last executing test programs: 22m56.327616171s ago: executing program 0 (id=154): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 22m54.954581381s ago: executing program 0 (id=156): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0301ee8976902b26f4d2bc15fe190ddfdbd627675635abe600d127af65018bed9c8eb94c17ac750da4951b985bcf7e8442f36cca7b5397f9015a2b6ee5bbf53208a13bb1f491ef6df5f28862c3773a2ec8fc4262501957922084e7733dc3e7ae23a67de46d65b8cd35d4a47f928b510c62b78a04c897fad800afc360755889e4bd3bdee08a9d9aa3c4fa8d5ebe29dc521f482e3197edbafeb0bbca0efcfd3467528214ac8df5934d6d6ddfc7264801f8b5748cbdeed090c3c4a43fd5654b020b3c5e6120e5135729cac6dce0b19b669146fc94"], 0xdd12}], 0x1, 0x0, 0x0, 0x48800}, 0x8001) 22m53.874492133s ago: executing program 0 (id=159): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @isdn={0x22, 0x4c, 0x3, 0xfd, 0x1}, @isdn={0x22, 0x7f, 0x3, 0x48, 0x3}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40, 0x7, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) 22m53.532829881s ago: executing program 0 (id=160): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x40083, 0x44008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfff9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x7}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r8, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r8, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r8, &(0x7f0000004b80)={0x2020}, 0x2020) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x85, 0x0, &(0x7f0000005e80)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x20004000) 22m52.497102155s ago: executing program 0 (id=164): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=0x1, 0xffffffffffffffff, 0x9, 0x8, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x300000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='io_uring_file_get\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000000000100000000b69ec0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000480)=""/136, 0x88}], 0x2}}], 0x1, 0x10000, 0x0) sendmmsg$alg(r4, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="5e86c0b1a7b82799275f56f2", 0xc}, {&(0x7f0000002640)="8913e5ca", 0x4}], 0x2}], 0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x24040004) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r5, 0x6, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) 22m52.234296654s ago: executing program 0 (id=167): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="1f59cae5639cf15b04e0d625d96f0e6d5b5ac726b2c5590b57e7a61c0950f033a94c40da6183afb9321768ea8396fd428ff2860cae2d8713376468de8f0b92a502fa001fb7caa4cf48cfc89e753d76b163fd607c7907bc14d6560c08a667b105424a54bfcc3f564bffa5115ccb7923e0aac334f027399c59bdfa9fe668963cbd08be04d24f7981fa096b448f426f73637f649fb1ae81e36f3a70372c5bd2801916fdbee325092def000a95df3c6d4b", 0xaf, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x52c3, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000100)) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x82}}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r5, 0x0, 0xfffffffffffffcd7, 0x103, 0x0, 0xfffffffffffffe81) sendmsg$802154_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)="11c0d58a0808c829b1fc00000000", 0xe}}, 0x40024) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0xffff, {0x8, 0x2, 0xfffff9f9, 0x1, 0x9, 0x9}}) 22m51.080670881s ago: executing program 32 (id=167): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="1f59cae5639cf15b04e0d625d96f0e6d5b5ac726b2c5590b57e7a61c0950f033a94c40da6183afb9321768ea8396fd428ff2860cae2d8713376468de8f0b92a502fa001fb7caa4cf48cfc89e753d76b163fd607c7907bc14d6560c08a667b105424a54bfcc3f564bffa5115ccb7923e0aac334f027399c59bdfa9fe668963cbd08be04d24f7981fa096b448f426f73637f649fb1ae81e36f3a70372c5bd2801916fdbee325092def000a95df3c6d4b", 0xaf, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x52c3, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000100)) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x82}}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r5, 0x0, 0xfffffffffffffcd7, 0x103, 0x0, 0xfffffffffffffe81) sendmsg$802154_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)="11c0d58a0808c829b1fc00000000", 0xe}}, 0x40024) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0xffff, {0x8, 0x2, 0xfffff9f9, 0x1, 0x9, 0x9}}) 53.014523577s ago: executing program 3 (id=4497): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800000}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) close(0xffffffffffffffff) 51.208781031s ago: executing program 3 (id=4501): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000010080), &(0x7f0000000000)) sync() sync() sync() syz_usb_connect$cdc_ncm(0x6f1bd869bf89f9f8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = memfd_secret(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000008000000000000000f67000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018150000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='thermal_power_devfreq_limit\x00', r1}, 0x18) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x8, r4, 0x0, 0x3001, 0x1, &(0x7f00000003c0)="93"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x1a9882) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) gettid() 49.240137259s ago: executing program 3 (id=4510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="d0b5d23751c016b882c6dd4eb7819052897c6ad3c5c3cd77cd6c23b25ab250021f9eb0e27ef7b5cde0c3f0098c2b93108251a0c80bc31461d03891972ecb54ffc680585d50f13c2be0aae403dfe6a4dc3749975ba9919b50188bd17a82ad19d5a880175714de8161ff1f8c7c7bdd4abf341637b879a73a071f6c9fe06a723017364996269544ed566fbc6cd48ed97e4a6381dcfd95543cf05e4171fcc1729589c308c6857230bee6f6e3f3cc347d1b95045a6b7f298e57e1f6ad9195d11fa51d890a", @ANYRES64=r3, @ANYRES8=r3, @ANYBLOB="2d70fe9b6cdeaf88b7ef85ca75b1c5aa50d27ff6bf916e556c27702dee0656a107a3d1e003bb57b71648", @ANYRES8=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="aa8dd3d4f468327fcdaf0dd7e42cd51046324163c6ea3b24d5536844cc66e6cd59a457a05aacadd4bab0e532049b7d5fa9b506e7fbc080e84cf4e5bf0f17d37a86c1efd556001c5e18393198c83e328f394148955550e25110a7654c6aab897b0a1cb669e8f2a58ec0e77da8cf59820925d5ae76854d2765acb14d26c51d317a424b356fbef68170c41cc43ca7069e7fc3984614730c26343dfc7d2b9a166bc067f762f6373af08689a908971ffad61c8010086b1da6d0e9a6fa77a9758592d4ddec0084d20300257a8aa31acdf0b663eeb6b356fa8b7790d26dec24e37ec2e4b1112b94d8f6c640b46586c740c36868006e000f59478dcab3eb23d589", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r3, @ANYRES8=r5], 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000044) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYRESOCT=r4], 0x54}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000200001002abd5000ffdbdf2500040500000008000000000000000000fe8000000000000000000000000000bb080018004e224e22000000000000"], 0x40}}, 0x40810) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000380)={0x10201, 0x7, 0xffff1000, 0x2000, &(0x7f00003c7000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) readv(r11, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) 45.925820982s ago: executing program 3 (id=4518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) userfaultfd(0x801) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x12, r1, 0x0) sendto$unix(r1, &(0x7f0000000340)="99c71c50af5555ed193f6e492992c2136cd5795ffa95d01e8d2b2c411d039db3602adcf9b7c7cdb2cfeba3c87ddf535bff6af49c0f9440c13438358c4be2956b3b71efdadb217d0b319ad0cc213d71e73a27deb8b9a5d98fe4b7affae69b50c88e56dc55154b4be8623e166bfb0c5034ec36766a1fc8cffe5d0f1eb40978ca2edd650b4596f66d6b4315f7007faa98c9d0395f5458353a1281942a578f9f7fdde6001ffb9879048b", 0xa8, 0x4000000, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x0) listen(r0, 0x8001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0020}}, 0x7}, &(0x7f0000000200)=0x90) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x41) 44.336331191s ago: executing program 3 (id=4523): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 40.382026846s ago: executing program 3 (id=4537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080), 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sysfs$2(0x2, 0x4, &(0x7f0000000540)=""/226) 24.634804453s ago: executing program 33 (id=4537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080), 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sysfs$2(0x2, 0x4, &(0x7f0000000540)=""/226) 9.566501993s ago: executing program 4 (id=4619): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x2, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x4fa6, @empty, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x2}, 0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000400)="9e", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 8.941002793s ago: executing program 4 (id=4621): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xe00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000007f80)='./bus\x00', 0x44142, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x82, 0xd2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r2, 0x80045519, &(0x7f0000000000)={0x20, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x409, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x84, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x44}}, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020}, 0x2020) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000033aab94028e8a8ce03500102030109022b00010000f800090478000201039cfd090502020004458306072f880103000009050c"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r8, @ANYBLOB="14000200776731"], 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@remote, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x2040, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r10, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 7.304168785s ago: executing program 1 (id=4626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2ea003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000c300)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) 6.320807803s ago: executing program 4 (id=4627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) userfaultfd(0x801) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x12, r1, 0x0) sendto$unix(r1, &(0x7f0000000340)="99c71c50af5555ed193f6e492992c2136cd5795ffa95d01e8d2b2c411d039db3602adcf9b7c7cdb2cfeba3c87ddf535bff6af49c0f9440c13438358c4be2956b3b71efdadb217d0b319ad0cc213d71e73a27deb8b9a5d98fe4b7affae69b50c88e56dc55154b4be8623e166bfb0c5034ec36766a1fc8cffe5d0f1eb40978ca2edd650b4596f66d6b4315f7007faa98c9d0395f5458353a1281942a578f9f7fdde6001ffb9879048b", 0xa8, 0x4000000, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) listen(r0, 0x8001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0020}}, 0x7}, &(0x7f0000000200)=0x90) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x41) 6.299277375s ago: executing program 2 (id=4628): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x806, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x74}}, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 5.57833128s ago: executing program 1 (id=4629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2ea003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000c300)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) 5.39778534s ago: executing program 4 (id=4630): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x2, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x4fa6, @empty, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x2}, 0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000400)="9e", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 4.273432191s ago: executing program 1 (id=4631): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000002c0)={0x4, 0x0, [{0x3000, 0x97, &(0x7f00000000c0)=""/151}, {0x80a0000, 0x2f, &(0x7f0000000000)=""/47}, {0x4, 0x25, &(0x7f0000000180)=""/37}, {0x10000, 0xed, &(0x7f00000001c0)=""/237}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000014000000000000000000000005000200000000000a000000000000000000000000000000000000000000000000040000000000000800120000000200000000000200000006000000000000008009000000000000000000000000000000000000180000006401010000000000000000000000000005000600008000000a"], 0xa0}}, 0x400c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012e35b40030400000004000000010902120001000000000904"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0x2}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0x21}, {0x9, 0x6, "812ce6ce98"}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x5, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405668, &(0x7f0000000100)={0x0, 0x4, 0x2, 0x6000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000800000000000008100000008000300", @ANYRES32=r8, @ANYBLOB="060066008e8800000a0006000802110000010000260033"], 0x58}}, 0x0) 4.271585157s ago: executing program 2 (id=4632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000380)=0x68) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) read$FUSE(r5, 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) r9 = dup(r8) r10 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r10, 0x200004) r11 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) 3.978342703s ago: executing program 4 (id=4633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002f7b8af8ff00000000bfa200000000000007020000f8fff394b703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="020e2d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xf, @string={0xf, 0x3, "247ced98c2a7842182487a05b7"}}, 0x0, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xce5}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400d04000000c86069bd1cf7fa6406d43bf22fb3f754000000000000000000000000e3626e"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x1, 0x44, "5c0ef7006b4352f2a3e93dee57c2061d37b4f11708f4f4964e0d2ea9f8128c66399f7911f1eb66e895032238deb6b17bb32ec65f214a33a7ccaced853c0cc6bebc44ea9e"}, 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x30, &(0x7f0000000180)=[{0x8, 0x2, 0xff, 0xac7}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='1', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x121201, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.818082098s ago: executing program 5 (id=4634): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x200500d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.036321716s ago: executing program 2 (id=4635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000f90000000000000003850000002c000000850000002300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414a40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$ptp(r4, 0x0, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 2.822287565s ago: executing program 5 (id=4636): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4002}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000400)={0x0, 0x1fffff, 0x10100, 0x0, 0x99, 0x0, r4}, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r7, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x2010, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x11, 0x2, 0xe, 0xa0000000, 0x20200, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = open_tree(r4, &(0x7f0000000840)='./file1\x00', 0x81101) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x36, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x2, 0x3, 0x2, 0xb, 0x7, 0x50, 0x1}, @ldst={0x1, 0x2, 0x0, 0x4, 0x9, 0x86, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @netfilter=0x2d, r0, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x4, 0x3d7, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[r8, 0xffffffffffffffff, r9, r10, r11, r12], &(0x7f0000000940), 0x10, 0x7, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf63b, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.194013667s ago: executing program 2 (id=4637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2ea003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000c300)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) 1.518691369s ago: executing program 5 (id=4638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000f90000000000000003850000002c000000850000002300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414a40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$ptp(r4, 0x0, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 1.464173091s ago: executing program 1 (id=4639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) userfaultfd(0x801) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x12, r1, 0x0) sendto$unix(r1, &(0x7f0000000340)="99c71c50af5555ed193f6e492992c2136cd5795ffa95d01e8d2b2c411d039db3602adcf9b7c7cdb2cfeba3c87ddf535bff6af49c0f9440c13438358c4be2956b3b71efdadb217d0b319ad0cc213d71e73a27deb8b9a5d98fe4b7affae69b50c88e56dc55154b4be8623e166bfb0c5034ec36766a1fc8cffe5d0f1eb40978ca2edd650b4596f66d6b4315f7007faa98c9d0395f5458353a1281942a578f9f7fdde6001ffb9879048b", 0xa8, 0x4000000, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) listen(r0, 0x8001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0020}}, 0x7}, &(0x7f0000000200)=0x90) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x41) 634.148984ms ago: executing program 2 (id=4640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 595.721257ms ago: executing program 5 (id=4641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 442.407349ms ago: executing program 5 (id=4642): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000004000085000000010000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 409.344294ms ago: executing program 1 (id=4643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x143fdd, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 325.134222ms ago: executing program 6 (id=4577): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000100)) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000000000000000c001800", @ANYRES32=r4], 0x28}}, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r4, &(0x7f0000000300)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) r8 = dup3(r6, r5, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000200)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 246.352268ms ago: executing program 2 (id=4644): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140)="1755613eaa0038adf1fdcf43586bae66f7134a1a6bc852fd70668f8331f9c873d6089a345ef026a47c05e626196f00dfabf802", 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) 246.166599ms ago: executing program 5 (id=4645): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) 4.340935ms ago: executing program 1 (id=4646): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 0s ago: executing program 4 (id=4647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001cc0)={@ifindex, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): ialNumber=0 [ 1329.079625][ T5829] usb 4-1: config 0 descriptor?? [ 1329.094596][ T51] usb 5-1: config 0 descriptor?? [ 1329.613975][ T5829] zeroplus 0003:0C12:0005.001B: item fetching failed at offset 1/5 [ 1329.623725][ T5829] zeroplus 0003:0C12:0005.001B: parse failed [ 1329.629836][ T5829] zeroplus 0003:0C12:0005.001B: probe with driver zeroplus failed with error -22 [ 1329.653827][T20803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1329.677109][ T51] usbhid 5-1:0.0: can't add hid device: -71 [ 1329.683481][ T51] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1329.701696][ T51] usb 5-1: USB disconnect, device number 72 [ 1329.860520][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.875570][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.919612][ T51] usb 4-1: USB disconnect, device number 57 [ 1331.626541][T20842] kvm: user requested TSC rate below hardware speed [ 1332.047040][T20850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1332.264900][T20858] syzkaller0: entered promiscuous mode [ 1332.270548][T20858] syzkaller0: entered allmulticast mode [ 1333.167876][T20872] binder: 20867:20872 ioctl 40086602 20000000 returned -22 [ 1333.863647][T20878] futex_wake_op: syz.4.4167 tries to shift op by 144; fix this program [ 1333.894326][ T29] audit: type=1401 audit(1734345201.186:3815): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1336.191387][T20900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1336.425009][ T29] audit: type=1326 audit(1734345203.716:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.646696][ T29] audit: type=1326 audit(1734345203.736:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.670478][ T29] audit: type=1326 audit(1734345203.786:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.693965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.700686][ T29] audit: type=1326 audit(1734345203.816:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.724183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.731494][ T29] audit: type=1326 audit(1734345203.816:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.913750][ T29] audit: type=1326 audit(1734345203.826:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.938273][ T29] audit: type=1326 audit(1734345203.826:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.961724][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.968574][ T29] audit: type=1326 audit(1734345203.826:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1336.992062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1337.007986][ T29] audit: type=1326 audit(1734345203.846:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20899 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1337.551784][ T5872] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1337.803481][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.855731][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.910236][ T5872] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1338.010492][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.060696][ T5872] usb 5-1: config 0 descriptor?? [ 1338.494323][ T5872] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 1338.513746][ T5872] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 1338.520590][ T5872] arvo 0003:1E7D:30D4.001C: report_id 0 is invalid [ 1338.547922][ T5872] arvo 0003:1E7D:30D4.001C: item 0 1 1 8 parsing failed [ 1338.563453][ T5872] arvo 0003:1E7D:30D4.001C: parse failed [ 1338.570419][ T5872] arvo 0003:1E7D:30D4.001C: probe with driver arvo failed with error -22 [ 1340.175842][ T5872] usb 5-1: USB disconnect, device number 73 [ 1340.648655][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1340.649701][ T29] audit: type=1400 audit(1734345207.936:3853): avc: denied { ioctl } for pid=20925 comm="syz.1.4178" path="socket:[73523]" dev="sockfs" ino=73523 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1342.666152][T20939] binder: 20937:20939 ioctl 40086602 20000000 returned -22 [ 1342.882891][T20906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1343.277075][ T29] audit: type=1326 audit(1734345210.356:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.316672][ T29] audit: type=1326 audit(1734345210.356:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.340267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.348270][ T29] audit: type=1326 audit(1734345210.356:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.372377][ T29] audit: type=1326 audit(1734345210.356:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.396196][ T29] audit: type=1326 audit(1734345210.356:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.420541][ T29] audit: type=1326 audit(1734345210.356:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.444105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.450773][ T29] audit: type=1326 audit(1734345210.356:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.474409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.481056][ T29] audit: type=1326 audit(1734345210.356:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.505311][ T29] audit: type=1326 audit(1734345210.356:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20942 comm="syz.5.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1343.681115][T20950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1344.262742][T20945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1346.112838][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1346.112850][ T29] audit: type=1326 audit(1734345213.406:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20975 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7fc00000 [ 1346.151685][ T29] audit: type=1326 audit(1734345213.436:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20975 comm="syz.2.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7fc00000 [ 1346.614980][T20990] binder: 20978:20990 ioctl 40086602 20000000 returned -22 [ 1347.001098][ T29] audit: type=1326 audit(1734345214.286:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.024622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.051604][ T29] audit: type=1326 audit(1734345214.286:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.075283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.534383][ T29] audit: type=1326 audit(1734345214.286:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.585277][ T29] audit: type=1326 audit(1734345214.286:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.615129][ T29] audit: type=1326 audit(1734345214.286:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.641075][ T29] audit: type=1326 audit(1734345214.286:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.667850][ T29] audit: type=1326 audit(1734345214.286:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1347.698414][ T29] audit: type=1326 audit(1734345214.286:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.5.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1348.225357][T21006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.142548][T21012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1349.331863][T21014] xt_policy: neither incoming nor outgoing policy selected [ 1350.229888][ T5829] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1350.401127][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1350.677389][ T5829] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1350.811249][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1351.214645][ T5829] usb usb4-port1: attempt power cycle [ 1351.359324][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1351.372000][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1351.435719][T21038] ceph: No mds server is up or the cluster is laggy [ 1351.570978][ T5829] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1351.611441][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1351.850969][ T5829] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1351.871807][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1351.983660][ T5829] usb usb4-port1: unable to enumerate USB device [ 1352.152585][ T5899] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1352.184939][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1352.184996][ T29] audit: type=1326 audit(1734345219.446:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1352.377623][ T29] audit: type=1326 audit(1734345219.446:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1352.573094][T21063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1352.751276][ T29] audit: type=1326 audit(1734345219.446:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1352.960007][ T29] audit: type=1326 audit(1734345219.446:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1352.983952][ T29] audit: type=1326 audit(1734345219.446:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.007409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.014111][ T29] audit: type=1326 audit(1734345219.446:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.037742][ T29] audit: type=1326 audit(1734345219.446:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.061182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.076662][ T29] audit: type=1326 audit(1734345219.446:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.100803][ T29] audit: type=1326 audit(1734345219.446:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.124290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.138274][ T29] audit: type=1326 audit(1734345219.446:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1353.299050][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 1353.489243][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.526470][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.723762][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.737082][ T5899] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1353.747476][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.761168][ T5899] usb 6-1: config 0 descriptor?? [ 1354.049340][T21078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1354.267379][ T5899] saitek 0003:06A3:0CCD.001D: hidraw0: USB HID vff.ff Device [HID 06a3:0ccd] on usb-dummy_hcd.5-1/input0 [ 1354.711823][ T5899] usb 6-1: USB disconnect, device number 59 [ 1355.221273][ T51] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1355.449947][ T51] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1355.459253][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.469218][ T51] usb 2-1: Product: syz [ 1355.473928][ T51] usb 2-1: Manufacturer: syz [ 1355.478562][ T51] usb 2-1: SerialNumber: syz [ 1355.538597][ T51] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1355.568062][ T5829] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1355.792028][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 1356.008929][ T5871] usb 2-1: USB disconnect, device number 63 [ 1356.043135][ T5899] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1356.257234][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 1356.288500][ T5899] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1356.403890][ T5899] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1356.421529][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1356.434552][ T5899] usb 5-1: config 1 has no interface number 0 [ 1356.451083][ T5899] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.476541][ T5899] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1356.491266][ T5899] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1356.500462][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.539277][ T5899] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1356.595834][ T5829] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1356.611529][ T5829] ath9k_htc: Failed to initialize the device [ 1356.622452][ T5871] usb 2-1: ath9k_htc: USB layer deinitialized [ 1356.713403][T21120] 9pnet_fd: Insufficient options for proto=fd [ 1356.734748][ T5899] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1357.784949][ T5899] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1358.021115][T21110] Bluetooth: hci2: command 0x0405 tx timeout [ 1358.379283][T21145] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1358.840999][ T968] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1359.005452][ T5899] usb 5-1: USB disconnect, device number 74 [ 1359.013994][ T5899] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1359.034997][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.061258][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.078451][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1359.078468][ T29] audit: type=1400 audit(1734345226.366:3964): avc: denied { append } for pid=21146 comm="syz.3.4232" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1359.108759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.125987][ T968] usb 2-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 1359.170978][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.191837][ T968] usb 2-1: config 0 descriptor?? [ 1359.650695][T21138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.711435][T21138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.761059][T21138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.822881][T21138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.841134][ T51] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1361.651416][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.657956][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.732213][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 1361.742517][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.752045][T21183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.756727][ T51] usb 5-1: too many endpoints for config 0 interface 0 altsetting 70: 255, using maximum allowed: 30 [ 1361.770487][ T51] usb 5-1: config 0 interface 0 altsetting 70 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1361.779370][ T29] audit: type=1326 audit(1734345229.066:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1361.783719][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1361.783758][ T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1361.783782][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.791644][ T51] usb 5-1: config 0 descriptor?? [ 1361.807849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.816957][ T29] audit: type=1326 audit(1734345229.066:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1361.847764][ T51] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1361.875930][ T29] audit: type=1326 audit(1734345229.066:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1361.878529][ T5871] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1361.926595][ T29] audit: type=1326 audit(1734345229.216:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1361.951776][ T29] audit: type=1326 audit(1734345229.216:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1361.976656][ T29] audit: type=1326 audit(1734345229.216:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ef33b85c5 code=0x7ffc0000 [ 1362.006807][ T29] audit: type=1326 audit(1734345229.296:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1362.039389][ T29] audit: type=1326 audit(1734345229.296:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1362.063893][ T29] audit: type=1326 audit(1734345229.296:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21182 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1362.087379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.106331][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1362.114076][ T5871] usb 6-1: can't read configurations, error -61 [ 1362.178452][T21192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.250204][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 1362.260515][ T968] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1362.274041][ T968] usb 2-1: USB disconnect, device number 64 [ 1362.290938][ T5871] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1362.513882][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1362.561178][ T5871] usb 6-1: can't read configurations, error -61 [ 1362.614537][ T5871] usb usb6-port1: attempt power cycle [ 1363.135453][ T5871] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1363.245411][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1363.292653][ T5871] usb 6-1: can't read configurations, error -61 [ 1363.445323][T21215] FAULT_INJECTION: forcing a failure. [ 1363.445323][T21215] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.460066][T21215] CPU: 0 UID: 0 PID: 21215 Comm: syz.1.4250 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1363.470852][T21215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1363.480912][T21215] Call Trace: [ 1363.484177][T21215] [ 1363.487090][T21215] dump_stack_lvl+0x16c/0x1f0 [ 1363.491774][T21215] should_fail_ex+0x497/0x5b0 [ 1363.496439][T21215] ? fs_reclaim_acquire+0xae/0x150 [ 1363.501544][T21215] should_failslab+0xc2/0x120 [ 1363.506643][T21215] __kmalloc_cache_noprof+0x68/0x410 [ 1363.511922][T21215] ? lockdep_hardirqs_on+0x7c/0x110 [ 1363.517132][T21215] alloc_fs_context+0x57/0x9c0 [ 1363.521898][T21215] __x64_sys_fsopen+0xeb/0x240 [ 1363.526663][T21215] do_syscall_64+0xcd/0x250 [ 1363.531166][T21215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.537060][T21215] RIP: 0033:0x7f4488785d19 [ 1363.541469][T21215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.561076][T21215] RSP: 002b:00007f44894d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1363.569583][T21215] RAX: ffffffffffffffda RBX: 00007f4488975fa0 RCX: 00007f4488785d19 [ 1363.577558][T21215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1363.585523][T21215] RBP: 00007f44894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.593485][T21215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.601454][T21215] R13: 0000000000000001 R14: 00007f4488975fa0 R15: 00007ffd1889f338 [ 1363.609428][T21215] [ 1363.612594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.622302][ T5871] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1363.653748][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1363.665042][ T5871] usb 6-1: can't read configurations, error -61 [ 1363.677471][ T5871] usb usb6-port1: unable to enumerate USB device [ 1364.121362][ T968] usb 5-1: USB disconnect, device number 75 [ 1366.597113][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1366.597132][ T29] audit: type=1400 audit(1734345233.886:4006): avc: denied { map } for pid=21249 comm="syz.2.4259" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1366.628159][ T29] audit: type=1400 audit(1734345233.886:4007): avc: denied { execute } for pid=21249 comm="syz.2.4259" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1366.805293][T21250] syz_tun: entered allmulticast mode [ 1366.813808][T21250] dvmrp0: entered allmulticast mode [ 1366.821853][T21250] dvmrp0: left allmulticast mode [ 1366.826866][T21250] syz_tun: left allmulticast mode [ 1370.384444][T21287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.417037][ T29] audit: type=1326 audit(1734345237.706:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1370.493874][ T29] audit: type=1326 audit(1734345237.736:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1370.694169][T21297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1370.941272][ T29] audit: type=1326 audit(1734345237.736:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1371.591650][ T29] audit: type=1326 audit(1734345237.856:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21292 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05623b85c5 code=0x7ffc0000 [ 1371.615181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.697286][ T29] audit: type=1326 audit(1734345237.866:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1371.759453][ T29] audit: type=1326 audit(1734345237.866:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1371.815780][ T29] audit: type=1400 audit(1734345238.136:4014): avc: denied { recv } for pid=21296 comm="syz.1.4270" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=46350 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1372.272468][ T29] audit: type=1326 audit(1734345238.876:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21292 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1372.308624][ T29] audit: type=1326 audit(1734345238.966:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0562321f29 code=0x7ffc0000 [ 1372.345834][ T29] audit: type=1326 audit(1734345238.966:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1372.374813][ T29] audit: type=1326 audit(1734345238.966:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1372.468631][ T29] audit: type=1326 audit(1734345238.986:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1372.517313][ T29] audit: type=1326 audit(1734345238.986:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1372.546615][ T29] audit: type=1326 audit(1734345238.986:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21285 comm="syz.4.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1374.563768][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1376.282324][T21354] overlayfs: failed to resolve './file0': -2 [ 1377.442748][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1377.442759][ T29] audit: type=1326 audit(1734345244.736:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1377.533100][ T29] audit: type=1326 audit(1734345244.766:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1377.758256][ T29] audit: type=1326 audit(1734345244.766:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1377.811097][ T51] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1378.198196][ T29] audit: type=1326 audit(1734345244.766:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.223544][ T29] audit: type=1326 audit(1734345244.766:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.247041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.328387][ T29] audit: type=1326 audit(1734345244.806:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.403475][ T29] audit: type=1326 audit(1734345244.806:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.427182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.441796][ T29] audit: type=1326 audit(1734345244.806:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.465971][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.502907][ T29] audit: type=1326 audit(1734345244.826:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1378.526719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.681086][ T29] audit: type=1326 audit(1734345244.826:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.5.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1379.001838][T21382] Invalid source name [ 1379.005876][T21382] UBIFS error (pid: 21382): cannot open "ubifs", error -22 [ 1379.206900][T21386] FAULT_INJECTION: forcing a failure. [ 1379.206900][T21386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.229898][T21386] CPU: 0 UID: 0 PID: 21386 Comm: syz.3.4294 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1379.240694][T21386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1379.250789][T21386] Call Trace: [ 1379.254079][T21386] [ 1379.257007][T21386] dump_stack_lvl+0x16c/0x1f0 [ 1379.261673][T21386] should_fail_ex+0x497/0x5b0 [ 1379.266356][T21386] _copy_to_user+0x32/0xd0 [ 1379.270761][T21386] simple_read_from_buffer+0xd0/0x160 [ 1379.276124][T21386] proc_fail_nth_read+0x198/0x270 [ 1379.281151][T21386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.286726][T21386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.292301][T21386] vfs_read+0x1df/0xbe0 [ 1379.296469][T21386] ? mark_held_locks+0x9f/0xe0 [ 1379.301218][T21386] ? __pfx_vfs_read+0x10/0x10 [ 1379.305872][T21386] ? irqentry_exit+0x3b/0x90 [ 1379.310442][T21386] ? lockdep_hardirqs_on+0x7c/0x110 [ 1379.315625][T21386] ? ksys_read+0x7f/0x250 [ 1379.319933][T21386] ksys_read+0x12b/0x250 [ 1379.324160][T21386] ? __pfx_ksys_read+0x10/0x10 [ 1379.328920][T21386] do_syscall_64+0xcd/0x250 [ 1379.333414][T21386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.339340][T21386] RIP: 0033:0x7ff99f18472c [ 1379.343752][T21386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1379.363368][T21386] RSP: 002b:00007ff99cef5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.371794][T21386] RAX: ffffffffffffffda RBX: 00007ff99f376080 RCX: 00007ff99f18472c [ 1379.379779][T21386] RDX: 000000000000000f RSI: 00007ff99cef50a0 RDI: 0000000000000008 [ 1379.387754][T21386] RBP: 00007ff99cef5090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.395721][T21386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.403674][T21386] R13: 0000000000000000 R14: 00007ff99f376080 R15: 00007ffe974fb118 [ 1379.411636][T21386] [ 1379.414734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.118262][T21395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1380.212435][T21367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1380.280995][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1380.445681][ T9] usb 5-1: config index 0 descriptor too short (expected 244, got 18) [ 1380.457828][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 1380.469824][ T9] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 1380.501018][ T9] usb 5-1: Product: syz [ 1380.511448][ T9] usb 5-1: Manufacturer: syz [ 1380.547605][ T9] usb 5-1: SerialNumber: syz [ 1380.572334][ T9] usb 5-1: config 0 descriptor?? [ 1380.593349][ T51] IPVS: starting estimator thread 0... [ 1380.814091][ T9] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1381.566513][T21406] IPVS: using max 26 ests per chain, 62400 per kthread [ 1383.161456][ T51] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1383.465988][ T968] usb 5-1: USB disconnect, device number 77 [ 1383.790949][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1383.940981][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1383.948073][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.979300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.050755][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1384.072526][ T51] usb 4-1: device descriptor read/all, error -71 [ 1384.112718][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1384.146442][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.186634][ T9] usb 2-1: config 0 descriptor?? [ 1384.687136][ T9] hid-u2fzero 0003:10C4:8ACF.001E: unknown main item tag 0x0 [ 1384.710949][ T9] hid-u2fzero 0003:10C4:8ACF.001E: unknown main item tag 0x0 [ 1384.741018][ T9] hid-u2fzero 0003:10C4:8ACF.001E: unknown main item tag 0x0 [ 1385.037366][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1385.648940][T21448] syz.2.4308 (21448): drop_caches: 2 [ 1385.677617][ T9] hid-u2fzero 0003:10C4:8ACF.001E: unknown main item tag 0x0 [ 1385.688956][ T9] hid-u2fzero 0003:10C4:8ACF.001E: unknown main item tag 0x0 [ 1385.750261][ T9] hid-u2fzero 0003:10C4:8ACF.001E: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 1385.767273][ T9] hid-u2fzero 0003:10C4:8ACF.001E: U2F Zero LED initialised [ 1385.775194][ T9] hid-u2fzero 0003:10C4:8ACF.001E: U2F Zero RNG initialised [ 1385.868498][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 1385.868516][ T29] audit: type=1326 audit(1734345253.156:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1385.909974][ T29] audit: type=1326 audit(1734345253.196:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1385.910970][ T5871] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1385.946974][ T29] audit: type=1326 audit(1734345253.196:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.190818][T21464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.391014][ T29] audit: type=1326 audit(1734345253.196:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.444824][ T29] audit: type=1326 audit(1734345253.196:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.514297][ T51] usb 2-1: USB disconnect, device number 65 [ 1386.602112][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 1386.607864][ T29] audit: type=1326 audit(1734345253.236:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.633601][ T29] audit: type=1326 audit(1734345253.236:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.657127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.664482][ T29] audit: type=1326 audit(1734345253.236:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.687934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.717439][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1386.739462][ T29] audit: type=1326 audit(1734345253.236:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.790096][ T5871] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1386.807816][ T5871] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1386.866570][ T29] audit: type=1326 audit(1734345253.236:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21460 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1386.887375][ T5871] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.534694][ T5871] usb 6-1: config 4 has no interface number 0 [ 1387.545417][ T5871] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1387.554579][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.562825][ T5871] usb 6-1: Product: syz [ 1387.567019][ T5871] usb 6-1: Manufacturer: syz [ 1387.604680][ T5871] usb 6-1: SerialNumber: syz [ 1388.573916][ T5871] usb 6-1: can't set config #4, error -71 [ 1388.583442][ T5871] usb 6-1: USB disconnect, device number 64 [ 1391.985317][T21533] binder: 21529:21533 ioctl 40086602 20000000 returned -22 [ 1393.319560][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1393.319581][ T29] audit: type=1400 audit(1734345260.596:4187): avc: denied { execute } for pid=21542 comm="syz.5.4330" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1394.020697][ T29] audit: type=1400 audit(1734345261.196:4188): avc: denied { map } for pid=21542 comm="syz.5.4330" path="socket:[78156]" dev="sockfs" ino=78156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1397.690626][T21593] binder: 21574:21593 ioctl 40086602 20000000 returned -22 [ 1397.814608][T21600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1399.096029][T21607] binder: 21594:21607 ioctl 40086602 20000000 returned -22 [ 1402.191453][T21650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1402.531671][T21655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.580425][ T29] audit: type=1326 audit(1734345269.866:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1402.720715][ T29] audit: type=1326 audit(1734345269.906:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1402.981202][ T29] audit: type=1326 audit(1734345269.926:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21657 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ef33b85c5 code=0x7ffc0000 [ 1403.211066][ T29] audit: type=1326 audit(1734345270.006:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.294613][ T29] audit: type=1326 audit(1734345270.006:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.326265][ T29] audit: type=1326 audit(1734345270.076:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21657 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.359653][ T29] audit: type=1326 audit(1734345270.496:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3321f29 code=0x7ffc0000 [ 1403.397796][ T29] audit: type=1326 audit(1734345270.556:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.425257][T21663] can0: slcan on ttyS3. [ 1403.478722][ T29] audit: type=1326 audit(1734345270.726:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.605298][ T29] audit: type=1326 audit(1734345270.726:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1403.813178][T21662] can0 (unregistered): slcan off ttyS3. [ 1404.241459][ T5899] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1404.391540][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 1404.400158][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1404.419379][ T5899] usb 3-1: config 0 has no interface number 0 [ 1404.437066][ T5899] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.462286][ T5899] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.482030][ T5899] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1404.507838][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.591084][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1404.846089][ T5899] usb 3-1: config 0 descriptor?? [ 1404.987007][T21688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1405.021357][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1405.032211][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1405.040392][ T9] usb 5-1: config 0 has no interface number 0 [ 1405.050088][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.063112][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.078720][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1405.094573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.148952][ T9] usb 5-1: config 0 descriptor?? [ 1406.085393][ T5899] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001F/input/input105 [ 1406.841454][ T9] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0020/input/input107 [ 1406.859134][ T5899] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001F/input/input106 [ 1406.877688][ T5899] uclogic 0003:28BD:0071.001F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 1406.885843][T21683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.016874][ T9] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0020/input/input108 [ 1407.037939][ T9] uclogic 0003:28BD:0071.0020: input,hidraw1: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1407.108427][ T9] usb 5-1: USB disconnect, device number 78 [ 1407.861558][ T5871] usb 3-1: reset high-speed USB device number 51 using dummy_hcd [ 1409.566538][T21733] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4376'. [ 1409.886290][T21110] Bluetooth: hci2: command 0x0405 tx timeout [ 1410.338889][ T9] usb 3-1: USB disconnect, device number 51 [ 1414.919936][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 1414.919953][ T29] audit: type=1326 audit(1734345282.206:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1414.977940][ T29] audit: type=1326 audit(1734345282.236:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1415.004821][ T29] audit: type=1326 audit(1734345282.236:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1415.028586][ T29] audit: type=1326 audit(1734345282.236:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1415.057033][ T29] audit: type=1326 audit(1734345282.346:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1415.081131][ T29] audit: type=1326 audit(1734345282.346:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1415.105173][ T29] audit: type=1326 audit(1734345282.346:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4488785d19 code=0x7ffc0000 [ 1418.451660][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1419.054287][ T9] usb 6-1: device descriptor read/64, error -71 [ 1419.361616][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1419.491105][ T9] usb 6-1: device descriptor read/64, error -71 [ 1419.602362][ T9] usb usb6-port1: attempt power cycle [ 1420.125648][ T5871] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1420.273692][ T5871] usb 3-1: device descriptor read/64, error -71 [ 1420.401704][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1420.796458][T21862] ALSA: mixer_oss: invalid OSS volume '' [ 1420.822496][ T9] usb 6-1: device descriptor read/8, error -71 [ 1421.155109][ T5871] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1421.340959][ T5871] usb 3-1: device descriptor read/64, error -71 [ 1421.821067][ T5871] usb usb3-port1: attempt power cycle [ 1422.106251][ T29] audit: type=1400 audit(1734345289.396:4281): avc: denied { accept } for pid=21876 comm="syz.1.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1422.274605][ T5871] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1422.332892][ T5871] usb 3-1: device descriptor read/8, error -71 [ 1423.120906][ T29] audit: type=1400 audit(1734345290.356:4282): avc: denied { egress } for pid=21881 comm="syz.1.4415" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1423.131416][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.160956][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.181484][ T29] audit: type=1400 audit(1734345290.356:4283): avc: denied { sendto } for pid=21881 comm="syz.1.4415" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1423.427753][T21894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1424.309221][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1425.421081][ T5871] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1425.891023][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 1425.993492][T21920] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1426.552751][ T5871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.629420][T21925] FAULT_INJECTION: forcing a failure. [ 1426.629420][T21925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.649846][T21925] CPU: 1 UID: 0 PID: 21925 Comm: syz.3.4425 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1426.660658][T21925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1426.670735][T21925] Call Trace: [ 1426.674027][T21925] [ 1426.676966][T21925] dump_stack_lvl+0x16c/0x1f0 [ 1426.681663][T21925] should_fail_ex+0x497/0x5b0 [ 1426.686374][T21925] _copy_to_user+0x32/0xd0 [ 1426.690816][T21925] simple_read_from_buffer+0xd0/0x160 [ 1426.696209][T21925] proc_fail_nth_read+0x198/0x270 [ 1426.701266][T21925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1426.706853][T21925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1426.712419][T21925] vfs_read+0x1df/0xbe0 [ 1426.716596][T21925] ? __fget_files+0x1fc/0x3a0 [ 1426.721286][T21925] ? __pfx___mutex_lock+0x10/0x10 [ 1426.726337][T21925] ? __pfx_vfs_read+0x10/0x10 [ 1426.731035][T21925] ? __fget_files+0x206/0x3a0 [ 1426.735744][T21925] ksys_read+0x12b/0x250 [ 1426.739999][T21925] ? __pfx_ksys_read+0x10/0x10 [ 1426.744791][T21925] do_syscall_64+0xcd/0x250 [ 1426.749414][T21925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.751417][ T5871] usb 2-1: config 0 has no interface number 0 [ 1426.755319][T21925] RIP: 0033:0x7ff99f18472c [ 1426.765801][T21925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1426.776197][ T5871] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.785407][T21925] RSP: 002b:00007ff99fef1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1426.785434][T21925] RAX: ffffffffffffffda RBX: 00007ff99f375fa0 RCX: 00007ff99f18472c [ 1426.785446][T21925] RDX: 000000000000000f RSI: 00007ff99fef10a0 RDI: 0000000000000005 [ 1426.785459][T21925] RBP: 00007ff99fef1090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.785471][T21925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.785484][T21925] R13: 0000000000000000 R14: 00007ff99f375fa0 R15: 00007ffe974fb118 [ 1426.785516][T21925] [ 1426.849881][ T5871] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.870765][ T5871] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1426.883316][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.908623][ T5871] usb 2-1: config 0 descriptor?? [ 1427.227384][T21933] binder: 21932:21933 ioctl c0306201 20000580 returned -22 [ 1427.333514][ T29] audit: type=1326 audit(1734345294.626:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.435393][ T29] audit: type=1326 audit(1734345294.676:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.459021][ T29] audit: type=1326 audit(1734345294.676:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.483026][ T29] audit: type=1326 audit(1734345294.676:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.507275][ T29] audit: type=1326 audit(1734345294.676:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.532267][ T29] audit: type=1326 audit(1734345294.676:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.556376][ T29] audit: type=1326 audit(1734345294.676:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.580505][ T29] audit: type=1326 audit(1734345294.676:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.604293][ T29] audit: type=1326 audit(1734345294.676:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.608404][ T5871] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0021/input/input109 [ 1427.627833][ T29] audit: type=1326 audit(1734345294.686:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.5.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d0f85d19 code=0x7ffc0000 [ 1427.698298][T21939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1427.867618][T21911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1428.109463][ T5871] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0021/input/input110 [ 1428.160260][T21952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1428.735364][T21959] binder: 21956:21959 ioctl 40086602 20000000 returned -22 [ 1429.076340][ T5871] uclogic 0003:28BD:0071.0021: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 1429.096535][ T5871] usb 2-1: USB disconnect, device number 66 [ 1430.220976][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4438'. [ 1431.688389][T22002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1432.824496][T22021] binder: 22016:22021 ioctl 40086602 20000000 returned -22 [ 1433.300597][ T5871] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1433.790969][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 1433.797792][ T5871] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 1433.806372][ T5871] usb 6-1: config 0 has no interface number 0 [ 1433.815864][ T5871] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1433.825469][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.833934][ T5871] usb 6-1: Product: syz [ 1433.838293][ T5871] usb 6-1: Manufacturer: syz [ 1433.843767][ T5871] usb 6-1: SerialNumber: syz [ 1433.861288][ T5871] usb 6-1: config 0 descriptor?? [ 1433.872773][ T5871] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1433.891038][ T5871] pctv452e: pctv452e_power_ctrl: 1 [ 1433.891038][ T5871] [ 1433.909147][ T5871] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1433.909147][ T5871] [ 1433.930159][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 1433.943365][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1433.953746][ T5871] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1433.963347][ T5871] usb 6-1: media controller created [ 1433.969581][ T5871] dvb-usb: bulk message failed: -22 (8/0) [ 1433.986594][ T5871] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1433.997911][ T5871] dvb-usb: MAC address reading failed. [ 1434.021900][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.077321][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1434.077346][ T29] audit: type=1400 audit(1734345301.366:4343): avc: denied { map } for pid=22028 comm="syz.5.4455" path="socket:[80209]" dev="sockfs" ino=80209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1434.109607][ T5871] DVB: Unable to find symbol stb0899_attach() [ 1434.116611][ T5871] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1434.295272][T22053] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1434.322116][T22053] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1434.389607][ T29] audit: type=1400 audit(1734345301.626:4344): avc: denied { read } for pid=22028 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1434.832870][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1434.899220][ T5871] rc_core: IR keymap rc-tt-1500 not found [ 1434.907290][ T5871] Registered IR keymap rc-empty [ 1434.915189][ T5871] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1434.926250][ T5871] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input111 [ 1434.951621][ T5871] dvb-usb: schedule remote query interval to 100 msecs. [ 1434.960467][ T5871] pctv452e: pctv452e_power_ctrl: 0 [ 1434.960467][ T5871] [ 1435.000270][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1435.010392][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1435.091918][ T5871] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1435.455669][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.467932][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1435.477348][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1435.518571][ T9] usb 2-1: config 0 descriptor?? [ 1435.613629][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1435.619440][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1435.741121][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1435.753335][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1435.884488][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1435.900818][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1436.166880][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1436.204778][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1436.321058][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 1436.337164][ T5872] dvb-usb: error -22 while querying for an remote control event. [ 1436.390541][T22073] virtio-fs: tag <(null)> not found [ 1436.397905][T22073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'. [ 1436.435599][ T968] usb 6-1: USB disconnect, device number 69 [ 1436.739880][ T968] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1438.986468][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1439.001383][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1439.029835][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1439.050732][ T9] usb 2-1: USB disconnect, device number 67 [ 1439.916489][ T29] audit: type=1326 audit(1734345307.206:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1439.940083][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.972923][ T29] audit: type=1326 audit(1734345307.206:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1439.996821][ T29] audit: type=1326 audit(1734345307.206:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.020619][ T29] audit: type=1326 audit(1734345307.206:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.051115][ T29] audit: type=1326 audit(1734345307.206:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.072545][T22135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1440.074970][ T29] audit: type=1326 audit(1734345307.206:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.090731][ T9] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1440.113776][ T29] audit: type=1326 audit(1734345307.206:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.113906][ T29] audit: type=1326 audit(1734345307.206:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.114035][ T29] audit: type=1326 audit(1734345307.206:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.114157][ T29] audit: type=1326 audit(1734345307.206:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.2.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1440.171294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.220472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.695580][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1440.722008][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.748957][ T9] usb 6-1: config 0 descriptor?? [ 1440.799511][T22142] FAULT_INJECTION: forcing a failure. [ 1440.799511][T22142] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.812425][ T5872] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1440.823656][T22142] CPU: 0 UID: 0 PID: 22142 Comm: syz.3.4489 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1440.834456][T22142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1440.844530][T22142] Call Trace: [ 1440.847824][T22142] [ 1440.850763][T22142] dump_stack_lvl+0x16c/0x1f0 [ 1440.855474][T22142] should_fail_ex+0x497/0x5b0 [ 1440.860164][T22142] ? fs_reclaim_acquire+0xae/0x150 [ 1440.865297][T22142] should_failslab+0xc2/0x120 [ 1440.870018][T22142] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1440.875400][T22142] ? audit_log_start+0x2bc/0x7e0 [ 1440.880361][T22142] audit_log_start+0x2bc/0x7e0 [ 1440.885122][T22142] ? __pfx_audit_log_start+0x10/0x10 [ 1440.890401][T22142] ? __pfx_lock_release+0x10/0x10 [ 1440.895428][T22142] ? migrate_enable+0x1ef/0x260 [ 1440.900270][T22142] ? __pfx_migrate_enable+0x10/0x10 [ 1440.905465][T22142] audit_seccomp+0x61/0x280 [ 1440.909973][T22142] __seccomp_filter+0x816/0xf40 [ 1440.914826][T22142] ? __pfx___seccomp_filter+0x10/0x10 [ 1440.920201][T22142] ? fput+0x67/0x440 [ 1440.924094][T22142] ? ksys_write+0x1ba/0x250 [ 1440.928609][T22142] __secure_computing+0x26c/0x3f0 [ 1440.933640][T22142] syscall_trace_enter+0x8b/0x260 [ 1440.938692][T22142] do_syscall_64+0x1ee/0x250 [ 1440.943292][T22142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.949186][T22142] RIP: 0033:0x7ff99f185d19 [ 1440.953596][T22142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.973210][T22142] RSP: 002b:00007ff99fef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1440.981619][T22142] RAX: ffffffffffffffda RBX: 00007ff99f375fa0 RCX: 00007ff99f185d19 [ 1440.989580][T22142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1440.997555][T22142] RBP: 00007ff99fef1090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.005517][T22142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.013479][T22142] R13: 0000000000000000 R14: 00007ff99f375fa0 R15: 00007ffe974fb118 [ 1441.021476][T22142] [ 1441.024639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.122978][ T5872] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1441.133460][ T5872] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1441.143974][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.164190][T22137] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1441.174963][ T5872] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1441.658339][ T5872] usb 2-1: USB disconnect, device number 68 [ 1441.846793][T22160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1441.918200][T22163] overlayfs: failed to resolve './bus': -2 [ 1442.391126][ T9] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 1442.403714][T22164] lo speed is unknown, defaulting to 1000 [ 1445.223025][ T51] usb 6-1: USB disconnect, device number 70 [ 1445.401116][ T968] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1445.860167][T22213] binder: 22204:22213 ioctl 40086602 20000000 returned -22 [ 1445.871314][ T968] usb 5-1: Using ep0 maxpacket: 16 [ 1445.897974][ T968] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1445.906530][ T968] usb 5-1: config 0 has no interface number 0 [ 1446.026813][ T968] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.077324][ T968] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.089951][ T968] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1446.120233][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.218119][ T968] usb 5-1: config 0 descriptor?? [ 1446.511398][ T51] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1446.681779][ T51] usb 6-1: Using ep0 maxpacket: 8 [ 1446.716722][ T51] usb 6-1: config 0 has an invalid interface number: 170 but max is 0 [ 1446.742677][T12301] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1446.781031][ T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.781152][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1446.794013][ T51] usb 6-1: config 0 has no interface number 0 [ 1446.812053][ T51] usb 6-1: config 0 interface 170 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1446.825486][ T51] usb 6-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1446.874435][ T51] usb 6-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1446.891248][T12301] usb 3-1: device descriptor read/64, error -71 [ 1446.898042][ T51] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 1446.914785][ T51] usb 6-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1446.929141][ T51] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1446.963219][ T51] usb 6-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 1446.973068][ T51] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1446.993892][ T51] usb 6-1: Product: syz [ 1447.003514][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1447.054313][ T51] usb 6-1: Manufacturer: syz [ 1447.059410][ T51] usb 6-1: SerialNumber: syz [ 1447.065812][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1447.089278][ T51] usb 6-1: config 0 descriptor?? [ 1447.110937][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1447.111859][T22217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1447.135427][T22217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1447.143253][T12301] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1447.169619][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1447.264175][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1447.270245][ T968] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0022/input/input113 [ 1447.297345][T12301] usb 3-1: device descriptor read/64, error -71 [ 1447.334697][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1447.344619][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1447.357820][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1447.367611][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.378127][ T9] usb 4-1: config 0 descriptor?? [ 1447.390160][ T51] usb 6-1: USB disconnect, device number 71 [ 1447.399803][ T968] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0022/input/input114 [ 1447.426958][ T968] uclogic 0003:28BD:0071.0022: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1447.439873][T12301] usb usb3-port1: attempt power cycle [ 1447.447444][T22200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1447.571376][ T968] usb 5-1: USB disconnect, device number 79 [ 1447.590326][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1447.792458][T12301] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1447.821741][T12301] usb 3-1: device descriptor read/8, error -71 [ 1448.050269][T22229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1448.062759][T22229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1448.591407][T12301] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1448.622636][T12301] usb 3-1: device descriptor read/8, error -71 [ 1448.731963][T12301] usb usb3-port1: unable to enumerate USB device [ 1449.743176][T12301] usb 4-1: USB disconnect, device number 64 [ 1449.751161][T12301] usblp0: removed [ 1451.328825][T22252] syz.3.4518 (22252) used greatest stack depth: 20176 bytes left [ 1453.353850][T12301] IPVS: starting estimator thread 0... [ 1453.441488][T22295] IPVS: using max 22 ests per chain, 52800 per kthread [ 1453.578553][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 1453.578571][ T29] audit: type=1400 audit(1734345320.866:4449): avc: denied { mounton } for pid=22269 comm="syz.3.4523" path="/293/file1/file1" dev="autofs" ino=80668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1454.181030][ T29] audit: type=1326 audit(1734345321.466:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.5.4533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30d0f85d19 code=0x0 [ 1454.203922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.643651][ T29] audit: type=1400 audit(1734345324.936:4451): avc: denied { getattr } for pid=22338 comm="syz.2.4540" path="socket:[80725]" dev="sockfs" ino=80725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1457.911062][ T9] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1458.065171][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1458.097639][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.125437][ T9] usb 6-1: Product: syz [ 1458.144180][ T9] usb 6-1: Manufacturer: syz [ 1458.160708][ T9] usb 6-1: SerialNumber: syz [ 1458.187224][ T9] usb 6-1: config 0 descriptor?? [ 1458.240965][T12301] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1458.417265][ T9] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1458.438099][T12301] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1458.475654][T12301] usb 3-1: config 0 has no interface number 0 [ 1458.501345][T12301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1458.571053][T12301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1458.619128][ T9] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1458.623012][T12301] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1458.660940][T12301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.703159][ T9] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1458.720817][T12301] usb 3-1: config 0 descriptor?? [ 1458.726487][T22346] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1458.732467][ T9] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1458.781210][T12301] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1458.823603][T22341] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4541'. [ 1458.840981][T22341] netlink: 'syz.5.4541': attribute type 1 has an invalid length. [ 1458.870208][T22341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.908773][ T9] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1458.944487][T22341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.120258][T12301] usb 6-1: USB disconnect, device number 72 [ 1460.321828][T22361] binder: 22359:22361 ioctl 40086602 20000000 returned -22 [ 1462.184828][T12301] usb 3-1: USB disconnect, device number 60 [ 1462.295902][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4550'. [ 1462.508907][T22385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4551'. [ 1462.610430][ T29] audit: type=1326 audit(1734345329.896:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1462.621193][T22385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4551'. [ 1462.633984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.641235][ T29] audit: type=1326 audit(1734345329.926:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1462.680440][ T29] audit: type=1326 audit(1734345329.966:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1462.688803][T22385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4551'. [ 1462.703981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.705890][ T29] audit: type=1326 audit(1734345329.966:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1462.935838][ T29] audit: type=1326 audit(1734345329.966:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1463.262069][ T29] audit: type=1326 audit(1734345329.996:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1463.286225][ T29] audit: type=1326 audit(1734345329.996:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1463.309946][ T29] audit: type=1326 audit(1734345329.996:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1463.334082][ T29] audit: type=1326 audit(1734345330.036:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1463.357757][ T29] audit: type=1326 audit(1734345330.036:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.2.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1465.110193][T22415] binder: 22408:22415 ioctl 40086602 20000000 returned -22 [ 1467.131182][T12301] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1467.136886][T22443] binder: 22440:22443 ioctl 40086602 20000000 returned -22 [ 1467.311032][T12301] usb 3-1: Using ep0 maxpacket: 32 [ 1467.334578][T12301] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.360033][T12301] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.615433][T12301] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1467.627670][T12301] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1467.646607][T12301] usb 3-1: Product: syz [ 1467.656407][T12301] usb 3-1: Manufacturer: syz [ 1467.787766][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1467.787806][ T29] audit: type=1326 audit(1734345335.076:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22445 comm="syz.4.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1467.817392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.832078][T12301] hub 3-1:4.0: USB hub found [ 1467.859554][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1467.881275][ T29] audit: type=1326 audit(1734345335.076:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22445 comm="syz.4.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1467.918291][T22451] vxcan1: tx address claim with different name [ 1467.927810][T22451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1467.933586][ T29] audit: type=1400 audit(1734345335.136:4524): avc: denied { setopt } for pid=22450 comm="syz.1.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1468.918380][T12301] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1468.982053][T12301] usb 3-1: USB disconnect, device number 61 [ 1469.287674][T22464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4572'. [ 1471.314028][ T29] audit: type=1326 audit(1734345338.606:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.737587][ T29] audit: type=1326 audit(1734345338.636:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.807024][ T29] audit: type=1326 audit(1734345338.636:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.850920][ T29] audit: type=1326 audit(1734345338.636:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.910980][ T29] audit: type=1326 audit(1734345338.636:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.943900][ T29] audit: type=1326 audit(1734345338.636:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1471.968872][ T29] audit: type=1326 audit(1734345338.636:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22490 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1472.044924][T21110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1472.088284][T21110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1472.098843][T21110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1472.108722][T21110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1472.117779][T21110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1472.125310][T21110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1472.680143][T22504] lo speed is unknown, defaulting to 1000 [ 1473.162917][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1473.208053][T20371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.251495][ T5899] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1473.326356][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1473.337849][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1473.357277][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1473.392796][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1473.405435][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.414728][T20371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.419070][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1473.439118][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1473.452946][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.462404][ T5899] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1473.469990][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1473.483005][ T5899] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1473.494803][T22504] chnl_net:caif_netlink_parms(): no params data found [ 1473.507910][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1473.519740][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1473.533916][ T5899] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1473.542369][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1473.554445][ T5899] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1473.570453][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1473.572089][T20371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.605487][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1473.652515][ T5899] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1473.660588][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1473.681553][ T5899] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1473.693505][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1473.705002][ T5899] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1473.729272][ T5899] usb 3-1: string descriptor 0 read error: -22 [ 1473.736174][ T5899] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1473.745910][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.772949][ T5899] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1473.799638][T20371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.861495][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 1473.867077][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1473.891497][T22504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.909857][T22504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.925607][T22504] bridge_slave_0: entered allmulticast mode [ 1473.943866][T22504] bridge_slave_0: entered promiscuous mode [ 1473.957393][T22504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.964806][T22504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.972796][T22504] bridge_slave_1: entered allmulticast mode [ 1473.980033][T22504] bridge_slave_1: entered promiscuous mode [ 1474.029558][T22504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.075704][T22504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.147713][ T9] usb 3-1: USB disconnect, device number 62 [ 1474.178776][T22504] team0: Port device team_slave_0 added [ 1474.201481][T21110] Bluetooth: hci1: command tx timeout [ 1474.679204][T22535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4588'. [ 1474.967891][T22504] team0: Port device team_slave_1 added [ 1474.985212][T20371] bridge_slave_1: left allmulticast mode [ 1474.993222][ T5899] usb 5-1: USB disconnect, device number 80 [ 1475.000550][T20371] bridge_slave_1: left promiscuous mode [ 1475.016692][T20371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.033201][T20371] bridge_slave_0: left allmulticast mode [ 1475.038904][T20371] bridge_slave_0: left promiscuous mode [ 1475.056484][T20371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.362581][T21110] Bluetooth: hci1: command tx timeout [ 1476.811388][T20371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.923836][T20371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.948966][T20371] bond0 (unregistering): Released all slaves [ 1477.261034][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1477.261077][ T29] audit: type=1326 audit(1734345344.536:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.373531][ T29] audit: type=1326 audit(1734345344.536:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.454449][ T29] audit: type=1326 audit(1734345344.536:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.458599][T22564] FAULT_INJECTION: forcing a failure. [ 1477.458599][T22564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.478144][ T29] audit: type=1326 audit(1734345344.536:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.478180][ T29] audit: type=1326 audit(1734345344.536:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.478211][ T29] audit: type=1326 audit(1734345344.536:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.478244][ T29] audit: type=1326 audit(1734345344.536:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.491415][T22564] CPU: 0 UID: 0 PID: 22564 Comm: syz.1.4594 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1477.514879][ T29] audit: type=1326 audit(1734345344.536:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.538175][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1477.538189][T22564] Call Trace: [ 1477.538195][T22564] [ 1477.538205][T22564] dump_stack_lvl+0x16c/0x1f0 [ 1477.561663][ T29] audit: type=1326 audit(1734345344.536:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.585004][T22564] should_fail_ex+0x497/0x5b0 [ 1477.595803][ T29] audit: type=1326 audit(1734345344.536:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22559 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1477.619153][T22564] _copy_from_user+0x2e/0xd0 [ 1477.619187][T22564] copy_msghdr_from_user+0x99/0x160 [ 1477.619207][T22564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1477.619245][T22564] ___sys_sendmsg+0xff/0x1e0 [ 1477.619264][T22564] ? __pfx____sys_sendmsg+0x10/0x10 [ 1477.619294][T22564] ? __pfx_lock_release+0x10/0x10 [ 1477.619323][T22564] ? trace_lock_acquire+0x14e/0x1f0 [ 1477.619359][T22564] ? __fget_files+0x206/0x3a0 [ 1477.619387][T22564] __sys_sendmsg+0x16e/0x220 [ 1477.619404][T22564] ? __pfx___sys_sendmsg+0x10/0x10 [ 1477.741534][T22564] do_syscall_64+0xcd/0x250 [ 1477.746050][T22564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.751943][T22564] RIP: 0033:0x7f4488785d19 [ 1477.756347][T22564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.775951][T22564] RSP: 002b:00007f44894d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.784359][T22564] RAX: ffffffffffffffda RBX: 00007f4488975fa0 RCX: 00007f4488785d19 [ 1477.792325][T22564] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 1477.800312][T22564] RBP: 00007f44894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.808272][T22564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.816240][T22564] R13: 0000000000000000 R14: 00007f4488975fa0 R15: 00007ffd1889f338 [ 1477.824212][T22564] [ 1477.827235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.857319][T22504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.864491][T22504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.890569][T22504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.902839][T22504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.909790][T22504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.935837][T22504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.444636][T21110] Bluetooth: hci1: command tx timeout [ 1478.485969][T22576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1478.497010][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1478.510393][T22504] hsr_slave_0: entered promiscuous mode [ 1478.533656][T22574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.605565][T22504] hsr_slave_1: entered promiscuous mode [ 1478.630079][T22504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1478.941194][T22504] Cannot create hsr debugfs directory [ 1480.551011][T21110] Bluetooth: hci1: command tx timeout [ 1480.965297][T22504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1481.169923][T20371] hsr_slave_0: left promiscuous mode [ 1481.291972][T12301] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1481.484965][T20371] hsr_slave_1: left promiscuous mode [ 1481.488402][T22613] FAULT_INJECTION: forcing a failure. [ 1481.488402][T22613] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.507112][T20371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.509909][T22613] CPU: 1 UID: 0 PID: 22613 Comm: syz.4.4607 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1481.514826][T20371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.525680][T22613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1481.525695][T22613] Call Trace: [ 1481.525702][T22613] [ 1481.525712][T22613] dump_stack_lvl+0x16c/0x1f0 [ 1481.525743][T22613] should_fail_ex+0x497/0x5b0 [ 1481.525769][T22613] ? fs_reclaim_acquire+0xae/0x150 [ 1481.525800][T22613] should_failslab+0xc2/0x120 [ 1481.568284][T22613] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1481.573669][T22613] ? skb_clone+0x190/0x3f0 [ 1481.578117][T22613] skb_clone+0x190/0x3f0 [ 1481.582386][T22613] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 1481.587618][T22613] ? __pfx___lock_acquire+0x10/0x10 [ 1481.592842][T22613] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1481.598504][T22613] ? find_held_lock+0x2d/0x110 [ 1481.603287][T22613] ? avc_has_perm_noaudit+0x119/0x3a0 [ 1481.608677][T22613] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1481.614054][T22613] ? __asan_memset+0x23/0x50 [ 1481.618654][T22613] ? __nla_validate_parse+0x601/0x2880 [ 1481.624116][T22613] ? __pfx___nla_validate_parse+0x10/0x10 [ 1481.629833][T22613] ? find_held_lock+0x2d/0x110 [ 1481.634597][T22613] ? cap_capable+0x1cf/0x240 [ 1481.639188][T22613] ? __nla_parse+0x40/0x60 [ 1481.643603][T22613] nfnetlink_rcv+0x3c3/0x430 [ 1481.648199][T22613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1481.653315][T22613] netlink_unicast+0x53c/0x7f0 [ 1481.658078][T22613] ? __pfx_netlink_unicast+0x10/0x10 [ 1481.663365][T22613] netlink_sendmsg+0x8b8/0xd70 [ 1481.668129][T22613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.673420][T22613] ____sys_sendmsg+0xaaf/0xc90 [ 1481.678180][T22613] ? copy_msghdr_from_user+0x10b/0x160 [ 1481.683630][T22613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.688927][T22613] ___sys_sendmsg+0x135/0x1e0 [ 1481.693599][T22613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.698802][T22613] ? __pfx_lock_release+0x10/0x10 [ 1481.703822][T22613] ? trace_lock_acquire+0x14e/0x1f0 [ 1481.709026][T22613] ? __fget_files+0x206/0x3a0 [ 1481.713702][T22613] __sys_sendmsg+0x16e/0x220 [ 1481.718289][T22613] ? __pfx___sys_sendmsg+0x10/0x10 [ 1481.723407][T22613] do_syscall_64+0xcd/0x250 [ 1481.727939][T22613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.733829][T22613] RIP: 0033:0x7f0562385d19 [ 1481.738239][T22613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.757848][T22613] RSP: 002b:00007f05630d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.766269][T22613] RAX: ffffffffffffffda RBX: 00007f0562575fa0 RCX: 00007f0562385d19 [ 1481.774234][T22613] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1481.782215][T22613] RBP: 00007f05630d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.790178][T22613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.798144][T22613] R13: 0000000000000000 R14: 00007f0562575fa0 R15: 00007fff7289abd8 [ 1481.806121][T22613] [ 1481.812348][T20371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.820222][T20371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.836937][T20371] veth1_macvtap: left promiscuous mode [ 1481.842642][T20371] veth1_vlan: left promiscuous mode [ 1481.849011][T12301] usb 6-1: Using ep0 maxpacket: 8 [ 1481.849096][T20371] veth0_vlan: left promiscuous mode [ 1481.867185][T12301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1481.867392][T21110] Bluetooth: hci5: Malformed Event: 0x02 [ 1481.901106][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1481.924060][T12301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.935836][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.947264][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1481.997556][T12301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1482.005462][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1482.016952][T12301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1482.028918][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1482.040027][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1482.162694][T12301] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1482.170679][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1482.187283][T12301] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1482.199071][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1482.210190][T12301] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1482.230510][T12301] usb 6-1: string descriptor 0 read error: -22 [ 1482.237758][T12301] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1482.455813][T12301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.831799][T12301] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1482.898103][ T5899] usb 6-1: USB disconnect, device number 73 [ 1482.995628][T22625] FAULT_INJECTION: forcing a failure. [ 1482.995628][T22625] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.008621][T22625] CPU: 0 UID: 0 PID: 22625 Comm: syz.2.4610 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1483.019410][T22625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1483.029491][T22625] Call Trace: [ 1483.032794][T22625] [ 1483.035737][T22625] dump_stack_lvl+0x16c/0x1f0 [ 1483.040436][T22625] should_fail_ex+0x497/0x5b0 [ 1483.045143][T22625] should_failslab+0xc2/0x120 [ 1483.049850][T22625] __kmalloc_cache_noprof+0x68/0x410 [ 1483.055246][T22625] ? __mutex_trylock_common+0x78/0x250 [ 1483.060739][T22625] snd_pcm_oss_change_params_locked+0x1d6/0x3a60 [ 1483.067106][T22625] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1483.073890][T22625] ? snd_pcm_oss_write+0x482/0xa00 [ 1483.079037][T22625] ? lockdep_hardirqs_on+0x7c/0x110 [ 1483.084251][T22625] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1483.090147][T22625] snd_pcm_oss_write+0x4a3/0xa00 [ 1483.095088][T22625] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1483.100562][T22625] vfs_write+0x24c/0x1150 [ 1483.104909][T22625] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1483.110716][T22625] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 1483.117316][T22625] ? __pfx_vfs_write+0x10/0x10 [ 1483.122075][T22625] ? rcu_is_watching+0x12/0xc0 [ 1483.126842][T22625] ? __rcu_read_unlock+0x2b4/0x580 [ 1483.131954][T22625] ? __fget_files+0x206/0x3a0 [ 1483.136634][T22625] ksys_write+0x12b/0x250 [ 1483.140961][T22625] ? __pfx_ksys_write+0x10/0x10 [ 1483.145812][T22625] do_syscall_64+0xcd/0x250 [ 1483.150318][T22625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.156209][T22625] RIP: 0033:0x7f2ef3385d19 [ 1483.160617][T22625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.180223][T22625] RSP: 002b:00007f2ef4140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1483.188634][T22625] RAX: ffffffffffffffda RBX: 00007f2ef3576080 RCX: 00007f2ef3385d19 [ 1483.196601][T22625] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 1483.204587][T22625] RBP: 00007f2ef4140090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.212551][T22625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.220513][T22625] R13: 0000000000000000 R14: 00007f2ef3576080 R15: 00007ffd2463ad38 [ 1483.228513][T22625] [ 1483.231660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.325321][T22630] openvswitch: netlink: nsh attr 11328 is out of range max 3 [ 1483.332932][T22630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.742417][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1483.791598][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1484.507230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.515058][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.174972][T22653] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1485.187369][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1485.187384][ T29] audit: type=1326 audit(1734345352.476:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.217181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.254561][T22657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1485.261720][ T29] audit: type=1326 audit(1734345352.516:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.285139][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.319453][ T29] audit: type=1326 audit(1734345352.516:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.343189][ T29] audit: type=1326 audit(1734345352.516:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.366864][ T29] audit: type=1326 audit(1734345352.516:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.390450][ T29] audit: type=1326 audit(1734345352.516:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.414044][ T29] audit: type=1326 audit(1734345352.516:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.437541][ T29] audit: type=1326 audit(1734345352.516:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.461083][ T29] audit: type=1326 audit(1734345352.516:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.485032][ T29] audit: type=1326 audit(1734345352.516:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22655 comm="syz.2.4617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3385d19 code=0x7ffc0000 [ 1485.835543][T20371] team0 (unregistering): Port device team_slave_1 removed [ 1485.959577][T20371] team0 (unregistering): Port device team_slave_0 removed [ 1486.916904][T22671] block device autoloading is deprecated and will be removed. [ 1486.979741][T22671] syz.2.4620: attempt to access beyond end of device [ 1486.979741][T22671] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1487.217684][T22681] overlayfs: disabling nfs_export due to verity=on [ 1487.271336][T12301] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1487.500352][T12301] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1487.509425][T12301] usb 5-1: config 0 has no interface number 0 [ 1487.539043][T12301] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1487.585798][T12301] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1487.612115][T12301] usb 5-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1487.655240][T12301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.693614][T12301] usb 5-1: Product: syz [ 1487.703932][T12301] usb 5-1: Manufacturer: syz [ 1487.708682][T12301] usb 5-1: SerialNumber: syz [ 1487.774440][T12301] usb 5-1: config 0 descriptor?? [ 1487.790755][T22678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1487.813124][T22504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1487.841813][T22504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1487.942514][T22676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.953417][T22504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1488.482163][T12301] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1488.497782][T12301] usb 5-1: MIDIStreaming interface descriptor not found [ 1488.772021][ T5899] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1489.331172][T12301] usb 5-1: USB disconnect, device number 81 [ 1489.457406][T22504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.484587][ T5899] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1489.514668][ T5899] usb 6-1: config 0 has no interface number 0 [ 1489.527582][T22504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.528504][T20371] IPVS: stop unused estimator thread 0... [ 1489.541741][ T5899] usb 6-1: config 0 interface 2 altsetting 16 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1489.740916][ T5899] usb 6-1: config 0 interface 2 altsetting 16 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1489.770919][ T5899] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1489.779738][ T5899] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 1489.948734][T19551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.955901][T19551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.074339][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.101939][ T5899] usb 6-1: Product: syz [ 1490.106541][ T5899] usb 6-1: Manufacturer: syz [ 1490.108205][T22710] udevd[22710]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.115456][ T5899] usb 6-1: SerialNumber: syz [ 1490.164280][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.171426][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.210462][ T5899] usb 6-1: config 0 descriptor?? [ 1490.638999][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1490.639018][ T29] audit: type=1400 audit(1734345357.926:4700): avc: denied { map } for pid=22685 comm="syz.5.4623" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1490.841036][ T29] audit: type=1400 audit(1734345357.926:4701): avc: denied { execute } for pid=22685 comm="syz.5.4623" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1490.944835][ T5899] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.958997][ T29] audit: type=1326 audit(1734345358.156:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.340978][ T29] audit: type=1326 audit(1734345358.156:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.366093][ T5899] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 1491.419868][ T29] audit: type=1326 audit(1734345358.156:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.443405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.484428][ T29] audit: type=1326 audit(1734345358.156:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.504117][T22568] udevd[22568]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1491.508605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.533718][ T29] audit: type=1326 audit(1734345358.156:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.557180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.563744][ T29] audit: type=1326 audit(1734345358.156:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.587593][ T29] audit: type=1326 audit(1734345358.156:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.611045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.619039][ T29] audit: type=1326 audit(1734345358.176:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0562385d19 code=0x7ffc0000 [ 1491.642518][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.674546][T22727] serio: Serial port ptm0 [ 1491.811495][ T5899] usb 6-1: USB disconnect, device number 74 [ 1491.849662][T22504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.873290][ T968] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1492.137412][T22504] veth0_vlan: entered promiscuous mode [ 1492.159313][T22504] veth1_vlan: entered promiscuous mode [ 1492.186199][ T968] usb 2-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00 [ 1492.196224][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.227512][ T51] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1492.309315][ T968] usb 2-1: config 0 descriptor?? [ 1492.363275][ T968] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1492.691615][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 1492.699556][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1492.711006][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1492.719908][T22726] netlink: 'syz.1.4631': attribute type 6 has an invalid length. [ 1492.724397][ T51] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1492.737034][ T968] usb 2-1: Detected FT232B [ 1492.751319][ T51] usb 5-1: config 0 has no interface number 0 [ 1492.759111][T22504] veth0_macvtap: entered promiscuous mode [ 1492.765128][ T51] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.777867][T22504] veth1_macvtap: entered promiscuous mode [ 1492.796427][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.807140][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.817386][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.828362][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.838241][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.848931][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.859581][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.870213][ T968] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1492.881570][ T968] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1492.891245][ T51] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.902170][ T968] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1492.911043][ T51] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1492.926677][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.927161][ T968] usb 2-1: USB disconnect, device number 69 [ 1492.942780][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.953216][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.965607][ T51] usb 5-1: config 0 descriptor?? [ 1492.974702][ T968] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1493.004124][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.146777][ T968] ftdi_sio 2-1:0.0: device disconnected [ 1493.286432][T22504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.437415][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.501009][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.556055][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.587408][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.614241][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.638220][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.648600][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.659932][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.724908][T22504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.815368][T22504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.913016][ T51] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0023/input/input115 [ 1493.922405][T22504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.075245][ T51] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0023/input/input116 [ 1494.082998][T22731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1494.141904][T22504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.150991][T22504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.193079][ T51] uclogic 0003:28BD:0071.0023: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1494.209539][T22504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.218522][T22504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.884286][ T51] usb 5-1: USB disconnect, device number 82 [ 1495.239999][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.240022][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.255818][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.275503][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.732703][T22780] syzkaller0: entered promiscuous mode [ 1495.738334][T22780] syzkaller0: entered allmulticast mode [ 1501.769804][T22777] binder: 22776:22777 ioctl 40086602 20000000 returned -22 [ 1545.971236][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.977580][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.661282][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1550.661303][ T29] audit: type=1400 audit(1734345417.856:4734): avc: denied { recv } for pid=5806 comm="syz-executor" saddr=10.128.0.169 src=40442 daddr=10.128.1.92 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1600.581862][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 1611.076802][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.083243][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.660929][ T30] INFO: task kworker/u8:9:5921 blocked for more than 155 seconds. [ 1663.668788][ T30] Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1663.690852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1663.699564][ T30] task:kworker/u8:9 state:D stack:22960 pid:5921 tgid:5921 ppid:2 flags:0x00004000 [ 1663.730840][ T30] Workqueue: events_unbound linkwatch_event [ 1663.736808][ T30] Call Trace: [ 1663.740094][ T30] [ 1663.750842][ T30] __schedule+0xe58/0x5ad0 [ 1663.755306][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1663.760519][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1663.780890][ T30] ? __pfx___schedule+0x10/0x10 [ 1663.785790][ T30] ? schedule+0x298/0x350 [ 1663.790141][ T30] ? __pfx_lock_release+0x10/0x10 [ 1663.810844][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1663.816372][ T30] ? lock_acquire+0x2f/0xb0 [ 1663.830827][ T30] ? schedule+0x1fd/0x350 [ 1663.835216][ T30] schedule+0xe7/0x350 [ 1663.839307][ T30] schedule_preempt_disabled+0x13/0x30 [ 1664.480822][ T30] __mutex_lock+0x62b/0xa60 [ 1664.485401][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1664.490629][ T30] ? linkwatch_event+0x51/0xc0 [ 1664.520826][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1664.525926][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1664.570832][ T30] ? linkwatch_event+0x51/0xc0 [ 1664.575671][ T30] ? rtnl_lock+0x9/0x20 [ 1664.579841][ T30] linkwatch_event+0x51/0xc0 [ 1664.610865][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 1664.616213][ T30] ? rcu_is_watching+0x12/0xc0 [ 1664.640832][ T30] process_one_work+0x9c5/0x1ba0 [ 1664.645834][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1664.680835][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1664.686265][ T30] ? rcu_is_watching+0x12/0xc0 [ 1664.710871][ T30] ? assign_work+0x1a0/0x250 [ 1664.715618][ T30] worker_thread+0x6c8/0xf00 [ 1664.720246][ T30] ? __kthread_parkme+0x148/0x220 [ 1664.750843][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1664.756018][ T30] kthread+0x2c1/0x3a0 [ 1664.760100][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1664.800848][ T30] ? __pfx_kthread+0x10/0x10 [ 1664.805497][ T30] ret_from_fork+0x45/0x80 [ 1664.809920][ T30] ? __pfx_kthread+0x10/0x10 [ 1664.840837][ T30] ret_from_fork_asm+0x1a/0x30 [ 1664.845688][ T30] [ 1664.848737][ T30] INFO: task kworker/u8:13:8443 blocked for more than 156 seconds. [ 1664.880822][ T30] Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1664.888499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1664.940811][ T30] task:kworker/u8:13 state:D stack:22928 pid:8443 tgid:8443 ppid:2 flags:0x00004000 [ 1664.970817][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 1664.976863][ T30] Call Trace: [ 1664.980149][ T30] [ 1665.000813][ T30] __schedule+0xe58/0x5ad0 [ 1665.005339][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1665.010554][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1665.050832][ T30] ? __pfx___schedule+0x10/0x10 [ 1665.055751][ T30] ? schedule+0x298/0x350 [ 1665.060099][ T30] ? __pfx_lock_release+0x10/0x10 [ 1665.090826][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1665.096348][ T30] ? lock_acquire+0x2f/0xb0 [ 1665.120840][ T30] ? schedule+0x1fd/0x350 [ 1665.125234][ T30] schedule+0xe7/0x350 [ 1665.129332][ T30] schedule_preempt_disabled+0x13/0x30 [ 1665.160853][ T30] __mutex_lock+0x62b/0xa60 [ 1665.165423][ T30] ? addrconf_dad_work+0xcf/0x14d0 [ 1665.170547][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1665.210845][ T30] ? lock_acquire+0x2f/0xb0 [ 1665.215406][ T30] ? try_to_wake_up+0xb6/0x1490 [ 1665.220275][ T30] ? addrconf_dad_work+0xcf/0x14d0 [ 1665.250837][ T30] ? rtnl_lock+0x9/0x20 [ 1665.255043][ T30] addrconf_dad_work+0xcf/0x14d0 [ 1665.259994][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1665.300840][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1665.306353][ T30] ? process_one_work+0x921/0x1ba0 [ 1665.330866][ T30] ? lock_acquire+0x2f/0xb0 [ 1665.335422][ T30] ? process_one_work+0x921/0x1ba0 [ 1665.340551][ T30] process_one_work+0x9c5/0x1ba0 [ 1665.370829][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1665.376271][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1665.410809][ T30] ? rcu_is_watching+0x12/0xc0 [ 1665.415641][ T30] ? assign_work+0x1a0/0x250 [ 1665.420247][ T30] worker_thread+0x6c8/0xf00 [ 1665.450826][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1665.456001][ T30] kthread+0x2c1/0x3a0 [ 1665.460111][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1665.490827][ T30] ? __pfx_kthread+0x10/0x10 [ 1665.495478][ T30] ret_from_fork+0x45/0x80 [ 1665.499912][ T30] ? __pfx_kthread+0x10/0x10 [ 1665.530846][ T30] ret_from_fork_asm+0x1a/0x30 [ 1665.535692][ T30] [ 1665.538746][ T30] INFO: task syz.4.4647:22782 blocked for more than 157 seconds. [ 1665.580852][ T30] Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1665.588529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1665.630814][ T30] task:syz.4.4647 state:D stack:26336 pid:22782 tgid:22781 ppid:15707 flags:0x00000004 [ 1665.660856][ T30] Call Trace: [ 1665.664188][ T30] [ 1665.667125][ T30] __schedule+0xe58/0x5ad0 [ 1665.700831][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1665.706095][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1665.730848][ T30] ? __pfx___schedule+0x10/0x10 [ 1665.735775][ T30] ? schedule+0x298/0x350 [ 1665.740128][ T30] ? __pfx_lock_release+0x10/0x10 [ 1665.770833][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1665.776349][ T30] ? lock_acquire+0x2f/0xb0 [ 1665.800876][ T30] ? schedule+0x1fd/0x350 [ 1665.805295][ T30] schedule+0xe7/0x350 [ 1665.809394][ T30] schedule_preempt_disabled+0x13/0x30 [ 1665.840845][ T30] __mutex_lock+0x62b/0xa60 [ 1665.845421][ T30] ? tcx_prog_query+0xb2/0x150 [ 1665.850204][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1665.880913][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1665.886186][ T30] ? lock_acquire+0x2f/0xb0 [ 1665.890707][ T30] ? __might_fault+0xe3/0x190 [ 1665.930842][ T30] ? cap_capable+0x1cf/0x240 [ 1665.935522][ T30] ? tcx_prog_query+0xb2/0x150 [ 1665.940312][ T30] tcx_prog_query+0xb2/0x150 [ 1665.970842][ T30] __sys_bpf+0x2318/0x49c0 [ 1665.975330][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 1665.980109][ T30] ? find_held_lock+0x2d/0x110 [ 1666.010850][ T30] ? bpf_trace_run2+0x266/0x590 [ 1666.015766][ T30] ? __pfx_lock_release+0x10/0x10 [ 1666.040846][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1666.046135][ T30] ? __pfx_lock_release+0x10/0x10 [ 1666.070814][ T30] ? lock_acquire+0x2f/0xb0 [ 1666.075389][ T30] __x64_sys_bpf+0x78/0xc0 [ 1666.079841][ T30] do_syscall_64+0xcd/0x250 [ 1666.110836][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.116796][ T30] RIP: 0033:0x7f0562385d19 [ 1666.140831][ T30] RSP: 002b:00007f05630d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1666.149314][ T30] RAX: ffffffffffffffda RBX: 00007f0562575fa0 RCX: 00007f0562385d19 [ 1666.200952][ T30] RDX: 0000000000000040 RSI: 0000000020001cc0 RDI: 0000000000000010 [ 1666.209003][ T30] RBP: 00007f0562401a20 R08: 0000000000000000 R09: 0000000000000000 [ 1666.240890][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1666.248919][ T30] R13: 0000000000000000 R14: 00007f0562575fa0 R15: 00007fff7289abd8 [ 1666.300852][ T30] [ 1666.303930][ T30] [ 1666.303930][ T30] Showing all locks held in the system: [ 1667.050831][ T30] 1 lock held by khungtaskd/30: [ 1667.055741][ T30] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1667.100849][ T30] 3 locks held by kworker/1:2/968: [ 1667.105997][ T30] #0: ffff88801b079948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1667.180859][ T30] #1: ffffc90004357d80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1667.220856][ T30] #2: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x84/0x1130 [ 1667.230618][ T30] 1 lock held by udevd/5190: [ 1667.270834][ T30] 2 locks held by getty/5578: [ 1667.275557][ T30] #0: ffff8880322770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1667.320864][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1667.370838][ T30] 3 locks held by kworker/u8:9/5921: [ 1667.376172][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1667.440868][ T30] #1: ffffc90002e67d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1667.480867][ T30] #2: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1667.490003][ T30] 3 locks held by kworker/u8:13/8443: [ 1667.530834][ T30] #0: ffff88814d673948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1667.570823][ T30] #1: ffffc9000c087d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1667.640839][ T30] #2: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xcf/0x14d0 [ 1667.650322][ T30] 1 lock held by syz-executor/15707: [ 1667.690838][ T30] 1 lock held by syz-executor/16336: [ 1667.696178][ T30] 2 locks held by syz.2.4644/22778: [ 1667.730859][ T30] #0: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1667.739909][ T30] #1: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 1667.810833][ T30] 1 lock held by syz.4.4647/22781: [ 1667.815996][ T30] 1 lock held by syz.4.4647/22782: [ 1667.850848][ T30] #0: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: tcx_prog_query+0xb2/0x150 [ 1667.859992][ T30] [ 1667.890827][ T30] ============================================= [ 1667.890827][ T30] [ 1667.899425][ T30] NMI backtrace for cpu 1 [ 1667.903758][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1667.914273][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1667.924353][ T30] Call Trace: [ 1667.927636][ T30] [ 1667.930572][ T30] dump_stack_lvl+0x116/0x1f0 [ 1667.935266][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1667.940214][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1667.946206][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1667.952203][ T30] watchdog+0xf14/0x1240 [ 1667.956476][ T30] ? __pfx_watchdog+0x10/0x10 [ 1667.961170][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1667.966384][ T30] ? __kthread_parkme+0x148/0x220 [ 1667.971523][ T30] ? __pfx_watchdog+0x10/0x10 [ 1667.976216][ T30] kthread+0x2c1/0x3a0 [ 1667.980303][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1667.985517][ T30] ? __pfx_kthread+0x10/0x10 [ 1667.990123][ T30] ret_from_fork+0x45/0x80 [ 1667.994555][ T30] ? __pfx_kthread+0x10/0x10 [ 1667.999172][ T30] ret_from_fork_asm+0x1a/0x30 [ 1668.003973][ T30] [ 1668.007160][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1668.012402][ C0] NMI backtrace for cpu 0 [ 1668.012414][ C0] CPU: 0 UID: 101 PID: 5483 Comm: dhcpcd Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1668.012438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1668.012449][ C0] RIP: 0010:__module_address+0xb/0x2d0 [ 1668.012478][ C0] Code: 00 8b 74 24 04 eb dd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 3b 3d b5 f3 5b 0c <0f> 82 8a 01 00 00 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec [ 1668.012497][ C0] RSP: 0018:ffffc900033f7790 EFLAGS: 00000093 [ 1668.012513][ C0] RAX: 0000000000000003 RBX: ffffffffa000080d RCX: 1ffffffff3509314 [ 1668.012526][ C0] RDX: 0000000000000000 RSI: ffffffff8bd1e7e0 RDI: ffffffffa000080d [ 1668.012540][ C0] RBP: ffffffffa000080d R08: 0000000000000007 R09: ffffffffff600000 [ 1668.012553][ C0] R10: ffffffffa0000000 R11: 000000000000a592 R12: ffffffff8185d1f0 [ 1668.012566][ C0] R13: ffffc900033f78b8 R14: 0000000000000000 R15: ffff88807ae48000 [ 1668.012580][ C0] FS: 00007ff22cf25740(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1668.012599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.012613][ C0] CR2: 00007fff7289a400 CR3: 00000000360ee000 CR4: 00000000003526f0 [ 1668.012626][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1668.012638][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.012650][ C0] Call Trace: [ 1668.012656][ C0] [ 1668.012663][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1668.012684][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1668.012704][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1668.012725][ C0] ? __module_address+0xb/0x2d0 [ 1668.012747][ C0] ? default_do_nmi+0x6a/0x160 [ 1668.012766][ C0] ? exc_nmi+0x170/0x1e0 [ 1668.012783][ C0] ? end_repeat_nmi+0xf/0x53 [ 1668.012810][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1668.012839][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.012855][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.012870][ C0] ? 0xffffffffff600000 [ 1668.012884][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.012899][ C0] ? __module_address+0xb/0x2d0 [ 1668.012922][ C0] ? __module_address+0xb/0x2d0 [ 1668.012944][ C0] ? __module_address+0xb/0x2d0 [ 1668.012966][ C0] [ 1668.012972][ C0] [ 1668.012978][ C0] is_module_text_address+0x1d/0x160 [ 1668.013001][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.013016][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1668.013045][ C0] kernel_text_address+0x81/0x100 [ 1668.013067][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.013081][ C0] __kernel_text_address+0xd/0x40 [ 1668.013102][ C0] unwind_get_return_address+0x59/0xa0 [ 1668.013125][ C0] arch_stack_walk+0xa7/0x100 [ 1668.013152][ C0] ? bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.013169][ C0] stack_trace_save+0x95/0xd0 [ 1668.013197][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1668.013225][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1668.013247][ C0] kasan_save_stack+0x33/0x60 [ 1668.013268][ C0] ? kasan_save_stack+0x33/0x60 [ 1668.013293][ C0] ? kasan_save_track+0x14/0x30 [ 1668.013312][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1668.013334][ C0] ? kmem_cache_alloc_noprof+0x226/0x3d0 [ 1668.013357][ C0] ? __send_signal_locked+0x159/0x12c0 [ 1668.013377][ C0] ? group_send_sig_info+0x2aa/0x300 [ 1668.013401][ C0] ? bpf_send_signal_common+0x3d3/0x530 [ 1668.013419][ C0] ? bpf_send_signal+0x1d/0x30 [ 1668.013454][ C0] kasan_save_track+0x14/0x30 [ 1668.013474][ C0] __kasan_slab_alloc+0x89/0x90 [ 1668.013496][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 1668.013518][ C0] ? __send_signal_locked+0x159/0x12c0 [ 1668.013539][ C0] ? sig_get_ucounts+0x1c0/0x5b0 [ 1668.013557][ C0] __send_signal_locked+0x159/0x12c0 [ 1668.013580][ C0] group_send_sig_info+0x2aa/0x300 [ 1668.013605][ C0] ? __pfx_group_send_sig_info+0x10/0x10 [ 1668.013635][ C0] bpf_send_signal_common+0x3d3/0x530 [ 1668.013654][ C0] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1668.013676][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1668.013705][ C0] ? bpf_trace_run2+0x1c2/0x590 [ 1668.013726][ C0] bpf_send_signal+0x1d/0x30 [ 1668.013743][ C0] bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 1668.013759][ C0] bpf_trace_run2+0x231/0x590 [ 1668.013777][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1668.013805][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1668.013825][ C0] ? lock_acquire+0x2f/0xb0 [ 1668.013845][ C0] ? __might_fault+0xe3/0x190 [ 1668.013872][ C0] __bpf_trace_sys_enter+0x37/0x60 [ 1668.013912][ C0] syscall_trace_enter+0x1b7/0x260 [ 1668.013937][ C0] do_syscall_64+0x1ee/0x250 [ 1668.013962][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.013987][ C0] RIP: 0033:0x7ff22cf5fad9 [ 1668.014001][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <48> 81 ec b8 00 00 00 41 89 f9 48 89 f0 49 89 d0 48 85 f6 0f 84 be [ 1668.014018][ C0] RSP: 002b:00007ffe32145580 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 1668.014036][ C0] RAX: ffffffffffffffda RBX: 000056310798fee0 RCX: 00007ff22cf5fad9 [ 1668.014049][ C0] RDX: 00005630e7f58610 RSI: 00007ffe321456b0 RDI: 0000000000000011 [ 1668.014062][ C0] RBP: 00007ffe321465d0 R08: 0000000000000008 R09: 00007ff22d0db000 [ 1668.014074][ C0] R10: 00007ffe321465d0 R11: 0000000000000293 R12: 00007ffe321462c8 [ 1668.014087][ C0] R13: 00005630e7f58610 R14: 00000000ffffffff R15: 0000000000000000 [ 1668.014106][ C0] [ 1669.171232][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.177556][ T1292] ieee802154 phy1 wpan1: encryption failed: -22