] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 000000000000000d [ 231.402932][ T7932] RBP: 00007fbc1a43b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 231.410913][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.418897][ T7932] R13: 0000000000000000 R14: 00007fbc19746080 R15: 00007fff5a8d3bc8 [ 231.426900][ T7932] [ 231.644161][ T29] audit: type=1400 audit(1733032264.465:513): avc: denied { override_creds } for pid=7935 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.671866][ T7947] [ 231.674207][ T7947] ============================= [ 231.679041][ T7947] [ BUG: Invalid wait context ] [ 231.683884][ T7947] 6.12.0-syzkaller-11930-g0e287d31b62b #0 Not tainted [ 231.690623][ T7947] ----------------------------- [ 231.695445][ T7947] iou-wrk-7941/7947 is trying to lock: [ 231.700884][ T7947] ffff88802fa88958 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 231.710517][ T7947] other info that might help us debug this: [ 231.716379][ T7947] context-{5:5} [ 231.719812][ T7947] 3 locks held by iou-wrk-7941/7947: [ 231.725068][ T7947] #0: ffff88802599c8c0 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0 [ 231.734097][ T7947] #1: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 231.743465][ T7947] #2: ffffffff8e1bbb40 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 231.753184][ T7947] stack backtrace: [ 231.756883][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: iou-wrk-7941 Not tainted 6.12.0-syzkaller-11930-g0e287d31b62b #0 [ 231.767352][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.777384][ T7947] Call Trace: [ 231.780650][ T7947] [ 231.783563][ T7947] dump_stack_lvl+0x116/0x1f0 [ 231.788223][ T7947] __lock_acquire+0x878/0x3c40 [ 231.792979][ T7947] ? __pfx___lock_acquire+0x10/0x10 [ 231.798178][ T7947] ? __pfx___lock_acquire+0x10/0x10 [ 231.803363][ T7947] lock_acquire.part.0+0x11b/0x380 [ 231.808463][ T7947] ? __lock_task_sighand+0xc2/0x340 [ 231.813639][ T7947] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 231.819263][ T7947] ? rcu_is_watching+0x12/0xc0 [ 231.824013][ T7947] ? trace_lock_acquire+0x14e/0x1f0 [ 231.829192][ T7947] ? trace_lock_acquire+0x14e/0x1f0 [ 231.834368][ T7947] ? __lock_task_sighand+0xc2/0x340 [ 231.839577][ T7947] ? lock_acquire+0x2f/0xb0 [ 231.844058][ T7947] ? __lock_task_sighand+0xc2/0x340 [ 231.849240][ T7947] _raw_spin_lock_irqsave+0x3a/0x60 [ 231.854421][ T7947] ? __lock_task_sighand+0xc2/0x340 [ 231.859621][ T7947] __lock_task_sighand+0xc2/0x340 [ 231.864625][ T7947] group_send_sig_info+0x290/0x300 [ 231.869728][ T7947] ? __pfx_group_send_sig_info+0x10/0x10 [ 231.875340][ T7947] ? __pfx___lock_acquire+0x10/0x10 [ 231.880700][ T7947] bpf_send_signal_common+0x3d3/0x530 [ 231.886046][ T7947] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 231.891934][ T7947] ? trace_lock_acquire+0x14e/0x1f0 [ 231.897118][ T7947] ? bpf_trace_run2+0x1c2/0x590 [ 231.901952][ T7947] bpf_send_signal+0x1d/0x30 [ 231.906515][ T7947] bpf_prog_631417f49dd64198+0x25/0x48 [ 231.911940][ T7947] bpf_trace_run2+0x231/0x590 [ 231.916588][ T7947] ? __pfx_bpf_trace_run2+0x10/0x10 [ 231.921759][ T7947] ? __lock_acquire+0x15a9/0x3c40 [ 231.926759][ T7947] __bpf_trace_contention_end+0xca/0x110 [ 231.932365][ T7947] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 231.938577][ T7947] ? hlock_class+0x4e/0x130 [ 231.943062][ T7947] ? __lock_acquire+0x15a9/0x3c40 [ 231.948092][ T7947] trace_contention_end.constprop.0+0xf0/0x170 [ 231.954245][ T7947] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 231.960293][ T7947] ? io_worker_handle_work+0x800/0x1680 [ 231.965831][ T7947] ? __pfx_lock_release+0x10/0x10 [ 231.970830][ T7947] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 231.977403][ T7947] ? lock_acquire.part.0+0x11b/0x380 [ 231.982670][ T7947] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 231.988295][ T7947] do_raw_spin_lock+0x210/0x2c0 [ 231.993140][ T7947] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.998496][ T7947] ? lock_acquire+0x2f/0xb0 [ 232.002978][ T7947] ? io_wq_worker+0x34c/0xdf0 [ 232.007641][ T7947] io_wq_worker+0x34c/0xdf0 [ 232.012124][ T7947] ? __pfx_io_wq_worker+0x10/0x10 [ 232.017152][ T7947] ? ret_from_fork+0x23/0x80 [ 232.021719][ T7947] ? __pfx_lock_release+0x10/0x10 [ 232.026736][ T7947] ? do_raw_spin_lock+0x12d/0x2c0 [ 232.031744][ T7947] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 232.037112][ T7947] ? __pfx_io_wq_worker+0x10/0x10 [ 232.042117][ T7947] ret_from_fork+0x45/0x80 [ 232.046512][ T7947] ? __pfx_io_wq_worker+0x10/0x10 [ 232.051515][ T7947] ret_from_fork_asm+0x1a/0x30 [ 232.056273][ T7947] [ 232.125828][ T29] audit: type=1400 audit(1733032264.965:514): avc: denied { map } for pid=7931 comm="syz.0.488" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.239522][ T7945] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 232.247286][ T7945] audit: out of memory in audit_log_start [ 232.347448][ T29] audit: type=1400 audit(1733032264.965:515): avc: denied { execute } for pid=7931 comm="syz.0.488" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.382180][ T29] audit: type=1400 audit(1733032265.035:516): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.428455][ T29] audit: type=1400 audit(1733032265.035:517): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.481332][ T29] audit: type=1400 audit(1733032265.035:518): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.505548][ T29] audit: type=1400 audit(1733032265.155:519): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1