last executing test programs: 9.062372184s ago: executing program 3 (id=2197): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x110) getpid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x66, 0xb}]}, 0x10) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={"c467b883b4b2c597c3c27fd16f348e5fa553805a7d48036535e0ec821a76bd1ba148daaaff10b33c03b09688af41dc349665db532bd99683fb1ab31efc9250fa7882b91c9afca084a6904a475d430b2041f26e051eb3edf02d5282c79bef1655c35782b131461cdc62cbaffd9ed45aa64bd33cd3b4ccb4f30a1554986d5d0b71128a5b0a21d776d73bb6f9ef6a3def008f73a272400ea71eca582e5f8952a63f0d9fa2ad6e6a13448ae3a63d7dfe8fd8d3e69277ddff563a53afe380cbd8410d276f1bcfc0b2d56d4ec7dae0c14d0b5c268aae7845ba633e2006a360f72465a859c1d314d9372f2cd5734990ae3510fb855bfd5156d5f21d72156ba5a9de914d8639e305a05c127122103b59b5f82d2a82ba8ab6f1b678c0c3329b61b5d0a77fe1ac79a6daffbf4fafb536ef7d90cde846f51f64b58a28e3f34d1c370e70cb95e0ea6a9de0ca4aff44557cd4b9d8f7c6c76d90b5b57b9661bfbb383632a2bf89f70a87d669f51903c04cc9576cca9556b703379a45d52a65e427889d7556ed0b057154be6a6f95c78e03cb0afb5336c3da54c3ef06001488a3d8ce21e5b6c440b5c6ef5a4f5f7fdeecc52ba9695b06b38e20abed372afbd6f371b52146cf7fb8cb188f4e3b7c73ae2fe785f9953690a681c30be5f8d45ca6e6e2638a0ec2b353e6b37f7ab0c93f34b4c334f68f15b9476b40f7ecade2aa57ccf5ddec999b990b9b6e0aeacd8a6477e502a8a202ec7bad030000003a7249fdab39a9368a8cafdf87cd6ae485c4bbd0100ad4e2d6a1186bcbd2854f95a241cc4eeec67d397fdd6f94786eded36e4e811c5f5235e892c4588721438aabe14611b5e9ac053e268bbc2e7ff044687b1259243f8da86bc00165dd7764041e6d5b4fe4accfe3cd2ae6379f92ae37aaf9122d167bb037de518a8370e0c5809700f390e24122c79c4b4eaf4694715eec8dfcba19ee202b64f0d7063224cb0e0e3d50ad306f8cc69980b1c90b10d1dd3453065da2a36f53f5a075ca8b07ec431bef6f7ec3837ff256a0a8a230ddcd2dbc6fab975ddfd2cec7fdc343c68926c08958e80a8de323bd483654c7e60dee6656c126343b73325aeb29746df12de5e8ea24c5b827c983737a43faa31d6b3b8fa50fe098c5861a6a8496e9d66a3545b09fe802dbd6b36bcb073c49722d9ee65f87c5cf173f987e74b2497b62ca92c9c4b4c68cc1978804fc147ae04b916b26e4e6be536921f14361fd6b510d76b936e2fbe03cd68cc0a043781240e311561d3e04ddbc0b041a9c4c749b122c2cbff764c1d3dc057b33b2bea8aae76b6ddb7ea64ae2ff38e65e15db9f9412151cd64927d982eebc76512452ce2479ce10b9fa3504274011fafac6f9912ed769cd42ab17b25eb9eb852a40e4a9e2ac7b3ce0c656b3b0b7fd818e8d7b458d6482f6f4ccbba5d0f74f702b00b7848c3d78"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b7"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8.793939265s ago: executing program 0 (id=2205): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x1, 0x0, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 7.064593181s ago: executing program 0 (id=2208): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x46c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x12, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 6.679204604s ago: executing program 3 (id=2210): socket$inet6(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r4, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x42202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r6 = getpid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x32) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2002000) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 6.629919347s ago: executing program 0 (id=2211): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0204fd020a0000000000000000002000030006000000000002004e23ac14142a00000000000000000200010000000000000009fd00000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 6.540346168s ago: executing program 0 (id=2212): openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x100000000, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00'}) sendmsg(r1, &(0x7f0000000380)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="ab63e1e99d99e6c6e06d76c4f4e56b682c6c5136935c7ccb5d681545684dd81b6abe9f92b6c9af9cb84a39c801a2836b33", 0x31}, {&(0x7f0000000280)="de188c1d9a3fa5ecf7a1260016c5d4f91369701e50", 0x15}, {&(0x7f0000000600)="39acbed07782779bf0a38eadbf84f2d7c342b30a0d5bfe58dde3aa9112648c90694e68f397b6bf809276ce4bbb832e998f67f02f84fc5f8322b5650a969c645382f0734994e20ce4d7139d650876d7d74cd32066f58d23f99792a43f070a32e76b9ac43a160e75e10ccf0e5cba7917ee64065e6cdf92277b8a4039bf99671fe329a2c48724f4f98b073cf9150c5ca26cafee97e2cc1c6723fe37594bd97a5fa774e0a8eecbd6639812e83df2f97fe40769b23502adc8891a86d485921d70a3138960b1cc", 0xc4}], 0x3, &(0x7f0000000400)=[{0xc0, 0x10c, 0x2, "d99193b743f3084ea71b15a4d33b6422afc825bcf62aebc36ffd294d3dfc10ed5659c700404a4fe08addc97fc5576414b8ad7a1b762220815329a88accb7cc4dd12335911821179b87580041deb67ac2efaaf7a28d27ea1ebbf8167d193878c7f36bad272ec66adfcf456eb1924108bafdd77e148bdf3750308ab0e76a8ee0c79ff5188d5d91e83622e789cda0174a76e7cf4df3cbcc7db76471c95437cb94cb77f7301a2b77eb5639abb4dcd1"}], 0xc0}, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0xb5, 0xe1, 0x45}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, 0x0}, 0x20000884) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x3c}}]}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) 4.528538204s ago: executing program 4 (id=2225): r0 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') read$FUSE(r5, &(0x7f0000002e40)={0x2020}, 0x2020) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x7, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000800), 0x9423, 0x2) msgget$private(0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x3f, &(0x7f00000008c0)=0x1, 0x4) r7 = socket(0x29, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) 3.784639571s ago: executing program 3 (id=2226): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname(r0, 0x0, &(0x7f0000000140)) socket(0x400000000010, 0x3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) listen(0xffffffffffffffff, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.751780417s ago: executing program 2 (id=2228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x21, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) 3.702157047s ago: executing program 2 (id=2229): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216001c0000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 3.552091742s ago: executing program 4 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)={0x10, 0x38, 0x1, 0x70bd29, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f00000006c0)=[@rights={{0x10}}], 0x10, 0x1}, 0x40004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xb, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0xeaf2, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x649, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x9, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8, 0x1, 0x35a], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x4, 0x5, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xe4, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4004, 0x54fe12da, 0xbf, 0x4, 0x4, 0x400000, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0xfffffffa], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x46, 0x10000000, 0x5, 0xce7, 0x9, 0x8, 0x7, 0x5, 0x3, 0x104, 0x7ffffffe, 0x2, 0x7fff, 0x80, 0xa620, 0x2, 0x5, 0x0, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x2, 0xffffffff, 0x3, 0x3, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x106, 0x1, 0x4, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x2, 0x672, 0x6c0b, 0x0, 0x2, 0x5, 0x81, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r7, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) 3.492627852s ago: executing program 0 (id=2231): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00a4ffffff0000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000"], 0x5000) 2.842002354s ago: executing program 1 (id=2232): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x4, 0xfffffffd) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.780988489s ago: executing program 2 (id=2233): socket(0x15, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) sched_getaffinity(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) 2.351525942s ago: executing program 0 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) 1.898977579s ago: executing program 4 (id=2235): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2d, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r6 = msgget$private(0x0, 0x420) msgsnd(r6, 0x0, 0x8, 0x0) msgrcv(r6, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_RMID(r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x4, 0xffffffffffffffc0}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000007f67a931b40000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000103f36f1ddf0dd23c98b076274000000005600000000c0a010300000000000000000700ff060000020073797a31000000000900010073797a300000"], 0xf0}, 0x1, 0x0, 0x0, 0x40c88d1}, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x6, 0x2, 0x2045, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x70}}, 0x4000010) read$FUSE(r3, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x40000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000000a00,max_read=0x000000000000365d,max_read=0x0000000000000009,blksize=0x0000000000000000,allow_other,blksize=0x0000000000000400,default_permissions,max_read=0x000000000000080e,allow_other,euid=', @ANYRESDEC=r11, @ANYBLOB=',fscontext=unconfined_u,dont_hash,fscontext=system_u,fsname=ib,euid<', @ANYRESDEC=0x0, @ANYBLOB=',smaMkfsfloor=&,a=0x0000000000000005,\x00'/50]) fallocate(r0, 0x0, 0x0, 0x1001f0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x1f3, 0x10, &(0x7f0000000080), 0x6ad907de10565d2f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1.75090624s ago: executing program 2 (id=2236): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file1/../file0\x00', &(0x7f0000000180), 0x1800, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0xfffffffffffffffd}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xf6}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201", 0xd6}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333a951cb48b75ac346", 0xec}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 1.701299173s ago: executing program 1 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x100, @local}}]}]}]}, 0x64}, 0x1, 0xffc3, 0x0, 0x4000080}, 0x0) 1.658848746s ago: executing program 3 (id=2238): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) socket$inet(0x2, 0x80000, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x80, 0x7}) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac14140f}, "0000b508000000"}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r2, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.577060616s ago: executing program 1 (id=2239): io_setup(0x7, &(0x7f0000000280)) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0d3fb1252ae0536a", "1ee09d57791dfad6fd4d920da1c3641f", "d1f83d98", "6c3152ef765092f2"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000380)={0x11}, 0x8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000003c0)) 1.104770994s ago: executing program 3 (id=2240): io_setup(0x7, &(0x7f0000000280)) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0d3fb1252ae0536a", "1ee09d57791dfad6fd4d920da1c3641f", "d1f83d98", "6c3152ef765092f2"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000380)={0x11}, 0x8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000003c0)) 751.161589ms ago: executing program 1 (id=2241): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) 700.99928ms ago: executing program 1 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fe0200ff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = getgid() r4 = openat2(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x101140, 0x1b, 0x3}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0x0, 0xee01, r3, 0x38, 0x2}, 0xe00000, 0x1, 0x80000001, 0x8, 0x0, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4000, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}], [{@obj_role={'obj_role', 0x3d, '\\'}}, {@fowner_gt={'fowner>', r6}}, {@smackfshat={'smackfshat', 0x3d, '-J'}}]}}) 638.00967ms ago: executing program 4 (id=2243): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x24}, 0x1, 0x9e}, 0xc000) 625.688974ms ago: executing program 1 (id=2244): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x3f00}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 540.154072ms ago: executing program 4 (id=2245): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 539.605995ms ago: executing program 2 (id=2246): r0 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xe0, 0xe0, 0x200, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xff], 'veth0_to_bridge\x00', 'netdevsim0\x00', {}, {}, 0xac, 0x72, 0x6, 0x48}, 0x0, 0xa8, 0xe0, 0x300000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0x2, 0x1, 0x5}, {0x2, 0x0, 0x4}, 0x7, 0xdb}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0xb1e}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x466, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 495.952964ms ago: executing program 3 (id=2247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x4, 0xfffffffd) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 467.990515ms ago: executing program 4 (id=2248): io_setup(0x7, &(0x7f0000000280)) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0d3fb1252ae0536a", "1ee09d57791dfad6fd4d920da1c3641f", "d1f83d98", "6c3152ef765092f2"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 0s ago: executing program 2 (id=2249): syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x25dfdbfd, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x300, 0x0, 0x0, 0x0, 0x8000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x4004084) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Using ep0 maxpacket: 16 [ 420.775372][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.790402][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 420.800317][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.812083][ T5867] usb 3-1: device descriptor read/64, error -71 [ 420.821958][ T10] usb 2-1: config 0 descriptor?? [ 421.052743][ T5867] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 421.149936][T14755] nvme_fabrics: missing parameter 'transport=%s' [ 421.172775][T14755] nvme_fabrics: missing parameter 'nqn=%s' [ 421.195291][ T5867] usb 3-1: device descriptor read/64, error -71 [ 421.249324][ T10] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 421.346170][ T5867] usb usb3-port1: attempt power cycle [ 421.625013][T14775] 9pnet_fd: Insufficient options for proto=fd [ 421.726954][ T5818] usb 2-1: USB disconnect, device number 62 [ 421.782567][ T5867] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 421.816020][ T5867] usb 3-1: device descriptor read/8, error -71 [ 421.839742][T14798] 9pnet_fd: Insufficient options for proto=fd [ 421.865313][T14800] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp' [ 421.949720][T14800] CPU: 0 UID: 0 PID: 14800 Comm: syz.3.1636 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 421.949751][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.949760][T14800] Call Trace: [ 421.949778][T14800] [ 421.949785][T14800] dump_stack_lvl+0x16c/0x1f0 [ 421.949819][T14800] sysfs_warn_dup+0x7f/0xa0 [ 421.949852][T14800] sysfs_do_create_link_sd+0x124/0x140 [ 421.949869][T14800] sysfs_create_link+0x61/0xc0 [ 421.949886][T14800] device_add+0x62c/0x1a70 [ 421.949920][T14800] ? __pfx_device_add+0x10/0x10 [ 421.949941][T14800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.949970][T14800] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 421.949996][T14800] wiphy_register+0x1c9c/0x2850 [ 421.950019][T14800] ? netdev_run_todo+0x864/0x1320 [ 421.950048][T14800] ? __dev_printk+0x220/0x270 [ 421.950068][T14800] ? __pfx_wiphy_register+0x10/0x10 [ 421.950093][T14800] ieee80211_register_hw+0x2432/0x4020 [ 421.950119][T14800] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 421.950138][T14800] ? find_held_lock+0x2b/0x80 [ 421.950159][T14800] ? __asan_memset+0x23/0x50 [ 421.950184][T14800] ? __hrtimer_init+0x106/0x2c0 [ 421.950212][T14800] mac80211_hwsim_new_radio+0x3041/0x54f0 [ 421.950249][T14800] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 421.950272][T14800] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 421.950296][T14800] ? __asan_memcpy+0x3c/0x60 [ 421.950319][T14800] hwsim_new_radio_nl+0xb51/0x12c0 [ 421.950340][T14800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 421.950368][T14800] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 421.950397][T14800] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 421.950427][T14800] genl_family_rcv_msg_doit+0x206/0x2f0 [ 421.950448][T14800] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.950481][T14800] ? bpf_lsm_capable+0x9/0x10 [ 421.950501][T14800] ? security_capable+0x7e/0x260 [ 421.950524][T14800] ? ns_capable+0xd7/0x110 [ 421.950544][T14800] genl_rcv_msg+0x55c/0x800 [ 421.950571][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.950595][T14800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 421.950619][T14800] ? __lock_acquire+0xaa4/0x1ba0 [ 421.950644][T14800] netlink_rcv_skb+0x16a/0x440 [ 421.950676][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.950703][T14800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.950732][T14800] ? __pfx_down_read+0x10/0x10 [ 421.950756][T14800] ? netlink_deliver_tap+0x1ae/0xd30 [ 421.950784][T14800] genl_rcv+0x28/0x40 [ 421.950805][T14800] netlink_unicast+0x53a/0x7f0 [ 421.950824][T14800] ? __pfx_netlink_unicast+0x10/0x10 [ 421.950847][T14800] netlink_sendmsg+0x8da/0xd70 [ 421.950869][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.950895][T14800] ____sys_sendmsg+0xa8d/0xc60 [ 421.950913][T14800] ? copy_msghdr_from_user+0x10a/0x160 [ 421.950935][T14800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.950960][T14800] ___sys_sendmsg+0x134/0x1d0 [ 421.950984][T14800] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.951029][T14800] __sys_sendmsg+0x16d/0x220 [ 421.951053][T14800] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.951075][T14800] ? __x64_sys_futex+0x1e0/0x4c0 [ 421.951104][T14800] ? rcu_is_watching+0x12/0xc0 [ 421.951129][T14800] do_syscall_64+0xcd/0x260 [ 421.951153][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.951172][T14800] RIP: 0033:0x7f8959b8d169 [ 421.951189][T14800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.951207][T14800] RSP: 002b:00007f895aa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.951226][T14800] RAX: ffffffffffffffda RBX: 00007f8959da5fa0 RCX: 00007f8959b8d169 [ 421.951238][T14800] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 421.951248][T14800] RBP: 00007f8959c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 421.951259][T14800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.951269][T14800] R13: 0000000000000000 R14: 00007f8959da5fa0 R15: 00007ffd0c8c09a8 [ 421.951289][T14800] [ 422.357655][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 422.357691][ T30] audit: type=1400 audit(1742966561.598:1520): avc: denied { connect } for pid=14796 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 422.622075][ T5867] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 422.642498][ T5867] usb 3-1: device descriptor read/8, error -71 [ 422.764083][ T5867] usb usb3-port1: unable to enumerate USB device [ 423.111939][T14826] nvme_fabrics: missing parameter 'transport=%s' [ 423.118402][T14826] nvme_fabrics: missing parameter 'nqn=%s' [ 423.271669][ T95] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 423.332451][ T5867] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 423.527526][ T95] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.537028][T14851] 9pnet_fd: Insufficient options for proto=fd [ 423.545686][ T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.551302][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 423.560137][ T95] usb 2-1: Product: syz [ 423.573337][ T95] usb 2-1: Manufacturer: syz [ 423.579964][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.584649][ T95] usb 2-1: SerialNumber: syz [ 423.611510][ T5867] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 423.629188][ T95] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.651065][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.671908][ T5867] usb 5-1: config 0 descriptor?? [ 423.677673][ T52] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.103466][ T5867] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 424.124161][ T30] audit: type=1400 audit(1742966563.358:1521): avc: denied { getopt } for pid=14886 comm="syz.2.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 424.163205][ T95] usb 2-1: USB disconnect, device number 63 [ 424.252081][T14905] overlayfs: missing 'lowerdir' [ 424.607291][ T5867] usb 5-1: USB disconnect, device number 29 [ 424.902077][ T52] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 426.624020][ T52] ath9k_htc: Failed to initialize the device [ 426.950729][ T95] usb 2-1: ath9k_htc: USB layer deinitialized [ 427.293742][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 427.303154][T14944] tipc: Started in network mode [ 427.309520][T14944] tipc: Node identity 61616161, cluster identity 5 [ 427.316109][T14944] tipc: Node number set to 1633771873 [ 427.849484][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 427.869426][ T30] audit: type=1326 audit(1742966567.120:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.0.1664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37b2f8d169 code=0x0 [ 427.892320][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.019184][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 428.025774][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 428.035943][ T9] usb 3-1: config 0 has no interface number 1 [ 428.042521][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.054246][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 428.066194][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 428.077905][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 428.088782][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.102243][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 428.115460][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 428.130107][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 428.147886][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 428.157491][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.165845][ T9] usb 3-1: Product: syz [ 428.170201][ T9] usb 3-1: Manufacturer: syz [ 428.175002][ T9] usb 3-1: SerialNumber: syz [ 428.253109][ T9] usb 3-1: config 0 descriptor?? [ 428.262645][T14947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.273361][ T5867] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 428.347346][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.435919][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.475482][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 428.505567][ T5867] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 428.531038][ T5867] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 428.540273][ T5867] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 428.550809][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 428.567967][ T5867] usb 2-1: Product: syz [ 428.575063][ T5867] usb 2-1: Manufacturer: syz [ 428.586615][ T5867] r8152-cfgselector 2-1: Unknown version 0x0000 [ 428.600011][ T5867] r8152-cfgselector 2-1: config 0 descriptor?? [ 428.612713][ T5867] cdc_acm 2-1:0.0: Zero length descriptor references [ 428.621461][ T5867] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 428.633223][ T95] usb 3-1: USB disconnect, device number 59 [ 428.744297][T15023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=15023 comm=syz.0.1670 [ 428.762327][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 428.779821][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 428.976982][ T30] audit: type=1400 audit(1742966568.221:1523): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 429.241715][T15041] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 430.098251][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 430.158133][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 430.378327][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 430.389960][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.402373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 430.414443][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.427493][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.440976][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.458914][ T9] usb 3-1: config 0 descriptor?? [ 430.465096][T15045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 430.473915][ T9] hub 3-1:0.0: USB hub found [ 430.483082][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 430.617949][ T5869] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 430.640527][T15079] could not allocate digest TFM handle blake2s-160-x86 [ 430.676360][T15045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1676'. [ 430.693178][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 430.767868][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 430.778711][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 430.789479][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.797525][ T5869] usb 5-1: Product: syz [ 430.802258][ T5869] usb 5-1: Manufacturer: syz [ 430.806964][ T5869] usb 5-1: SerialNumber: syz [ 430.808322][ T30] audit: type=1400 audit(1742966570.052:1524): avc: denied { execute } for pid=15089 comm="syz.0.1686" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 430.816687][ T5869] usb 5-1: config 0 descriptor?? [ 430.858747][ T5869] gspca_main: se401-2.14.0 probing 047d:5003 [ 431.072677][ T10] r8152-cfgselector 2-1: USB disconnect, device number 64 [ 431.104235][ T9] hid-generic 0003:046D:C314.0015: item fetching failed at offset 2/3 [ 431.113157][ T9] hid-generic 0003:046D:C314.0015: probe with driver hid-generic failed with error -22 [ 431.430679][ T24] usb 3-1: USB disconnect, device number 60 [ 431.877952][ T5869] gspca_se401: read req failed req 0x06 error -19 [ 431.908273][ T5869] usb 5-1: USB disconnect, device number 30 [ 432.035511][ T30] audit: type=1400 audit(1742966571.272:1525): avc: denied { append } for pid=15144 comm="syz.2.1695" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 432.204645][ T30] audit: type=1400 audit(1742966571.443:1526): avc: denied { append } for pid=15149 comm="syz.2.1697" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 432.496962][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 432.572772][T15162] siw: device registration error -23 [ 433.136677][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 433.142713][ T24] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 433.162910][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 433.224715][ T24] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 433.240837][ T24] usb 5-1: Product: syz [ 433.251168][ T24] usb 5-1: Manufacturer: syz [ 433.273702][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 433.281208][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 433.296949][ T24] cdc_acm 5-1:0.0: Zero length descriptor references [ 433.303699][ T24] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 433.519112][T15179] syz.2.1703: attempt to access beyond end of device [ 433.519112][T15179] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 433.537093][T15179] hfsplus: unable to find HFS+ superblock [ 433.576388][ T5869] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 434.426002][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 434.432654][ T5869] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 434.443545][ T5869] usb 2-1: config 0 has no interface number 0 [ 434.457942][ T5869] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 434.511914][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.537907][T15184] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 434.582922][ T5869] usb 2-1: Product: syz [ 434.604681][ T5869] usb 2-1: Manufacturer: syz [ 434.680807][ T5869] usb 2-1: SerialNumber: syz [ 434.792110][ T5869] usb 2-1: config 0 descriptor?? [ 434.967391][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 434.976825][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 435.120009][T15191] xt_hashlimit: size too large, truncated to 1048576 [ 435.928505][ T52] r8152-cfgselector 5-1: USB disconnect, device number 31 [ 436.436232][ T10] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 436.475222][ T5869] usb 2-1: USB disconnect, device number 65 [ 436.577219][ T10] usb 4-1: device descriptor read/64, error -71 [ 436.614942][ T52] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 436.728888][ T30] audit: type=1400 audit(1742966575.975:1527): avc: denied { read } for pid=15246 comm="syz.0.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 436.787219][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 436.799216][ T52] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 436.808713][ T52] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 436.814882][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 436.816815][ T52] usb 5-1: Manufacturer: syz [ 436.830913][ T52] usb 5-1: config 0 descriptor?? [ 436.837644][T15232] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 436.954705][ T10] usb 4-1: device descriptor read/64, error -71 [ 437.067036][ T10] usb usb4-port1: attempt power cycle [ 437.364602][ T52] cougar 0003:060B:700A.0016: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 437.425427][ T10] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 437.455075][ T10] usb 4-1: device descriptor read/8, error -71 [ 437.566199][ T5904] usb 5-1: USB disconnect, device number 32 [ 437.694735][ T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 437.759861][ T10] usb 4-1: device descriptor read/8, error -71 [ 437.884649][ T10] usb usb4-port1: unable to enumerate USB device [ 438.551980][T15304] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp' [ 438.564114][T15304] CPU: 1 UID: 0 PID: 15304 Comm: syz.1.1728 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 438.564145][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.564158][T15304] Call Trace: [ 438.564165][T15304] [ 438.564172][T15304] dump_stack_lvl+0x16c/0x1f0 [ 438.564207][T15304] sysfs_warn_dup+0x7f/0xa0 [ 438.564235][T15304] sysfs_do_create_link_sd+0x124/0x140 [ 438.564256][T15304] sysfs_create_link+0x61/0xc0 [ 438.564271][T15304] device_add+0x62c/0x1a70 [ 438.564296][T15304] ? __pfx_device_add+0x10/0x10 [ 438.564315][T15304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.564339][T15304] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 438.564361][T15304] wiphy_register+0x1c9c/0x2850 [ 438.564385][T15304] ? netdev_run_todo+0x864/0x1320 [ 438.564416][T15304] ? __dev_printk+0x220/0x270 [ 438.564436][T15304] ? __pfx_wiphy_register+0x10/0x10 [ 438.564468][T15304] ieee80211_register_hw+0x2432/0x4020 [ 438.564496][T15304] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 438.564520][T15304] ? find_held_lock+0x2b/0x80 [ 438.564539][T15304] ? __asan_memset+0x23/0x50 [ 438.564563][T15304] ? __hrtimer_init+0x106/0x2c0 [ 438.564585][T15304] mac80211_hwsim_new_radio+0x3041/0x54f0 [ 438.564623][T15304] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 438.564647][T15304] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 438.564673][T15304] ? __asan_memcpy+0x3c/0x60 [ 438.564700][T15304] hwsim_new_radio_nl+0xb51/0x12c0 [ 438.564726][T15304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 438.564757][T15304] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 438.564785][T15304] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 438.564815][T15304] genl_family_rcv_msg_doit+0x206/0x2f0 [ 438.564841][T15304] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.564872][T15304] ? bpf_lsm_capable+0x9/0x10 [ 438.564892][T15304] ? security_capable+0x7e/0x260 [ 438.564926][T15304] ? ns_capable+0xd7/0x110 [ 438.564952][T15304] genl_rcv_msg+0x55c/0x800 [ 438.564981][T15304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.565008][T15304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 438.565039][T15304] ? __lock_acquire+0xaa4/0x1ba0 [ 438.565068][T15304] netlink_rcv_skb+0x16a/0x440 [ 438.565088][T15304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.565112][T15304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.565143][T15304] ? __pfx_down_read+0x10/0x10 [ 438.565179][T15304] ? netlink_deliver_tap+0x1ae/0xd30 [ 438.565205][T15304] genl_rcv+0x28/0x40 [ 438.565229][T15304] netlink_unicast+0x53a/0x7f0 [ 438.565260][T15304] ? __pfx_netlink_unicast+0x10/0x10 [ 438.565300][T15304] netlink_sendmsg+0x8da/0xd70 [ 438.565327][T15304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.565359][T15304] ____sys_sendmsg+0xa8d/0xc60 [ 438.565380][T15304] ? copy_msghdr_from_user+0x10a/0x160 [ 438.565406][T15304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.565428][T15304] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.565455][T15304] ___sys_sendmsg+0x134/0x1d0 [ 438.565480][T15304] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.565527][T15304] __sys_sendmsg+0x16d/0x220 [ 438.565550][T15304] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.565571][T15304] ? __x64_sys_futex+0x1e0/0x4c0 [ 438.565598][T15304] ? rcu_is_watching+0x12/0xc0 [ 438.565622][T15304] do_syscall_64+0xcd/0x260 [ 438.565646][T15304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.565663][T15304] RIP: 0033:0x7f6db458d169 [ 438.565680][T15304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.565698][T15304] RSP: 002b:00007f6db544a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.565715][T15304] RAX: ffffffffffffffda RBX: 00007f6db47a5fa0 RCX: 00007f6db458d169 [ 438.565727][T15304] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 438.565738][T15304] RBP: 00007f6db460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.565749][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.565759][T15304] R13: 0000000000000000 R14: 00007f6db47a5fa0 R15: 00007ffdd097fd18 [ 438.565781][T15304] [ 440.453005][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 440.615348][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 440.627629][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 440.659330][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.680454][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 440.701123][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 440.734373][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.740926][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.869405][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 441.110601][ T9] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 441.859713][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.868022][ T9] usb 4-1: Product: syz [ 441.872320][ T9] usb 4-1: Manufacturer: syz [ 441.876952][ T9] usb 4-1: SerialNumber: syz [ 441.885318][ T9] usb 4-1: config 0 descriptor?? [ 441.894412][T15341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.149408][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.176256][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 442.196631][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 442.205599][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.238106][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 442.291658][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 442.294936][ T9] usb 4-1: USB disconnect, device number 66 [ 442.302068][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 442.407638][T15397] program syz.4.1748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.941808][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 442.950382][T15432] ERROR: device name not specified. [ 442.972041][ T9] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 443.150606][ T10] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 443.161793][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.172615][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.539088][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 443.557082][ T10] usb 5-1: config 0 descriptor?? [ 443.562379][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 443.579471][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.588868][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.596968][ T9] usb 2-1: Product: syz [ 443.601365][ T9] usb 2-1: Manufacturer: syz [ 443.605989][ T9] usb 2-1: SerialNumber: syz [ 443.765817][T15456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.847423][ T30] audit: type=1400 audit(1742966583.098:1528): avc: denied { setopt } for pid=15409 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 443.903161][T15417] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 443.911055][ T5869] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 443.944394][T15417] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 443.986783][ T10] gembird 0003:11FF:3331.0017: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0 [ 444.071188][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 444.077072][ T5869] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 444.122771][ T5869] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 444.134257][ T5869] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 444.138461][ T30] audit: type=1400 audit(1742966583.389:1529): avc: denied { write } for pid=15477 comm="syz.3.1761" lport=43774 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 444.143052][ T5869] usb 3-1: Product: syz [ 444.170528][ T5869] usb 3-1: Manufacturer: syz [ 444.295077][ T10] IPVS: starting estimator thread 0... [ 444.319199][ T5869] r8152-cfgselector 3-1: Unknown version 0x0000 [ 444.357204][ T5869] r8152-cfgselector 3-1: config 0 descriptor?? [ 444.401331][T15482] IPVS: using max 40 ests per chain, 96000 per kthread [ 444.472160][ T5869] cdc_acm 3-1:0.0: Zero length descriptor references [ 444.536829][ T5869] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 444.601995][ T5869] usb 5-1: USB disconnect, device number 33 [ 444.982471][T15503] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 445.846360][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 445.878293][ T9] usb 2-1: USB disconnect, device number 66 [ 446.039778][T15538] program syz.3.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.305194][T15540] veth1: entered promiscuous mode [ 446.665200][T15554] batadv_slave_1: entered promiscuous mode [ 446.679910][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 446.991815][ T5904] r8152-cfgselector 3-1: USB disconnect, device number 61 [ 447.149185][T15539] batadv_slave_1: left promiscuous mode [ 447.155052][T15539] veth1: left promiscuous mode [ 447.205329][ T9] usb 5-1: device descriptor read/64, error -71 [ 447.230166][T15553] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.236264][T15553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.242382][T15553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.248310][T15553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.450883][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 447.648746][ T9] usb 5-1: device descriptor read/64, error -71 [ 448.177336][ T9] usb usb5-port1: attempt power cycle [ 448.430929][ T30] audit: type=1326 audit(1742966587.050:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 448.584327][ T30] audit: type=1326 audit(1742966587.060:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 448.678828][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 448.732769][ T30] audit: type=1326 audit(1742966587.060:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.227546][ T9] usb 5-1: device descriptor read/8, error -71 [ 449.234227][ T5134] Bluetooth: hci1: command 0x0c1a tx timeout [ 449.244870][ T30] audit: type=1326 audit(1742966587.060:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f546b78bad0 code=0x7ffc0000 [ 449.254681][T15594] program syz.1.1778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.268385][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.274981][ T30] audit: type=1326 audit(1742966587.060:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.398465][ T5134] Bluetooth: hci3: command 0x0405 tx timeout [ 449.406925][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 449.409099][ T5134] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.485775][ T30] audit: type=1326 audit(1742966587.060:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.536439][ T30] audit: type=1326 audit(1742966587.060:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.560337][ T973] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 449.572554][ T30] audit: type=1326 audit(1742966587.070:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.601069][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.621007][ T30] audit: type=1326 audit(1742966587.070:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.651702][ T30] audit: type=1326 audit(1742966587.080:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.729925][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 449.752539][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.773438][ T973] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 449.784345][ T30] audit: type=1326 audit(1742966587.080:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.810281][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.842085][ T973] usb 4-1: config 0 descriptor?? [ 449.849627][ T30] audit: type=1326 audit(1742966587.080:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15585 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b78d169 code=0x7ffc0000 [ 449.967336][ T30] audit: type=1400 audit(1742966589.201:1542): avc: denied { read } for pid=15637 comm="syz.2.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.100962][T15644] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 450.131085][T15648] FAULT_INJECTION: forcing a failure. [ 450.131085][T15648] name failslab, interval 1, probability 0, space 0, times 0 [ 450.155482][T15644] SELinux: failed to load policy [ 450.160658][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.1.1790 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 450.160682][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.160692][T15648] Call Trace: [ 450.160698][T15648] [ 450.160705][T15648] dump_stack_lvl+0x16c/0x1f0 [ 450.160737][T15648] should_fail_ex+0x512/0x640 [ 450.160754][T15648] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 450.160775][T15648] should_failslab+0xc2/0x120 [ 450.160807][T15648] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 450.160821][T15648] ? __alloc_skb+0x2b2/0x380 [ 450.160846][T15648] __alloc_skb+0x2b2/0x380 [ 450.160863][T15648] ? __pfx___alloc_skb+0x10/0x10 [ 450.160878][T15648] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 450.160900][T15648] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 450.160922][T15648] netlink_alloc_large_skb+0x69/0x130 [ 450.160943][T15648] netlink_sendmsg+0x694/0xd70 [ 450.160962][T15648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.160983][T15648] ____sys_sendmsg+0xa8d/0xc60 [ 450.161000][T15648] ? copy_msghdr_from_user+0x10a/0x160 [ 450.161018][T15648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.161038][T15648] ___sys_sendmsg+0x134/0x1d0 [ 450.161056][T15648] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.161090][T15648] __sys_sendmsg+0x16d/0x220 [ 450.161107][T15648] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.161129][T15648] ? rcu_is_watching+0x12/0xc0 [ 450.161150][T15648] do_syscall_64+0xcd/0x260 [ 450.161168][T15648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.161183][T15648] RIP: 0033:0x7f6db458d169 [ 450.161196][T15648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.161210][T15648] RSP: 002b:00007f6db544a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.161224][T15648] RAX: ffffffffffffffda RBX: 00007f6db47a5fa0 RCX: 00007f6db458d169 [ 450.161233][T15648] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 450.161241][T15648] RBP: 00007f6db544a090 R08: 0000000000000000 R09: 0000000000000000 [ 450.161249][T15648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.161264][T15648] R13: 0000000000000000 R14: 00007f6db47a5fa0 R15: 00007ffdd097fd18 [ 450.161280][T15648] [ 450.292586][ T973] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 450.929324][T15675] program syz.2.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.045648][ T973] usb 4-1: USB disconnect, device number 67 [ 452.187324][T15706] CIFS mount error: No usable UNC path provided in device string! [ 452.187324][T15706] [ 452.298773][T15706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.942662][T15729] 9pnet_fd: Insufficient options for proto=fd [ 453.429870][T15608] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 453.439990][T15608] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 453.656345][ T973] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 453.737787][ T9] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 453.770433][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 453.806917][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 453.813529][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 453.825334][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57379, setting to 1024 [ 453.836693][ T973] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.845785][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.861162][ T973] usb 4-1: config 0 descriptor?? [ 453.869207][ T973] hub 4-1:0.0: USB hub found [ 453.901112][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.914837][ T9] usb 3-1: config 0 has no interface number 0 [ 453.921304][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 453.932539][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 453.943540][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.948272][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 453.952947][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.968700][ T9] usb 3-1: config 0 descriptor?? [ 453.972216][ T24] usb 2-1: config 2 has an invalid interface number: 21 but max is 0 [ 453.976337][T15754] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 453.996427][ T24] usb 2-1: config 2 has no interface number 0 [ 453.997566][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 454.002536][ T24] usb 2-1: config 2 interface 21 has no altsetting 0 [ 454.051848][ T24] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 454.061113][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.073900][ T973] hub 4-1:0.0: 1 port detected [ 454.077938][ T24] usb 2-1: Product: syz [ 454.083502][ T24] usb 2-1: Manufacturer: syz [ 454.089798][ T24] usb 2-1: SerialNumber: syz [ 454.265610][ T9] usb 3-1: USB disconnect, device number 62 [ 454.513745][ T24] HFC-S_USB 2-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 454.544142][ T24] usb 2-1: USB disconnect, device number 67 [ 455.039949][ T973] usb 4-1: USB disconnect, device number 68 [ 455.431273][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 455.431293][ T30] audit: type=1400 audit(1742966594.684:1545): avc: denied { ioctl } for pid=15820 comm="syz.2.1816" path="socket:[37883]" dev="sockfs" ino=37883 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.487795][ T30] audit: type=1400 audit(1742966594.714:1546): avc: denied { setattr } for pid=15821 comm="syz.0.1814" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 455.512481][ T30] audit: type=1400 audit(1742966594.724:1547): avc: denied { write } for pid=15821 comm="syz.0.1814" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 455.534228][ T30] audit: type=1400 audit(1742966594.724:1548): avc: denied { open } for pid=15821 comm="syz.0.1814" path="/374/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 455.695522][ T5867] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 455.859908][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.987631][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.002849][ T5867] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 456.014273][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.046444][ T5867] usb 3-1: config 0 descriptor?? [ 456.101887][T15855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1823'. [ 456.265870][T15862] netlink: 'syz.1.1822': attribute type 10 has an invalid length. [ 456.341644][T15862] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 456.459580][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 456.483375][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 456.528359][ T5867] usb 3-1: USB disconnect, device number 63 [ 456.696766][T15879] xt_hashlimit: size too large, truncated to 1048576 [ 457.434587][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 457.448176][T15608] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 457.456949][T15608] Bluetooth: hci3: Injecting HCI hardware error event [ 457.467623][ T5833] Bluetooth: hci3: hardware error 0x00 [ 457.581275][T15907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.639553][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.648842][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.657124][ T24] usb 3-1: Product: syz [ 457.661399][ T24] usb 3-1: Manufacturer: syz [ 457.666282][ T24] usb 3-1: SerialNumber: syz [ 457.685693][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.713677][ T5818] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.716666][T15918] wg1 speed is unknown, defaulting to 1000 [ 457.731181][T15918] lo speed is unknown, defaulting to 1000 [ 457.805015][ T5867] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 457.974132][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 457.982348][ T5867] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 457.991772][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.000015][ T5867] usb 4-1: Product: syz [ 458.005006][ T5867] usb 4-1: Manufacturer: syz [ 458.009626][ T5867] usb 4-1: SerialNumber: syz [ 458.065900][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 458.143437][ T9] usb 3-1: USB disconnect, device number 64 [ 458.675135][ T5867] gspca_ov534_9: reg_w failed -110 [ 458.963941][ T5818] usb 3-1: Service connection timeout for: 256 [ 458.995021][ T5818] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 459.177217][ T5818] ath9k_htc: Failed to initialize the device [ 459.195651][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 459.195704][ T5867] ov534_9 4-1:4.0: probe with driver ov534_9 failed with error -22 [ 459.242174][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 459.590293][ T5904] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 459.623664][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 459.895740][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 459.912697][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.938341][ T5904] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 459.955218][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.965952][ T5904] usb 5-1: config 0 descriptor?? [ 460.019999][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.034152][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.046674][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.059861][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.069144][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.078649][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.087724][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.098223][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.107248][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.116247][T15998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.252181][T16004] openvswitch: netlink: Missing key (keys=40, expected=100) [ 460.472509][ T5904] usbhid 5-1:0.0: can't add hid device: -71 [ 460.557870][ T5904] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 460.578882][ T30] audit: type=1400 audit(1742966599.827:1549): avc: denied { setopt } for pid=16008 comm="syz.2.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.633208][ T5904] usb 5-1: USB disconnect, device number 38 [ 461.425185][ T5904] usb 4-1: USB disconnect, device number 69 [ 461.930738][T16049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 462.066092][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1860'. [ 462.087195][T16063] fuse: Unknown parameter './file0' [ 462.102112][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 462.343867][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 462.362739][ T9] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 462.402735][ T9] usb 5-1: config 6 has no interface number 0 [ 462.409206][ T9] usb 5-1: config 6 interface 200 has no altsetting 0 [ 462.425605][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 462.439166][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.450526][ T9] usb 5-1: Product: syz [ 462.457903][ T9] usb 5-1: Manufacturer: syz [ 462.462961][ T9] usb 5-1: SerialNumber: syz [ 462.498780][ T30] audit: type=1400 audit(1742966601.758:1550): avc: denied { ioctl } for pid=16077 comm="syz.0.1862" path="socket:[39173]" dev="sockfs" ino=39173 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 462.897193][T16083] wg1 speed is unknown, defaulting to 1000 [ 462.922485][T16083] lo speed is unknown, defaulting to 1000 [ 462.963953][T16101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1863'. [ 463.253669][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 463.277058][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.287306][ T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 463.295386][ T9] usb 5-1: media controller created [ 463.312601][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.596510][ T10] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 463.806967][T16118] netlink: 'syz.4.1857': attribute type 13 has an invalid length. [ 463.815180][ T10] usb 3-1: device descriptor read/64, error -71 [ 463.862056][T16118] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1857'. [ 464.056467][ T30] audit: type=1326 audit(1742966603.238:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 464.151555][ T10] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 464.222573][ T30] audit: type=1326 audit(1742966603.238:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 464.246112][ T30] audit: type=1326 audit(1742966603.238:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 464.276611][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.293606][ T30] audit: type=1326 audit(1742966603.238:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6db458bad0 code=0x7ffc0000 [ 464.329851][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.346856][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.382930][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.479774][ T30] audit: type=1326 audit(1742966603.238:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 464.505516][ T10] usb 3-1: device descriptor read/64, error -71 [ 465.059287][ T10] usb usb3-port1: attempt power cycle [ 465.067896][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 465.085283][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 465.095441][ T30] audit: type=1326 audit(1742966603.248:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 465.123467][ T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 465.157023][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 465.222369][ T30] audit: type=1326 audit(1742966603.248:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 465.251946][ T30] audit: type=1326 audit(1742966603.248:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 465.284564][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 465.318436][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 465.532832][ T5869] dvb-usb: bulk message failed: -71 (1/0) [ 465.538811][ T5869] dvb-usb: error while querying for an remote control event. [ 465.564459][ T9] usb 5-1: USB disconnect, device number 39 [ 465.600496][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 465.632237][ T10] usb 3-1: device descriptor read/8, error -71 [ 465.690950][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1876'. [ 465.788887][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 465.840590][ T95] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 465.920317][ T10] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 465.941515][ T10] usb 3-1: device descriptor read/8, error -71 [ 466.010251][ T95] usb 4-1: Using ep0 maxpacket: 32 [ 466.016775][ T95] usb 4-1: config 2 has an invalid interface number: 21 but max is 0 [ 466.030201][ T95] usb 4-1: config 2 has no interface number 0 [ 466.041925][ T95] usb 4-1: config 2 interface 21 has no altsetting 0 [ 466.051227][ T10] usb usb3-port1: unable to enumerate USB device [ 466.062653][ T95] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 466.080078][ T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.099350][ T95] usb 4-1: Product: syz [ 466.107002][ T95] usb 4-1: Manufacturer: syz [ 466.118264][ T95] usb 4-1: SerialNumber: syz [ 467.026063][ T95] HFC-S_USB 4-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 467.038968][ T95] usb 4-1: USB disconnect, device number 70 [ 467.425599][T16238] FAULT_INJECTION: forcing a failure. [ 467.425599][T16238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.463635][T16241] veth0_macvtap: left promiscuous mode [ 467.487163][T16241] macvtap0: entered promiscuous mode [ 467.499385][T16238] CPU: 1 UID: 0 PID: 16238 Comm: syz.4.1884 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 467.499410][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 467.499417][T16238] Call Trace: [ 467.499421][T16238] [ 467.499426][T16238] dump_stack_lvl+0x16c/0x1f0 [ 467.499447][T16238] should_fail_ex+0x512/0x640 [ 467.499462][T16238] _copy_from_user+0x2e/0xd0 [ 467.499476][T16238] memdup_user+0x7d/0xe0 [ 467.499494][T16238] strndup_user+0x78/0xe0 [ 467.499508][T16238] __x64_sys_mount+0x137/0x310 [ 467.499523][T16238] ? __pfx___x64_sys_mount+0x10/0x10 [ 467.499534][T16238] ? rcu_is_watching+0x12/0xc0 [ 467.499554][T16238] do_syscall_64+0xcd/0x260 [ 467.499569][T16238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.499583][T16238] RIP: 0033:0x7f05b8f8d169 [ 467.499596][T16238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.499611][T16238] RSP: 002b:00007f05b9e27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 467.499628][T16238] RAX: ffffffffffffffda RBX: 00007f05b91a5fa0 RCX: 00007f05b8f8d169 [ 467.499650][T16238] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 467.499660][T16238] RBP: 00007f05b9e27090 R08: 0000200000000100 R09: 0000000000000000 [ 467.499669][T16238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.499675][T16238] R13: 0000000000000000 R14: 00007f05b91a5fa0 R15: 00007fff7a1f2fc8 [ 467.499686][T16238] [ 467.745749][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 467.757718][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.649697][ T10] IPVS: starting estimator thread 0... [ 468.677395][T16256] program syz.1.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.738820][T16264] IPVS: using max 50 ests per chain, 120000 per kthread [ 468.915828][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 469.061431][ T9] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 469.169246][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 469.169265][ T30] audit: type=1400 audit(1742966608.431:1563): avc: denied { setattr } for pid=16288 comm="syz.2.1896" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.218981][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 469.375655][ T9] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 469.688303][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 469.694006][ T9] usb usb2-port1: attempt power cycle [ 469.804027][T16306] xt_hashlimit: size too large, truncated to 1048576 [ 469.998586][ T95] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 470.058979][ T9] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 470.093228][T16312] syzkaller1: entered promiscuous mode [ 470.101775][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 470.133693][T16312] syzkaller1: entered allmulticast mode [ 470.213868][ T95] usb 3-1: Using ep0 maxpacket: 32 [ 470.228818][ T9] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 470.232655][ T95] usb 3-1: config 2 has an invalid interface number: 21 but max is 0 [ 470.249240][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 470.262396][ T9] usb usb2-port1: unable to enumerate USB device [ 470.265657][ T95] usb 3-1: config 2 has no interface number 0 [ 470.277119][ T95] usb 3-1: config 2 interface 21 has no altsetting 0 [ 470.289145][T16322] program syz.0.1902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.322825][ T95] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 470.335324][ T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.343406][ T95] usb 3-1: Product: syz [ 470.347580][ T95] usb 3-1: Manufacturer: syz [ 470.354496][ T95] usb 3-1: SerialNumber: syz [ 470.637849][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 470.774850][ T95] HFC-S_USB 3-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 470.787472][ T95] usb 3-1: USB disconnect, device number 69 [ 470.800115][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 470.809804][ T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 470.820327][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.828710][ T24] usb 4-1: Product: syz [ 470.832881][ T24] usb 4-1: Manufacturer: syz [ 470.837462][ T24] usb 4-1: SerialNumber: syz [ 470.845551][ T24] usb 4-1: config 0 descriptor?? [ 470.852260][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 471.850546][T16364] program syz.3.1909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.870554][ T24] gspca_se401: read req failed req 0x06 error -19 [ 471.985257][ T24] usb 4-1: USB disconnect, device number 71 [ 472.341972][ T30] audit: type=1400 audit(1742966611.603:1564): avc: denied { ioctl } for pid=16368 comm="syz.4.1910" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 472.515722][T16389] program syz.2.1914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.631823][T16394] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 473.774488][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 474.008785][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 474.282702][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.302727][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 474.312353][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.360122][T16427] nvme_fabrics: missing parameter 'transport=%s' [ 474.366596][T16427] nvme_fabrics: missing parameter 'nqn=%s' [ 474.367942][ T9] usb 5-1: config 0 descriptor?? [ 474.415443][T16443] program syz.2.1927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.748067][ T30] audit: type=1400 audit(1742966614.004:1565): avc: denied { nlmsg_write } for pid=16447 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 474.838305][ T9] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 475.354148][T16445] xt_hashlimit: size too large, truncated to 1048576 [ 475.385782][ T9] usb 5-1: USB disconnect, device number 40 [ 476.076752][T16505] xt_hashlimit: size too large, truncated to 1048576 [ 476.304414][T16507] 9pnet_fd: Insufficient options for proto=fd [ 476.638628][T16519] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 476.646379][T16519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.289130][T16523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.181976][T16523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.577596][T16523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.621858][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 478.704501][T16523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.793948][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 478.805406][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.819871][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 478.864385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.866242][T16523] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.947645][ T10] usb 3-1: config 0 descriptor?? [ 478.948277][T16523] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.064393][T16523] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.076050][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 479.385050][T16523] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.548079][ T10] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 479.708252][T16598] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 479.766378][ T95] usb 3-1: USB disconnect, device number 70 [ 479.775355][T16598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.905373][T16654] input: syz0 as /devices/virtual/input/input45 [ 480.180099][ T30] audit: type=1326 audit(1742966619.437:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 480.309890][ T30] audit: type=1326 audit(1742966619.437:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 480.421068][ T30] audit: type=1326 audit(1742966619.437:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 480.656286][ T30] audit: type=1326 audit(1742966619.437:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 480.720496][ T30] audit: type=1326 audit(1742966619.437:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 480.868559][ T30] audit: type=1326 audit(1742966619.437:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 480.922010][ T30] audit: type=1326 audit(1742966619.437:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 481.089313][ T30] audit: type=1326 audit(1742966619.437:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 481.540777][ T30] audit: type=1326 audit(1742966619.437:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 481.623848][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 481.643571][ T30] audit: type=1326 audit(1742966619.437:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37b2f8cd6b code=0x7ffc0000 [ 483.006117][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 483.188681][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 483.204636][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.220216][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 483.249857][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.250247][T16739] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp' [ 483.289233][T16739] CPU: 1 UID: 0 PID: 16739 Comm: syz.3.1978 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 483.289261][T16739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.289271][T16739] Call Trace: [ 483.289276][T16739] [ 483.289283][T16739] dump_stack_lvl+0x16c/0x1f0 [ 483.289313][T16739] sysfs_warn_dup+0x7f/0xa0 [ 483.289341][T16739] sysfs_do_create_link_sd+0x124/0x140 [ 483.289357][T16739] sysfs_create_link+0x61/0xc0 [ 483.289370][T16739] device_add+0x62c/0x1a70 [ 483.289395][T16739] ? __pfx_device_add+0x10/0x10 [ 483.289415][T16739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 483.289441][T16739] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 483.289463][T16739] wiphy_register+0x1c9c/0x2850 [ 483.289483][T16739] ? netdev_run_todo+0x864/0x1320 [ 483.289505][T16739] ? __dev_printk+0x220/0x270 [ 483.289523][T16739] ? __pfx_wiphy_register+0x10/0x10 [ 483.289549][T16739] ieee80211_register_hw+0x2432/0x4020 [ 483.289582][ T10] usb 2-1: config 0 descriptor?? [ 483.289583][T16739] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 483.289611][T16739] ? find_held_lock+0x2b/0x80 [ 483.289628][T16739] ? __asan_memset+0x23/0x50 [ 483.289650][T16739] ? __hrtimer_init+0x106/0x2c0 [ 483.289674][T16739] mac80211_hwsim_new_radio+0x3041/0x54f0 [ 483.289708][T16739] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 483.289727][T16739] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 483.289748][T16739] ? __asan_memcpy+0x3c/0x60 [ 483.289769][T16739] hwsim_new_radio_nl+0xb51/0x12c0 [ 483.289791][T16739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 483.289816][T16739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 483.289840][T16739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 483.289874][T16739] genl_family_rcv_msg_doit+0x206/0x2f0 [ 483.289896][T16739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 483.289921][T16739] ? bpf_lsm_capable+0x9/0x10 [ 483.289939][T16739] ? security_capable+0x7e/0x260 [ 483.289961][T16739] ? ns_capable+0xd7/0x110 [ 483.289980][T16739] genl_rcv_msg+0x55c/0x800 [ 483.290002][T16739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.290022][T16739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 483.290042][T16739] ? __lock_acquire+0xaa4/0x1ba0 [ 483.290065][T16739] netlink_rcv_skb+0x16a/0x440 [ 483.290082][T16739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.290102][T16739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.290128][T16739] ? __pfx_down_read+0x10/0x10 [ 483.290150][T16739] ? netlink_deliver_tap+0x1ae/0xd30 [ 483.290169][T16739] genl_rcv+0x28/0x40 [ 483.290186][T16739] netlink_unicast+0x53a/0x7f0 [ 483.290205][T16739] ? __pfx_netlink_unicast+0x10/0x10 [ 483.290227][T16739] netlink_sendmsg+0x8da/0xd70 [ 483.290258][T16739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.290281][T16739] ____sys_sendmsg+0xa8d/0xc60 [ 483.290298][T16739] ? copy_msghdr_from_user+0x10a/0x160 [ 483.290317][T16739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.290334][T16739] ? try_to_wake_up+0xa2f/0x1680 [ 483.290354][T16739] ___sys_sendmsg+0x134/0x1d0 [ 483.290373][T16739] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.290412][T16739] __sys_sendmsg+0x16d/0x220 [ 483.290430][T16739] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.290448][T16739] ? __x64_sys_futex+0x1e0/0x4c0 [ 483.290471][T16739] ? rcu_is_watching+0x12/0xc0 [ 483.290492][T16739] do_syscall_64+0xcd/0x260 [ 483.290512][T16739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.290528][T16739] RIP: 0033:0x7f8959b8d169 [ 483.290542][T16739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.290557][T16739] RSP: 002b:00007f895aa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.290578][T16739] RAX: ffffffffffffffda RBX: 00007f8959da5fa0 RCX: 00007f8959b8d169 [ 483.290588][T16739] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 483.290597][T16739] RBP: 00007f8959c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 483.290605][T16739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.290615][T16739] R13: 0000000000000000 R14: 00007f8959da5fa0 R15: 00007ffd0c8c09a8 [ 483.290633][T16739] [ 484.216449][ T10] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 485.294350][ T10] usb 2-1: USB disconnect, device number 72 [ 485.332888][T16781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 485.539418][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 485.686753][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 485.686776][ T30] audit: type=1400 audit(1742966624.959:1608): avc: denied { ioctl } for pid=16817 comm="syz.4.1990" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 485.770258][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 485.857293][T16831] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1992'. [ 485.931516][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 485.944241][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.952697][ T9] usb 4-1: Product: syz [ 485.957065][ T9] usb 4-1: Manufacturer: syz [ 485.961949][ T9] usb 4-1: SerialNumber: syz [ 485.976224][ T9] usb 4-1: config 0 descriptor?? [ 485.981581][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 486.143871][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 486.174694][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.187978][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.198240][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 486.285988][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.287076][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 486.304744][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.329440][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.466709][ T10] usb 5-1: config 0 descriptor?? [ 486.480068][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.497388][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.885254][T16850] FAULT_INJECTION: forcing a failure. [ 486.885254][T16850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.898549][T16850] CPU: 1 UID: 0 PID: 16850 Comm: syz.2.1994 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 486.898584][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.898594][T16850] Call Trace: [ 486.898601][T16850] [ 486.898608][T16850] dump_stack_lvl+0x16c/0x1f0 [ 486.898636][T16850] should_fail_ex+0x512/0x640 [ 486.898654][T16850] should_fail_alloc_page+0xe7/0x130 [ 486.898672][T16850] prepare_alloc_pages.constprop.0+0x172/0x570 [ 486.898696][T16850] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 486.898710][T16850] ? process_measurement+0x1e7/0x2360 [ 486.898736][T16850] ? __lock_acquire+0x5ca/0x1ba0 [ 486.898759][T16850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.898780][T16850] ? filemap_get_entry+0x1a7/0x3b0 [ 486.898802][T16850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.898824][T16850] ? policy_nodemask+0xea/0x4e0 [ 486.898840][T16850] alloc_pages_mpol+0x1fb/0x540 [ 486.898854][T16850] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.898868][T16850] ? _raw_spin_unlock+0x28/0x50 [ 486.898882][T16850] ? swap_swapcount+0x118/0x180 [ 486.898899][T16850] ? __pfx_swap_swapcount+0x10/0x10 [ 486.898914][T16850] folio_alloc_mpol_noprof+0x36/0x2f0 [ 486.898931][T16850] __read_swap_cache_async+0x508/0x660 [ 486.898953][T16850] ? __pfx___read_swap_cache_async+0x10/0x10 [ 486.898972][T16850] ? __lock_acquire+0x5ca/0x1ba0 [ 486.898989][T16850] ? mpol_shared_policy_lookup+0xf6/0x150 [ 486.899007][T16850] ? __pfx_shmem_get_policy+0x10/0x10 [ 486.899036][T16850] read_swap_cache_async+0xc0/0x1a0 [ 486.899055][T16850] ? __pfx_read_swap_cache_async+0x10/0x10 [ 486.899075][T16850] ? find_held_lock+0x2b/0x80 [ 486.899088][T16850] ? madvise_vma_behavior+0x110e/0x1de0 [ 486.899111][T16850] madvise_vma_behavior+0x114d/0x1de0 [ 486.899128][T16850] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 486.899144][T16850] ? find_vma_prev+0xda/0x160 [ 486.899166][T16850] ? __pfx_find_vma_prev+0x10/0x10 [ 486.899190][T16850] ? __pfx___might_resched+0x10/0x10 [ 486.899209][T16850] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 486.899224][T16850] madvise_walk_vmas+0x1ce/0x2c0 [ 486.899244][T16850] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 486.899262][T16850] do_madvise+0x364/0x7c0 [ 486.899278][T16850] ? __pfx_do_madvise+0x10/0x10 [ 486.899293][T16850] ? rcu_is_watching+0x12/0xc0 [ 486.899317][T16850] __x64_sys_madvise+0xa9/0x110 [ 486.899333][T16850] do_syscall_64+0xcd/0x260 [ 486.899351][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.899366][T16850] RIP: 0033:0x7f546b78d169 [ 486.899377][T16850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.899391][T16850] RSP: 002b:00007f546c580038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 486.899405][T16850] RAX: ffffffffffffffda RBX: 00007f546b9a6080 RCX: 00007f546b78d169 [ 486.899414][T16850] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 486.899422][T16850] RBP: 00007f546c580090 R08: 0000000000000000 R09: 0000000000000000 [ 486.899431][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.899440][T16850] R13: 0000000000000000 R14: 00007f546b9a6080 R15: 00007ffe2ee09378 [ 486.899455][T16850] [ 487.275427][T16849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.312307][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 487.464981][ T9] usb 4-1: USB disconnect, device number 72 [ 487.749575][ T10] hid-picolcd 0003:04D8:C002.001D: No report with id 0x11 found [ 487.810839][ T5818] usb 5-1: USB disconnect, device number 41 [ 488.389873][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 488.569067][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 488.578866][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 488.588874][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.620135][ T52] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 488.715673][ T24] usb 3-1: config 0 descriptor?? [ 488.888913][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 488.899835][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.913556][ T52] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 488.923466][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.947218][ T52] usb 4-1: config 0 descriptor?? [ 489.388515][ T5818] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 489.427395][ T52] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 489.578347][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 489.589063][ T5818] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 489.597532][ T5818] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 489.606721][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 489.615950][ T5818] usb 5-1: config 1 has no interface number 0 [ 489.622446][ T5818] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.623681][ T10] usb 4-1: USB disconnect, device number 73 [ 489.633636][ T5818] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.654830][ T5818] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.665142][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.681481][ T5818] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 489.883527][ T5818] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 489.915381][T16959] FAULT_INJECTION: forcing a failure. [ 489.915381][T16959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.930236][T16959] CPU: 1 UID: 0 PID: 16959 Comm: syz.1.2009 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 489.930272][T16959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.930283][T16959] Call Trace: [ 489.930289][T16959] [ 489.930295][T16959] dump_stack_lvl+0x16c/0x1f0 [ 489.930324][T16959] should_fail_ex+0x512/0x640 [ 489.930345][T16959] _copy_to_user+0x32/0xd0 [ 489.930365][T16959] pagemap_read+0x512/0x8b0 [ 489.930387][T16959] ? __pfx_pagemap_read+0x10/0x10 [ 489.930405][T16959] ? rw_verify_area+0xcf/0x680 [ 489.930428][T16959] ? __pfx_pagemap_read+0x10/0x10 [ 489.930444][T16959] vfs_read+0x1de/0xc70 [ 489.930471][T16959] ? __pfx_vfs_read+0x10/0x10 [ 489.930493][T16959] ? find_held_lock+0x2b/0x80 [ 489.930511][T16959] ? __fget_files+0x204/0x3c0 [ 489.930529][T16959] ? __fget_files+0x20e/0x3c0 [ 489.930542][T16959] ? __fget_files+0x160/0x3c0 [ 489.930562][T16959] __x64_sys_pread64+0x1f4/0x250 [ 489.930577][T16959] ? __pfx___x64_sys_pread64+0x10/0x10 [ 489.930591][T16959] ? rcu_is_watching+0x12/0xc0 [ 489.930613][T16959] do_syscall_64+0xcd/0x260 [ 489.930636][T16959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.930653][T16959] RIP: 0033:0x7f6db458d169 [ 489.930668][T16959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.930684][T16959] RSP: 002b:00007f6db544a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 489.930702][T16959] RAX: ffffffffffffffda RBX: 00007f6db47a5fa0 RCX: 00007f6db458d169 [ 489.930712][T16959] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000007 [ 489.930723][T16959] RBP: 00007f6db544a090 R08: 0000000000000000 R09: 0000000000000000 [ 489.930733][T16959] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.930743][T16959] R13: 0000000000000000 R14: 00007f6db47a5fa0 R15: 00007ffdd097fd18 [ 489.930759][T16959] [ 490.158288][ T10] usb 5-1: USB disconnect, device number 42 [ 490.165007][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 490.195413][T16969] SELinux: failed to load policy [ 490.897799][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 491.139867][T16995] /dev/sg0: Can't lookup blockdev [ 491.167578][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 491.186563][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 491.194781][ T10] usb 4-1: config 0 has no interface number 0 [ 491.220801][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 491.230001][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 491.243972][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.253196][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 491.254388][ T10] usb 4-1: Product: syz [ 491.267405][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 491.273392][ T10] usb 4-1: Manufacturer: syz [ 491.284717][ T10] usb 4-1: SerialNumber: syz [ 491.307702][ T24] asix 3-1:0.0: probe with driver asix failed with error -71 [ 491.308374][ T10] usb 4-1: config 0 descriptor?? [ 491.327875][ T24] usb 3-1: USB disconnect, device number 71 [ 491.688767][T17022] overlayfs: missing 'lowerdir' [ 492.017159][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 492.075106][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 492.083631][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 492.091499][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 492.101215][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 492.114719][ T10] usb 4-1: USB disconnect, device number 74 [ 492.177559][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 492.228647][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.257450][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.266538][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.275014][ T9] usb 5-1: Product: syz [ 492.279325][ T9] usb 5-1: Manufacturer: syz [ 492.283972][ T9] usb 5-1: SerialNumber: syz [ 492.322760][ T9] cdc_ether 5-1:1.0: skipping garbage [ 492.363698][ T30] audit: type=1326 audit(1742966631.613:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 492.963485][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 493.003462][ T9] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 493.014971][ T9] usb 5-1: bad CDC descriptors [ 493.025217][ T9] usb 5-1: USB disconnect, device number 43 [ 493.031335][ T30] audit: type=1326 audit(1742966631.623:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.058633][ T30] audit: type=1326 audit(1742966631.623:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.076330][T17066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.082587][ T30] audit: type=1326 audit(1742966631.623:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6db458bad0 code=0x7ffc0000 [ 493.121888][ T30] audit: type=1326 audit(1742966631.623:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.149929][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 493.159813][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.167857][ T24] usb 3-1: Product: syz [ 493.169555][ T30] audit: type=1326 audit(1742966631.623:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.172188][ T24] usb 3-1: Manufacturer: syz [ 493.197462][ T30] audit: type=1326 audit(1742966631.623:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.208097][ T24] usb 3-1: SerialNumber: syz [ 493.241214][T17068] wg1 speed is unknown, defaulting to 1000 [ 493.248407][ T24] usb 3-1: config 0 descriptor?? [ 493.248505][T17068] lo speed is unknown, defaulting to 1000 [ 493.256567][ T30] audit: type=1326 audit(1742966631.623:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.283174][ T30] audit: type=1326 audit(1742966631.633:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.310958][ T30] audit: type=1326 audit(1742966631.633:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17044 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6db458d169 code=0x7ffc0000 [ 493.408689][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 493.579714][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.613918][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.622535][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 493.637525][ T9] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 493.645819][ T9] usb 5-1: config 0 has no interface number 0 [ 493.649705][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.664806][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.668702][ T9] usb 5-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=70.1a [ 493.694192][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.702692][ T9] usb 5-1: Product: syz [ 493.713553][ T9] usb 5-1: Manufacturer: syz [ 493.744162][ T9] usb 5-1: SerialNumber: syz [ 493.859950][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 493.878971][ T9] usb 5-1: config 0 descriptor?? [ 493.994809][ T24] usb 3-1: USB disconnect, device number 72 [ 494.674375][T17154] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 495.227206][ T24] usb 5-1: USB disconnect, device number 44 [ 495.361783][T17171] ubi: mtd0 is already attached to ubi31 [ 495.599103][T17178] input: syz0 as /devices/virtual/input/input47 [ 495.688453][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 495.902632][T17194] xt_hashlimit: size too large, truncated to 1048576 [ 496.062652][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 496.618830][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.631453][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.644836][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 496.656453][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 496.687663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.718220][ T10] usb 5-1: config 0 descriptor?? [ 496.746301][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 496.762358][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 496.829007][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 496.838436][ T24] usb 4-1: config 2 has an invalid interface number: 21 but max is 0 [ 496.865117][ T24] usb 4-1: config 2 has no interface number 0 [ 496.876854][ T24] usb 4-1: config 2 interface 21 has no altsetting 0 [ 496.886375][ T24] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 496.895716][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.903726][ T24] usb 4-1: Product: syz [ 496.908139][ T24] usb 4-1: Manufacturer: syz [ 496.912754][ T24] usb 4-1: SerialNumber: syz [ 496.957806][T17178] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2044'. [ 496.973925][T17178] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2044'. [ 496.986387][ T52] usb 5-1: USB disconnect, device number 45 [ 497.627307][ T24] HFC-S_USB 4-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 497.654557][ T24] usb 4-1: USB disconnect, device number 75 [ 498.624156][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 498.817452][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 498.874764][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 498.894266][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.945700][ T24] usb 2-1: Product: syz [ 498.949929][ T24] usb 2-1: Manufacturer: syz [ 498.983727][ T24] usb 2-1: SerialNumber: syz [ 498.993023][ T24] usb 2-1: config 0 descriptor?? [ 499.005564][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 499.609987][T17301] FAULT_INJECTION: forcing a failure. [ 499.609987][T17301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.623969][T17301] CPU: 0 UID: 0 PID: 17301 Comm: syz.2.2068 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 499.623995][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.624006][T17301] Call Trace: [ 499.624011][T17301] [ 499.624018][T17301] dump_stack_lvl+0x16c/0x1f0 [ 499.624048][T17301] should_fail_ex+0x512/0x640 [ 499.624070][T17301] _copy_from_user+0x2e/0xd0 [ 499.624090][T17301] memdup_user_nul+0x7e/0x110 [ 499.624116][T17301] nvmf_dev_write+0x78/0xc70 [ 499.624144][T17301] ? security_file_permission+0x71/0x210 [ 499.624163][T17301] ? rw_verify_area+0xcf/0x680 [ 499.624187][T17301] vfs_write+0x25c/0x1180 [ 499.624216][T17301] ? __pfx_nvmf_dev_write+0x10/0x10 [ 499.624242][T17301] ? __pfx_vfs_write+0x10/0x10 [ 499.624264][T17301] ? find_held_lock+0x2b/0x80 [ 499.624284][T17301] ? __fget_files+0x204/0x3c0 [ 499.624303][T17301] ? __fget_files+0x20e/0x3c0 [ 499.624323][T17301] ksys_write+0x12a/0x240 [ 499.624346][T17301] ? __pfx_ksys_write+0x10/0x10 [ 499.624369][T17301] ? rcu_is_watching+0x12/0xc0 [ 499.624391][T17301] do_syscall_64+0xcd/0x260 [ 499.624413][T17301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.624431][T17301] RIP: 0033:0x7f546b78d169 [ 499.624445][T17301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.624461][T17301] RSP: 002b:00007f546c5a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.624478][T17301] RAX: ffffffffffffffda RBX: 00007f546b9a5fa0 RCX: 00007f546b78d169 [ 499.624489][T17301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 499.624499][T17301] RBP: 00007f546c5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 499.624508][T17301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.624518][T17301] R13: 0000000000000000 R14: 00007f546b9a5fa0 R15: 00007ffe2ee09378 [ 499.624538][T17301] [ 499.838120][T17301] nvme_fabrics: missing parameter 'transport=%s' [ 499.866818][T17301] nvme_fabrics: missing parameter 'nqn=%s' [ 500.467950][ T24] gspca_se401: read req failed req 0x06 error -19 [ 500.506079][ T95] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 500.519063][ T24] usb 2-1: USB disconnect, device number 73 [ 500.552859][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 500.579371][T17340] netlink: 8388 bytes leftover after parsing attributes in process `syz.4.2075'. [ 500.592980][T17340] openvswitch: netlink: Flow key attr not present in new flow. [ 500.689912][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.701925][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.720707][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 500.730084][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.749143][ T9] usb 4-1: Product: syz [ 500.767764][ T95] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 500.771165][ T9] usb 4-1: Manufacturer: syz [ 500.798247][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.887508][ T9] usb 4-1: SerialNumber: syz [ 500.896997][ T95] usb 3-1: config 0 descriptor?? [ 500.896997][ T9] usb 4-1: config 0 descriptor?? [ 501.332294][T17314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.373760][T17314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.410652][T17314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.423133][T17314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.457082][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 501.530325][ T9] usb 4-1: USB disconnect, device number 76 [ 501.729777][ T95] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 502.143652][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.153385][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.375700][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 502.375714][ T30] audit: type=1326 audit(1742966641.658:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.406931][ T30] audit: type=1326 audit(1742966641.678:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.431164][ T30] audit: type=1326 audit(1742966641.678:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.455457][ T30] audit: type=1326 audit(1742966641.678:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.484605][ T30] audit: type=1326 audit(1742966641.678:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.512587][ T30] audit: type=1326 audit(1742966641.678:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.537233][ T30] audit: type=1326 audit(1742966641.678:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8959b8d169 code=0x7ffc0000 [ 502.582041][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 503.002593][ T95] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 503.122148][ T9] usb 2-1: config 6 has an invalid interface number: 174 but max is 0 [ 503.130603][ T9] usb 2-1: config 6 has no interface number 0 [ 503.141808][ T9] usb 2-1: config 6 interface 174 has no altsetting 0 [ 503.154986][ T9] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=9c.1f [ 503.164333][T17404] netlink: 8388 bytes leftover after parsing attributes in process `syz.2.2087'. [ 503.173512][ T95] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 503.183580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.193622][ T9] usb 2-1: Product: syz [ 503.197853][ T9] usb 2-1: Manufacturer: syz [ 503.204545][ T9] usb 2-1: SerialNumber: syz [ 503.224356][T17404] openvswitch: netlink: Flow key attr not present in new flow. [ 503.232949][ T95] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -71 [ 503.324302][ T95] usb 3-1: USB disconnect, device number 73 [ 503.418849][T17386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=17386 comm=syz.1.2082 [ 503.476618][ T9] rtl8150 2-1:6.174: couldn't find required endpoints [ 503.490000][ T9] rtl8150 2-1:6.174: probe with driver rtl8150 failed with error -5 [ 503.507308][ T9] usb 2-1: USB disconnect, device number 74 [ 504.258025][T17469] netlink: 8388 bytes leftover after parsing attributes in process `syz.4.2100'. [ 504.267476][T17469] openvswitch: netlink: Flow key attr not present in new flow. [ 504.267586][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 504.350990][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 504.381186][ T52] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 504.430910][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 504.437348][ T10] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 504.445847][ T10] usb 3-1: config 0 has no interface number 1 [ 504.452012][ T10] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.463051][ T10] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 504.474776][ T10] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 504.486221][ T10] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 504.496752][ T10] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.509912][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 504.521539][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 504.526777][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 504.536784][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 504.548919][ T9] usb 2-1: config 2 has an invalid interface number: 125 but max is 0 [ 504.557367][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 504.561087][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 504.566480][ T9] usb 2-1: config 2 has no interface number 0 [ 504.575469][ T52] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 504.577596][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.585093][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 504.592955][ T9] usb 2-1: config 2 interface 125 has no altsetting 0 [ 504.593072][ T10] usb 3-1: Product: syz [ 504.593088][ T10] usb 3-1: Manufacturer: syz [ 504.593103][ T10] usb 3-1: SerialNumber: syz [ 504.595257][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=2a.49 [ 504.608489][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 504.612112][ T10] usb 3-1: config 0 descriptor?? [ 504.616268][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.620217][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.624653][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 504.626828][ T52] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 504.626852][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.626870][ T52] usb 4-1: Product: syz [ 504.626886][ T52] usb 4-1: Manufacturer: syz [ 504.626914][ T52] usb 4-1: SerialNumber: syz [ 504.627971][T17454] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 504.636975][ T9] usb 2-1: Product: syz [ 504.650663][ T52] usb 4-1: config 0 descriptor?? [ 504.652167][ T9] usb 2-1: Manufacturer: syz [ 504.682362][T17464] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 504.690276][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.701057][ T52] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 504.711600][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.720987][ T52] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 504.724490][ T9] usb 2-1: SerialNumber: syz [ 504.784173][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 504.822877][ T52] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 504.901812][ T52] usb 4-1: USB disconnect, device number 77 [ 504.933025][ T95] usb 3-1: USB disconnect, device number 74 [ 505.003221][ T9] keyspan 2-1:2.125: Keyspan - (without firmware) converter detected [ 505.014227][ T9] usb 2-1: USB disconnect, device number 75 [ 505.020368][ T9] keyspan 2-1:2.125: device disconnected [ 505.604317][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 505.642794][T17550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2104'. [ 507.271557][T17597] xt_hashlimit: size too large, truncated to 1048576 [ 507.499947][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 507.519348][ T95] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 507.642432][T17605] FAULT_INJECTION: forcing a failure. [ 507.642432][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.680666][ T95] usb 5-1: Using ep0 maxpacket: 16 [ 507.689778][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.0.2119 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 507.689804][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.689814][T17605] Call Trace: [ 507.689821][T17605] [ 507.689828][T17605] dump_stack_lvl+0x16c/0x1f0 [ 507.689859][T17605] should_fail_ex+0x512/0x640 [ 507.689881][T17605] _copy_from_iter+0x2a4/0x15b0 [ 507.689903][T17605] ? find_held_lock+0x2b/0x80 [ 507.689922][T17605] ? __pfx__copy_from_iter+0x10/0x10 [ 507.689941][T17605] ? __virt_addr_valid+0x5e/0x590 [ 507.689967][T17605] ? __phys_addr_symbol+0x30/0x80 [ 507.689987][T17605] ? __check_object_size+0x4c7/0x710 [ 507.690011][T17605] hci_sock_sendmsg+0x47c/0x25d0 [ 507.690044][T17605] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 507.690072][T17605] sock_write_iter+0x4fc/0x5b0 [ 507.690091][T17605] ? __pfx_sock_write_iter+0x10/0x10 [ 507.690110][T17605] ? bpf_lsm_file_permission+0x9/0x10 [ 507.690129][T17605] ? security_file_permission+0x71/0x210 [ 507.690147][T17605] ? rw_verify_area+0xcf/0x680 [ 507.690172][T17605] vfs_write+0x5ba/0x1180 [ 507.690196][T17605] ? __pfx_sock_write_iter+0x10/0x10 [ 507.690214][T17605] ? __pfx_vfs_write+0x10/0x10 [ 507.690235][T17605] ? find_held_lock+0x2b/0x80 [ 507.690263][T17605] ksys_write+0x205/0x240 [ 507.690286][T17605] ? __pfx_ksys_write+0x10/0x10 [ 507.690309][T17605] ? rcu_is_watching+0x12/0xc0 [ 507.690332][T17605] do_syscall_64+0xcd/0x260 [ 507.690354][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.690376][T17605] RIP: 0033:0x7f37b2f8d169 [ 507.690390][T17605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.690407][T17605] RSP: 002b:00007f37b3ed3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.690425][T17605] RAX: ffffffffffffffda RBX: 00007f37b31a5fa0 RCX: 00007f37b2f8d169 [ 507.690436][T17605] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 507.690446][T17605] RBP: 00007f37b3ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 507.690456][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.690466][T17605] R13: 0000000000000000 R14: 00007f37b31a5fa0 R15: 00007ffc0bf38e68 [ 507.690485][T17605] [ 507.699486][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 507.730259][T17607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17607 comm=syz.1.2120 [ 507.749565][ T95] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 508.297641][ T24] usb 4-1: config 2 has an invalid interface number: 21 but max is 0 [ 508.702482][T17621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 508.712049][T17621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 508.750345][ T24] usb 4-1: config 2 has no interface number 0 [ 508.767857][ T24] usb 4-1: config 2 interface 21 has no altsetting 0 [ 508.787680][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.796062][ T95] usb 5-1: Product: syz [ 508.803376][ T95] usb 5-1: Manufacturer: syz [ 508.808276][ T95] usb 5-1: SerialNumber: syz [ 508.815061][ T24] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 508.816054][T17623] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 508.824241][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.824270][ T24] usb 4-1: Product: syz [ 508.824285][ T24] usb 4-1: Manufacturer: syz [ 508.824299][ T24] usb 4-1: SerialNumber: syz [ 508.835798][ T95] usb 5-1: config 0 descriptor?? [ 508.890296][T17623] bond1: entered promiscuous mode [ 508.898306][T17623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.911269][ T95] as10x_usb: device has been detected [ 508.917474][ T95] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 508.950199][ T95] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 508.991700][T17623] bond1: (slave bridge7): making interface the new active one [ 509.001161][T17623] bridge7: entered promiscuous mode [ 509.017601][ T95] as10x_usb: error during firmware upload part1 [ 509.040377][T17623] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 509.049750][ T95] Registered device Sky IT Digital Key (green led) [ 509.127406][ T95] usb 5-1: USB disconnect, device number 46 [ 509.189002][ T95] Unregistered device Sky IT Digital Key (green led) [ 509.194244][ T95] as10x_usb: device has been disconnected [ 509.785427][ T24] HFC-S_USB 4-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 509.795756][ T24] usb 4-1: USB disconnect, device number 78 [ 510.379086][T17709] FAULT_INJECTION: forcing a failure. [ 510.379086][T17709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.408228][T17709] CPU: 1 UID: 0 PID: 17709 Comm: syz.1.2129 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 510.408260][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.408270][T17709] Call Trace: [ 510.408276][T17709] [ 510.408284][T17709] dump_stack_lvl+0x16c/0x1f0 [ 510.408313][T17709] should_fail_ex+0x512/0x640 [ 510.408341][T17709] should_fail_alloc_page+0xe7/0x130 [ 510.408363][T17709] prepare_alloc_pages.constprop.0+0x172/0x570 [ 510.408392][T17709] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 510.408409][T17709] ? find_held_lock+0x2b/0x80 [ 510.408427][T17709] ? psi_task_switch+0x201/0x8e0 [ 510.408447][T17709] ? lock_acquire+0x179/0x350 [ 510.408466][T17709] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.408484][T17709] ? mark_held_locks+0x49/0x80 [ 510.408504][T17709] ? finish_task_switch.isra.0+0x221/0xc10 [ 510.408523][T17709] ? __switch_to+0x749/0x1170 [ 510.408547][T17709] ? __schedule+0x1131/0x5c00 [ 510.408563][T17709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.408590][T17709] ? policy_nodemask+0xea/0x4e0 [ 510.408611][T17709] alloc_pages_mpol+0x1fb/0x540 [ 510.408630][T17709] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 510.408648][T17709] ? __lock_acquire+0x5ca/0x1ba0 [ 510.408672][T17709] folio_alloc_mpol_noprof+0x36/0x2f0 [ 510.408694][T17709] vma_alloc_folio_noprof+0xed/0x1e0 [ 510.408713][T17709] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 510.408744][T17709] do_pte_missing+0x2049/0x3ea0 [ 510.408777][T17709] __handle_mm_fault+0x1043/0x2a50 [ 510.408808][T17709] ? __pfx___handle_mm_fault+0x10/0x10 [ 510.408843][T17709] ? find_vma+0xbf/0x140 [ 510.408865][T17709] ? __pfx_find_vma+0x10/0x10 [ 510.408888][T17709] handle_mm_fault+0x3fa/0xaa0 [ 510.408907][T17709] do_user_addr_fault+0x7a9/0x1430 [ 510.408930][T17709] exc_page_fault+0x5c/0xc0 [ 510.408949][T17709] asm_exc_page_fault+0x26/0x30 [ 510.408966][T17709] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 510.408994][T17709] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 510.409011][T17709] RSP: 0018:ffffc90003557be8 EFLAGS: 00050206 [ 510.409029][T17709] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000240 [ 510.409040][T17709] RDX: 0000000000000000 RSI: ffff888012450dc0 RDI: 0000200000008000 [ 510.409051][T17709] RBP: 0000200000007240 R08: 0000000000000000 R09: ffffed100248a1ff [ 510.409062][T17709] R10: ffff888012450fff R11: 0000000000000000 R12: ffff888012450000 [ 510.409074][T17709] R13: 0000200000008240 R14: 00007ffffffff000 R15: 0000000000000000 [ 510.409093][T17709] _copy_to_user+0xbb/0xd0 [ 510.409116][T17709] pagemap_read+0x512/0x8b0 [ 510.409137][T17709] ? __pfx_pagemap_read+0x10/0x10 [ 510.409156][T17709] ? rw_verify_area+0xcf/0x680 [ 510.409179][T17709] ? __pfx_pagemap_read+0x10/0x10 [ 510.409196][T17709] vfs_read+0x1de/0xc70 [ 510.409223][T17709] ? __pfx_vfs_read+0x10/0x10 [ 510.409246][T17709] ? find_held_lock+0x2b/0x80 [ 510.409264][T17709] ? __fget_files+0x204/0x3c0 [ 510.409283][T17709] ? __fget_files+0x20e/0x3c0 [ 510.409297][T17709] ? __fget_files+0x160/0x3c0 [ 510.409317][T17709] __x64_sys_pread64+0x1f4/0x250 [ 510.409333][T17709] ? __pfx___x64_sys_pread64+0x10/0x10 [ 510.409353][T17709] ? rcu_is_watching+0x12/0xc0 [ 510.409377][T17709] do_syscall_64+0xcd/0x260 [ 510.409397][T17709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.409413][T17709] RIP: 0033:0x7f6db458d169 [ 510.409427][T17709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.409444][T17709] RSP: 002b:00007f6db544a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 510.409460][T17709] RAX: ffffffffffffffda RBX: 00007f6db47a5fa0 RCX: 00007f6db458d169 [ 510.409471][T17709] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000007 [ 510.409482][T17709] RBP: 00007f6db544a090 R08: 0000000000000000 R09: 0000000000000000 [ 510.409493][T17709] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.409503][T17709] R13: 0000000000000000 R14: 00007f6db47a5fa0 R15: 00007ffdd097fd18 [ 510.409522][T17709] [ 511.624536][ T5869] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 511.636813][ T5869] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 511.864672][ T30] audit: type=1800 audit(1742966651.142:1630): pid=17748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2142" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 512.313038][T17759] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 513.267179][ T95] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 513.596689][ T95] usb 5-1: Using ep0 maxpacket: 32 [ 513.609259][ T95] usb 5-1: config 2 has an invalid interface number: 21 but max is 0 [ 513.629293][ T95] usb 5-1: config 2 has no interface number 0 [ 513.642996][ T95] usb 5-1: config 2 interface 21 has no altsetting 0 [ 513.663876][ T95] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=c5.0d [ 513.684153][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.694175][ T95] usb 5-1: Product: syz [ 513.698753][ T95] usb 5-1: Manufacturer: syz [ 513.703440][ T95] usb 5-1: SerialNumber: syz [ 514.138375][ T95] HFC-S_USB 5-1:2.21: probe with driver HFC-S_USB failed with error -5 [ 514.164112][ T95] usb 5-1: USB disconnect, device number 47 [ 515.549253][ T30] audit: type=1326 audit(1742966654.744:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 515.688546][ T30] audit: type=1326 audit(1742966654.744:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 515.753313][ T30] audit: type=1326 audit(1742966654.754:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 515.815886][ T30] audit: type=1326 audit(1742966654.754:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 515.891491][ T30] audit: type=1326 audit(1742966654.754:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 516.045175][T17834] ubi: mtd0 is already attached to ubi31 [ 516.262209][ T30] audit: type=1326 audit(1742966654.764:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 516.292815][T17825] syz.0.2156 (17825) used greatest stack depth: 20968 bytes left [ 516.313626][ T30] audit: type=1326 audit(1742966654.764:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 516.349254][ T30] audit: type=1326 audit(1742966654.764:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 516.373245][ T30] audit: type=1326 audit(1742966654.764:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b2f8d169 code=0x7ffc0000 [ 516.817261][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 517.124146][T17865] program syz.2.2169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.182313][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 519.238894][T17902] FAULT_INJECTION: forcing a failure. [ 519.238894][T17902] name failslab, interval 1, probability 0, space 0, times 0 [ 519.252218][T17902] CPU: 0 UID: 0 PID: 17902 Comm: syz.2.2180 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 519.252242][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 519.252253][T17902] Call Trace: [ 519.252259][T17902] [ 519.252265][T17902] dump_stack_lvl+0x16c/0x1f0 [ 519.252299][T17902] should_fail_ex+0x512/0x640 [ 519.252320][T17902] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 519.252347][T17902] should_failslab+0xc2/0x120 [ 519.252365][T17902] __kmalloc_cache_noprof+0x6a/0x3e0 [ 519.252388][T17902] ? nvmf_dev_write+0x161/0xc70 [ 519.252415][T17902] nvmf_dev_write+0x161/0xc70 [ 519.252437][T17902] ? rw_verify_area+0xcf/0x680 [ 519.252460][T17902] vfs_write+0x25c/0x1180 [ 519.252481][T17902] ? __pfx_nvmf_dev_write+0x10/0x10 [ 519.252505][T17902] ? __pfx_vfs_write+0x10/0x10 [ 519.252524][T17902] ? find_held_lock+0x2b/0x80 [ 519.252542][T17902] ? __fget_files+0x204/0x3c0 [ 519.252559][T17902] ? __fget_files+0x20e/0x3c0 [ 519.252574][T17902] ksys_write+0x12a/0x240 [ 519.252594][T17902] ? __pfx_ksys_write+0x10/0x10 [ 519.252613][T17902] ? rcu_is_watching+0x12/0xc0 [ 519.252631][T17902] do_syscall_64+0xcd/0x260 [ 519.252649][T17902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.252664][T17902] RIP: 0033:0x7f546b78d169 [ 519.252676][T17902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.252691][T17902] RSP: 002b:00007f546c5a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 519.252705][T17902] RAX: ffffffffffffffda RBX: 00007f546b9a5fa0 RCX: 00007f546b78d169 [ 519.252715][T17902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 519.252723][T17902] RBP: 00007f546c5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 519.252731][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.252740][T17902] R13: 0000000000000000 R14: 00007f546b9a5fa0 R15: 00007ffe2ee09378 [ 519.252755][T17902] [ 519.645226][T17905] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.652358][T17905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.750383][T17909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2181'. [ 519.933309][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 519.994780][T17950] 9pnet_fd: Insufficient options for proto=fd [ 520.093145][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 520.107801][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.127805][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 520.146701][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 520.168902][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.911459][ T9] usb 4-1: config 0 descriptor?? [ 521.409968][ T9] itetech 0003:06CB:73F4.0021: unknown main item tag 0x0 [ 521.417569][ T9] itetech 0003:06CB:73F4.0021: unknown main item tag 0x0 [ 521.440691][ T9] itetech 0003:06CB:73F4.0021: unknown main item tag 0x0 [ 521.468429][ T9] itetech 0003:06CB:73F4.0021: unknown main item tag 0x0 [ 521.478808][ T9] itetech 0003:06CB:73F4.0021: unknown main item tag 0x0 [ 521.483287][T17973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.489481][ T9] itetech 0003:06CB:73F4.0021: hidraw0: USB HID vff.7f Device [HID 06cb:73f4] on usb-dummy_hcd.3-1/input0 [ 521.536066][T17973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.691630][T17989] bridge0: port 3(team0) entered blocking state [ 521.698718][T17989] bridge0: port 3(team0) entered disabled state [ 521.706234][T17989] team0: entered allmulticast mode [ 521.711418][T17989] team_slave_0: entered allmulticast mode [ 521.717264][T17989] team_slave_1: entered allmulticast mode [ 521.723317][T17989] geneve0: entered allmulticast mode [ 521.735360][T17989] team0: entered promiscuous mode [ 521.740467][T17989] team_slave_0: entered promiscuous mode [ 521.746853][T17989] team_slave_1: entered promiscuous mode [ 521.753434][T17989] geneve0: entered promiscuous mode [ 521.762638][T17989] bridge0: port 3(team0) entered blocking state [ 521.768960][T17989] bridge0: port 3(team0) entered forwarding state [ 521.770531][T17973] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 522.016238][T17998] syz.4.2194: attempt to access beyond end of device [ 522.016238][T17998] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 522.029806][T17998] hfsplus: unable to find HFS+ superblock [ 523.001852][ T5869] usb 4-1: USB disconnect, device number 79 [ 523.381425][ T5869] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 524.082095][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 524.091386][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.102502][ T5869] usb 4-1: Product: syz [ 524.106834][ T5869] usb 4-1: Manufacturer: syz [ 524.108409][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 524.108422][ T30] audit: type=1400 audit(1742966663.398:1642): avc: denied { ioctl } for pid=18043 comm="syz.1.2206" path="socket:[43834]" dev="sockfs" ino=43834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 524.114300][ T5869] usb 4-1: SerialNumber: syz [ 524.159016][ T5869] usb 4-1: config 0 descriptor?? [ 524.241084][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 524.385201][T18014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.395201][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 524.405212][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.417959][T18014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.423053][ T95] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 524.427125][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 524.448084][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.451830][T18014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.465539][T18014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.476459][ T9] usb 5-1: config 0 descriptor?? [ 524.486668][ T5869] usb-storage 4-1:0.0: USB Mass Storage device detected [ 524.740977][ T95] usb 2-1: Using ep0 maxpacket: 16 [ 524.769761][ T95] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 524.827639][ T95] usb 2-1: config 0 has no interface number 0 [ 524.868061][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 524.886759][ T95] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=72.17 [ 524.917911][ T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.950894][ T95] usb 2-1: Product: syz [ 524.955108][ T95] usb 2-1: Manufacturer: syz [ 524.959694][ T95] usb 2-1: SerialNumber: syz [ 524.973178][ T95] usb 2-1: config 0 descriptor?? [ 524.979622][ T95] kvaser_usb 2-1:0.4: error -ENODEV: Cannot get usb endpoint(s) [ 525.005627][ T5869] usb 4-1: USB disconnect, device number 80 [ 525.224833][ T9] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 525.421859][T18044] gfs2: gfs2 mount does not exist [ 525.479808][ T9] usb 2-1: USB disconnect, device number 76 [ 525.528354][T18095] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 525.626099][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 525.706333][ T5818] usb 5-1: USB disconnect, device number 48 [ 525.731786][T18122] wg1 speed is unknown, defaulting to 1000 [ 525.745929][T18122] lo speed is unknown, defaulting to 1000 [ 526.560412][T18176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2218'. [ 526.944544][ T30] audit: type=1400 audit(1742966666.240:1643): avc: denied { bind } for pid=18186 comm="syz.2.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 527.201977][T18201] loop9: detected capacity change from 0 to 7 [ 527.212204][T18201] Dev loop9: unable to read RDB block 7 [ 527.217811][T18201] loop9: unable to read partition table [ 527.239572][T18201] loop9: partition table beyond EOD, truncated [ 527.246248][T18201] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 527.282216][ T30] audit: type=1400 audit(1742966666.580:1644): avc: denied { read } for pid=18198 comm="syz.2.2223" path="socket:[44003]" dev="sockfs" ino=44003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 527.305756][ T9] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 527.341032][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 527.350525][T18201] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 527.461110][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 527.479821][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 527.500076][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.516074][ T9] usb 2-1: config 1 interface 0 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.530413][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 527.539135][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.549445][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.560057][ T9] usb 2-1: Product: syz [ 527.564295][ T9] usb 2-1: Manufacturer: syz [ 527.568952][ T9] usb 2-1: SerialNumber: syz [ 527.579454][T15608] Bluetooth: hci5: command 0x1003 tx timeout [ 527.586047][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 527.797176][ T9] usb 2-1: bad CDC descriptors [ 528.093949][ T9] usb 2-1: USB disconnect, device number 77 [ 528.281189][T18199] delete_channel: no stack [ 530.160930][T18261] tipc: Failed to obtain node identity [ 530.168766][T18261] tipc: Enabling of bearer rejected, failed to enable media [ 530.237381][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 581.232486][ T35] sched: DL replenish lagged too much [ 636.584670][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 636.591337][ C0] rcu: 0-...!: (1 GPs behind) idle=e98c/1/0x4000000000000000 softirq=57070/57075 fqs=423 [ 636.602495][ C0] rcu: (t=10500 jiffies g=51373 q=259 ncpus=2) [ 636.608712][ C0] rcu: rcu_preempt kthread starved for 9646 jiffies! g51373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 636.619789][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 636.629727][ C0] rcu: RCU grace-period kthread stack dump: [ 636.635584][ C0] task:rcu_preempt state:R running task stack:28856 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 636.649055][ C0] Call Trace: [ 636.652314][ C0] [ 636.655225][ C0] __schedule+0x1129/0x5c00 [ 636.659729][ C0] ? __pfx___schedule+0x10/0x10 [ 636.664553][ C0] ? find_held_lock+0x2b/0x80 [ 636.669206][ C0] ? schedule+0x2d7/0x3a0 [ 636.673506][ C0] schedule+0xe7/0x3a0 [ 636.677546][ C0] schedule_timeout+0x123/0x280 [ 636.682380][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 636.687730][ C0] ? __pfx_process_timeout+0x10/0x10 [ 636.692999][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 636.698776][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 636.704209][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 636.708950][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 636.714210][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 636.719043][ C0] rcu_gp_kthread+0x270/0x380 [ 636.723779][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 636.728955][ C0] ? rcu_is_watching+0x12/0xc0 [ 636.733695][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.738865][ C0] ? __kthread_parkme+0x148/0x220 [ 636.743865][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 636.749036][ C0] kthread+0x3a4/0x760 [ 636.753083][ C0] ? __pfx_kthread+0x10/0x10 [ 636.757641][ C0] ? __pfx_kthread+0x10/0x10 [ 636.762198][ C0] ? __pfx_kthread+0x10/0x10 [ 636.766757][ C0] ? __pfx_kthread+0x10/0x10 [ 636.771313][ C0] ? rcu_is_watching+0x12/0xc0 [ 636.776046][ C0] ? __pfx_kthread+0x10/0x10 [ 636.780605][ C0] ret_from_fork+0x45/0x80 [ 636.784996][ C0] ? __pfx_kthread+0x10/0x10 [ 636.789554][ C0] ret_from_fork_asm+0x1a/0x30 [ 636.794300][ C0] [ 636.797293][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 636.803595][ C0] Sending NMI from CPU 0 to CPUs 1: [ 636.808799][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 636.809788][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 636.809802][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.809808][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 636.809829][ C0] Code: 00 00 5b e9 82 0a 0c 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 c8 c9 e1 11 <65> 8b 05 d9 c9 e1 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 636.809839][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000246 [ 636.809849][ C0] RAX: ffffffff89631350 RBX: ffff88807b7bd000 RCX: ffffffff896fb326 [ 636.809855][ C0] RDX: ffff8880277b2440 RSI: ffffffff8963135d RDI: ffff88807b7bd000 [ 636.809862][ C0] RBP: 0000000000000006 R08: 0000000000000005 R09: 0000000000000000 [ 636.809867][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807b7bd000 [ 636.809873][ C0] R13: ffffffff9082fd60 R14: ffff88807fc78000 R15: ffff88807b7bd018 [ 636.809880][ C0] FS: 0000555558d71500(0000) GS:ffff888124a54000(0000) knlGS:0000000000000000 [ 636.809890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.809896][ C0] CR2: 00007f895a8d56c0 CR3: 000000005f4ca000 CR4: 00000000003526f0 [ 636.809902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.809908][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 636.809913][ C0] Call Trace: [ 636.809919][ C0] [ 636.809923][ C0] ? rcu_dump_cpu_stacks+0x297/0x530 [ 636.809936][ C0] ? rcu_sched_clock_irq+0xa19/0x2fe0 [ 636.809948][ C0] ? notifier_call_chain+0xb9/0x410 [ 636.809963][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 636.809972][ C0] ? find_held_lock+0x2b/0x80 [ 636.809982][ C0] ? find_held_lock+0x2b/0x80 [ 636.809992][ C0] ? timekeeping_advance+0x72f/0xa90 [ 636.810004][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 636.810017][ C0] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 636.810028][ C0] ? rcu_is_watching+0x12/0xc0 [ 636.810038][ C0] ? update_process_times+0x178/0x2d0 [ 636.810053][ C0] ? __pfx_update_process_times+0x10/0x10 [ 636.810067][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 636.810079][ C0] ? update_wall_time+0x1c/0x40 [ 636.810092][ C0] ? tick_nohz_handler+0x37e/0x540 [ 636.810102][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 636.810111][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 636.810120][ C0] ? __hrtimer_run_queues+0x5ea/0xad0 [ 636.810131][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 636.810139][ C0] ? read_tsc+0x9/0x20 [ 636.810155][ C0] ? hrtimer_interrupt+0x397/0x8e0 [ 636.810167][ C0] ? __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 636.810181][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 636.810192][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.810206][ C0] ? __pfx_qdisc_peek_head+0x10/0x10 [ 636.810225][ C0] ? taprio_dequeue_from_txq+0x156/0x8f0 [ 636.810239][ C0] ? qdisc_peek_head+0xd/0x40 [ 636.810252][ C0] ? __sanitizer_cov_trace_pc+0x10/0x70 [ 636.810270][ C0] qdisc_peek_head+0xd/0x40 [ 636.810284][ C0] taprio_dequeue_from_txq+0x18e/0x8f0 [ 636.810299][ C0] ? taprio_dequeue_from_txq+0x3d5/0x8f0 [ 636.810313][ C0] taprio_dequeue_tc_priority+0x27a/0x4b0 [ 636.810330][ C0] taprio_dequeue+0x12c/0x5f0 [ 636.810345][ C0] __qdisc_run+0x1bd/0x1be0 [ 636.810359][ C0] net_tx_action+0x74f/0xce0 [ 636.810376][ C0] handle_softirqs+0x216/0x8e0 [ 636.810391][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 636.810404][ C0] __irq_exit_rcu+0x109/0x170 [ 636.810414][ C0] irq_exit_rcu+0x9/0x30 [ 636.810424][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 636.810436][ C0] [ 636.810439][ C0] [ 636.810442][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.810453][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 636.810467][ C0] Code: f6 82 53 00 48 89 df 5b e9 fd c2 58 00 be 03 00 00 00 5b e9 82 0a 0c 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 c8 c9 e1 11 65 8b 05 d9 c9 e1 [ 636.810475][ C0] RSP: 0018:ffffc900042bf198 EFLAGS: 00000246 [ 636.810483][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 636.810488][ C0] RDX: 0000000000440dc0 RSI: 0000000000000000 RDI: ffffea0001712180 [ 636.810495][ C0] RBP: ffffea0001712180 R08: 0000160000000000 R09: 0000000000000000 [ 636.810500][ C0] R10: ffffed100b890c00 R11: dffffc0000000000 R12: 0000000000440dc0 [ 636.810506][ C0] R13: 1ffff92000857e39 R14: 0000000000000000 R15: dffffc0000000000 [ 636.810516][ C0] __set_page_owner+0x79/0x560 [ 636.810537][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 636.810551][ C0] ? bad_range+0x23d/0x490 [ 636.810567][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.810577][ C0] ? get_page_from_freelist+0x10a4/0x34c0 [ 636.810587][ C0] post_alloc_hook+0x181/0x1b0 [ 636.810603][ C0] get_page_from_freelist+0x10c4/0x34c0 [ 636.810615][ C0] ? find_held_lock+0x2b/0x80 [ 636.810624][ C0] ? __pfx___might_resched+0x10/0x10 [ 636.810637][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 636.810646][ C0] ? should_fail_alloc_page+0xee/0x130 [ 636.810657][ C0] ? prepare_alloc_pages.constprop.0+0x172/0x570 [ 636.810672][ C0] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 636.810685][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 636.810694][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 636.810708][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 636.810723][ C0] ? lock_acquire+0x179/0x350 [ 636.810735][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 636.810750][ C0] ? policy_nodemask+0xea/0x4e0 [ 636.810762][ C0] alloc_pages_mpol+0x1fb/0x540 [ 636.810773][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 636.810783][ C0] ? page_table_check_set.part.0+0x3b8/0x550 [ 636.810795][ C0] alloc_pages_noprof+0x131/0x390 [ 636.810806][ C0] pte_alloc_one+0x19/0x380 [ 636.810819][ C0] __pte_alloc+0x6d/0x3c0 [ 636.810833][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 636.810845][ C0] ? __pfx___might_resched+0x10/0x10 [ 636.810856][ C0] ? copy_page_range+0x1e9e/0x5790 [ 636.810870][ C0] copy_page_range+0x3827/0x5790 [ 636.810892][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 636.810908][ C0] ? __pfx___might_resched+0x10/0x10 [ 636.810918][ C0] ? __pfx_mas_store+0x10/0x10 [ 636.810935][ C0] ? copy_process+0x8604/0x9130 [ 636.810949][ C0] ? down_write+0x14d/0x200 [ 636.810962][ C0] ? up_write+0x1b2/0x520 [ 636.810977][ C0] copy_process+0x8651/0x9130 [ 636.810995][ C0] ? __pfx_copy_process+0x10/0x10 [ 636.811010][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 636.811018][ C0] ? ___pte_offset_map+0x1bc/0x540 [ 636.811032][ C0] kernel_clone+0xfc/0x960 [ 636.811045][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 636.811059][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 636.811073][ C0] __do_sys_clone+0xce/0x120 [ 636.811085][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 636.811097][ C0] ? do_user_addr_fault+0xde3/0x1430 [ 636.811111][ C0] ? xfd_validate_state+0x5d/0x180 [ 636.811123][ C0] do_syscall_64+0xcd/0x260 [ 636.811135][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.811145][ C0] RIP: 0033:0x7f8959b839d3 [ 636.811155][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 636.811164][ C0] RSP: 002b:00007ffd0c8c0c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 636.811172][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8959b839d3 [ 636.811178][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 636.811183][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 636.811188][ C0] R10: 0000555558d717d0 R11: 0000000000000246 R12: 0000000000000000 [ 636.811194][ C0] R13: 00000000000927c0 R14: 0000000000081c56 R15: 00007ffd0c8c0dc0 [ 636.811203][ C0]