last executing test programs: 13m26.693375499s ago: executing program 4 (id=152): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x18, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4}, 0x18) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) getdents64(r7, 0x0, 0x22) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7}}}, 0x24}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) 13m25.21413042s ago: executing program 4 (id=159): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x9, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r6, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) timer_create(0xfffffffc, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$igmp6(0xa, 0x3, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r10, 0xffffffffffffffff, 0x500}, 0x57) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13m23.005010707s ago: executing program 4 (id=167): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000000)={0x20002015}) close_range(r5, r6, 0x0) mkdir(0x0, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 13m21.155018759s ago: executing program 4 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) pipe(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xfffffffffffffe6e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f646b17696f4e65656d0071fa0b2548a0b3d9"], 0xc) socket$inet_smc(0x2b, 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 13m19.885292706s ago: executing program 4 (id=178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) (async) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="e2c5253048fde9b227121785fb7f38a7624cd00b73c9cd01d39a70051072acf6bf787695c014d2e35538b5b4e02b593bcd7a7053b8123e15c29c30450f8a31d477d82616ab24453b0da0283c8b9fff0af1e5b7bd2f014f038f27aa4de57725f20480ad11a2125d5247804a9e9a5a82765c4eada47da124778f3b95f9036981ac0568aa668b08db5d327bac14e03742a0e91257b8cae995ff2cf2c966eb2e400a23a06069c3836366f73003cf194d6494d9b4d05d9539ea00440f3dc63985d1ec000000000000", 0xc6}, {&(0x7f0000000440)="91ba0fe1dc6ed0f6119ee352a3bb62e720fe903dc6d62f8af31abab1610ef32e8c2b75aaca8733f9ed4afd78724f7109bc8a29f47d4cb13d54e3b1e110d56725f95aeec737e62deba6812d2dae8820e81c3917abc9c535c25c88bc999246649896631693343e2fa63281eb957272ed5a4ae6a3c85f4de6c07d9a2982b1a259074e0bd090e3f281b427992c84f307589ee3abe53b07c072c523178d1d940552397da19381de2213aeecc1bf738d0b8427e9dadf35e8bba1bb28de", 0xba}], 0x2, 0x0, 0x0, 0xc0}, 0x4000) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x5}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{0x0, 0xffffffffffffffb5, &(0x7f00000003c0)=[{&(0x7f0000000180)="2871a024e8147dcfdc51b79732080fcc7850224d6548510953affa3fc438a7f358ae97bbfe9c7e801edb9f62e828a751895c5e0de9640f41015fc5a8ffa62a1c21f457", 0x43}, {&(0x7f00000002c0)="3a12cb5dfa6e630223a824afe50737cb5ae3bb2efbf44e4be85b7d1bc459fd7704ed4931f3afb33148badbb923fd2fd880cf45cddaf561abe57a660f8c3e274312846133a3a9fa7dd91c8096", 0x4c}, {&(0x7f0000000400)="cec0860f5e44e0485d994304067893060d36a7c545d3ae46e55f7d07b635a44ec2d0515b637dee449583edff0daa50fab6df60660c8ce39d3aaa4e78e6401599503b2b37ca9e086afd53e5ce4d1cf92ececadba462f182e5601f668ddcd0566b59122f147a02d79b1dbbb29648be", 0x6e}], 0x3}}], 0x1, 0x4001c00) (async, rerun: 32) ptrace(0x10, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) (async) ptrace$poke(0x21, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x28) (async) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000003d) 13m19.50937852s ago: executing program 4 (id=181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x40) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x13) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x10c}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="197cc1f47681b41f6d656d00"], 0xc) write$vga_arbiter(r6, &(0x7f0000000200)=@unlock_all, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) socket$packet(0x11, 0x2, 0x300) read(r4, &(0x7f0000000380)=""/1, 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0) 13m4.234318189s ago: executing program 32 (id=181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x40) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x13) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x10c}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="197cc1f47681b41f6d656d00"], 0xc) write$vga_arbiter(r6, &(0x7f0000000200)=@unlock_all, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) socket$packet(0x11, 0x2, 0x300) read(r4, &(0x7f0000000380)=""/1, 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0) 12.486059088s ago: executing program 0 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000f060108000000000000000002000001050001"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40008c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305543, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) socket$nl_generic(0x10, 0x3, 0x10) 12.342064745s ago: executing program 0 (id=3024): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x2, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x100, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000200)=""/181) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x7ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(r0, &(0x7f0000000000)=[{}, {0x0, 0x8000, 0x1000}], 0x2, 0x0) semop(r0, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}, {0x3, 0x0, 0x1000}, {0x1, 0x131, 0x1800}], 0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) 11.961892551s ago: executing program 2 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8000000}]}}}]}, 0x40}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 10.813308566s ago: executing program 2 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x22a}, {0x61}, {}, {0x2}, {0x6}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80440, 0x0) r6 = fsmount(r5, 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)={@cgroup=r7, r7, 0x2f, 0x10, 0x4, @void, @value}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r6, 0xd, 0x0, 0x10ff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x18) modify_ldt$read(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f00000002c0)='-\x00'}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r7, r9, 0x12, 0x14, r7, @void, @value=r7, @void, @void, r8}, 0x20) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=r13, r4, 0x37, 0x2, r3, @void, @value=r3, @void, @void, r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) msgget$private(0x0, 0x123) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002d"], 0x30}}, 0x0) 8.48156238s ago: executing program 2 (id=3037): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d6}, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') bind$inet6(r0, 0x0, 0x0) semget$private(0x0, 0x5, 0x0) r5 = io_uring_setup(0x6ffd, &(0x7f0000000480)={0x0, 0xe843, 0x100, 0x2, 0xb2}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) 8.152533459s ago: executing program 0 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8000000}]}}}]}, 0x40}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 7.211461738s ago: executing program 0 (id=3044): socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioperm(0x0, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 6.265505054s ago: executing program 0 (id=3045): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_pidfd_open(r0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 5.056860148s ago: executing program 0 (id=3050): modify_ldt$read(0x11000000, 0x0, 0x188f024bd27ddb1b) 4.966534111s ago: executing program 5 (id=3051): listen(0xffffffffffffffff, 0x1ad72f7) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b000100001000"], 0x0) (rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"]) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async, rerun: 32) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) accept4$llc(r3, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000280)={0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000100000007eaed64d8e8408caf4d8394100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x3}, 0x18) (async, rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, 0x0) (rerun: 32) 4.681308787s ago: executing program 3 (id=3055): socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioperm(0x0, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 4.605286295s ago: executing program 1 (id=3056): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x9d, 0x3, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x7ff, 0x7f}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010410, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1b0, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfbff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9c4}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x476}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf834}, {0x6, 0x11, 0x9}}]}, 0x1b0}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e408004564005c00670000031190780a010182ac1414b34e214e20004890780300001cbb3ff7c7d2b0d22a2d6513735e7a841d61eaf4c7acc940bc309a9b47bdc43eae05fe4d5b8bf1a71a8fd8e0d6ce2f22494a09a25f55304facba162e8448b267cfd69364d71d945d02dbc1e8efa25a4f9096a1368cc6be9d766ff6983999877e6f40e482f50211bc1aacd93181ca265cdba8d5d3bda1e5f86ebc763e347f62d6b97f"], 0x0) r9 = socket$netlink(0x10, 0x3, 0x13) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000000c0)={0xf0f007, 0x1}) 4.021176154s ago: executing program 2 (id=3057): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r3, 0x3) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r4, 0x3) close(r4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = syz_open_procfs(r0, &(0x7f00000001c0)='personality\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x800000}, {0xa, 0x4e21, 0x410, @rand_addr=' \x01\x00'}, 0x1, {[0x7f, 0x10000200, 0x4cc, 0x5, 0x50000, 0x9, 0x73, 0x3]}}, 0x5c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xcc90, 0x200, 0xffff, 0x10289, 0x0, r5}, &(0x7f0000000140), 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 3.744249036s ago: executing program 3 (id=3058): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x4, 0x1, 0x0, 0x0, 0x400, 0x0, 0x4, 0x4}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x2, 0x40000121, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000580)=@req3={0x2, 0xa, 0x7, 0x7df, 0x52f, 0x4, 0x3}, 0x1c) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000500)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e000000f7ffffff050000002900000008800000", @ANYRES32=r6, @ANYBLOB="000200"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0300000000000000040000000200000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.99851295s ago: executing program 1 (id=3059): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x8, 0x9, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x6, 0x8, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x4, 0x2, 0xa, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000007c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x4, 0x5, 0x5, 0x2}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000002c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r15, r15], 0x2, r13, r14, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000840)={0x0, 0x0, 0x0}) r17 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r17, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r18, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r17, 0xc06864ce, &(0x7f0000000340)={r19, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000880)={&(0x7f0000000800)=[r5, r6, r7, r8, r9, 0x0, r15], 0x7, r16, r19, 0xa, 0x2, 0xce94, 0x7, {0x8000, 0xc9d, 0xe217, 0x5, 0x1000, 0x0, 0x5, 0x7, 0x8, 0x7, 0x6, 0x1000, 0x4, 0x2, "0cdcb11c2b46769fff87a5500f81cb7d612200276335f5316622b67e2c6ae11b"}}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r2, 0x0, 0x3}, 0x18) 2.854709637s ago: executing program 3 (id=3060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x50c, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x12) r2 = socket(0x11, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xd80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x31}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) 2.85373068s ago: executing program 1 (id=3061): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_pidfd_open(r0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.852647373s ago: executing program 2 (id=3062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = dup(r2) read(r3, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f046}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) 2.165629692s ago: executing program 5 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 2.146834054s ago: executing program 5 (id=3064): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$evdev(&(0x7f0000000000), 0x6f, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0xb, 0x6, "edbcb8", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x1}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.143579306s ago: executing program 3 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r1}, 0x0) 2.026531238s ago: executing program 3 (id=3066): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x1000000, 0x4) socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x200, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0xace4, 0x20000) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000070600000083"], 0x0}, 0x0) io_uring_enter(r0, 0x3518, 0x0, 0x0, 0x0, 0x0) 1.912104837s ago: executing program 1 (id=3067): socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioperm(0x0, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 1.780942066s ago: executing program 2 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x2, 0x34, 0x10, 0x6d}, 0xf4, &(0x7f0000000140)=ANY=[], 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}, {0x0, 0x0}]}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) chroot(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000187, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000000000202ffff00020000000000000802000000020000000000000ef200"/67], 0x0, 0x43, 0x0, 0x0, 0x9, 0x0, @void, @value}, 0x28) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x7c}}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000002060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800c0001007061796c6f6164002400028008000440000000010c0003400000002208000340000000000800014000000003140000001100010000000000000000000000000ad7eb297b08a083eaaa1b50cf80a8626a580f4d65a818bae9cbae23a6aba4310a7e8c613bb5384eb83e1df55ef6f3824c0e31f421be324d1974f477aaceba66c8bae6f60480efb8afba317a204bf933fdeed5"], 0x8c}}, 0x0) 1.130354516s ago: executing program 5 (id=3069): syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000a80)={{0x2, 0x0, 0x4dc2, 0xfffffffa, 'syz0\x00', 0x7}, 0x1, [0x4, 0x3ff, 0x1, 0xc, 0x7fffffff, 0x11c, 0x74, 0x4, 0x3a07, 0x8000, 0x40, 0x90, 0x4, 0x3, 0x8, 0x8000000000000000, 0x80000001, 0x7ff, 0x8, 0x3, 0xf, 0x1, 0x2, 0x7fffffffffffffff, 0x3ff, 0xd14, 0x1, 0x8, 0x9, 0x8, 0x0, 0x6, 0x8, 0x50, 0x1, 0x5, 0x7fff, 0x7ffffffffffffffe, 0x4, 0x1762, 0x1, 0x2, 0x7, 0x401, 0x3, 0x100000001, 0x437, 0xb, 0x5, 0xff, 0xdc2, 0x1, 0x20, 0x25a0, 0x8, 0xfffffffffffffff9, 0x5, 0x4, 0x6, 0x2, 0x6, 0xfffffffffffff801, 0x35, 0xfffffffffffffffe, 0x9, 0x8, 0x4, 0xa7, 0x48, 0x4, 0x2, 0x8, 0xffffffbffffffffb, 0x200, 0x8, 0x2, 0x7, 0x80000001, 0xffff, 0x1, 0xe, 0x1, 0x2, 0x8392, 0x8, 0xd24, 0x8, 0x0, 0x0, 0x2, 0x8, 0x400, 0x4, 0x7, 0xdce, 0xd47, 0x89, 0x1, 0x7, 0x7, 0x1, 0x4, 0x406, 0xc00000000000000, 0x291, 0x3, 0x17fffffff, 0x9, 0xd9, 0x1, 0x3, 0x8, 0x5f2b, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x4, 0x5, 0x6, 0x7, 0xffffffffffffff92, 0x0, 0x345, 0x0, 0x86f8, 0x4, 0x628b, 0xffffffff, 0x18]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) 903.677744ms ago: executing program 1 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000c00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 733.653691ms ago: executing program 5 (id=3071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000005c0)="80003792a88f13ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb89}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) fstat(r4, 0x0) (async) fstat(r4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240000000000800054000000000080003400000000008000640000020"], 0x9c}}, 0x0) 720.851115ms ago: executing program 1 (id=3072): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x9d, 0x3, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x7ff, 0x7f}}) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) 441.005404ms ago: executing program 5 (id=3073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xe42d, @mcast2, 0xe2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="9e9a7a94f2595c5efecc25f1e6e62b0974c6f4cbd704dccc50f8ee55edce084bd1f9e205a72dfb299f9745bf7381091654d6c422fd71ad1f3a096d81b7b00e9f7e928d0552315fcd47e349e92076a230c1abbe328efff6186f1bd43ace92b7fc8bae9579bad2e1c4af0b902efaab5362568bce4877f65a24e97181000a69a9948212429998c6bba858256703baf8b373f6956541eaddc0644ce7ad94d1", 0x9d}], 0x1}}], 0x1, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000034000107000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$RDMA_USER_CM_CMD_QUERY(r8, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) sendto$inet(r9, &(0x7f0000000080)="0897be73daa9", 0x6, 0x3ca611852b6aee4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendto$inet(r10, &(0x7f0000000280)="f8a6e5ab18e09f", 0x7, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) pipe2$9p(&(0x7f0000000240), 0x8880) 0s ago: executing program 3 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): r 56 using dummy_hcd [ 766.407870][T15074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2480'. [ 766.424481][T15074] hub 9-0:1.0: USB hub found [ 766.430492][T15074] hub 9-0:1.0: 1 port detected [ 766.516213][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 766.554183][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.668949][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.746332][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.773913][ T52] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.798990][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.817619][ T52] usb 3-1: config 0 descriptor?? [ 767.929954][ T52] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input33 [ 767.941761][ T30] audit: type=1400 audit(2000000253.662:1669): avc: denied { read } for pid=15088 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 767.994360][ T52] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 768.206146][T15094] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2486'. [ 768.335327][ T5894] usb 3-1: USB disconnect, device number 56 [ 768.579987][T15102] pim6reg1: entered promiscuous mode [ 768.585485][T15102] pim6reg1: entered allmulticast mode [ 768.597837][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 768.706342][T15105] nbd: device at index 0 is going down [ 768.792746][T13349] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 768.966074][T13349] usb 4-1: Using ep0 maxpacket: 8 [ 768.990186][T13349] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 769.096252][T13349] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 769.136151][T13349] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 769.183543][T13349] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 769.206977][T13349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.224332][T13349] usb 4-1: Product: syz [ 769.234135][T13349] usb 4-1: Manufacturer: syz [ 769.244344][T13349] usb 4-1: SerialNumber: syz [ 769.259828][T13349] hso 4-1:6.0: Can't find BULK IN endpoint [ 769.511600][ T5894] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 769.548262][T13349] usb 4-1: USB disconnect, device number 38 [ 769.674025][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 769.691488][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.712316][ T5894] usb 3-1: config 0 descriptor?? [ 769.725210][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 769.979797][T15124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62736 sclass=netlink_route_socket pid=15124 comm=syz.0.2494 [ 770.196175][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 770.211563][ T5894] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 770.222730][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 770.390442][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2496'. [ 771.257271][T15114] lo speed is unknown, defaulting to 1000 [ 771.293480][T15114] lo speed is unknown, defaulting to 1000 [ 771.800851][ T30] audit: type=1400 audit(2000000257.292:1670): avc: denied { read } for pid=15134 comm="syz.3.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 771.820524][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.972342][ T1170] usb 3-1: USB disconnect, device number 57 [ 771.980831][ T1170] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 772.005864][ T1170] cp210x 3-1:0.0: device disconnected [ 772.057996][T15149] netlink: 'syz.5.2503': attribute type 1 has an invalid length. [ 772.066384][T15149] netlink: 'syz.5.2503': attribute type 4 has an invalid length. [ 772.075435][T15149] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2503'. [ 772.197551][T15150] loop9: detected capacity change from 0 to 7 [ 772.474587][T15150] Dev loop9: unable to read RDB block 7 [ 772.501725][T15150] loop9: unable to read partition table [ 772.525987][T15150] loop9: partition table beyond EOD, truncated [ 772.536900][T15150] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 776.269489][ T30] audit: type=1400 audit(2000000262.002:1671): avc: denied { ioctl } for pid=15188 comm="syz.1.2514" path="socket:[47709]" dev="sockfs" ino=47709 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 776.295237][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.572186][ T5860] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 776.747867][T15178] NILFS (nullb0): couldn't find nilfs on the device [ 776.755672][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 776.804175][T15190] syz.1.2514: attempt to access beyond end of device [ 776.804175][T15190] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 776.818943][T15190] XFS (nbd1): SB validate failed with error -5. [ 776.837314][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.865202][ T5860] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.881530][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.917516][ T5860] usb 4-1: config 0 descriptor?? [ 777.200897][ T5860] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 777.242316][ T52] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 777.422600][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 777.454677][ T52] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 777.473486][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.487453][T15208] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2518'. [ 777.488927][ T52] usb 2-1: config 0 descriptor?? [ 777.615813][T15212] overlay: Unknown parameter 'audit' [ 777.631834][ T30] audit: type=1400 audit(2000000263.352:1672): avc: denied { mounton } for pid=15211 comm="syz.2.2520" path="/dev/snd/timer" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 777.676874][ T30] audit: type=1326 audit(2000000263.362:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.0.2518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x0 [ 777.740313][ T52] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 777.806726][T15222] new mount options do not match the existing superblock, will be ignored [ 778.231213][T15229] 8021q: adding VLAN 0 to HW filter on device bond13 [ 778.243491][T15229] bond13: entered allmulticast mode [ 778.249092][T15229] bond0: (slave bond13): Enslaving as an active interface with a down link [ 779.285380][ T5894] usb 4-1: USB disconnect, device number 39 [ 779.484653][ T30] audit: type=1400 audit(2000000265.222:1674): avc: denied { create } for pid=15246 comm="syz.3.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 780.950853][ T52] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 780.961382][ T52] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 780.992288][T15264] FAULT_INJECTION: forcing a failure. [ 780.992288][T15264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.005715][ T52] asix 2-1:0.0: probe with driver asix failed with error -71 [ 781.019921][T15264] CPU: 1 UID: 0 PID: 15264 Comm: syz.3.2531 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 781.019938][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 781.019944][T15264] Call Trace: [ 781.019948][T15264] [ 781.019953][T15264] dump_stack_lvl+0x16c/0x1f0 [ 781.019971][T15264] should_fail_ex+0x512/0x640 [ 781.019988][T15264] _copy_to_user+0x32/0xd0 [ 781.020005][T15264] simple_read_from_buffer+0xcb/0x170 [ 781.020022][T15264] proc_fail_nth_read+0x197/0x270 [ 781.020038][T15264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.020055][T15264] ? rw_verify_area+0xcf/0x680 [ 781.020068][T15264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.020083][T15264] vfs_read+0x1de/0xc70 [ 781.020100][T15264] ? __pfx___mutex_lock+0x10/0x10 [ 781.020117][T15264] ? __pfx_vfs_read+0x10/0x10 [ 781.020136][T15264] ? __fget_files+0x20e/0x3c0 [ 781.020156][T15264] ksys_read+0x12a/0x240 [ 781.020171][T15264] ? __pfx_ksys_read+0x10/0x10 [ 781.020190][T15264] do_syscall_64+0xcd/0x260 [ 781.020205][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.020216][T15264] RIP: 0033:0x7f5a8858d37c [ 781.020225][T15264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 781.020235][T15264] RSP: 002b:00007f5a894bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.020245][T15264] RAX: ffffffffffffffda RBX: 00007f5a887b5fa0 RCX: 00007f5a8858d37c [ 781.020252][T15264] RDX: 000000000000000f RSI: 00007f5a894bc0a0 RDI: 0000000000000003 [ 781.020258][T15264] RBP: 00007f5a894bc090 R08: 0000000000000000 R09: 0000000000000000 [ 781.020264][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.020270][T15264] R13: 0000000000000001 R14: 00007f5a887b5fa0 R15: 00007fff8010ec78 [ 781.020284][T15264] [ 781.202293][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.242915][ T52] usb 2-1: USB disconnect, device number 62 [ 781.262548][ T30] audit: type=1400 audit(2000000266.952:1675): avc: denied { write } for pid=15266 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 781.271083][T15265] 8021q: adding VLAN 0 to HW filter on device bond8 [ 781.293240][ T30] audit: type=1400 audit(2000000266.962:1676): avc: denied { read } for pid=15266 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 781.294446][T15265] bond0: (slave bond8): Enslaving as an active interface with a down link [ 781.349035][ T30] audit: type=1400 audit(2000000267.022:1677): avc: denied { setattr } for pid=15266 comm="syz.2.2532" name="IEEE-802.15.4-RAW" dev="sockfs" ino=47873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 781.370136][T15276] 9pnet_fd: Insufficient options for proto=fd [ 781.586500][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 782.147251][ T30] audit: type=1400 audit(2000000267.512:1678): avc: denied { ioctl } for pid=15273 comm="syz.0.2535" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 782.279496][T15286] fuse: Unknown parameter 'grou00000000000000000000' [ 782.294148][ T5860] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 782.311247][ T30] audit: type=1400 audit(2000000267.962:1679): avc: denied { mount } for pid=15273 comm="syz.0.2535" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 782.337401][ T30] audit: type=1400 audit(2000000268.032:1680): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 782.485069][ T5860] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 782.495614][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.505162][ T5860] usb 4-1: Product: syz [ 782.509375][ T5860] usb 4-1: Manufacturer: syz [ 782.514614][ T5860] usb 4-1: SerialNumber: syz [ 782.606184][ T5894] Process accounting resumed [ 783.092114][ T52] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 783.129325][ T5860] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.194053][ T1170] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 783.281775][ T52] usb 6-1: Using ep0 maxpacket: 16 [ 783.311305][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.436403][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.461675][ T52] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 783.478918][ T52] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 783.492438][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.518618][ T52] usb 6-1: config 0 descriptor?? [ 784.081388][T15305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.101945][T15305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.355123][T15311] hub 9-0:1.0: USB hub found [ 784.360731][T15311] hub 9-0:1.0: 1 port detected [ 784.540484][ T1170] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 784.556108][ T52] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input34 [ 784.576522][ T1170] ath9k_htc: Failed to initialize the device [ 784.629648][ T1170] usb 4-1: ath9k_htc: USB layer deinitialized [ 784.642628][ T52] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 784.664073][ T5886] usb 4-1: USB disconnect, device number 40 [ 784.676581][ T52] usb 6-1: USB disconnect, device number 42 [ 785.855438][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2547'. [ 787.903726][T15342] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2552'. [ 788.766468][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2555'. [ 788.778065][T15352] ucma_write: process 1501 (syz.5.2555) changed security contexts after opening file descriptor, this is not allowed. [ 788.919476][T15359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2557'. [ 790.147112][ T30] audit: type=1400 audit(2000000275.882:1681): avc: denied { getopt } for pid=15381 comm="syz.3.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 790.510650][T15389] sd 0:0:1:0: device reset [ 791.722904][T15401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2566'. [ 791.734292][T15401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2566'. [ 792.361935][ T30] audit: type=1400 audit(2000000278.012:1682): avc: denied { append } for pid=15407 comm="syz.2.2569" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 792.404078][T15411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2569'. [ 792.697589][T15418] fuse: Bad value for 'fd' [ 792.702643][T15418] overlayfs: overlapping lowerdir path [ 793.179346][T15409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 793.195829][T15409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 793.214550][T15409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 793.268399][T15409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 793.294961][T15409] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 793.433169][ T30] audit: type=1400 audit(2000000279.172:1683): avc: denied { setcurrent } for pid=15432 comm="syz.3.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 793.641923][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 793.666873][T15441] veth0_vlan: left promiscuous mode [ 793.675690][T15441] veth0_vlan: entered promiscuous mode [ 793.797708][T15441] lo speed is unknown, defaulting to 1000 [ 793.809103][T15441] lo speed is unknown, defaulting to 1000 [ 795.164754][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout [ 795.242199][T11358] Bluetooth: hci2: command 0x0c1a tx timeout [ 795.324663][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout [ 795.330785][ T5813] Bluetooth: hci5: command 0x0405 tx timeout [ 795.336988][ T5813] Bluetooth: hci3: command 0x0c1a tx timeout [ 795.687600][ T30] audit: type=1400 audit(2000000281.422:1684): avc: denied { bind } for pid=15459 comm="syz.3.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 795.824760][ T30] audit: type=1400 audit(2000000281.462:1685): avc: denied { listen } for pid=15459 comm="syz.3.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 795.844389][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.473802][ T30] audit: type=1400 audit(2000000281.912:1686): avc: denied { remount } for pid=15472 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 796.973662][ T30] audit: type=1400 audit(2000000282.682:1687): avc: denied { watch } for pid=15483 comm="syz.2.2586" path="/543/file0" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 796.996325][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.274296][ T5886] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 797.451617][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 798.102570][ T30] audit: type=1326 audit(2000000283.822:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da078e969 code=0x7fc00000 [ 798.244588][ T30] audit: type=1326 audit(2000000283.872:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0da078e969 code=0x7fc00000 [ 798.268886][ T5886] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 798.277113][ T5886] usb 4-1: config 8 has no interface number 0 [ 798.283334][ T5886] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 798.295226][ T5886] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 798.307156][ T5886] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 798.317017][ T5886] usb 4-1: config 8 interface 39 has no altsetting 0 [ 798.325782][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 798.334993][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.351543][ T5886] usb 4-1: Product: syz [ 798.355724][ T5886] usb 4-1: Manufacturer: syz [ 798.360312][ T5886] usb 4-1: SerialNumber: syz [ 798.491606][ T5894] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 798.621796][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 798.642331][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 798.650037][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.664995][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 798.678347][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 798.694060][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 798.704559][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.735088][ T5894] usb 3-1: config 0 descriptor?? [ 798.740729][T15495] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 798.769014][ T5894] hub 3-1:0.0: USB hub found [ 798.784219][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 798.801326][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.807885][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.821468][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.829414][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.847565][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 798.884194][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 798.972510][ T5894] hub 3-1:0.0: 2 ports detected [ 799.012789][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.241429][ T10] usb 6-1: config 0 descriptor?? [ 799.303457][ T5886] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 799.314883][ T5886] ipheth 4-1:8.39: probe with driver ipheth failed with error -110 [ 799.352634][T13349] usb 4-1: USB disconnect, device number 41 [ 799.786211][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.801405][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.809460][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.818870][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.826920][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.835171][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.842671][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.850150][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.857735][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.865321][ T10] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 799.880598][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input35 [ 799.894867][ T10] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 800.021360][ T5894] usb 6-1: USB disconnect, device number 43 [ 801.141707][ T5886] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 801.495442][T13349] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 801.515569][T15534] afs: Unknown parameter '0x0000000000000009' [ 801.864872][ T5886] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 801.864899][ T5886] usb 4-1: config 0 has no interface number 0 [ 801.864935][ T5886] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 801.864956][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.923632][ T5886] usb 4-1: config 0 descriptor?? [ 803.836707][ T30] audit: type=1400 audit(2000000289.572:1690): avc: denied { connect } for pid=15562 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 803.859355][T15458] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 803.865629][T13349] hub 3-1:0.0: set hub depth failed [ 803.867017][ T30] audit: type=1400 audit(2000000289.592:1691): avc: denied { setopt } for pid=15562 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 803.894160][ T10] usb 3-1: USB disconnect, device number 58 [ 803.905099][ T5893] usb 4-1: USB disconnect, device number 42 [ 803.986334][ T30] audit: type=1400 audit(2000000289.712:1692): avc: denied { setopt } for pid=15564 comm="syz.5.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 804.218094][T15579] xt_hashlimit: max too large, truncated to 1048576 [ 804.341023][T15579] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 805.264567][ T30] audit: type=1400 audit(2000000290.972:1693): avc: denied { read } for pid=15583 comm="syz.3.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 805.931065][T15593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.097532][T15621] netlink: 'syz.0.2618': attribute type 1 has an invalid length. [ 807.113443][T15619] lo speed is unknown, defaulting to 1000 [ 807.117391][T15621] netlink: 'syz.0.2618': attribute type 4 has an invalid length. [ 807.132067][T15619] lo speed is unknown, defaulting to 1000 [ 807.139914][T15621] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2618'. [ 807.779090][ T30] audit: type=1400 audit(2000000293.362:1694): avc: denied { getopt } for pid=15626 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 807.883289][T15456] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 807.892915][T15456] Bluetooth: hci1: Injecting HCI hardware error event [ 807.900964][T15456] Bluetooth: hci1: hardware error 0x00 [ 807.915891][T15630] loop9: detected capacity change from 0 to 7 [ 807.947177][T15630] Dev loop9: unable to read RDB block 7 [ 808.004939][T15630] loop9: unable to read partition table [ 808.010835][T15630] loop9: partition table beyond EOD, truncated [ 808.019433][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 808.025669][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 808.047487][T15630] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 808.120972][T15643] ceph: No mds server is up or the cluster is laggy [ 808.288166][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.301699][ T52] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 808.333028][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 808.371152][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 808.509797][ T30] audit: type=1400 audit(2000000294.242:1695): avc: denied { accept } for pid=15653 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 808.534299][ T52] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 808.550131][ T52] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 808.576508][ T52] usb 3-1: Manufacturer: syz [ 808.737852][ T52] usb 3-1: config 0 descriptor?? [ 808.807842][ T52] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 808.812220][T15666] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 808.827440][T15666] bond0: (slave wlan1): Opening slave failed [ 808.860031][ T52] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 808.981711][ T30] audit: type=1400 audit(2000000294.682:1696): avc: denied { kexec_image_load } for pid=15667 comm="syz.1.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 809.753233][ T30] audit: type=1400 audit(2000000295.472:1697): avc: denied { setopt } for pid=15634 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 809.938854][T15678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.975657][T15456] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 811.055832][ T30] audit: type=1400 audit(2000000296.782:1698): avc: denied { listen } for pid=15692 comm="syz.1.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.183496][T15705] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2638'. [ 811.367159][ T30] audit: type=1400 audit(2000000297.102:1699): avc: denied { getopt } for pid=15713 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 811.686009][ T30] audit: type=1400 audit(2000000297.102:1700): avc: denied { map } for pid=15713 comm="syz.5.2641" path="socket:[50092]" dev="sockfs" ino=50092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 811.800710][ T30] audit: type=1400 audit(2000000297.392:1701): avc: denied { setopt } for pid=15712 comm="syz.3.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 811.824466][ T30] audit: type=1400 audit(2000000297.412:1702): avc: denied { ioctl } for pid=15712 comm="syz.3.2640" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 812.346304][ T52] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 812.521187][T15722] Can't find ip_set type hash:net,por [ 812.600819][ T52] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 812.616239][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.915543][ T52] usb 2-1: Product: syz [ 813.204374][ T52] usb 2-1: Manufacturer: syz [ 813.222786][ T52] usb 2-1: SerialNumber: syz [ 813.315688][ T52] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 813.401689][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 813.427211][ T5860] usb 3-1: USB disconnect, device number 59 [ 813.435618][ T52] dvb-usb: bulk message failed: -22 (3/0) [ 813.443476][ T5860] ftdi_sio 3-1:0.0: device disconnected [ 813.448479][T15732] netlink: 'syz.3.2646': attribute type 10 has an invalid length. [ 814.063068][T15740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.072670][T15740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.115211][ T30] audit: type=1400 audit(2000000299.302:1703): avc: denied { audit_write } for pid=15707 comm="syz.1.2639" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 814.349246][ T52] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 814.409157][ T52] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 814.420549][ T52] dvb_usb_umt_010 2-1:1.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 814.470190][ T52] usb 2-1: USB disconnect, device number 63 [ 815.171679][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 815.451897][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 816.053657][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.072150][ T5893] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.081424][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.112520][ T5893] usb 4-1: config 0 descriptor?? [ 816.134182][T15768] xt_TCPMSS: Only works on TCP SYN packets [ 816.236902][ T30] audit: type=1326 audit(2000000301.972:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 816.322401][ T30] audit: type=1326 audit(2000000302.002:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 816.350858][ T30] audit: type=1326 audit(2000000302.002:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.566560][ T30] audit: type=1326 audit(2000000302.002:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.593049][ T30] audit: type=1326 audit(2000000302.002:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.616899][ T30] audit: type=1326 audit(2000000302.002:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.641608][ T30] audit: type=1326 audit(2000000302.002:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.665266][T15778] Can't find ip_set type hash:net,por [ 817.689174][ T30] audit: type=1326 audit(2000000302.002:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 817.931708][ T30] audit: type=1326 audit(2000000302.002:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15773 comm="syz.2.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 818.030296][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 818.040070][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 818.108519][T15784] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 818.116547][ T5893] usb 4-1: USB disconnect, device number 43 [ 818.961607][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 819.613875][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 819.620832][ T10] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 819.640226][ T10] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 819.657510][ T10] usb 2-1: config 2 has no interface number 1 [ 819.677024][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 819.691244][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.699680][ T10] usb 2-1: Product: syz [ 819.699847][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 819.713256][ T10] usb 2-1: Manufacturer: syz [ 819.717972][ T10] usb 2-1: SerialNumber: syz [ 819.724895][T15810] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2667'. [ 819.995780][ T5860] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 820.072048][ T10] imon 2-1:2.157: inconsistent driver matching [ 820.111056][ T10] imon 2-1:2.157: unable to register, err -22 [ 820.117561][T13349] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 820.125652][ T10] imon 2-1:2.157: probe with driver imon failed with error -22 [ 820.138791][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 820.261810][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 820.263794][ T10] imon 2-1:2.0: unable to initialize intf0, err -19 [ 820.268378][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.281541][ T10] imon:imon_probe: failed to initialize context! [ 820.284979][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.301236][ T5860] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.314712][ T5860] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.341078][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.472096][T15800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.493609][ T5860] usb 6-1: config 0 descriptor?? [ 820.543706][T15800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.712112][ T10] imon 2-1:2.0: unable to register, err -19 [ 820.723376][ T10] usb 2-1: USB disconnect, device number 64 [ 820.779297][T15822] netlink: 'syz.3.2669': attribute type 1 has an invalid length. [ 820.788528][T13349] usb 3-1: Using ep0 maxpacket: 8 [ 820.792841][T15822] netlink: 'syz.3.2669': attribute type 4 has an invalid length. [ 820.798513][T13349] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 820.801399][T15822] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2669'. [ 820.826533][T13349] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 820.838823][T13349] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 820.850824][T13349] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 820.859957][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.868058][T13349] usb 3-1: Product: syz [ 820.872463][T13349] usb 3-1: Manufacturer: syz [ 820.877109][T13349] usb 3-1: SerialNumber: syz [ 820.885790][T13349] hso 3-1:6.0: Can't find BULK IN endpoint [ 820.900443][T15823] loop9: detected capacity change from 0 to 7 [ 820.908520][T15823] Dev loop9: unable to read RDB block 7 [ 820.914651][T15823] loop9: unable to read partition table [ 820.920463][T15823] loop9: partition table beyond EOD, truncated [ 820.926782][T15823] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 820.939287][ T5860] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input36 [ 820.957423][ T5860] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 821.091841][T13349] usb 3-1: USB disconnect, device number 60 [ 821.176306][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2670'. [ 821.268597][ T5860] usb 6-1: USB disconnect, device number 44 [ 824.072949][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 824.072964][ T30] audit: type=1400 audit(2000000309.812:1739): avc: denied { read } for pid=15866 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.239796][T15879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=15879 comm=syz.5.2684 [ 825.299148][ T30] audit: type=1400 audit(2000000311.032:1740): avc: denied { setcheckreqprot } for pid=15880 comm="syz.3.2685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 825.495820][ T30] audit: type=1400 audit(2000000311.042:1741): avc: denied { mount } for pid=15880 comm="syz.3.2685" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 825.957787][ T30] audit: type=1400 audit(2000000311.042:1742): avc: denied { remount } for pid=15880 comm="syz.3.2685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 825.962367][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 825.979609][ T30] audit: type=1400 audit(2000000311.232:1743): avc: denied { setattr } for pid=15886 comm="syz.1.2687" name="NETLINK" dev="sockfs" ino=51335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 826.174094][ T30] audit: type=1400 audit(2000000311.912:1744): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 826.779671][T15909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 826.798930][T15914] netlink: 'syz.3.2693': attribute type 6 has an invalid length. [ 826.803124][T15909] bond8: entered promiscuous mode [ 826.815389][T15909] bond8: entered allmulticast mode [ 826.821142][T15909] bond0: (slave bond8): Enslaving as an active interface with a down link [ 826.858974][T15915] devtmpfs: Unknown parameter '-er' [ 826.864391][ T30] audit: type=1400 audit(2000000312.592:1745): avc: denied { remount } for pid=15907 comm="syz.3.2693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 826.888173][T15915] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2693'. [ 826.898489][T15915] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2693'. [ 826.946030][T15908] lo speed is unknown, defaulting to 1000 [ 826.957781][T15908] lo speed is unknown, defaulting to 1000 [ 827.813044][ T1170] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 827.899888][T15931] xt_HMARK: proto mask must be zero with L3 mode [ 827.985004][ T1170] usb 2-1: no configurations [ 827.985101][ T1170] usb 2-1: can't read configurations, error -22 [ 828.046982][T15931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2698'. [ 828.050013][T15931] nfs4: Unknown parameter 'w4]:"' [ 828.112252][ T1170] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 828.195017][ T30] audit: type=1400 audit(2000000313.912:1746): avc: denied { listen } for pid=15921 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 828.205616][ T30] audit: type=1400 audit(2000000313.922:1747): avc: denied { accept } for pid=15921 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 828.334429][ T1170] usb 2-1: no configurations [ 828.334448][ T1170] usb 2-1: can't read configurations, error -22 [ 828.334668][ T1170] usb usb2-port1: attempt power cycle [ 828.681750][ T1170] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 828.716132][ T1170] usb 2-1: no configurations [ 828.720980][ T1170] usb 2-1: can't read configurations, error -22 [ 828.730071][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 828.861710][ T1170] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 828.892624][ T1170] usb 2-1: no configurations [ 828.897289][ T1170] usb 2-1: can't read configurations, error -22 [ 828.903997][ T1170] usb usb2-port1: unable to enumerate USB device [ 829.288544][T15961] 8021q: adding VLAN 0 to HW filter on device bond14 [ 829.296230][T15961] bond14: entered allmulticast mode [ 829.301728][T15961] bond0: (slave bond14): Enslaving as an active interface with a down link [ 830.647584][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2713'. [ 831.530077][T15989] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 831.538979][T15989] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 831.547619][T15989] netlink: 'syz.1.2714': attribute type 1 has an invalid length. [ 831.557047][T15989] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2714'. [ 831.566501][T15989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2714'. [ 831.704873][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'. [ 831.718958][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2717'. [ 832.121871][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 832.262253][T16013] tmpfs: Bad value for 'mpol' [ 832.268483][T13349] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 832.301986][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 832.316883][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 832.337076][ T10] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 832.354547][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 832.367638][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 832.376950][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.385053][ T10] usb 2-1: Product: syz [ 832.389399][ T10] usb 2-1: Manufacturer: syz [ 832.394370][ T10] usb 2-1: SerialNumber: syz [ 832.406576][ T10] hso 2-1:6.0: Can't find BULK IN endpoint [ 832.441616][T13349] usb 3-1: Using ep0 maxpacket: 16 [ 832.453841][T13349] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 832.466061][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.474332][T13349] usb 3-1: Product: syz [ 832.478531][T13349] usb 3-1: Manufacturer: syz [ 832.486482][T13349] usb 3-1: SerialNumber: syz [ 832.515573][T13349] r8152-cfgselector 3-1: Unknown version 0x0000 [ 832.541555][T13349] r8152-cfgselector 3-1: config 0 descriptor?? [ 832.698638][ T10] usb 2-1: USB disconnect, device number 69 [ 833.000755][ T10] r8152-cfgselector 3-1: USB disconnect, device number 61 [ 833.166516][T16024] netlink: 'syz.5.2725': attribute type 16 has an invalid length. [ 833.174410][T16024] netlink: 'syz.5.2725': attribute type 17 has an invalid length. [ 833.186682][T16024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 833.450793][T16041] netlink: 'syz.5.2730': attribute type 1 has an invalid length. [ 833.458959][T16041] netlink: 'syz.5.2730': attribute type 4 has an invalid length. [ 833.468957][T16041] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2730'. [ 833.489797][T16043] netlink: 'syz.1.2731': attribute type 10 has an invalid length. [ 833.610722][T16052] random: crng reseeded on system resumption [ 834.616002][T16056] netlink: 'syz.2.2737': attribute type 16 has an invalid length. [ 834.624128][T16056] netlink: 'syz.2.2737': attribute type 17 has an invalid length. [ 834.636003][T16056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 835.380957][T16076] FAULT_INJECTION: forcing a failure. [ 835.380957][T16076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.394386][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.3.2742 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 835.394410][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 835.394420][T16076] Call Trace: [ 835.394426][T16076] [ 835.394433][T16076] dump_stack_lvl+0x16c/0x1f0 [ 835.394460][T16076] should_fail_ex+0x512/0x640 [ 835.394485][T16076] _copy_from_iter+0x2a4/0x15b0 [ 835.394510][T16076] ? __alloc_skb+0x200/0x380 [ 835.394527][T16076] ? __pfx__copy_from_iter+0x10/0x10 [ 835.394552][T16076] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 835.394580][T16076] netlink_sendmsg+0x829/0xdd0 [ 835.394604][T16076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.394633][T16076] ____sys_sendmsg+0xa95/0xc70 [ 835.394655][T16076] ? copy_msghdr_from_user+0x10a/0x160 [ 835.394672][T16076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.394708][T16076] ___sys_sendmsg+0x134/0x1d0 [ 835.394727][T16076] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.394775][T16076] __sys_sendmsg+0x16d/0x220 [ 835.394792][T16076] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.394808][T16076] ? __pfx_bpf_trace_run2+0x10/0x10 [ 835.394839][T16076] ? syscall_trace_enter+0x1cb/0x260 [ 835.394859][T16076] ? rcu_is_watching+0x12/0xc0 [ 835.394881][T16076] do_syscall_64+0xcd/0x260 [ 835.394905][T16076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.394922][T16076] RIP: 0033:0x7f5a8858e969 [ 835.394935][T16076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.394951][T16076] RSP: 002b:00007f5a894bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.394966][T16076] RAX: ffffffffffffffda RBX: 00007f5a887b5fa0 RCX: 00007f5a8858e969 [ 835.394977][T16076] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 835.394988][T16076] RBP: 00007f5a894bc090 R08: 0000000000000000 R09: 0000000000000000 [ 835.394998][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.395008][T16076] R13: 0000000000000000 R14: 00007f5a887b5fa0 R15: 00007fff8010ec78 [ 835.395031][T16076] [ 835.606666][T13349] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 835.682124][T16079] lo: entered allmulticast mode [ 835.771700][T13349] usb 3-1: Using ep0 maxpacket: 8 [ 835.884645][T16084] netlink: 'syz.5.2745': attribute type 10 has an invalid length. [ 835.941812][T13349] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 835.950104][T13349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.961885][T13349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.973035][T13349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.983020][T13349] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.378037][T13349] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 836.387766][T13349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.520374][T16077] lo: left allmulticast mode [ 836.542184][T16092] hub 9-0:1.0: USB hub found [ 836.559214][T16092] hub 9-0:1.0: 1 port detected [ 836.580032][ T30] audit: type=1400 audit(2000000322.312:1748): avc: denied { create } for pid=16091 comm="syz.1.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 836.618138][T13349] usb 3-1: GET_CAPABILITIES returned 0 [ 836.644317][T13349] usbtmc 3-1:16.0: can't read capabilities [ 836.685480][T16096] netlink: 'syz.0.2749': attribute type 16 has an invalid length. [ 836.695103][T16096] netlink: 'syz.0.2749': attribute type 17 has an invalid length. [ 836.721439][T16096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 836.829832][ T1170] usb 3-1: USB disconnect, device number 62 [ 836.912468][ T5886] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 837.085482][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.096573][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.111748][ T5886] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.121381][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.130269][ T5886] usb 6-1: Product: syz [ 837.134908][ T5886] usb 6-1: Manufacturer: syz [ 837.139654][ T5886] usb 6-1: SerialNumber: syz [ 837.350399][ T5886] usb 6-1: 0:2 : does not exist [ 837.358974][ T5886] usb 6-1: unit 6 not found! [ 837.375315][ T5886] usb 6-1: USB disconnect, device number 45 [ 837.803883][T16120] syz_tun: entered promiscuous mode [ 838.276205][T16123] FAULT_INJECTION: forcing a failure. [ 838.276205][T16123] name failslab, interval 1, probability 0, space 0, times 0 [ 838.289076][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.2.2759 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 838.289099][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 838.289117][T16123] Call Trace: [ 838.289123][T16123] [ 838.289130][T16123] dump_stack_lvl+0x16c/0x1f0 [ 838.289156][T16123] should_fail_ex+0x512/0x640 [ 838.289177][T16123] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 838.289203][T16123] should_failslab+0xc2/0x120 [ 838.289221][T16123] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 838.289245][T16123] ? security_file_alloc+0x34/0x2b0 [ 838.289271][T16123] security_file_alloc+0x34/0x2b0 [ 838.289293][T16123] init_file+0x93/0x4c0 [ 838.289312][T16123] alloc_empty_file+0x73/0x1e0 [ 838.289332][T16123] path_openat+0xe0/0x2d40 [ 838.289355][T16123] ? __x64_sys_creat+0xcc/0x120 [ 838.289373][T16123] ? do_syscall_64+0xcd/0x260 [ 838.289394][T16123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.289418][T16123] ? __pfx_path_openat+0x10/0x10 [ 838.289443][T16123] ? __lock_acquire+0xaa4/0x1ba0 [ 838.289468][T16123] do_filp_open+0x20b/0x470 [ 838.289491][T16123] ? __pfx_do_filp_open+0x10/0x10 [ 838.289532][T16123] ? _raw_spin_unlock+0x28/0x50 [ 838.289550][T16123] ? alloc_fd+0x471/0x7d0 [ 838.289581][T16123] do_sys_openat2+0x11b/0x1d0 [ 838.289599][T16123] ? __pfx_do_sys_openat2+0x10/0x10 [ 838.289618][T16123] ? __fget_files+0x20e/0x3c0 [ 838.289648][T16123] __x64_sys_creat+0xcc/0x120 [ 838.289667][T16123] ? __pfx___x64_sys_creat+0x10/0x10 [ 838.289685][T16123] ? __pfx_ksys_write+0x10/0x10 [ 838.289710][T16123] ? rcu_is_watching+0x12/0xc0 [ 838.289728][T16123] ? do_syscall_64+0x91/0x260 [ 838.289749][T16123] do_syscall_64+0xcd/0x260 [ 838.289771][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.289787][T16123] RIP: 0033:0x7f512418e969 [ 838.289801][T16123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.289817][T16123] RSP: 002b:00007f51250c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 838.289832][T16123] RAX: ffffffffffffffda RBX: 00007f51243b5fa0 RCX: 00007f512418e969 [ 838.289844][T16123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 838.289853][T16123] RBP: 00007f51250c2090 R08: 0000000000000000 R09: 0000000000000000 [ 838.289863][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.289872][T16123] R13: 0000000000000000 R14: 00007f51243b5fa0 R15: 00007ffce71eebb8 [ 838.289895][T16123] [ 838.533945][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.806858][T15458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 839.816847][T15458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 839.825946][T15458] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 839.844393][T15458] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 839.852211][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 839.864224][T15458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 839.886178][T16153] validate_nla: 1 callbacks suppressed [ 839.886189][T16153] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 839.916852][ T30] audit: type=1400 audit(2000000325.642:1749): avc: denied { mounton } for pid=16152 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 839.938406][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.968509][T16152] lo speed is unknown, defaulting to 1000 [ 840.034132][T16152] lo speed is unknown, defaulting to 1000 [ 840.165664][T16146] infiniband syz1: set down [ 840.170649][T16146] infiniband syz1: added syz_tun [ 840.368463][T16146] RDS/IB: syz1: added [ 840.392630][T16146] smc: adding ib device syz1 with port count 1 [ 840.447277][T16146] smc: ib device syz1 port 1 has pnetid [ 840.537416][T16152] chnl_net:caif_netlink_parms(): no params data found [ 840.607113][T16166] fuse: Unknown parameter 'group_id00000000000000000000' [ 841.044643][ T1096] batman_adv: batadv0: Removing interface: gretap1 [ 841.206586][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.222486][ T5893] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 841.233376][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.247012][ T1096] bond0 (unregistering): (slave bond1): Releasing backup interface [ 841.264391][ T1096] bond0 (unregistering): (slave bond2): Releasing backup interface [ 841.275487][ T1096] bond0 (unregistering): Released all slaves [ 841.395659][ T5893] usb 6-1: no configurations [ 841.400370][ T5893] usb 6-1: can't read configurations, error -22 [ 841.423243][ T1096] bond1 (unregistering): Released all slaves [ 841.566210][ T5893] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 841.767677][ T5893] usb 6-1: no configurations [ 841.777145][ T5893] usb 6-1: can't read configurations, error -22 [ 841.828158][ T5893] usb usb6-port1: attempt power cycle [ 841.982549][T15458] Bluetooth: hci6: command tx timeout [ 842.035358][ T1096] bond2 (unregistering): Released all slaves [ 842.242017][ T5893] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 842.337436][ T5893] usb 6-1: no configurations [ 842.382891][ T5893] usb 6-1: can't read configurations, error -22 [ 842.491423][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.529198][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.536847][T16152] bridge_slave_0: entered allmulticast mode [ 842.552994][T16152] bridge_slave_0: entered promiscuous mode [ 842.563471][ T5893] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 842.572368][ T1096] tipc: Disabling bearer [ 842.582532][ T1096] tipc: Disabling bearer [ 842.596343][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.603749][ T1096] tipc: Left network mode [ 842.631094][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.652889][ T5893] usb 6-1: no configurations [ 842.657615][ T5893] usb 6-1: can't read configurations, error -22 [ 842.667429][T16152] bridge_slave_1: entered allmulticast mode [ 842.701081][T16152] bridge_slave_1: entered promiscuous mode [ 842.716054][ T5893] usb usb6-port1: unable to enumerate USB device [ 843.230139][T16152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.248306][T16152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.336862][T16152] team0: Port device team_slave_0 added [ 843.363276][T16152] team0: Port device team_slave_1 added [ 843.487115][T13349] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 843.502220][T16152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.528794][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.554724][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.561417][T16152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.584514][T16152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.595975][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.621907][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.628399][T16152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.639395][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 843.656324][T16202] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 843.673381][T13349] usb 2-1: Using ep0 maxpacket: 32 [ 843.695565][T13349] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 843.713323][T13349] usb 2-1: config 0 has no interface number 0 [ 843.718496][T16152] hsr_slave_0: entered promiscuous mode [ 843.730930][T16152] hsr_slave_1: entered promiscuous mode [ 843.736411][T13349] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 843.748969][T16152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 843.756547][T13349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.756570][T13349] usb 2-1: Product: syz [ 843.756584][T13349] usb 2-1: Manufacturer: syz [ 843.756598][T13349] usb 2-1: SerialNumber: syz [ 843.780653][T16204] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2780'. [ 843.790760][T13349] usb 2-1: config 0 descriptor?? [ 843.799519][T13349] smsc95xx v2.0.0 [ 843.803380][T13349] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 843.818567][T13349] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 843.833626][T16152] Cannot create hsr debugfs directory [ 844.073063][T15458] Bluetooth: hci6: command tx timeout [ 844.107227][ T1170] usb 2-1: USB disconnect, device number 70 [ 844.585590][T16203] ALSA: mixer_oss: invalid index 40000 [ 844.591108][T16203] ALSA: mixer_oss: invalid OSS volume '' [ 844.705204][T16213] tmpfs: Unknown parameter 'grpquota_inodÿ' [ 844.948107][T16220] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 844.967790][T16152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.996124][T16152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 845.013032][T16152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 845.026838][T16152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 845.114187][T16152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.186359][T16152] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.215756][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.222996][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.262108][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.269222][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.361285][ T1096] hsr_slave_0: left promiscuous mode [ 845.371341][ T1096] hsr_slave_1: left promiscuous mode [ 845.378384][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.388463][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.452005][T13349] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 845.631618][T13349] usb 3-1: Using ep0 maxpacket: 16 [ 845.643578][T13349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.682104][T13349] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 845.736608][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2790'. [ 845.794877][T16236] netlink: 'syz.5.2790': attribute type 10 has an invalid length. [ 846.041084][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 846.105870][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 846.122666][T15458] Bluetooth: hci6: command tx timeout [ 846.377783][T13349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.388355][T13349] usb 3-1: config 0 descriptor?? [ 846.814856][T13349] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 847.008037][ T30] audit: type=1400 audit(2000000332.742:1750): avc: denied { ioctl } for pid=16249 comm="syz.5.2793" path="socket:[52630]" dev="sockfs" ino=52630 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 847.090644][T16152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.142029][T16152] veth0_vlan: entered promiscuous mode [ 847.158036][T16152] veth1_vlan: entered promiscuous mode [ 847.218337][T16152] veth0_macvtap: entered promiscuous mode [ 847.232703][T16255] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2794'. [ 847.234287][T16152] veth1_macvtap: entered promiscuous mode [ 847.248748][ T1096] IPVS: stop unused estimator thread 0... [ 847.273658][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.284607][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.295819][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.306570][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.331694][T16152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.382935][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.403662][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2795'. [ 847.485550][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.560269][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.659096][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.753347][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.869409][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.049645][T16152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.162723][ T5860] usb 3-1: USB disconnect, device number 63 [ 848.201920][T15458] Bluetooth: hci6: command tx timeout [ 848.322038][T16152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.330950][T16152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.339835][T16152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.349323][T16152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.598219][T15186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.620851][T15186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.697631][T16272] syzkaller0: Caught tx_queue_len zero misconfig [ 848.716881][ T30] audit: type=1326 audit(2000000334.452:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 848.746906][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.779496][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.904837][ T30] audit: type=1326 audit(2000000334.452:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 848.929989][ T30] audit: type=1326 audit(2000000334.482:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 848.933879][T16272] 8021q: adding VLAN 0 to HW filter on device bond9 [ 848.963275][T16272] bond9: entered promiscuous mode [ 848.968559][T16272] bond9: entered allmulticast mode [ 848.974395][T16272] bond0: (slave bond9): Enslaving as an active interface with a down link [ 848.984970][ T30] audit: type=1326 audit(2000000334.482:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 849.224837][ T30] audit: type=1326 audit(2000000334.482:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 849.555732][ T30] audit: type=1326 audit(2000000334.482:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 849.579834][ T30] audit: type=1326 audit(2000000334.482:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 849.679721][ T30] audit: type=1326 audit(2000000334.482:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 849.731141][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2803'. [ 849.761154][ T30] audit: type=1326 audit(2000000334.482:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f512418e969 code=0x7ffc0000 [ 851.270882][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 851.652260][T16312] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2808'. [ 852.053183][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 852.082063][T16323] netlink: 'syz.5.2807': attribute type 11 has an invalid length. [ 852.101692][T16323] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2807'. [ 852.141548][T13349] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 852.315027][T13349] usb 3-1: Using ep0 maxpacket: 8 [ 852.324780][T13349] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 852.334938][T16303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.344825][T13349] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 852.494417][T16327] netlink: 'syz.1.2813': attribute type 12 has an invalid length. [ 852.557260][T13349] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 852.598618][T13349] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 852.610184][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.641451][T13349] usb 3-1: Product: syz [ 852.677480][T13349] usb 3-1: Manufacturer: syz [ 852.695872][T13349] usb 3-1: SerialNumber: syz [ 852.715176][T13349] hso 3-1:6.0: Can't find BULK IN endpoint [ 852.819003][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 852.819014][ T30] audit: type=1400 audit(2000000338.552:1782): avc: denied { read } for pid=16340 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 853.039551][ T5886] usb 3-1: USB disconnect, device number 64 [ 853.066332][ T30] audit: type=1400 audit(2000000338.792:1783): avc: denied { setopt } for pid=16340 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 853.188361][T16353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.199009][T16353] bond0: (slave bond6): Enslaving as an active interface with an up link [ 854.656882][T16374] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 854.685619][T16374] netlink: 'syz.5.2822': attribute type 4 has an invalid length. [ 854.710608][T16374] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2822'. [ 855.075489][T16381] macvtap1: entered promiscuous mode [ 855.080883][T16381] vlan0: entered promiscuous mode [ 855.089850][T16381] macvtap1: entered allmulticast mode [ 855.140786][T16386] netlink: 'syz.2.2828': attribute type 10 has an invalid length. [ 855.218992][T16392] netlink: 'syz.5.2827': attribute type 10 has an invalid length. [ 855.513162][T16401] 8021q: adding VLAN 0 to HW filter on device bond15 [ 855.521771][T16401] bond15: entered allmulticast mode [ 855.527464][T16401] bond0: (slave bond15): Enslaving as an active interface with an up link [ 857.662910][T16428] overlayfs: failed to resolve './file1': -2 [ 859.401751][ T52] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 859.601673][ T52] usb 6-1: device descriptor read/64, error -71 [ 859.618773][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 860.011552][ T52] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 860.081629][ T5886] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 860.414580][ T52] usb 6-1: device descriptor read/64, error -71 [ 860.467878][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 860.581711][T13349] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 860.979098][ T5886] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 860.999683][ T5886] usb 2-1: config 179 has no interface number 0 [ 861.006166][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 861.018446][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 861.032978][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.068071][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 861.081720][ T52] usb usb6-port1: attempt power cycle [ 861.110264][T16477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.193278][T13349] usb 3-1: config 2 has an invalid interface number: 177 but max is 1 [ 861.225665][ T5886] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 861.256883][T14070] IPVS: starting estimator thread 0... [ 861.266921][ T5886] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 861.276935][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.297481][T16466] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 861.304232][T13349] usb 3-1: config 2 has an invalid interface number: 177 but max is 1 [ 861.313013][T13349] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 861.322987][T13349] usb 3-1: config 2 has no interface number 0 [ 861.329245][T13349] usb 3-1: config 2 interface 177 has no altsetting 1 [ 861.338218][T13349] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 861.349076][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.357537][T13349] usb 3-1: Product: syz [ 861.361863][T13349] usb 3-1: Manufacturer: syz [ 861.366532][T13349] usb 3-1: SerialNumber: syz [ 861.431835][T16480] IPVS: using max 76 ests per chain, 182400 per kthread [ 861.561659][ T52] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 861.585653][T16475] 9pnet_fd: Insufficient options for proto=fd [ 861.631858][ T52] usb 6-1: device descriptor read/8, error -71 [ 861.989018][T16488] bond0: entered promiscuous mode [ 861.994432][T16488] bond_slave_0: entered promiscuous mode [ 862.000731][T16488] bond1: entered promiscuous mode [ 862.006480][T16488] bond2: entered promiscuous mode [ 862.012016][T16488] bond3: entered promiscuous mode [ 862.017998][T16488] bond4: entered promiscuous mode [ 862.023626][T16488] bond5: entered promiscuous mode [ 862.029161][T16488] bond7: entered promiscuous mode [ 862.034828][T16488] bond8: entered promiscuous mode [ 862.189613][ T30] audit: type=1400 audit(2000000347.922:1784): avc: denied { setopt } for pid=16490 comm="syz.3.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 862.266132][T16493] lo speed is unknown, defaulting to 1000 [ 862.485831][T16493] lo speed is unknown, defaulting to 1000 [ 863.036070][ T52] usb 2-1: USB disconnect, device number 71 [ 863.042092][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 863.042135][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 863.260986][T16502] FAULT_INJECTION: forcing a failure. [ 863.260986][T16502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.277602][T13349] usb 3-1: selecting invalid altsetting 1 [ 863.283483][T13349] sierra 3-1:2.177: Sierra USB modem converter detected [ 863.301392][T13349] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 863.324706][T13349] usb 3-1: USB disconnect, device number 65 [ 863.345609][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.1.2858 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 863.345636][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 863.345648][T16502] Call Trace: [ 863.345654][T16502] [ 863.345661][T16502] dump_stack_lvl+0x16c/0x1f0 [ 863.345688][T16502] should_fail_ex+0x512/0x640 [ 863.345714][T16502] strncpy_from_user+0x3b/0x2e0 [ 863.345737][T16502] path_removexattrat+0xc6/0x5e0 [ 863.345766][T16502] ? __pfx_path_removexattrat+0x10/0x10 [ 863.345813][T16502] ? ksys_write+0x1b9/0x240 [ 863.345838][T16502] ? __pfx_ksys_write+0x10/0x10 [ 863.345859][T16502] ? xfd_validate_state+0x5d/0x180 [ 863.345883][T16502] __x64_sys_fremovexattr+0x5a/0x80 [ 863.345903][T16502] do_syscall_64+0xcd/0x260 [ 863.345927][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.345945][T16502] RIP: 0033:0x7f0da078e969 [ 863.345959][T16502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.345975][T16502] RSP: 002b:00007f0da1633038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 863.345991][T16502] RAX: ffffffffffffffda RBX: 00007f0da09b5fa0 RCX: 00007f0da078e969 [ 863.346003][T16502] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 863.346013][T16502] RBP: 00007f0da1633090 R08: 0000000000000000 R09: 0000000000000000 [ 863.346023][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.346033][T16502] R13: 0000000000000000 R14: 00007f0da09b5fa0 R15: 00007ffe51d38618 [ 863.346057][T16502] [ 863.512798][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2859'. [ 864.437569][T13349] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 864.447575][T13349] sierra 3-1:2.177: device disconnected [ 864.630548][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 864.707070][ T30] audit: type=1400 audit(2000000350.442:1785): avc: denied { execute } for pid=16515 comm="syz.2.2862" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 864.861775][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2864'. [ 864.941835][T13349] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 865.849741][T16528] bpf: Bad value for 'gid' [ 865.901551][T13349] usb 3-1: Using ep0 maxpacket: 16 [ 865.932078][T13349] usb 3-1: config 0 has an invalid interface number: 81 but max is 0 [ 865.940334][T13349] usb 3-1: config 0 has no interface number 0 [ 865.973824][T13349] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=7b.f0 [ 865.983062][T13349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.991107][T13349] usb 3-1: Product: syz [ 866.015475][T13349] usb 3-1: Manufacturer: syz [ 866.020327][T13349] usb 3-1: SerialNumber: syz [ 866.049078][T13349] usb 3-1: config 0 descriptor?? [ 866.067700][T13349] rtl8150 3-1:0.81: couldn't find required endpoints [ 866.089772][T13349] rtl8150 3-1:0.81: probe with driver rtl8150 failed with error -5 [ 866.104388][T16536] Invalid source name [ 866.108410][T16536] UBIFS error (pid: 16536): cannot open "./file0", error -22 [ 866.405943][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 866.422380][T16543] netlink: 'syz.3.2866': attribute type 20 has an invalid length. [ 866.430211][T16543] netlink: 'syz.3.2866': attribute type 21 has an invalid length. [ 868.081751][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2874'. [ 868.964431][ T52] usb 3-1: USB disconnect, device number 66 [ 869.873940][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.125256][T16589] netlink: 'syz.3.2871': attribute type 10 has an invalid length. [ 871.143778][T16589] syz_tun: entered promiscuous mode [ 871.172034][T16589] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 871.182379][ T52] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 871.405591][T16605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56080 sclass=netlink_route_socket pid=16605 comm=syz.1.2887 [ 871.441595][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 871.447180][ T52] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 871.456220][ T52] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 871.463797][ T52] usb 3-1: can't read configurations, error -61 [ 871.501925][ T5894] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 871.661621][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 871.699388][ T5894] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 871.757976][ T5894] usb 4-1: config 179 has no interface number 0 [ 871.829043][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 871.879339][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 871.911240][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 871.923717][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 871.938019][ T5894] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 871.941564][ T52] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 871.951427][ T5894] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 871.973501][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.984946][T16599] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 872.132118][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 872.138064][ T52] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 872.147753][ T52] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 872.155565][ T52] usb 3-1: can't read configurations, error -61 [ 872.169366][ T52] usb usb3-port1: attempt power cycle [ 872.410292][T16621] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2889'. [ 872.521711][ T52] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 872.566286][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 872.575664][ T52] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 872.756098][ T52] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 872.764478][ T52] usb 3-1: can't read configurations, error -61 [ 872.909449][ T52] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 872.952671][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 872.960703][ T52] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 872.981126][ T52] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 872.992751][ T52] usb 3-1: can't read configurations, error -61 [ 873.000074][ T52] usb usb3-port1: unable to enumerate USB device [ 873.175881][ T5894] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 873.408608][ T5894] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 873.422666][ T5894] usb 6-1: config 0 has no interface number 0 [ 873.431030][ T5894] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 873.445435][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.455193][ T5894] usb 6-1: Product: syz [ 873.459523][ T5894] usb 6-1: Manufacturer: syz [ 873.464520][ T5894] usb 6-1: SerialNumber: syz [ 873.477084][ T5894] usb 6-1: config 0 descriptor?? [ 873.541887][ T30] audit: type=1326 audit(2000000359.272:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.2893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0da078e969 code=0x0 [ 873.593991][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 873.600307][T16636] fuse: Bad value for 'fd' [ 873.616409][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'. [ 873.626123][T16638] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 873.709544][ T5894] pctv452e: pctv452e_power_ctrl: 1 [ 873.709544][ T5894] [ 873.758285][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 873.758285][ T5894] [ 873.863656][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 873.943746][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 873.967445][ T5894] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 873.979084][ T5894] usb 6-1: USB disconnect, device number 54 [ 874.370039][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 874.370046][T14070] usb 4-1: USB disconnect, device number 44 [ 874.370079][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 874.758948][T16650] input: syz0 as /devices/virtual/input/input38 [ 875.392472][ T30] audit: type=1400 audit(2000000361.122:1787): avc: denied { bind } for pid=16654 comm="syz.1.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 876.507939][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2904'. [ 877.399487][T16669] ip6erspan0: entered promiscuous mode [ 877.438864][T16671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2906'. [ 877.494258][T16677] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 877.658920][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 877.676281][T16684] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2911'. [ 878.074947][T14070] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 878.541956][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 878.551919][ T5894] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 878.568156][T16689] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2912'. [ 878.591344][T14070] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 878.780630][T14070] usb 6-1: config 0 has no interface number 0 [ 878.919236][T16696] affs: No valid root block on device nullb0 [ 879.024923][T14070] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 879.040356][T14070] usb 6-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=2a.b8 [ 879.041605][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 879.057388][T14070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.065540][T14070] usb 6-1: Product: syz [ 879.069792][T14070] usb 6-1: Manufacturer: syz [ 879.071581][T13349] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 879.074557][T14070] usb 6-1: SerialNumber: syz [ 879.089737][ T5894] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 879.092365][T14070] usb 6-1: config 0 descriptor?? [ 879.107982][T14070] ftdi_sio 6-1:0.2: FTDI USB Serial Device converter detected [ 879.117134][T14070] ftdi_sio ttyUSB0: unknown device type: 0x2ab8 [ 879.154635][ T5894] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 879.284795][ T5894] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 879.299100][T13349] usb 4-1: Using ep0 maxpacket: 8 [ 879.817453][ T5894] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 879.837269][ T52] usb 6-1: USB disconnect, device number 55 [ 879.846950][ T52] ftdi_sio 6-1:0.2: device disconnected [ 879.856174][T13349] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 879.866368][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.874864][T13349] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 879.886460][ T5894] usb 3-1: Product: syz [ 879.891686][ T5894] usb 3-1: Manufacturer: syz [ 879.897363][ T5894] usb 3-1: SerialNumber: syz [ 879.904012][T13349] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 879.917190][T13349] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 879.930970][ T5894] hso 3-1:6.0: Can't find BULK IN endpoint [ 879.937057][T13349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.957913][T13349] usb 4-1: Product: syz [ 879.962847][T13349] usb 4-1: Manufacturer: syz [ 879.967549][T13349] usb 4-1: SerialNumber: syz [ 879.978960][T13349] hso 4-1:6.0: Can't find BULK IN endpoint [ 880.182533][T16707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2918'. [ 880.504030][T14070] usb 4-1: USB disconnect, device number 45 [ 881.051420][ T30] audit: type=1400 audit(2000000366.762:1788): avc: denied { ioctl } for pid=16708 comm="syz.1.2919" path="socket:[55734]" dev="sockfs" ino=55734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 881.108017][ T5886] usb 3-1: USB disconnect, device number 71 [ 881.146875][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2921'. [ 881.167560][T16715] netlink: 'syz.5.2921': attribute type 10 has an invalid length. [ 882.441733][ T5894] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 882.706330][T16747] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2932'. [ 882.719972][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 882.745981][ T5894] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 882.777122][ T5894] usb 2-1: config 179 has no interface number 0 [ 882.812105][ T5894] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 882.847486][ T5894] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 882.906155][ T5894] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 882.917687][ T5894] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 882.932982][ T5894] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 882.948501][ T5894] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 883.013180][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.049601][T16742] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 883.504143][ T52] usb 2-1: USB disconnect, device number 72 [ 883.504143][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 883.504273][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 884.995682][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'. [ 885.033337][T15456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.047218][T15456] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.053484][T16771] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2939'. [ 885.082647][T15456] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.128475][T15456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.142694][T15456] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 885.379118][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 885.477722][T12807] bond0: (slave syz_tun): Releasing backup interface [ 885.494534][T12807] syz_tun (unregistering): left allmulticast mode [ 885.514333][ T6161] smc: removing ib device syz1 [ 885.539340][T16766] lo speed is unknown, defaulting to 1000 [ 885.557101][T16766] lo speed is unknown, defaulting to 1000 [ 885.562073][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 885.569535][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 885.595714][ T10] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 885.640047][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 885.678443][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 885.706224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.734058][ T10] usb 2-1: Product: syz [ 885.750829][ T10] usb 2-1: Manufacturer: syz [ 885.772812][ T10] usb 2-1: SerialNumber: syz [ 885.793214][ T10] hso 2-1:6.0: Can't find BULK IN endpoint [ 886.063154][ T5886] usb 2-1: USB disconnect, device number 73 [ 887.068228][T16766] chnl_net:caif_netlink_parms(): no params data found [ 887.404440][T15458] Bluetooth: hci4: command tx timeout [ 887.519024][ T30] audit: type=1400 audit(2000000373.242:1789): avc: denied { accept } for pid=16811 comm="syz.3.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 888.220628][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.237206][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.251285][T16766] bridge_slave_0: entered allmulticast mode [ 888.259026][T16766] bridge_slave_0: entered promiscuous mode [ 888.289825][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.297371][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.305188][T16766] bridge_slave_1: entered allmulticast mode [ 888.313623][T16766] bridge_slave_1: entered promiscuous mode [ 888.739146][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.816853][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.481809][T15458] Bluetooth: hci4: command tx timeout [ 889.572833][T16766] team0: Port device team_slave_0 added [ 889.617595][T16766] team0: Port device team_slave_1 added [ 889.753497][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.760465][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.011579][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.041384][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.041399][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.041421][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.479709][ T1159] bridge_slave_1: left promiscuous mode [ 890.487729][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.497828][ T1159] bridge_slave_0: left promiscuous mode [ 890.503907][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.641643][ T5886] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 890.649728][ T1159] bond3 (unregistering): (slave gretap1): Releasing active interface [ 891.292418][ T5886] usb 2-1: device descriptor read/64, error -71 [ 891.550788][ T5886] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 891.565473][T15458] Bluetooth: hci4: command tx timeout [ 891.779426][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.789261][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.798786][ T1159] bond0 (unregistering): (slave bond1): Releasing backup interface [ 891.807340][ T5886] usb 2-1: device descriptor read/64, error -71 [ 891.836184][ T1159] bond0 (unregistering): (slave bond2): Releasing backup interface [ 891.848766][ T1159] bond0 (unregistering): (slave bond4): Releasing backup interface [ 891.910070][ T1159] bond0 (unregistering): (slave bond5): Releasing backup interface [ 891.958710][ T5886] usb usb2-port1: attempt power cycle [ 892.003494][ T1159] bond0 (unregistering): (slave bond6): Releasing backup interface [ 892.056678][ T1159] bond0 (unregistering): (slave bond7): Releasing backup interface [ 892.108960][ T1159] bond0 (unregistering): (slave bond8): Releasing backup interface [ 892.159727][ T1159] bond0 (unregistering): (slave bond9): Releasing backup interface [ 892.217759][ T1159] bond0 (unregistering): (slave bond10): Releasing backup interface [ 892.238528][ T1159] bond0 (unregistering): (slave bond11): Releasing backup interface [ 892.264943][ T1159] bond0 (unregistering): (slave bond12): Releasing backup interface [ 892.278687][ T1159] bond12 (unregistering): left allmulticast mode [ 892.289204][ T1159] bond0 (unregistering): (slave bond13): Releasing backup interface [ 892.299688][ T1159] bond13 (unregistering): left allmulticast mode [ 892.310193][ T1159] bond0 (unregistering): (slave bond14): Releasing backup interface [ 892.329111][ T1159] bond14 (unregistering): left allmulticast mode [ 892.336897][ T1159] bond0 (unregistering): (slave bond15): Releasing backup interface [ 892.348809][ T1159] bond15 (unregistering): left allmulticast mode [ 892.355497][ T1159] bond0 (unregistering): Released all slaves [ 892.369028][ T5886] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 892.393786][ T5886] usb 2-1: device descriptor read/8, error -71 [ 892.459208][ T1159] bond1 (unregistering): Released all slaves [ 892.602568][ T1159] bond2 (unregistering): Released all slaves [ 892.676858][ T5886] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 892.684585][T14070] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 892.728842][ T5886] usb 2-1: device descriptor read/8, error -71 [ 892.756238][ T1159] bond3 (unregistering): Released all slaves [ 892.855961][T14070] usb 4-1: Using ep0 maxpacket: 8 [ 892.868125][T14070] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 892.879121][ T5886] usb usb2-port1: unable to enumerate USB device [ 892.988877][T14070] usb 4-1: config 179 has no interface number 0 [ 893.078885][T14070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 893.126993][T14070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 893.145944][T14070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 893.158629][ T1159] bond4 (unregistering): Released all slaves [ 893.158850][T14070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 893.187533][T14070] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 893.202842][T14070] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 893.214198][T14070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.226658][T16915] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 893.300593][ T1159] bond5 (unregistering): Released all slaves [ 893.399964][ T1159] bond6 (unregistering): Released all slaves [ 893.563063][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 893.616477][ T1159] bond7 (unregistering): Released all slaves [ 893.646960][T15458] Bluetooth: hci4: command tx timeout [ 893.724394][ T10] usb 2-1: device descriptor read/64, error -71 [ 893.961988][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 894.111867][ T10] usb 2-1: device descriptor read/64, error -71 [ 894.223271][ T10] usb usb2-port1: attempt power cycle [ 894.357726][ T1159] bond8 (unregistering): Released all slaves [ 894.527278][ T1159] bond9 (unregistering): Released all slaves [ 894.681909][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 894.702215][ T10] usb 2-1: device descriptor read/8, error -71 [ 894.717592][ T1159] bond10 (unregistering): Released all slaves [ 894.943511][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 895.193278][ T1159] bond11 (unregistering): Released all slaves [ 895.312474][ T10] usb 2-1: device descriptor read/8, error -71 [ 895.386832][ T1159] bond12 (unregistering): Released all slaves [ 895.427828][ T10] usb usb2-port1: unable to enumerate USB device [ 895.495127][ T1159] bond13 (unregistering): Released all slaves [ 895.614305][ T1159] bond14 (unregistering): Released all slaves [ 895.743670][ T1159] bond15 (unregistering): Released all slaves [ 895.759046][T16766] hsr_slave_0: entered promiscuous mode [ 895.765631][T16766] hsr_slave_1: entered promiscuous mode [ 895.772134][T16766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.779763][T16766] Cannot create hsr debugfs directory [ 895.851523][ T52] usb 4-1: USB disconnect, device number 46 [ 895.857460][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 895.857484][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 896.006380][T16944] affs: No valid root block on device nullb0 [ 896.027078][ T1159] tipc: Disabling bearer [ 896.044155][ T1159] tipc: Left network mode [ 896.381754][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 896.396455][T16945] delete_channel: no stack [ 896.448844][ T1159] hsr_slave_0: left promiscuous mode [ 896.458863][ T1159] hsr_slave_1: left promiscuous mode [ 896.466983][ T1159] batman_adv: batadv0: Removing interface: dummy0 [ 896.477169][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.492618][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.515189][ T1159] vlan0: left promiscuous mode [ 896.527000][ T1159] veth0_vlan: left promiscuous mode [ 896.547481][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.583899][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.611087][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.700574][ T10] usb 6-1: Product: syz [ 896.707196][ T10] usb 6-1: Manufacturer: syz [ 896.716053][ T10] usb 6-1: SerialNumber: syz [ 897.176343][T16961] FAULT_INJECTION: forcing a failure. [ 897.176343][T16961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.193388][T16961] CPU: 1 UID: 0 PID: 16961 Comm: syz.0.2992 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 897.193414][T16961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 897.193423][T16961] Call Trace: [ 897.193429][T16961] [ 897.193436][T16961] dump_stack_lvl+0x16c/0x1f0 [ 897.193463][T16961] should_fail_ex+0x512/0x640 [ 897.193489][T16961] _copy_to_user+0x32/0xd0 [ 897.193513][T16961] simple_read_from_buffer+0xcb/0x170 [ 897.193539][T16961] proc_fail_nth_read+0x197/0x270 [ 897.193564][T16961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 897.193589][T16961] ? rw_verify_area+0xcf/0x680 [ 897.193610][T16961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 897.193640][T16961] vfs_read+0x1de/0xc70 [ 897.193667][T16961] ? __pfx___mutex_lock+0x10/0x10 [ 897.193690][T16961] ? __pfx_vfs_read+0x10/0x10 [ 897.193719][T16961] ? __fget_files+0x20e/0x3c0 [ 897.193750][T16961] ksys_read+0x12a/0x240 [ 897.193772][T16961] ? __pfx_ksys_read+0x10/0x10 [ 897.193793][T16961] ? rcu_is_watching+0x12/0xc0 [ 897.193821][T16961] do_syscall_64+0xcd/0x260 [ 897.193845][T16961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.193861][T16961] RIP: 0033:0x7fa8ec98d37c [ 897.193875][T16961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 897.193891][T16961] RSP: 002b:00007fa8ed7cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 897.193907][T16961] RAX: ffffffffffffffda RBX: 00007fa8ecbb5fa0 RCX: 00007fa8ec98d37c [ 897.193918][T16961] RDX: 000000000000000f RSI: 00007fa8ed7cd0a0 RDI: 0000000000000004 [ 897.193928][T16961] RBP: 00007fa8ed7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 897.193939][T16961] R10: 0000000000040008 R11: 0000000000000246 R12: 0000000000000001 [ 897.193949][T16961] R13: 0000000000000000 R14: 00007fa8ecbb5fa0 R15: 00007fff935dc368 [ 897.193970][T16961] [ 898.069474][T16969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2994'. [ 898.489409][ T10] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 898.523138][ T10] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 898.555747][ T10] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 898.895747][ T10] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 898.954065][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 898.993842][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 899.328954][ T10] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 899.382456][ T10] usb 6-1: USB disconnect, device number 56 [ 899.423677][ T10] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 899.562369][T16981] tmpfs: Unknown parameter 'ËŸol' [ 899.671581][ T5894] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 899.676395][T16982] fuse: Unknown parameter 'group_i00000000000000000000' [ 899.686996][T16983] fuse: Unknown parameter 'group_i00000000000000000000' [ 899.739417][T16766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 899.769633][T16766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 899.800744][T16766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 899.812055][T16766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 899.826043][ T1159] IPVS: stop unused estimator thread 0... [ 899.871924][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 899.884778][ T5894] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 899.901678][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.915316][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.922091][ T5894] usb 4-1: Product: syz [ 899.926256][ T5894] usb 4-1: Manufacturer: syz [ 899.930848][ T5894] usb 4-1: SerialNumber: syz [ 899.945376][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.004815][ T5894] usb 4-1: config 0 descriptor?? [ 900.016325][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.023473][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.034034][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 900.042251][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.049358][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.524944][ T5894] gspca_stk1135: reg_w 0x0 err -71 [ 900.531427][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.540481][ T5894] gspca_stk1135: Sensor write failed [ 900.559138][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.574658][T16998] could not allocate digest TFM handle cbcmac-aes-neon [ 900.586664][T16996] lo speed is unknown, defaulting to 1000 [ 900.660669][ T5894] gspca_stk1135: Sensor write failed [ 900.666336][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.675870][ T5894] gspca_stk1135: Sensor read failed [ 900.681270][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.687909][ T5894] gspca_stk1135: Sensor read failed [ 900.696563][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 900.705510][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.717853][ T5894] gspca_stk1135: Sensor read failed [ 900.723423][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.729852][ T5894] gspca_stk1135: Sensor read failed [ 900.738316][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.744834][ T5894] gspca_stk1135: Sensor write failed [ 900.750237][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 900.759758][ T5894] gspca_stk1135: Sensor write failed [ 900.765374][ T5894] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 900.778610][ T5894] usb 4-1: USB disconnect, device number 47 [ 901.179787][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.692489][T17017] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 901.788024][T17017] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 901.822352][ T30] audit: type=1326 audit(2000000387.422:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.3006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x0 [ 902.386378][ T30] audit: type=1400 audit(2000000388.122:1791): avc: denied { read write } for pid=17022 comm="syz.1.3009" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 902.411547][ T30] audit: type=1400 audit(2000000388.122:1792): avc: denied { open } for pid=17022 comm="syz.1.3009" path="/577/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 902.455891][T17030] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3011'. [ 902.478452][T17030] tipc: Enabling of bearer rejected, failed to enable media [ 902.536629][T17033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 902.586310][T16766] veth0_vlan: entered promiscuous mode [ 902.603990][T16766] veth1_vlan: entered promiscuous mode [ 902.670024][T16766] veth0_macvtap: entered promiscuous mode [ 902.684495][T16766] veth1_macvtap: entered promiscuous mode [ 902.723501][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.750686][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.772596][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.783548][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.793651][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.804607][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.817831][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.837076][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.851100][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.916467][T17043] overlayfs: missing 'lowerdir' [ 903.621216][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.631695][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.642567][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.653007][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.662825][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.673272][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.686984][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.707584][T16766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.720543][T16766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.729856][T16766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.738586][T16766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.833143][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.846125][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.889345][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.905210][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.040211][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 904.311570][ T5894] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 904.842752][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 904.982387][ T5894] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 904.990749][ T5894] usb 6-1: config 179 has no interface number 0 [ 904.997026][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 905.012972][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 905.040011][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 905.051537][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 905.062967][ T5894] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 905.076216][ T5894] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 905.085486][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.102721][T17055] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 905.647575][T17064] lo speed is unknown, defaulting to 1000 [ 906.665412][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 906.814066][ T30] audit: type=1326 audit(2000000392.552:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 906.866890][ T30] audit: type=1326 audit(2000000392.582:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 906.890890][ T30] audit: type=1326 audit(2000000392.582:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 906.921827][ T30] audit: type=1326 audit(2000000392.582:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 907.082010][ T30] audit: type=1326 audit(2000000392.582:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 907.105837][ T52] usb 6-1: USB disconnect, device number 57 [ 907.111783][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 907.475988][T17086] overlayfs: missing 'lowerdir' [ 908.128046][ T30] audit: type=1326 audit(2000000392.582:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 908.282865][ T30] audit: type=1326 audit(2000000392.582:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 908.308590][ T30] audit: type=1326 audit(2000000392.582:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 908.447293][ T30] audit: type=1326 audit(2000000392.602:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 908.516779][ T30] audit: type=1326 audit(2000000392.602:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 908.576302][ T30] audit: type=1326 audit(2000000392.602:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98e969 code=0x7ffc0000 [ 910.790676][T17122] 9pnet_fd: Insufficient options for proto=fd [ 911.092086][T17135] overlayfs: missing 'lowerdir' [ 911.191893][ T52] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 911.891752][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 911.906641][T17132] syz.3.3040 (17132): drop_caches: 2 [ 911.958080][T17139] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3040'. [ 911.958125][T17132] syz.3.3040 (17132): drop_caches: 2 [ 912.694735][ T52] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 912.703106][ T52] usb 3-1: config 179 has no interface number 0 [ 912.709400][ T52] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 912.725939][ T52] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 913.007093][ T52] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 913.066675][ T52] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 913.282473][ T52] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 913.344862][T17149] syzkaller1: entered promiscuous mode [ 913.370954][T17149] syzkaller1: entered allmulticast mode [ 913.391800][ T52] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 913.411018][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.517726][T17126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 914.091565][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 914.091582][ T30] audit: type=1400 audit(2000000399.822:1823): avc: denied { write } for pid=17163 comm="syz.5.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 914.401772][ T52] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 914.564129][ T52] usb 6-1: Using ep0 maxpacket: 32 [ 914.576256][ T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.707767][ T52] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 915.029519][ T5893] usb 3-1: USB disconnect, device number 72 [ 915.029523][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 915.029561][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 915.118285][ T52] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 915.151394][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.188727][ T52] usb 6-1: Product: syz [ 916.035663][ T52] usb 6-1: Manufacturer: syz [ 916.040293][ T52] usb 6-1: SerialNumber: syz [ 916.075332][ T52] usb 6-1: config 0 descriptor?? [ 916.129396][T15456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 916.139899][T15456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 916.147812][T15456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 916.156557][T15456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 916.169048][T15456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 916.226953][T10098] bond0: (slave syz_tun): Releasing backup interface [ 916.245086][T10098] syz_tun (unregistering): left allmulticast mode [ 916.282941][T17195] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 916.295400][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.304100][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.321178][T17186] lo speed is unknown, defaulting to 1000 [ 916.328221][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.344505][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.354707][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.415724][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.424320][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.433002][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.442624][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.451200][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.877350][ T52] usb 6-1: USB disconnect, device number 58 [ 916.916369][T17205] bond2: entered promiscuous mode [ 917.409436][T17186] chnl_net:caif_netlink_parms(): no params data found [ 917.416517][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 917.545216][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.556109][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.563487][T17186] bridge_slave_0: entered allmulticast mode [ 917.570843][T17186] bridge_slave_0: entered promiscuous mode [ 917.581542][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 917.588638][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.595578][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.599714][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.616986][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 917.632290][ T5893] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 917.642944][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 917.654959][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.685802][ T10] usb 4-1: config 0 descriptor?? [ 917.691577][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.698744][T17186] bridge_slave_1: entered allmulticast mode [ 917.706143][T17186] bridge_slave_1: entered promiscuous mode [ 917.749257][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.775854][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.813493][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.828244][ T5893] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 917.839093][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.854583][ T5893] usb 3-1: config 0 descriptor?? [ 917.864734][T17186] team0: Port device team_slave_0 added [ 917.875525][T17186] team0: Port device team_slave_1 added [ 917.901012][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.908100][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.949024][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.963327][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.970748][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.996887][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.049294][T17186] hsr_slave_0: entered promiscuous mode [ 918.056315][T17186] hsr_slave_1: entered promiscuous mode [ 918.067045][T17186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.074893][T17186] Cannot create hsr debugfs directory [ 918.202755][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.210205][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.218864][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.227020][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.234393][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.241906][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.249159][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.256412][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.267608][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.276872][ T10] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 918.291592][T15458] Bluetooth: hci1: command tx timeout [ 918.313361][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input40 [ 918.331948][ T10] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 918.402910][ T5893] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 918.415714][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input41 [ 918.424087][ T30] audit: type=1400 audit(2000000404.152:1824): avc: denied { getattr } for pid=17236 comm="syz.5.3071" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=57193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 918.498160][ T5894] usb 4-1: USB disconnect, device number 48 [ 918.536227][ T5893] keytouch 0003:0926:3333.001B: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 918.676357][T17186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.749402][T17186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.809753][T17186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.892812][T17186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.971791][ T5893] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 919.008243][ T5894] [ 919.008250][ T5894] ====================================================== [ 919.008255][ T5894] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 919.008260][ T5894] 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 Not tainted [ 919.008267][ T5894] ------------------------------------------------------ [ 919.008271][ T5894] kworker/0:6/5894 is trying to acquire lock: [ 919.008277][ T5894] ffff88801b4990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 919.008304][ T5894] [ 919.008304][ T5894] but task is already holding lock: [ 919.008307][ T5894] ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 919.008332][ T5894] [ 919.008332][ T5894] which lock already depends on the new lock. [ 919.008332][ T5894] [ 919.008336][ T5894] [ 919.008336][ T5894] the existing dependency chain (in reverse order) is: [ 919.008340][ T5894] [ 919.008340][ T5894] -> #2 (console_lock){+.+.}-{0:0}: [ 919.008353][ T5894] console_lock+0x7a/0xa0 [ 919.008363][ T5894] do_con_write+0x152/0x7c90 [ 919.008373][ T5894] con_write+0x23/0xb0 [ 919.008383][ T5894] tty_send_xchar+0x25e/0x380 [ 919.008393][ T5894] n_tty_ioctl_helper+0x209/0x2b0 [ 919.008407][ T5894] n_tty_ioctl+0x7f/0x370 [ 919.008418][ T5894] tty_ioctl+0x6f6/0x1610 [ 919.008427][ T5894] __x64_sys_ioctl+0x190/0x200 [ 919.008440][ T5894] do_syscall_64+0xcd/0x260 [ 919.008456][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.008466][ T5894] [ 919.008466][ T5894] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 919.008480][ T5894] down_write+0x92/0x200 [ 919.008494][ T5894] n_tty_flush_buffer+0x25/0x1b0 [ 919.008506][ T5894] tty_buffer_flush+0x236/0x310 [ 919.008515][ T5894] tty_ldisc_flush+0x64/0xe0 [ 919.008529][ T5894] tty_port_close_start+0x337/0x540 [ 919.008540][ T5894] tty_port_close+0x26/0x160 [ 919.008551][ T5894] uart_close+0x7b/0x220 [ 919.008565][ T5894] tty_release+0x3ac/0x1430 [ 919.008574][ T5894] __fput+0x3ff/0xb70 [ 919.008584][ T5894] task_work_run+0x14d/0x240 [ 919.008594][ T5894] syscall_exit_to_user_mode+0x27b/0x2a0 [ 919.008607][ T5894] do_syscall_64+0xda/0x260 [ 919.008620][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.008629][ T5894] [ 919.008629][ T5894] -> #0 (&buf->lock){+.+.}-{4:4}: [ 919.008642][ T5894] __lock_acquire+0x1173/0x1ba0 [ 919.008657][ T5894] lock_acquire+0x179/0x350 [ 919.008672][ T5894] __mutex_lock+0x199/0xb90 [ 919.008684][ T5894] tty_buffer_flush+0x72/0x310 [ 919.008698][ T5894] tty_ldisc_flush+0x64/0xe0 [ 919.008712][ T5894] __do_SAK+0x6ab/0x810 [ 919.008722][ T5894] vc_SAK+0x7f/0x310 [ 919.008734][ T5894] process_one_work+0x9cc/0x1b70 [ 919.008744][ T5894] worker_thread+0x6c8/0xf10 [ 919.008753][ T5894] kthread+0x3c2/0x780 [ 919.008761][ T5894] ret_from_fork+0x45/0x80 [ 919.008770][ T5894] ret_from_fork_asm+0x1a/0x30 [ 919.008785][ T5894] [ 919.008785][ T5894] other info that might help us debug this: [ 919.008785][ T5894] [ 919.008788][ T5894] Chain exists of: [ 919.008788][ T5894] &buf->lock --> &tty->termios_rwsem --> console_lock [ 919.008788][ T5894] [ 919.008804][ T5894] Possible unsafe locking scenario: [ 919.008804][ T5894] [ 919.008807][ T5894] CPU0 CPU1 [ 919.008810][ T5894] ---- ---- [ 919.008813][ T5894] lock(console_lock); [ 919.008820][ T5894] lock(&tty->termios_rwsem); [ 919.008828][ T5894] lock(console_lock); [ 919.008835][ T5894] lock(&buf->lock); [ 919.008842][ T5894] [ 919.008842][ T5894] *** DEADLOCK *** [ 919.008842][ T5894] [ 919.008845][ T5894] 4 locks held by kworker/0:6/5894: [ 919.008850][ T5894] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 919.008874][ T5894] #1: ffffc900043ffd18 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 919.008899][ T5894] #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 919.008924][ T5894] #3: ffff88807bc900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 919.008953][ T5894] [ 919.008953][ T5894] stack backtrace: [ 919.008959][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: kworker/0:6 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 919.008972][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 919.008979][ T5894] Workqueue: events vc_SAK [ 919.008992][ T5894] Call Trace: [ 919.008996][ T5894] [ 919.009000][ T5894] dump_stack_lvl+0x116/0x1f0 [ 919.009015][ T5894] print_circular_bug+0x275/0x350 [ 919.009029][ T5894] check_noncircular+0x14c/0x170 [ 919.009045][ T5894] __lock_acquire+0x1173/0x1ba0 [ 919.009061][ T5894] ? ret_from_fork_asm+0x1a/0x30 [ 919.009076][ T5894] lock_acquire+0x179/0x350 [ 919.009091][ T5894] ? tty_buffer_flush+0x72/0x310 [ 919.009101][ T5894] ? __pfx___might_resched+0x10/0x10 [ 919.009115][ T5894] __mutex_lock+0x199/0xb90 [ 919.009128][ T5894] ? tty_buffer_flush+0x72/0x310 [ 919.009139][ T5894] ? tty_buffer_flush+0x72/0x310 [ 919.009149][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 919.009164][ T5894] ? ldsem_down_read_trylock+0x11a/0x180 [ 919.009178][ T5894] ? tty_buffer_flush+0x72/0x310 [ 919.009187][ T5894] tty_buffer_flush+0x72/0x310 [ 919.009197][ T5894] tty_ldisc_flush+0x64/0xe0 [ 919.009213][ T5894] __do_SAK+0x6ab/0x810 [ 919.009223][ T5894] ? mark_held_locks+0x49/0x80 [ 919.009239][ T5894] vc_SAK+0x7f/0x310 [ 919.009252][ T5894] process_one_work+0x9cc/0x1b70 [ 919.009263][ T5894] ? __pfx_console_callback+0x10/0x10 [ 919.009274][ T5894] ? __pfx_process_one_work+0x10/0x10 [ 919.009286][ T5894] ? assign_work+0x1a0/0x250 [ 919.009296][ T5894] worker_thread+0x6c8/0xf10 [ 919.009308][ T5894] ? __kthread_parkme+0x19e/0x250 [ 919.009322][ T5894] ? __pfx_worker_thread+0x10/0x10 [ 919.009332][ T5894] kthread+0x3c2/0x780 [ 919.009341][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009349][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009358][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009366][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009374][ T5894] ? rcu_is_watching+0x12/0xc0 [ 919.009386][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009395][ T5894] ret_from_fork+0x45/0x80 [ 919.009404][ T5894] ? __pfx_kthread+0x10/0x10 [ 919.009413][ T5894] ret_from_fork_asm+0x1a/0x30 [ 919.009429][ T5894] [ 919.010259][ T5894] tty tty1: SAK: killed process 6669 (syz.4.181): by fd#7 [ 919.111633][ T30] audit: type=1400 audit(2000000404.842:1825): avc: denied { write } for pid=5796 comm="syz-executor" path="pipe:[4333]" dev="pipefs" ino=4333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 919.129623][T17186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 919.171645][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 919.190382][ T5893] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 919.190400][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.204778][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 919.204793][ T5893] pvrusb2: ********** [ 919.204800][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 919.204810][ T5893] pvrusb2: Important functionality might not be entirely working. [ 919.204817][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 919.204827][ T5893] pvrusb2: ********** [ 919.616431][T16152] bond0: (slave syz_tun): Releasing backup interface [ 919.695112][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.812606][ T10] usb 3-1: USB disconnect, device number 73 [ 919.814037][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.881801][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.922474][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.064369][T17240] bond0: (slave syz_tun): Releasing backup interface [ 920.066528][ T36] bridge_slave_1: left allmulticast mode [ 920.066544][ T36] bridge_slave_1: left promiscuous mode [ 920.066655][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.068067][ T36] bridge_slave_0: left allmulticast mode [ 920.068081][ T36] bridge_slave_0: left promiscuous mode [ 920.068180][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.405722][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.550262][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.559671][ T36] bond0 (unregistering): Released all slaves [ 920.568234][ T36] bond1 (unregistering): Released all slaves [ 920.577021][ T36] bond2 (unregistering): Released all slaves [ 920.594084][T17243] bond0: (slave syz_tun): Releasing backup interface [ 920.663957][ T2334] pvrusb2: Invalid write control endpoint [ 920.676653][ T5893] usb 6-1: USB disconnect, device number 59 [ 920.694528][ T2334] pvrusb2: Invalid write control endpoint [ 920.700255][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 920.710770][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 920.718343][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 920.729503][ T2334] pvrusb2: Device being rendered inoperable [ 920.735989][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 920.743209][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 920.751112][ T2334] pvrusb2: Attached sub-driver cx25840 [ 920.756603][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 920.766843][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 920.825792][ T36] hsr_slave_0: left promiscuous mode [ 920.831335][ T36] hsr_slave_1: left promiscuous mode [ 920.837031][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.844846][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.852372][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.859724][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.868560][ T36] veth1_macvtap: left promiscuous mode [ 920.874090][ T36] veth0_macvtap: left promiscuous mode [ 920.879557][ T36] veth1_vlan: left promiscuous mode [ 920.884871][ T36] veth0_vlan: left promiscuous mode [ 920.969191][ T36] team0 (unregistering): Port device team_slave_1 removed [ 920.994560][ T36] team0 (unregistering): Port device team_slave_0 removed [ 921.468996][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 921.477547][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 921.486309][ T36] bridge0: port 3(netdevsim0) entered disabled state [ 921.553578][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.604549][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.654106][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.703976][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.912463][ T36] bridge_slave_1: left allmulticast mode [ 921.918095][ T36] bridge_slave_1: left promiscuous mode [ 921.923753][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.932230][ T36] bridge_slave_0: left allmulticast mode [ 921.937860][ T36] bridge_slave_0: left promiscuous mode [ 921.943921][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.952727][ T36] bridge_slave_1: left allmulticast mode [ 921.958345][ T36] bridge_slave_1: left promiscuous mode [ 921.963994][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.971758][ T36] bridge_slave_0: left allmulticast mode [ 921.977373][ T36] bridge_slave_0: left promiscuous mode [ 921.983134][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.991072][ T36] bridge_slave_1: left allmulticast mode [ 921.997064][ T36] bridge_slave_1: left promiscuous mode [ 922.002790][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.010408][ T36] bridge_slave_0: left allmulticast mode [ 922.016114][ T36] bridge_slave_0: left promiscuous mode [ 922.022217][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.402902][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.411951][ T36] bond_slave_0: left promiscuous mode [ 922.417826][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.426889][ T36] bond0 (unregistering): (slave bond1): Releasing backup interface [ 922.435057][ T36] bond1 (unregistering): left promiscuous mode [ 922.441562][ T36] bond0 (unregistering): (slave bond2): Releasing backup interface [ 922.449561][ T36] bond2 (unregistering): left promiscuous mode [ 922.456609][ T36] bond0 (unregistering): (slave bond3): Releasing backup interface [ 922.464663][ T36] bond3 (unregistering): left promiscuous mode [ 922.471087][ T36] bond0 (unregistering): (slave bond4): Releasing backup interface [ 922.479729][ T36] bond4 (unregistering): left promiscuous mode [ 922.486355][ T36] bond0 (unregistering): (slave bond5): Releasing backup interface [ 922.494919][ T36] bond5 (unregistering): left promiscuous mode [ 922.501347][ T36] bond0 (unregistering): (slave bond7): Releasing backup interface [ 922.509458][ T36] bond7 (unregistering): left promiscuous mode [ 922.516123][ T36] bond0 (unregistering): (slave bond8): Releasing backup interface [ 922.524551][ T36] bond8 (unregistering): left promiscuous mode [ 922.530813][ T36] bond0 (unregistering): Released all slaves [ 922.608928][ T36] bond1 (unregistering): Released all slaves [ 922.683645][ T36] bond2 (unregistering): Released all slaves [ 922.759878][ T36] bond3 (unregistering): Released all slaves [ 922.834142][ T36] bond4 (unregistering): Released all slaves [ 922.909711][ T36] bond5 (unregistering): Released all slaves [ 922.917359][ T36] bond6 (unregistering): Released all slaves [ 922.994357][ T36] bond7 (unregistering): Released all slaves [ 923.069117][ T36] bond8 (unregistering): Released all slaves [ 923.078900][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.088569][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.099396][ T36] bond0 (unregistering): Released all slaves [ 923.107446][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.117196][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.126994][ T36] bond0 (unregistering): Released all slaves [ 923.214510][ T36] tipc: Disabling bearer [ 923.220096][ T36] tipc: Disabling bearer [ 923.225404][ T36] tipc: Left network mode [ 923.436184][ T36] hsr_slave_0: left promiscuous mode [ 923.441836][ T36] hsr_slave_1: left promiscuous mode [ 923.447371][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.454763][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.463797][ T36] hsr_slave_0: left promiscuous mode [ 923.469264][ T36] hsr_slave_1: left promiscuous mode [ 923.474780][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.482701][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.490075][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.497571][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.506264][ T36] hsr_slave_0: left promiscuous mode [ 923.511863][ T36] hsr_slave_1: left promiscuous mode [ 923.517334][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.524690][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.533539][ T36] veth1_macvtap: left promiscuous mode [ 923.538990][ T36] veth0_macvtap: left promiscuous mode [ 923.544643][ T36] veth1_vlan: left promiscuous mode [ 923.549836][ T36] veth0_vlan: left promiscuous mode [ 923.741750][ T36] team0 (unregistering): Port device team_slave_1 removed [ 923.768502][ T36] team0 (unregistering): Port device team_slave_0 removed [ 924.043456][ T36] team0 (unregistering): Port device team_slave_1 removed [ 924.056441][ T36] team0 (unregistering): Port device team_slave_0 removed [ 924.169061][ T36] team0 (unregistering): Port device team_slave_1 removed [ 924.189558][ T36] team0 (unregistering): Port device team_slave_0 removed